What is the CVV2 on a Credit Card? Explained
If you’re wondering what is the CVV2 on a credit card, it’s the three-digit security code printed on a Visa card and used primarily to help verify card-not-present transactions. It provides an extra security check when you shop online or make certain purchases by phone.
CVV2 stands for Card Verification Value 2. You may also hear similar security codes called CVV, CVC2, CSC, or CID depending on the card network.
What Is the CVV2 on a Credit Card?
The CVV2 on a credit card is a security code used to help confirm that a person making a purchase has access to the card or its security information.
Visa officially defines CVV2 as the three-digit security code printed on a Visa card. Visa says the value is calculated using a secure cryptographic process and is primarily used for e-commerce and other card-not-present transactions.
The “2” identifies this as a second-generation card verification value.
American Express explains that CVV2 is essentially an updated form of a CVV generated using a second-generation process.
In everyday use, people often simply call it the CVV, security code, or card verification code.
Where Is the CVV2 Located?
On a standard Visa card, the CVV2 is a three-digit number located on the back of the card.
Visa’s current physical card standards say the three-digit CVV2 may appear on the signature panel, in a box to the right of it, or elsewhere on the card background.
It is separate from your regular card number.
For example, you might see:
Card number: 1234 5678 9012 3456
CVV2: 123
Never assume the last three digits of your regular card number are the CVV2. The security code is a separate value.
Is CVV2 the Same as CVV?
For most consumers, CVV and CVV2 refer to the same type of visible card security code.
CVV means Card Verification Value, while CVV2 means Card Verification Value 2.
The distinction comes from the way the security values are generated and used within payment systems.
American Express notes that CVV2 uses a second-generation process and serves the same basic consumer purpose as a CVV security code.
When an online checkout asks for your “CVV,” you generally enter the visible three or four-digit security number on your card.
What Is the Difference Between CVV2, CVC2, CSC, and CID?
Different card networks use different names for similar security features.
You may encounter:
| Term | Common meaning |
|---|---|
| CVV | Card Verification Value |
| CVV2 | Card Verification Value 2 |
| CVC2 | Card Validation Code 2 |
| CSC | Card Security Code |
| CID | Card Identification Number |
Visa commonly uses CVV2.
Mastercard commonly uses CVC2. Mastercard’s transaction rules describe CVC2 as a validation code that merchants may request during card-not-present transactions.
Other issuers may simply refer to the number as the security code.
The terminology can differ, but the consumer experience is similar.
How Many Digits Is a CVV2?
A Visa CVV2 is three digits.
Discover also generally uses a three-digit security code on the back of its cards. Discover describes its CVV as a three-digit code near the signature strip.
American Express cards generally use a four-digit security code printed on the front.
This means a checkout asking for a three or four-digit CVV, CVC, or security code is usually referring to the same general type of authentication information.
Always enter the security code associated with the specific card you’re using.
Why Do Online Stores Ask for CVV2?
CVV2 is especially useful when a merchant can’t physically inspect your card.
This commonly happens with:
- Online shopping
- Telephone purchases
- Mail orders
- Some app purchases
- Other card-not-present transactions
Visa says CVV2 validation helps verify that the person making the payment has possession of the card information associated with the security code.
This can help reduce certain types of card fraud.
For example, a fraudster might obtain a card number and expiration date from compromised records but still lack the security code.
CVV2 isn’t a guarantee against fraud, but it adds another verification step.
Is CVV2 the Same as Your Credit Card PIN?
No.
Your CVV2 and PIN are completely different security credentials.
A CVV2 is printed on the card and is commonly requested for online or telephone transactions.
A PIN, or Personal Identification Number, is a secret number used for transactions such as ATM withdrawals and some debit or credit card purchases.
Discover specifically notes that a credit card CVV is different from a card PIN.
Never enter your ATM PIN into an online checkout field labeled CVV2, CVV, CVC, CSC, or security code.
Is CVV2 Part of Your Credit Card Number?
No.
The CVV2 is not part of your primary credit card account number.
Your card number identifies the payment account, while the CVV2 acts as separate verification information.
Discover notes that the CVV is separate from the standard card number printed on a credit card.
A merchant may request several pieces of information when you pay online, including:
- Cardholder name
- Credit card number
- Expiration date
- Billing address
- CVV2 or equivalent security code
Each serves a different purpose during payment authorization.
