P3 Card verification values

Needs: Supporter

CVV, CVV2 and iCVV, the role of the service code, and dynamic values in concept.

This is a supporter feature. Create a free account, then try every supporter feature free for 7 days.

Sign in Create a free account See plans

What this module covers

Track P · PIN and card security

You will be able to

  • Compute CVV, CVV2 and iCVV
  • Explain the service code difference
  • Explain dynamic values (dCVV, CVC3) and CAVV in concept

The lesson

  1. Why it matters
  2. The concept
  3. Step by step
  4. In the real world
  5. Common mistakes
  6. What to test

In the module

  • The lesson, with diagrams, common mistakes and what to test
  • A worked example you can change: Computing a CVV
  • Practice: 3 kinds of generated exercise, each with a step-by-step solution
  • A quiz of 9 questions

Key terms

Card verification key (CVK)
The issuer's pair of DES keys used to compute CVV, CVV2 and iCVV.
CVV (CVC, card verification value)
Three digits on the stripe computed from the PAN, expiry and service code with the issuer's CVK, which show that the track data is genuine.
CVV2 (CVC2)
The three digits printed on the card, computed like the CVV with service code 000. Used for card-not-present payments and never stored after authorisation.
Dynamic CVV (dCVV, CVC3)
A CVV that changes every transaction, computed by a contactless card using its counter, for the magstripe mode of contactless.
iCVV
The CVV in the chip's track 2 equivalent data, computed with service code 999, so stripe data copied from a chip cannot pass as a real stripe.

Tools for this module: CVV Calculator

Read the opening of the lesson →

The lesson, worked example, practice and quiz open with a supporter pass, which you can try free for 7 days.
An unhandled error has occurred. Reload 🗙

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.