Overview
CVV settings help merchants verify that a customer has physical possession of a payment card by requiring the 3- or 4-digit security code during a transaction. Proper CVV configuration can significantly reduce fraudulent transactions and chargebacks. By configuring CVV settings appropriately, merchants can improve fraud detection while still allowing valid transactions to go through. This guide explains how CVV works and how to configure the settings.
Navigating to Card ID Verification Settings
In the Merchant Portal, on the left side panel, click on Options → Settings → Card ID Verification.
Card Verification Settings(CVV)
What Is CVV?
CVV is the 3-digit code (4 for Amex) on the card used to verify the cardholder’s possession of the card. Merchants can configure rejection rules based on the issuer’s CVV response.
How CVV Works
- The CVV is passed during transaction.
- The issuing bank returns a CVV response.
- The gateway enforces rejection rules if configured.
Enable CVV Settings
- Go to Options ➝ Settings ➝ Card ID Verification.
- Check the box for the rule you want to enable (you can select multiple).
- Click Save to apply your changes.
- If you have more than one processor, use the Processor dropdown to add rules for each one
- You can also add rules for Non-US International credit cards.
When to Reject a Transaction
The merchant can configure their gateway to reject transactions under specific CVV result codes. The available options include:
-
N: Does NOT Match
The CVV provided does not match what the issuer has on file. -
P: Not Processed or CVV Not Provided
The card issuer didn’t process the CVV or no CVV was submitted. -
S: Should Be on Card but Not Indicated
The card type should have a CVV, but the customer didn’t provide one. -
U: Issuer Not Certified / Encryption Key Missing
The issuer cannot validate CVV due to missing certification or encryption keys.
*These settings apply to eCommerce and MOTO (Mail Order/Telephone Order) transactions.
Support for Multiple Processors
If the merchant account supports multiple processors, a Processor dropdown will appear at the top of the screen. Settings must be configured separately for each processor.
*Settings applied to one processor will not carry over to others, so it’s essential to configure each one appropriately
Support for U.S. and Non-U.S. Transactions
At the top of the configuration screen, you can toggle between:
- US Domestic
- Non-US International
This allows merchants to apply different rejection rules based on whether the card was issued domestically or internationally. Since international issuers may not fully support CVV standards, this flexibility ensures that legitimate international transactions aren't blocked unnecessarily.
Show History
At the bottom of the Card ID Verification page, merchants can view a full change log by clicking Show history. This includes:
- Timestamp – The exact date and time the change was made.
- User – The username of the person who made the change, helping you identify who adjusted the settings.
- Rules Added – CVV response codes that were enabled.
- Rules Removed – CVV response codes that were disabled.
Frequently Asked Questions
Can I enable more than one CVV rule?
Yes, you can check as many boxes as needed. Each box represents a rule you want to enforce.
What if I have multiple processors?
Use the Processor dropdown to switch between processors. You’ll need to select rules for each processor individually.
Are CVV rules required?
No, but they are strongly recommended for fraud prevention—especially for online transactions.