SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>Card security code</title>

</head>

<span id="openzim-page-title" class="mw-page-title-main"><span class="mw-page-title-main">Card security code</span></span>

</h1>

</header>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hatnote{font-style:italic}.mw-parser-output div.hatnote{padding-left:1.6em;margin-bottom:0.5em}.mw-parser-output .hatnote i{font-style:normal}.mw-parser-output .hatnote+link+.hatnote{margin-top:-0.5em}@media print{body.ns-0 .mw-parser-output .hatnote{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div role="note" class="hatnote navigation-not-searchable">"CVC2" redirects here. For the airport in Ontario, Canada, see <a href="Voyageur_Channel_Water_Aerodrome" title="Voyageur Channel Water Aerodrome">Voyageur Channel Water Aerodrome</a>.</div>

</p>

<p>A <b>card security code</b> (<b>CSC</b>; also known as <b>CVC</b>, <b>CVV</b>, or <a href="#Naming">several other names</a>) is a series of numbers that, in addition to the <a href="Bank_card_number" class="mw-redirect" title="Bank card number">bank card number</a>, is printed (but not <a href="Paper_embossing" title="Paper embossing">embossed</a>) on a <a href="Credit_card" title="Credit card">credit</a> or <a href="Debit_card" title="Debit card">debit card</a>. The CSC is used as a security feature for <a href="Card_not_present_transaction" class="mw-redirect" title="Card not present transaction">card not present transactions</a>, where a <a href="Personal_identification_number" title="Personal identification number">personal identification number</a> (PIN) cannot be manually entered by the cardholder (as they would during <a href="Payment_terminal" title="Payment terminal">point-of-sale</a> or card present transactions). It was instituted to reduce the incidence of <a href="Credit_card_fraud" title="Credit card fraud">credit card fraud</a>. Unlike the card number, the CSC is deliberately not embossed, so that it is not read when using a mechanical <a href="Credit_card_imprinter" title="Credit card imprinter">credit card imprinter</a> which will only pick up embossed numbers.

</p><p>These codes are in slightly different places for different card issuers. The CSC for <a href="Visa_Inc." title="Visa Inc.">Visa</a>, <a href="Mastercard" title="Mastercard">Mastercard</a>, and <a href="Discover_Card" title="Discover Card">Discover</a> credit cards is a three-digit number on the back of the card, to the right of the signature box. The CSC for <a href="American_Express" title="American Express">American Express</a> is a four-digit code on the front of the card above the account number. See the figures to the right for examples.

</p><p>CSC was originally developed in the UK as an eleven-character alphanumeric code by <a href="Equifax" title="Equifax">Equifax</a> employee Michael Stone in 1995. After testing with the <a href="Littlewoods" title="Littlewoods">Littlewoods</a> Home Shopping group and <a href="NatWest" title="NatWest">NatWest</a> bank, the concept was adopted by the UK <a href="Association_for_Payment_Clearing_Services" class="mw-redirect" title="Association for Payment Clearing Services">Association for Payment Clearing Services</a> (APACS) and streamlined to the three-digit code known today. <a href="Mastercard" title="Mastercard">Mastercard</a> started issuing CVC2 numbers in 1997 and <a href="Visa_Inc." title="Visa Inc.">Visa</a> in the United States issued them by 2001. <a href="American_Express" title="American Express">American Express</a> started to use the CSC in 1999, in response to growing <a href="E-commerce" title="E-commerce">Internet transactions</a> and card member complaints of spending interruptions when the security of a card has been brought into question.

</p><p><a href="Contactless_payment" title="Contactless payment">Contactless</a> card and chip cards may electronically generate their own code, such as iCVV or a <i>dynamic</i> CVV.366

</p>

<div class="mw-heading mw-heading2"><h2 id="Naming">Naming</h2></div>

<p>The codes have different names:

</p>

<ul><li>"CSC" or "card security code": <a href="Debit_card" title="Debit card">debit cards</a>, American Express (three digits on back of card, also referred to as 3CSC)<sup id="cite_ref-1" class="reference"><a href="#cite_note-1"><span class="cite-bracket">[</span>1<span class="cite-bracket">]</span></a></sup></li>

<li>"CVC" or "card validation code": <a href="Mastercard" title="Mastercard">Mastercard</a></li>

