CVV Test and PCI: What You Are Actually Buying

Our Cards

Choose from any of our gift cards to give to your loved ones

giftcardimage

Where to Use?

Redeem your gift cards at any of our Merchants

Where to Buy?

You can purchase a gift card from any of these locations

ABOUT US

about

What is ONYX GiftCards?

Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.

What is a Gift Card?

Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.

How it Works?

  • Buy an Onyx Gift Card at these local stores
  • Give your gift card to friends, family, co-workers, etc.
  • The recipient can shop at our select merchants nationwide
  • Your friends, family, co-workers, etc. will present their gift card at checkout to pay for your item(s)
  • They will walk away happy with the best gift ever...the gift of Choice

Why ONYX GiftCards?

  • Save TIME. No need to run around looking for the perfect gift
  • Redeem from a variety of business island-wide. We will continue adding businesses as fast as ONYX grows.
  • ONYX Gift Cards do not expire
  • Cards are valued at convinient amounts to meet every need and occasion

The core buying advice

When you buy "CVV testing" in a PCI context, you are buying evidence, not data. The deliverable is a scoped assessment and a repeatable test procedure that proves your payment environment never retains the card verification value or the full magnetic stripe data after authorization. No legitimate vendor sells card verification values, live test CVVs, or sample cardholder data. A processor sandbox with published test card numbers is the only correct input for functional testing, and a configuration review plus log inspection is the correct input for compliance testing. If a seller offers real CVVs as test material, the offer is fraud, the artifact is unusable in an audit, and accepting it creates legal exposure for your business. Treat that as an immediate disqualifier.

What to look for in a provider

Parameter bands to expect

Scope should cover every channel that touches card data: point of sale, ecommerce checkout, mobile apps, call center systems, batch files, and backup media. Sample size for log and database checks should be large enough to cover a full billing cycle, not a single day. Frequency should be at least annual, plus a retest after any change to payment flows, processors, or middleware. Turnaround for a written report should be measured in weeks, with a defined window for you to respond to findings. The strongest contracts fix the definition of "pass" before work starts, so a disputed finding cannot stall the engagement.

Pitfalls that waste the spend

FAQ

Can we test with real card numbers?

No. Use published test numbers from your processor sandbox. Real card data in a test system violates PCI DSS and your merchant agreement.

Does PCI DSS forbid storing the CVV entirely?

Sensitive authentication data must not be stored after authorization, even when encrypted. The only permitted state is transient processing inside an authorized flow.

Do we always need a QSA?

Not always. Lower volume merchants can often self-assess, but the evidence standard is the same. A qualified assessor helps when you have multiple channels or a history of findings.

What does a good final report contain?

A scope diagram, the specific requirements tested, the evidence reviewed for each, findings ranked by severity, and a remediation plan with retest dates.

Contact Us

Latest

CVV Test API Endpoint

Discover the ultimate CVV Test API Endpoint for verifying credit card details.

Read our complete guide: Should You Buy CVV From a Card Shop? The Honest Buyer's Guide