A CVV check is the real-time verification of the three- or four-digit security code printed on a payment card, matched against the issuing bank's records during an authorization request. It confirms that whoever is submitting the card has the physical card or the complete card details in hand, rather than a number pulled from a leaked database. For online merchants, it is one of the least expensive and most effective fraud filters available at checkout.
Key Features
- Instant CVV, CVC, and CVV2 validation returned with every authorization response
- Support for Visa, Mastercard, American Express, and Discover code formats
- Readable match, no-match, and not-processed result codes on each attempt
- Combined CVV and address verification (AVS) rules you can tune by region
- Sandbox test cards for validating your integration before going live
- Hosted checkout page plus a REST API for custom storefronts
- Searchable transaction log with exportable history for reconciliation
- Tokenized card storage that never retains the security code itself
How the Check Works and What It Runs On
The security code travels inside the authorization message your payment gateway sends to the card network, is compared by the issuer, and comes back as a single result code alongside the approval or decline. The system supports ISO 8583 message formatting through major gateways, enforces TLS 1.2 or higher on every connection, and is built for PCI DSS compliance: sensitive authentication data is passed through for verification and then discarded, with only a token and the verification result stored afterward. Typical round-trip latency for the CVV portion of the request is under a few hundred milliseconds, so it adds no noticeable delay at checkout.
Access, Setup, and Refunds
Everything is delivered digitally. Account credentials and API keys are issued as soon as your order is processed, usually within minutes, and the sandbox environment is available immediately so you can test before switching to live traffic. If the service does not work for your storefront, contact support within the refund window for a full refund of your subscription. No physical shipping is involved, and cancellation can be done from your dashboard at any time.
What does a CVV check actually verify?
It verifies that the security code supplied with the transaction matches the code the issuer has on file for that card. It does not confirm identity, billing address, or that the person using the card is authorized to do so.
Does a passing CVV check mean an order is safe to fulfill?
No. A correct code only shows that the card details are internally consistent. Fraudsters who hold full card data can pass a CVV check, so pair it with AVS, velocity limits, and 3-D Secure authentication on higher-risk orders.
Can a merchant store CVV data to check it later?
No. PCI DSS prohibits retaining sensitive authentication data, including the CVV, after authorization. Store a token and the verification result instead, and let your gateway handle the check on each new transaction.