<li>"CVV" or "card verification value": <a href="Visa_Inc." title="Visa Inc.">Visa</a></li>

<li>"CAV" or "card authentication value": <a href="JCB_(credit_card_company)" title="JCB (credit card company)">JCB</a></li>

<li>"CID": "card ID", "card identification number", or "card identification code": <a href="Discover_Card" title="Discover Card">Discover</a>, <a href="American_Express" title="American Express">American Express</a> (four digits on front of card). American Express usually uses the four-digit code on the front of the card, referred to as the card identification code (CID), but also has a three-digit code on the back of the card, referred to as the card security code (CSC). American Express also sometimes refers to a "unique card code".<sup id="cite_ref-2" class="reference"><a href="#cite_note-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup></li>

<li>"CVD" or "card verification data": <a href="Discover_Card" title="Discover Card">Discover</a></li>

<li>"CVE" or "Elo verification code": <a href="Elo_(card_association)" title="Elo (card association)">Elo</a> in <a href="Brazil" title="Brazil">Brazil</a></li>

<li>"CVN" or "card validation number", also "card verification number": <a href="China_UnionPay" class="mw-redirect" title="China UnionPay">China UnionPay</a>, <a href="Google_Ads" title="Google Ads">Google Ads</a><sup id="cite_ref-3" class="reference"><a href="#cite_note-3"><span class="cite-bracket">[</span>3<span class="cite-bracket">]</span></a></sup></li>

<li>"SPC" or "signature panel code"<sup id="cite_ref-4" class="reference"><a href="#cite_note-4"><span class="cite-bracket">[</span>4<span class="cite-bracket">]</span></a></sup></li>

<li>"CCV" or "card code verification": commonly used in <a href="Canada" title="Canada">Canada</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="Types">Types</h2></div>

<p>There are several types of security codes and PVV (all generated from <a href="Data_Encryption_Standard" title="Data Encryption Standard">DES</a> key in the bank in <a href="Hardware_security_module" title="Hardware security module">HSM</a> modules using <a href="Payment_card_number" title="Payment card number">PAN</a>, expiration date and service code):

</p>

<ul><li>The first code, 3 numbers, called CVC1 or CVV1, is encoded on track one and two of the <a href="Magnetic_stripe_card" class="mw-redirect" title="Magnetic stripe card">magnetic stripe</a> of the card and used for card present transactions, with signature (second track also contains pin verification value, PVV, but now it is usually all zeroed out and service code). The purpose of the code is to verify that a payment card is actually in the hand of the merchant (thus it should be different from CVV2). This code is automatically retrieved when the magnetic stripe of a card is read (swiped) on a <a href="Point-of-sale" class="mw-redirect" title="Point-of-sale">point-of-sale</a> (card present) device and is verified by the issuer. A limitation is that if the entire card has been duplicated and the magnetic stripe copied, then the code is still valid, notwithstanding the fact that cardholder signature will still usually be required <style data-mw-deduplicate="TemplateStyles:r1033199720">

/* start https://en.wikipedia.org/ */

.mw-parser-output div.crossreference{padding-left:0}

/* end https://en.wikipedia.org/ */

</style><span role="note" class="hatnote navigation-not-searchable crossreference">(see: <a href="Credit_card_fraud#Skimming" title="Credit card fraud">Credit card fraud § Skimming</a>)</span>.</li>

<li>The second code, and the most cited, is CVV2 or CVC2. This code is often used by merchants for <a href="Card_not_present_transaction" class="mw-redirect" title="Card not present transaction">card not present transactions</a> including online purchases. In some countries in Western Europe, card issuers require a merchant to obtain the code when the cardholder is not present in person. Uses service code 000.</li>

<li>Contactless and/or chip <a href="EMV" title="EMV">EMV</a> cards supply their own electronically generated codes, called iCVV. Uses service code 999. It is described in public standards from EMVCo.</li>

