CVV Verification Issue: How to Resolve It
Learn how to identify and resolve common CVV verification issues when selling CVVs online.
CVV Verification Error: Causes, Codes, and Fixes
What a CVV verification error is
A CVV verification error is a declined card payment where the security code check fails. The issuer compares the code the buyer enters against the code on file. When the two do not match, the issuer returns a decline. The payment does not complete.
CVV means Card Verification Value. Visa, Mastercard, and Discover print three digits on the back of the card. American Express prints four digits on the front and calls it the Card Identification Number.
CVV Test Issue: How to Resolve Online
Common causes
- Wrong digit. The buyer types a digit from the card number instead of the code.
- Wrong card face. The buyer reads the expiry date or another printed number near the code panel.
- Card replacement. The bank issued a new card. The old code no longer works.
- Unreadable panel. The code is worn off or damaged.
- Mixed card data. The card number and the code come from two different cards.
- Issuer rule. Some banks block code entry after a set number of failed attempts.
What a merchant should do
- Read the decline code. Visa and Mastercard return N7 for a CVV2 mismatch. Stripe returns incorrect_cvc.
- Do not retry the same card many times. Repeated failures can trigger a block at the issuer.
- Ask the buyer to re-enter the code in the checkout form. Do not ask for the code by email or chat.
- Check the billing address. Address checks run alongside the code check.
- Log the decline reason and the timestamp. Keep the code itself out of logs.
Storage rules
PCI DSS forbids storing the CVV after authorization. Requirement 3.2.1 lists the CVV as sensitive authentication data. A merchant system that keeps the code fails an assessment. A support agent who asks a buyer to send the code by email creates the same problem.
What the error does not mean
A CVV error does not prove fraud. It does not prove the card is stolen. It shows one field failed one check. A correct code also does not prove the buyer holds the card. Merchants use address checks and 3-D Secure to cover that gap.
CVV Check Error: Causes, Fixes, and Merchant Best Practices
What a cardholder should do
Re-enter the code from the back of the card. Confirm the card number matches the same card. If the card is new, enter the new code. If the decline repeats, call the number on the back of the card and ask the issuer to check the account status.