Choose from any of our gift cards to give to your loved ones
CVV Fraud Detection Tools: How They Work and What to Check
Redeem your gift cards at any of our Merchants
You can purchase a gift card from any of these locations
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
A CVV fraud detection system checks whether the 3-digit or 4-digit card verification value entered at checkout matches the value the card issuer has on file, then combines that result with other risk signals to approve, review, or decline the order. It blocks a stolen card number from working online when the thief never had the physical card. It does not catch every case, because phishing and skimming attacks capture the CVV along with the card number.
The check runs inside the authorization request, before the sale is final. The cardholder never sees it, and the merchant never keeps the code.
PCI DSS classifies the CVV as sensitive authentication data. Merchants may pass it to the issuer during authorization but must not keep it afterward, and it should not appear on receipts or in databases.
The rule exists because a card number plus CVV is enough to run a card-not-present transaction. A stored CVV turns any database leak into reusable card access.
CVV is one input in a larger model. Processors, gateways, and in-house fraud teams pair it with dozens of other signals.
Someone uses a card number without the physical card. The CVV check is one of the few defenses left, since there is no chip, PIN, or signature to verify.
Bots test thousands of card numbers against a checkout page, trying guessed or leaked CVVs to find live cards. Merchants spot these as bursts of small-value declines from one IP range or device set.
Fake checkout pages, malicious scripts injected into a real store, and voice phishing calls collect the CVV itself. Once the attacker holds the full card details, a CVV check returns a match and offers no protection.
Most fraud stacks mix fixed rules with machine learning scoring, then route the doubtful cases to a human reviewer.
Accuracy depends on the country, the issuer, the card type, and the sales channel. No single industry-wide figure applies to every merchant, so teams measure their own results.
The CVV check is strong against card numbers stolen without the card, and useless against phishing and skimming, where the attacker already holds the CVV. Issuers return a mismatch code when the value is wrong and a "not processed" code when they cannot check, which happens with some card types and regions.
False positives are the other cost. A strict rule set declines good customers, so teams tune thresholds against their own chargeback rate and approval rate instead of trusting a default setting.
No. It is an optional fraud tool, and rules differ by market and card network. Many merchants ask for it because it costs nothing to add and blocks a common fraud pattern.
The code entered does not match the issuer's record. Common causes are a typo, the wrong card, a reissued card whose old details were saved in a browser, or an attempt to use a stolen card number.
Yes. A merchant can process a transaction with no CVV or with a not-processed response, but it carries the fraud risk itself. Some issuers decline the charge instead.
No. It lowers the odds of a fraudulent sale. It does not stop a customer from disputing a charge, and it does not cover friendly fraud, where the cardholder makes the purchase and then claims it was not authorized.