<li>Consumer Device Cardholder Verification Method (CDCVM for short) is a type of identity verification in which the user's mobile device (such as a smartphone) is used to verify the user's identity; for example, it can use the device's <a href="Biometrics" title="Biometrics">biometrics</a> authentication features (e.g. <a href="Touch_ID" title="Touch ID">Touch ID</a> or <a href="Face_ID" title="Face ID">Face ID</a>), or the device's set <a href="Password" title="Password">passcode</a>. It is supported by a number of payment systems, such as <a href="Apple_Pay" title="Apple Pay">Apple Pay</a>,<sup id="cite_ref-5" class="reference"><a href="#cite_note-5"><span class="cite-bracket">[</span>5<span class="cite-bracket">]</span></a></sup> <a href="Google_Pay_(payment_method)" title="Google Pay (payment method)">Google Pay</a><sup id="cite_ref-6" class="reference"><a href="#cite_note-6"><span class="cite-bracket">[</span>6<span class="cite-bracket">]</span></a></sup> or <a href="Samsung_Pay" title="Samsung Pay">Samsung Pay</a>.<sup id="cite_ref-7" class="reference"><a href="#cite_note-7"><span class="cite-bracket">[</span>7<span class="cite-bracket">]</span></a></sup></li></ul>

<div class="mw-heading mw-heading2"><h2 id="Location">Location</h2></div>

<p>The card security code is typically the last three or four digits printed, not embossed like the card number, on the signature strip on the back of the card. On American Express cards, however, the card security code is the four digits printed (not embossed) on the front towards the right. The card security code is not encoded on the magnetic stripe but is printed flat.

</p>

<ul><li>American Express cards have a four-digit code printed on the front side of the card above the number.</li>

<li><a href="Diners_Club" class="mw-redirect" title="Diners Club">Diners Club</a>, Discover, <a href="Japan_Credit_Bureau" class="mw-redirect" title="Japan Credit Bureau">JCB</a>, Mastercard, and Visa credit and debit cards have a three-digit card security code. The code is the final group of numbers printed on the back signature panel of the card.</li>

<li>New North American Mastercard and Visa cards feature the code in a separate panel to the right of the signature strip.<sup id="cite_ref-8" class="reference"><a href="#cite_note-8"><span class="cite-bracket">[</span>8<span class="cite-bracket">]</span></a></sup> This has been done to prevent overwriting of the numbers by signing the card.</li></ul>

<div class="mw-heading mw-heading2"><h2 id="Generation">Generation</h2></div>

<p>The CSC for each card (form 1 and 2) is generated by the card issuer when the card is issued. It is calculated by encrypting the bank card number and expiration date (two fields printed on the card) with encryption keys known only to the card issuer, and decimalising the result (in a similar manner to a <a href="Hash_function" title="Hash function">hash function</a>).<sup id="cite_ref-9" class="reference"><a href="#cite_note-9"><span class="cite-bracket">[</span>9<span class="cite-bracket">]</span></a></sup><sup id="cite_ref-10" class="reference"><a href="#cite_note-10"><span class="cite-bracket">[</span>10<span class="cite-bracket">]</span></a></sup><sup id="cite_ref-11" class="reference"><a href="#cite_note-11"><span class="cite-bracket">[</span>11<span class="cite-bracket">]</span></a></sup>

</p>

<div class="mw-heading mw-heading2"><h2 id="Benefits_and_limitations">Benefits and limitations</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .ambox{border:1px solid #a2a9b1;border-left:10px solid #36c;background-color:#fbfbfb;box-sizing:border-box}.mw-parser-output .ambox+link+.ambox,.mw-parser-output .ambox+link+style+.ambox,.mw-parser-output .ambox+link+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+style+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+link+.ambox{margin-top:-1px}html body.mediawiki .mw-parser-output .ambox.mbox-small-left{margin:4px 1em 4px 0;overflow:hidden;width:238px;border-collapse:collapse;font-size:88%;line-height:1.25em}.mw-parser-output .ambox-speedy{border-left:10px solid #b32424;background-color:#fee7e6}.mw-parser-output .ambox-delete{border-left:10px solid #b32424}.mw-parser-output .ambox-content{border-left:10px solid #f28500}.mw-parser-output .ambox-style{border-left:10px solid #fc3}.mw-parser-output .ambox-move{border-left:10px solid #9932cc}.mw-parser-output .ambox-protection{border-left:10px solid #a2a9b1}.mw-parser-output .ambox .mbox-text{border:none;padding:0.25em 0.5em;width:100%}.mw-parser-output .ambox .mbox-image{border:none;padding:2px 0 2px 0.5em;text-align:center}.mw-parser-output .ambox .mbox-imageright{border:none;padding:2px 0.5em 2px 0;text-align:center}.mw-parser-output .ambox .mbox-empty-cell{border:none;padding:0;width:1px}.mw-parser-output .ambox .mbox-image-div{width:52px}@media(min-width:720px){.mw-parser-output .ambox{margin:0 10%}}@media print{body.ns-0 .mw-parser-output .ambox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style>

