Merchant Resources

Security

Visa's Three-digit Code

Part of Visa’s layered approach to security is its Three-digit Code, also known as "Card Verification Value 2", hence the acronym "CVV2". It’s an important security tool to use when accepting Visa payments online or over the telephone. When you request the CVV2 from customers, the card issuers can provide a real-time cross-check to see if the individual making the purchase has the physical card in hand.

Three-digit Code

The last three numbers on the back of a Visa card make up the CVV2 and appear either in the signature panel or just to the right of it.

  • If a purchaser only has the 16-digit credit card number and the expiry date, he/she may not physically possess the card. By requesting the code, you can verify that the person making the purchase has a genuine Visa card in hand.
  • After requesting authorization for the card information (account number, card expiration date and CVV2), you'll receive a response that lets you know whether the CVV2 is matched or not.
  • Regardless of this response, if the issuer does not approve the authorization request, you should not complete the transaction.
  • The CVV2 can help prevent large-scale "fraud attacks". Example: "hacking" attacks and generation of card numbers.