CVC/CVV
The CVC (Card Verification Code) or CVV (Card Verification Value) is a 3- or 4-digit security code on credit and debit cards, which is used for verification during online payments.
CVC/CVV
The CVC (Card Verification Code) — also called CVV (Card Verification Value), CID, or CSC — is a security code on the back of Visa and Mastercard cards (3 digits) or on the front of American Express cards (4 digits). It serves as an additional security measure for online payments to confirm that the payer has physical access to the card.
The CVC is requested for Card-Not-Present transactions (online, telephone), but not for physical payments at the terminal. It is not stored on the magnetic stripe or chip, which is why it is not compromised in data thefts from POS systems.
Important: Comerciantes are not allowed to store the CVC according to PCI DSS guidelines. It is only transmitted at the time of the transaction and discarded afterwards. Tokenized payments (e.g., saved cards for recurring payments) only require the CVC during the first transaction.
CVC/CVV examples
During an online purchase, a customer enters their card number, expiration date and the 3-digit CVC on the back of their Visa card.
A payment provider tokenizes the card data during the first purchase. For subsequent purchases, the CVC is no longer requested, as the card is already verified and tokenized.
A Comerciante requests the CVC but does not store it — as required by PCI DSS guidelines.
CVC/CVV FAQ
What is the CVC or CVV on my card?
The CVC (Card Verification Code) or CVV (Card Verification Value) is a 3- or 4-digit security code on your credit or debit card. It is requested during online payments to confirm that you have physical access to the card.
Where can I find the CVC on my card?
For Visa and Mastercard, the 3-digit CVC is located on the back in the signature field. For American Express, the 4-digit CID is on the front, on the right above the card number.
Are merchants allowed to store the CVC?
No. According to PCI DSS guidelines, Comerciantes are not allowed to store the CVC — neither digitally nor physically. It is only transmitted at the time of the transaction and discarded afterwards.
Why is my CVC requested during online payments?
The CVC serves as proof that you have physical access to the card. It is not stored on the magnetic stripe and therefore protects against fraud involving stolen card numbers.