<p>As a security measure, merchants who require the CVV2 for "<a href="Card_not_present_transaction" class="mw-redirect" title="Card not present transaction">card not present</a>" transactions are required by the card issuer not to store the CVV2 once the individual transaction is authorized.<sup id="cite_ref-visa_12-0" class="reference"><a href="#cite_note-visa-12"><span class="cite-bracket">[</span>12<span class="cite-bracket">]</span></a></sup> This way, if a database of transactions is <a href="Compromise#Security" title="Compromise">compromised</a>, the CVV2 is not present and the stolen card numbers are less useful. <a href="Virtual_terminal" title="Virtual terminal">Virtual terminals</a> and <a href="Payment_gateways" class="mw-redirect" title="Payment gateways">payment gateways</a> do not store the CVV2 code; therefore, employees and customer service representatives with access to these web-based payment interfaces, who otherwise have access to complete card numbers, expiration dates, and other information, still lack the CVV2 code.

</p><p>The <a href="Payment_Card_Industry_Data_Security_Standard" title="Payment Card Industry Data Security Standard">Payment Card Industry Data Security Standard</a> (PCI DSS) also prohibits the storage of CSC (and other sensitive authorisation data) post transaction authorisation. This applies globally to anyone who stores, processes or transmits cardholder data.<sup id="cite_ref-13" class="reference"><a href="#cite_note-13"><span class="cite-bracket">[</span>13<span class="cite-bracket">]</span></a></sup>

Since the CSC is not contained on the magnetic stripe of the card, it is not typically included in the transaction when the card is used face to face at a merchant. However, some merchants in North America, such as <a href="Sears%2C_Roebuck_and_Company" class="mw-redirect" title="Sears, Roebuck and Company">Sears</a> and <a href="Staples_Inc." title="Staples Inc.">Staples</a>, require the code. For <a href="American_Express" title="American Express">American Express</a> cards, this has been an invariable practice (for "card not present" transactions) in European Union (EU) countries like Ireland and the United Kingdom since the start of 2005. This provides a level of protection to the bank/cardholder, in that a fraudulent merchant or employee cannot simply capture the magnetic stripe details of a card and use them later for "card not present" purchases over the phone, mail order or Internet. To do this, a merchant or its employee would also have to note the CVV2 visually and record it, which is more likely to arouse the cardholder's suspicion.

</p><p>Supplying the CSC code in a transaction is intended to verify that the customer has the card in their possession. Knowledge of the code proves that the customer has seen the card, or has seen a record made by somebody who saw the card.

</p><p>Limitations include:

</p>

<ul><li>The use of the CSC cannot protect against <a href="Phishing" title="Phishing">phishing</a> scams, where the cardholder is tricked into entering the CSC among other card details via a fraudulent website. The growth in phishing has reduced the real-world effectiveness of the CSC as an anti-fraud device. There is now also a scam where a phisher has already obtained the card account number (perhaps by hacking a merchant database or from a poorly designed receipt) and gives this information <i>to</i> the victims (lulling them into a false sense of security) before asking for the CSC (which is all that the phisher needs and the purpose of the scam in the first place).<sup id="cite_ref-snopes_14-0" class="reference"><a href="#cite_note-snopes-14"><span class="cite-bracket">[</span>14<span class="cite-bracket">]</span></a></sup></li>

<li>Since the CSC may not be stored by the merchant for any length of time<sup id="cite_ref-visa_12-1" class="reference"><a href="#cite_note-visa-12"><span class="cite-bracket">[</span>12<span class="cite-bracket">]</span></a></sup> (after the original transaction in which the CSC was quoted and then authorized), a merchant who needs to regularly bill a card for a regular subscription would not be able to provide the code after the initial transaction. Payment gateways, however, have responded by adding "periodic bill" features as part of the authorization process.</li>