Can Merchants Store Your CVV2?
Merchants may request your CVV2 when authorizing a transaction, but payment-security rules generally prohibit storing it after authorization.
The PCI Security Standards Council classifies CVV2, CVC2, CID, and similar values as sensitive authentication data. PCI DSS prohibits retaining these codes after authorization, even in encrypted form.
This is one reason a website may ask you to enter your security code again even when it already has your card number saved.
A saved card doesn’t necessarily mean the merchant stored the CVV2.
Recurring payments can also be processed using authorized card-on-file arrangements without retaining the original security code.
Why Is My CVV2 Not Working?
A merchant may reject a CVV2 for several reasons.
First, make sure you’ve entered the correct three-digit code from your current card.
Other possible reasons include:
- You mistyped the number.
- Your card has expired.
- You recently received a replacement card.
- You’re using security information from an old card.
- The card number or expiration date is incorrect.
- Your issuer declined the transaction.
- The merchant’s payment system had an error.
Replacement cards may come with a different security code.
If you’re sure the information is correct and the purchase still fails, contact your issuer using the official number on the card.
What If the CVV2 Is Worn Off?
Security codes can become difficult to read after a card has been used for a long time.
Don’t try random combinations if you can’t clearly identify the code.
Contact your credit card issuer and explain that the security number is no longer readable.
The issuer may provide guidance or replace the physical card.
Don’t post a photo of the card online or send it through an unsecured message while asking someone to help identify the number.
Is It Safe to Give a Merchant Your CVV2?
Providing your CVV2 during checkout with a legitimate merchant is a normal part of many credit card transactions.
However, the number should still be treated as sensitive information.
Be cautious if someone requests your CVV2 through:
- An unsolicited phone call
- An unexpected email
- A suspicious text message
- Social media
- An unfamiliar payment link
Don’t send photographs showing both your card number and security code.
If someone claiming to represent your bank unexpectedly requests complete card information, end the conversation and contact the issuer through its official number.
What If Someone Gets Your CVV2?
CVV2 alone generally isn’t enough to complete most card transactions, but it becomes more useful to a fraudster when combined with your card number and expiration date.
If you believe your complete card information has been compromised, contact your issuer promptly.
You may also want to:
- Lock the card through your banking app.
- Review recent transactions.
- Turn on transaction alerts.
- Dispute unauthorized charges.
- Request a replacement card if recommended.
Don’t wait for multiple unauthorized transactions if you already know your payment information was exposed.
Do Virtual Credit Cards Have CVV2 Codes?
Some virtual or digital cards also have security codes.
Visa’s developer documentation describes systems that can generate CVV2 values for virtual or digitally issued card accounts.
Instead of being printed on plastic, the security code may appear inside your issuer’s app or secure website.
Virtual-card features vary by issuer.
Follow your bank’s instructions when entering security information for a virtual card rather than assuming the code from your physical card is the same.
FAQs About What Is the CVV2 on a Credit Card
Q. What does CVV2 stand for?
A. CVV2 stands for Card Verification Value 2. Visa uses the term for the three-digit security code printed on its cards and used mainly for card-not-present verification.
Q. Where can I find my CVV2?
A. On a Visa card, the CVV2 is normally a three-digit number on the back of the card. Current Visa standards allow it on or near the signature panel or elsewhere on the card background.
Q. Is CVV2 the same as a PIN?
A. No. CVV2 is a security code commonly used for online payments, while a PIN is a separate secret number used for transactions such as ATM withdrawals and certain card purchases.
Q. Can a merchant save my CVV2 for future purchases?
A. PCI DSS rules prohibit merchants from storing card verification codes such as CVV2 after transaction authorization, even if the code would be encrypted.
Conclusion
If you’re asking what is the CVV2 on a credit card, it is the Card Verification Value 2 used to help authenticate card-not-present purchases. On Visa cards, it is normally the three-digit security code printed on the back.
CVV2 is separate from your card number and PIN. Keep it private, provide it only to trusted merchants during legitimate transactions, and contact your issuer promptly if you believe your card information has been compromised.
Disclaimer
This content is for informational purposes only and isn’t financial or legal advice. Card security features, payment procedures, fraud protections, and issuer practices may vary, so verify card-specific questions with your financial institution or card issuer.
