What Does CVV on a Credit Card Mean?

Introduction

If you’ve ordered anything online, there’s a decent chance you’ve entered a three- or four-digit number found somewhere on your payment card to complete the order.

But have you ever wondered why you had to do that? And why you don’t have to give that number at, let’s say, the supermarket?

Known as CVV codes (and many other names), those numbers are a layer of defense for you and your card. Read on to learn all about CVV codes and how they work.

What Is a CVV Code?

CVV codes are special numbers that provide a layer of protection against fraud or unauthorized credit card use. They can be used to help make online shopping safer, for example, by being required during the checkout process.

The most well-known CVV is probably the three-digit number on the back of most credit or debit cards and its four-digit counterpart on the front of American Express cards.

These codes are specific to that card. If your card is lost or stolen, or if it expires and you’re issued a new one, the new card will have a new CVV.

There are actually a few different types of CVVs. In fact, the three- and four-digit numbers are technically CVV2 codes.  But unless specified, we’ll be using “CVV” to refer to these numbers going forward.

CVV itself stands for Card Verification Value, but other names for this feature include CSC (Card Security Code), CID (Card Identification) and CVC (Card Validation Code). That’s a lot, but don’t worry — people will still know what you mean if you call it the security code or simply three numbers on the back.

Why Do Credit Cards Have CVV Codes?

CVV codes provide a bit of extra protection for your credit card. Generally speaking, they’re a way of proving that the person paying actually has the physical card. So, when you grab your card to enter its CVV while shopping online, it’s doing its job.

Using a CVV

Most often, using a CVV is just a matter of typing that three- or four-digit number into the appropriate field or reading it to a merchant on the other end of the phone. You should really only ever need it for these card-not-present transactions.

For purchases where the card is swiped, inserted or tapped, entering that particular number shouldn’t be necessary, but there will still be some other security features at work.

What Types of CVVs Are There?

There are a few types of security codes available when it comes to payment cards, three of which can be found on the card in some form:

• The CVV1 code is encrypted on a card’s magnetic stripe and is read by the point-of-sale system when the card is swiped. That’s why you don’t have to provide a code in person.

• The CVV2 code is the number located on the card and is the one most people are familiar with. This is often used when the card isn’t present, like in an online transaction.

• An iCVV is a number generated electronically by contactless or chip credit cards and is also read by the point of sale system.

CVVs have also expanded beyond the physical card. Some banks have started issuing cards without printed CVVs. Instead, these cards use something called a dynamic CVV, which changes frequently to add another level of security.

What Is a Dynamic CVV?

Dynamic CVVs don’t rely on a number printed on the card itself. Depending on the issuer, users will get a CVV code through mobile app, SMS message or email when they’re making a purchase.

This allows the CVV to change periodically — either with each transaction or after a certain amount of time. This is an extra layer of card security, since even a stolen CVV would become useless quickly.

How Much Security Does a CVV Offer?

A card’s EMV chip protects you when you pay for something in person by generated a unique security code. But that chip does nothing for online or over-the-phone purchases. That’s where the card’s CVV code comes into play.

Many online retailers require a credit card’s CVV to be entered in order to authorize a purchase. So, even if a fraudster or hacker manages to acquire your credit card information and attempts to make unauthorized online purchases, they shouldn’t be able to complete the transaction without that three- or four-digit code.

The same holds true for phone orders. If a merchant asks for the CVV, and the fraudster doesn’t know it, the purchase should not be authorized.

The problem is that not all online or over-the-phone merchants ask for a CVV, because they’re not required to do so.

So, a CVV is not a foolproof measure for preventing fraudulent charges. It’s simply an added layer of protection.

That’s why it’s still important to secure your information and abide by best practices when it comes to fraud or identity theft. This might include using secure passwords on your accounts, being aware of the signs of common scams and generally taking measures to protect your accounts from hackers.

Think of securing your personal and financial info as being like putting on a suit of armor. A CVV is one piece of the armor — but a knight showing up to joust in one piece of armor is going to have a bad time. A CVV is just one part of your overall security.

CVVs are Not Stored by Merchants

Online merchants are allowed to store some of your credit card information — name on the card, card number, and expiration date — if you authorize it. But they’re not allowed to store your CVV. So, if a merchant’s database is breached by a hacker, the hacker shouldn’t be able to acquire your stored credit card’s CVV. This may seem like little consolation after your sensitive information has been compromised, but at least it makes it more difficult for thieves to make online purchases with your stolen credit card information.

It’s worth mentioning that some merchants who store your credit card information may only require you to enter your CVV the first time you make a purchase and not thereafter. So, should your credit card information be stolen by a hacker, they may be able to make purchases at these merchants without your CVV. And of course, if a thief actually steals your physical credit card, they’ll obviously have everything they need, including the CVV, to make fraudulent purchases both instore and online.

It bears repeating: A CVV is an added layer of protection against fraud, not foolproof protection.

Protecting Your CVV And Personal Info

Given that having your credit card number, expiration date, and CVV opens up a whole world of potential fraudulent purchases for a thief, you’re going to want to take precautions to protect this information and prevent potential credit card fraud.

• Don’t send your CVV code through channels like text messages, emails or social media DMs.

• Make sure you shop safely online, using trusted, secure websites which have an SSL padlock icon and show https:// in the address bar.

• Never share photos of your credit card online.

• Avoid using your card on unsecured WiFi networks 

A little scrutiny and common sense could go a long way toward keeping your credit card’s sensitive information — including your CVV — safer. 

FAQs About CVV Codes

What’s the difference between a CVV and a PIN?

Your credit or debit card’s CVV and PIN (Personal Identification Number) are two separate security features.

A PIN is entered on a numeric pad at the point of purchase to authorize the transaction, while a CVV is usually found on the front or back of the card and most often used when paying with the card online or over the phone.

Entering your CVV at the PIN pad, or your PIN in the CVV field online, will likely lead to a declined transaction.

Does a CVV code guarantee protection from credit card fraud?

A CVV code is one feature that helps protect against unauthorized credit card use, but no single feature can guarantee protection from credit card fraud. That’s why safe habits like using strong account passwords and keeping your information private, along with security features like CVV, offer the most protection.

What does “CVV” stand for and where is the CVV located on my card?

CVV itself stands for Card Verification Value, but it’s commonly used to refer to CVV2 numbers specifically. These are the three numbers on the back of the card, typically found near the signature field, or the four numbers on the front of American Express cards, usually above the credit card number.

Why are some CVV number three digits and others are four?

If a card has a three-digit CVV code, it’s likely a Visa, Mastercard or Discover card. If it has a four-digit code, it’s an American Express card.