<li>Some card issuers do not use the CSC. However, transactions without CSC are possibly subjected to higher card processing cost to the merchants, and fraudulent transactions without CSC are more likely to be resolved in favour of the cardholder.</li>

<li>It is not mandatory for a merchant to require the security code for making a transaction, so the card may still be prone to fraud even if only its number is known to phishers. For example, <a href="Amazon_(company)" title="Amazon (company)">Amazon</a> requires only a card number and expiration date to complete a transaction.</li>

<li>It is possible for a fraudster to guess the CSC by using a distributed attack.<sup id="cite_ref-15" class="reference"><a href="#cite_note-15"><span class="cite-bracket">[</span>15<span class="cite-bracket">]</span></a></sup></li></ul>

<ul><li><a href="3-D_Secure" title="3-D Secure">3-D Secure</a></li>

<li><a href="Credit_card_fraud" title="Credit card fraud">Credit card fraud</a></li>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist">

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.americanexpress.com/ca/en/security/safekey/faqs/">"SafeKey Frequently Asked Questions | American Express Canada"</a>. <i>www.americanexpress.com</i><span class="reference-accessdate">. Retrieved <span class="nowrap">4 May</span> 2021</span>.</cite></span>

</li>

<li id="cite_note-2"><span class="mw-cite-backlink"><b><a href="#cite_ref-2">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.americanexpress.com/content/dam/amex/hk/en/staticassets/merchant/pdf/support-and-services/useful-information-and-downloads/GuidetoCheckingCardFaces.pdf">"American Express® Card security features"</a> <span class="cs1-format">(PDF)</span>. <i>www.americanexpress.com</i>. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20201127205221/https://www.americanexpress.com/content/dam/amex/hk/en/staticassets/merchant/pdf/support-and-services/useful-information-and-downloads/GuidetoCheckingCardFaces.pdf">Archived</a> <span class="cs1-format">(PDF)</span> from the original on 27 November 2020<span class="reference-accessdate">. Retrieved <span class="nowrap">4 May</span> 2021</span>.</cite></span>

</li>

<li id="cite_note-3"><span class="mw-cite-backlink"><b><a href="#cite_ref-3">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://support.google.com/google-ads/answer/78492">"Card verification number (CVN)"</a><span class="reference-accessdate">. Retrieved <span class="nowrap">2 July</span> 2023</span>.</cite></span>

</li>

<li id="cite_note-4"><span class="mw-cite-backlink"><b><a href="#cite_ref-4">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20140424011239/https://www.securesuite.net/cibc/tdsecure/spc_description.jsp?cycfg_affinity=mc">"CIBC MasterCard - MasterCard SecureCode"</a>. Archived from <a rel="nofollow" class="external text" href="https://www.securesuite.net/cibc/tdsecure/spc_description.jsp?cycfg_affinity=mc">the original</a> on 24 April 2014<span class="reference-accessdate">. Retrieved <span class="nowrap">12 July</span> 2012</span>.</cite></span>

</li>

<li id="cite_note-5"><span class="mw-cite-backlink"><b><a href="#cite_ref-5">^</a></b></span> <span class="reference-text"><cite class="citation magazine cs1"><a rel="nofollow" class="external text" href="https://www.wired.co.uk/article/apple-pay-uk-payments-cap">"Apple Pay £20 limit in the UK will 'change over time'"</a>. <i>Wired UK</i>. 24 June 2015<span class="reference-accessdate">. Retrieved <span class="nowrap">24 June</span> 2022</span>.</cite></span>

</li>

<li id="cite_note-6"><span class="mw-cite-backlink"><b><a href="#cite_ref-6">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.avira.com/en/blog/breakthrough-mobile-payments-google-pay-launched-in-germany">"Breakthrough for mobile payments? Google Pay launched in Germany"</a>. <i><a href="Avira" title="Avira">Avira</a></i>. 17 July 2018<span class="reference-accessdate">. Retrieved <span class="nowrap">24 June</span> 2022</span>.</cite></span>

