Each bank card contains a three-digit code, which in various payment systems may be known as a CVC or CVV code. Where this code is located, why it is needed, in which situations it can be specified, and in which it must be kept secret, we will understand in our article.
What is CVV card code
The CVV code is a three-digit combination of numbers used in online transactions for card identification and added security. Entering the CVV code helps to ensure that the transaction is carried out by the cardholder, who has access not only to the card number, but also to confidential information.
Depending on the payment system that issues the card, this code may have different names, for example, CVV for Visa and CVC for Mastercard.
What is CVV2 and how is it different from CVV
Each card has two such codes, but the first of them (CVV1/CVC1) is in the chip or magnetic strip and is available only for banking equipment. Thus, when they talk about CVV/CVC, they mean exactly the digital combination CVV2/CVC2 that is indicated on the card.
Where is the CVV code on the card
On Visa and Mastercard plastic cards, the three-digit CVV code is usually placed on the back next to the signature field. However, in virtual cards or when using online banking, its location may differ, for example, the code may be on the front side of the card image or in the information section.
When CVV code is used
If we enter the PIN code when performing operations with the direct use of the card, then the CVV code is required when conducting online transactions without the presence of a physical card at the place of payment. Therefore, entering the CVV code is required for any operations on the Internet, in particular:
- calculations in online stores
- transfers from card to card
- payment of utility services
- mobile top-up.
According to the requirements of the PCI DSS standard, the entered codes are not stored on the sites and cannot be reused for debiting funds.
Is it possible to specify the CVV code and in which cases
Digital CVV combinations are confidential, so only the owners of the payment instrument can know them. You use this code only when making transactions on the Internet, in other cases it is not needed - neither to receive bank transfers, nor to confirm your identity during a conversation with a bank representative, etc.
It is forbidden to disclose the CVV code to third parties, as attackers can use it to illegally access your account or carry out illegal transactions on the Internet.
How to use CVV
When making online payments, you go to a secure payment page where you need to fill out a special form. To confirm payment, you need to enter:
- card number
- its validity period
- CVV code
In some cases, the bank may apply additional security measures, for example, by sending you an SMS or push message with a one-time code that must be entered in a special field.
To decide if you can enter a CVV code, make sure the checkout page is secure.
Signs of a secure Internet page
- Correct site address without errors, for example, google.com.ua, not goggle.com.ua
- When clicking on the site address, the https:// prefix appears.
- In the web address bar there is a picture of a lock or a symbol that, when clicked, shows a picture of a lock
Tips for safe use of the CVV code
Knowing what the CVV on the card is, you can conveniently make any payments in a few clicks. However, to make online payments more secure and protect your money from fraudsters, be sure to follow all the basic precautions:
- Do not disclose your card's CVV code or enter it in front of others.
- Do not send the code or photos of the back of your card via email.
- If you get calls from strangers claiming to be bank employees and asking for your CVV code, they are probably scammers. Do not give them any information and better contact the bank yourself. Remember that real bank employees will not ask for such data.
- If the CVV code is disclosed, immediately inform the bank, block the card and order a new one. Unlike the PIN code, the CVV code cannot be changed.
- Do not enter sensitive information on untrusted or unsecured sites that do not use a secure HTTPS connection. Before confirming any payment transactions, check the name of the site.
