CVV Test Checkout Flow: A Guide to Secure Transactions
Discover the importance of the CVV test checkout flow in ensuring secure transactions when purchasing CVVs online.
Redeem your gift cards at any of our Merchants
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
A CVV test payment checkout uses a sandbox card number and a made-up 3-digit code. No real card is charged. Payment gateways accept these numbers in test mode and reject them in live mode. A real CVV cannot be tested in a sandbox because the issuer never sees the request.
The CVV is 3 digits on the back of Visa, Mastercard and Discover cards. American Express prints 4 digits on the front. The issuer generates the value and stores it with the card record. A gateway sends the CVV to the issuer inside an authorization request. The issuer compares the value and returns a match, no-match, or not-verified code.
Sandbox environments ship fixed card numbers. Stripe publishes 4242 4242 4242 4242. The Stripe sandbox accepts any 3-digit CVV, any future expiry date, and any postal code. Braintree publishes 4111 1111 1111 1111. Adyen publishes 4111 1111 1111 1111 as well. Check the docs for the processor in use. The list changes by gateway.
These numbers pass the Luhn check. They fail or route by design. Use them to test error handling on the checkout page.
Test keys and live keys are separate values. A test key sends traffic to the sandbox. The sandbox returns a synthetic response and no money moves. A live key sends traffic to the card networks. Test card numbers fail in live mode. Real card numbers fail in test mode. Mixing the two produces errors, not charges.
Card networks forbid live card data in test systems. PCI DSS v4.0 requires a separate test environment and requires that production cardholder data stay out of it. A real card number in a sandbox also breaks the merchant agreement with the acquirer. The issuer never receives a sandbox request, so there is no CVV record to compare against.
Test data covers the checkout path: card entry, 3D Secure challenge, decline handling, and retry. Run each decline case at least once. Log the response code and the decline reason for each run.