</li>

<li id="cite_note-7"><span class="mw-cite-backlink"><b><a href="#cite_ref-7">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.sammobile.com/news/samsung-pay-australian-users-allow-high-value-purchases-without-pin/">"Samsung Pay now allows Australian users to make high-value purchases without PIN"</a>. <i>SamMobile</i>. 22 September 2020<span class="reference-accessdate">. Retrieved <span class="nowrap">24 June</span> 2022</span>.</cite></span>

</li>

<li id="cite_note-8"><span class="mw-cite-backlink"><b><a href="#cite_ref-8">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20120216145102/http://www.visa.ca/en/merchant/pdfs/security_features.pdf">"Card Security Features"</a> <span class="cs1-format">(PDF)</span>. Visa. Archived from <a rel="nofollow" class="external text" href="http://www.visa.ca/en/merchant/pdfs/security_features.pdf">the original</a> <span class="cs1-format">(PDF)</span> on 16 February 2012.</cite></span>

</li>

<li id="cite_note-9"><span class="mw-cite-backlink"><b><a href="#cite_ref-9">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.ibm.com/docs/en/zos/2.1.0?topic=algorithms-visa-pin">"VISA PIN Algorithms"</a>. <i>www.ibm.com</i>. 18 September 2012<span class="reference-accessdate">. Retrieved <span class="nowrap">18 June</span> 2021</span>.</cite></span>

</li>

<li id="cite_note-10"><span class="mw-cite-backlink"><b><a href="#cite_ref-10">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://archive.today/20120713194459/http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/CSFB4Z20/2.4.2?SHELF=&DT=20020114105428">"z/OS Integrated Cryptographic Service Facility Application Programmer's Guide"</a>. IBM. March 2002. p. 209. Archived from <a rel="nofollow" class="external text" href="http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/CSFB4Z20/2.4.2?SHELF=&DT=20020114105428">the original</a> on 13 July 2012.</cite></span>

</li>

<li id="cite_note-11"><span class="mw-cite-backlink"><b><a href="#cite_ref-11">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://archive.today/20120717044345/http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/CSFB4Z20/2.4.5.16?SHELF=&DT=20020114105428">"z/OS Integrated Cryptographic Service Facility Application Programmer's Guide"</a>. IBM. March 2002. p. 258. Archived from <a rel="nofollow" class="external text" href="http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/CSFB4Z20/2.4.5.16?SHELF=&DT=20020114105428">the original</a> on 17 July 2012.</cite> </span>

</li>

<li id="cite_note-visa-12"><span class="mw-cite-backlink">^ <a href="#cite_ref-visa_12-0"><sup><i><b>a</b></i></sup></a> <a href="#cite_ref-visa_12-1"><sup><i><b>b</b></i></sup></a></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20140224171209/http://usa.visa.com/download/merchants/pdra_form_dec2006.doc">"Rules for Visa Merchants"</a>. p. 1. Archived from <a rel="nofollow" class="external text" href="http://usa.visa.com/download/merchants/pdra_form_dec2006.doc">the original</a> <span class="cs1-format">(doc)</span> on 24 February 2014<span class="reference-accessdate">. Retrieved <span class="nowrap">26 February</span> 2013</span>.</cite></span>

</li>

<li id="cite_note-13"><span class="mw-cite-backlink"><b><a href="#cite_ref-13">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml">"Official Source of PCI DSS Data Security Standards Documents and Payment Card Compliance Guidelines"</a>. Pcisecuritystandards.org<span class="reference-accessdate">. Retrieved <span class="nowrap">25 December</span> 2011</span>.</cite></span>

</li>

<li id="cite_note-snopes-14"><span class="mw-cite-backlink"><b><a href="#cite_ref-snopes_14-0">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.snopes.com/crime/warnings/creditcard.asp">"Urban Legends Reference Pages: Visa Fraud Investigation Scam"</a>. Snopes.com. 23 December 2003<span class="reference-accessdate">. Retrieved <span class="nowrap">25 December</span> 2011</span>.</cite></span>

