What is a card verification code?¶

A card verification code is a security value sometimes checked in card-not-present payments. A successful result proves the correct value was supplied, not who supplied it.

Access to the code can take several routes¶

The value may be printed on the card or generated dynamically. It can be seen, copied, disclosed through phishing or entered by someone with authorised access. Recurring and other merchant-initiated routes may not request it again.

Interpret the check in context¶

Preserve whether the code was requested, result, merchant, time, transaction ID, endpoint and related authentication. Ask issuer or processor how the event was classified and which other checks applied.

Absence is not proof of unauthorised use; success is not proof of identity. Compare possession, devices, merchant-account activity, communications and fulfilment, and report the check result precisely.