CVV Format Test Examples
Discover how to test CVV format with our guide and examples.
Redeem your gift cards at any of our Merchants
You can purchase a gift card from any of these locations
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
A CVV format test method checks that a card verification value matches the expected pattern for its card brand: three digits for Visa, Mastercard and Discover, and four digits for American Express. Testing happens with processor sandbox test card numbers, never with real card data, and the value is validated in memory only and never stored after authorization.
Visa, Mastercard and Discover print a three-digit code on the back of the card, often called CVV2 or CVC2. American Express prints a four-digit card identification number on the front, above the card number. All of these values are numeric only, so any letter, space or symbol fails format validation.
Payment processors publish sandbox card numbers that pair with any format-valid CVV, which lets you exercise the full checkout flow safely. You send the test card number and a matching test CVV to the sandbox endpoint and confirm that your form accepts valid lengths and rejects invalid ones.
Test cards usually trigger specific outcomes, such as a successful charge or a specific decline code. That lets you verify that your CVV field triggers the right error message instead of a generic failure.
PCI DSS classifies the CVV as sensitive authentication data, and Requirement 3.2 prohibits storing it after authorization, even in encrypted form. A correct test method therefore verifies that the value is used once, passed to the processor, and never written to logs, databases or analytics events.
Using real card numbers or CVVs that you do not own is illegal in most jurisdictions and is not a testing method. Sandbox credentials plus strict format rules cover every scenario a production form needs to handle.