Card Verification Value (CVV) The Card Verification Value (CVV) is a three- or four-digit security code printed on payment cards, used to verify that the cardholder is in possession of the physical card during online or card-not-present transactions. It is a key component in preventing unauthorized use of credit and debit cards.
Top questions about CVV
Is a CVV an ATM PIN?No. A CVV is for online verification; an ATM PIN is for physical transactions.
CVV without a card? Not possible. You need the physical card to access the CVV.
What’s the difference between CVV and CVV2? CVV and CVV2 are used for online transactions; both are security codes printed on the card.
Can I get a CVV code without a card? No. For security reasons, CVV codes are not stored digitally and must be read from the card.
Is it illegal to ask for the CVV code?No, merchants are allowed to request CVV for verification. However, storing CVV codes is prohibited under PCI DSS compliance standards.
Where is the CVV located? On Visa, Mastercard, and Discover cards, the CVV is a three-digit code found on the back of the card, typically to the right of the signature strip. On American Express cards, the CVV is a four-digit code located on the front of the card above the card number.
Why is a CVV important? CVV codes help merchants and payment processors verify that the person making the transaction has physical access to the card. This adds a layer of protection against fraud, especially in online purchases where the card is not physically swiped or inserted.
Real-world examples: Banks using dynamic CVV Many global financial institutions are adopting dynamic CVV (dCVV) technology to strengthen card-not-present (CNP) fraud prevention. Instead of relying on a static, printed code, issuers generate a CVV that changes periodically — often every 30–60 seconds — making stolen card data far less valuable to fraudsters.
Dynamic CVV: Strengthening Online Payment Security Dynamic CVV (dCVV) cards are a growing trend in payment security, designed to reduce fraud in online transactions. Unlike static CVV codes, dynamic CVVs change frequently—sometimes with each transaction—making it much harder for fraudsters to reuse stolen card information.
Financial institutions around the world are increasingly piloting or rolling out dynamic CVV solutions, often using virtual cards or e-ink display cards that refresh the security code automatically. These implementations demonstrate the industry’s shift toward adaptive, stronger authentication, enhancing protection for both cardholders and merchants.
“With CNP fraud on the rise, banks may face more pressure to reconsider dynamic CVVs” — a recent 2025 article exploring why dynamic CVV is gaining traction in response to rising card‑not‑present fraud. American Banker
Additional resources:
Use Cases: Regulatory compliance Pain-free, customer-friendly compliance
Press release: Netcetera to safeguard online payments with Entersekt authentication
Blog: How to manage the complexities of 3D Secure compliance, with ease