</li>

<li id="cite_note-15"><span class="mw-cite-backlink"><b><a href="#cite_ref-15">^</a></b></span> <span class="reference-text"><cite id="CITEREFDucklin2016" class="citation web cs1">Ducklin, Paul (5 December 2016). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20161206150334/https://nakedsecurity.sophos.com/2016/12/05/how-to-guess-credit-card-security-codes/">"How to guess credit card security codes"</a>. <i>naked security by SOPHOS</i>. Archived from <a rel="nofollow" class="external text" href="https://nakedsecurity.sophos.com/2016/12/05/how-to-guess-credit-card-security-codes/">the original</a> on 6 December 2016<span class="reference-accessdate">. Retrieved <span class="nowrap">8 December</span> 2016</span>.</cite></span>

</li>

</ol></div></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1236075235">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></div><div role="navigation" class="navbox" aria-labelledby="Credit,_charge_and_debit_cards232" style="padding:3px"><table class="nowraplinks mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><style data-mw-deduplicate="TemplateStyles:r1239400231">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div id="Credit,_charge_and_debit_cards232" style="font-size:114%;margin:0 4em"><a href="Credit_card" title="Credit card">Credit</a>, <a href="Charge_card" title="Charge card">charge</a> and <a href="Debit_card" title="Debit card">debit cards</a></div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">Major cards</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="American_Express" title="American Express">American Express</a></li>

<li><a href="Mastercard" title="Mastercard">Mastercard</a>

<ul><li><a href="Debit_Mastercard" title="Debit Mastercard">Debit</a></li>

<li><a href="Maestro_(debit_card)" title="Maestro (debit card)">Maestro</a></li></ul></li>

<ul><li><a href="Visa_Debit" title="Visa Debit">Debit</a></li>

<li><a href="Visa_Electron" title="Visa Electron">Electron</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Regional and<br> specialty cards</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="AzeriCard" title="AzeriCard">AzeriCard</a></li>

<li><a href="Altyn_Asyr_(payment_system)" title="Altyn Asyr (payment system)">Altyn Asyr</a></li>

<li><a href="Bancomat_(interbank_network)" title="Bancomat (interbank network)">Bancomat</a></li>

<li><a href="BankAxept" title="BankAxept">BankAxept</a></li>

<li><a href="Cabcharge" title="Cabcharge">Cabcharge</a></li>

<li><a href="Capital_One" title="Capital One">Capital One</a>

<ul><li><a href="Discover_Card" title="Discover Card">Discover</a></li>

<li><a href="Diners_Club_International" title="Diners Club International">Diners Club</a></li></ul></li>

<li><a href="Dankort" title="Dankort">Dankort</a></li>

<li><a href="EFTPOS" title="EFTPOS">EFTPOS</a></li>

<li><a href="Electronic_Payment_Services" title="Electronic Payment Services">Electronic Payment Services (EPS)</a></li>

<li><a href="European_Payments_Initiative" title="European Payments Initiative">European Payments Initiative (EPI)</a></li>

<li><a href="Forbrugsforeningen" title="Forbrugsforeningen">Forbrugsforeningen</a></li>

<li><a href="Girocard" title="Girocard">Girocard</a></li>

<li><a href="Hyundai_Card" title="Hyundai Card">Hyundai Card</a></li>

<li><a href="Isracard" title="Isracard">Isracard</a></li>

<li><a href="LankaPay" title="LankaPay">LankaPay</a></li>

<li><a href="Meeza" title="Meeza">Meeza</a></li>

<li><a href="PayPak" title="PayPak">PayPak</a></li>

<li><a href="RuPay" title="RuPay">RuPay</a></li>

<li><a href="UnionPay" title="UnionPay">UnionPay</a></li>

<li><a href="Verve_Card" class="mw-redirect" title="Verve Card">Verve</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Defunct cards</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Access_(credit_card)" title="Access (credit card)">Access</a></li>

<li><a href="Bankcard" title="Bankcard">Bankcard</a></li>

<li><a href="Diners_Club_International" title="Diners Club International">Carte Blanche</a></li>

<li><a href="Carte_Bleue" title="Carte Bleue">Carte Bleue</a></li>

<li><a href="Chipknip" title="Chipknip">Chipknip</a></li>

<li><a href="Choice_(credit_card)" title="Choice (credit card)">Choice</a></li>

<li><a href="EnRoute_(credit_card)" title="EnRoute (credit card)">enRoute</a></li>

<li><a href="Eurocard_(payment_card)" class="mw-redirect" title="Eurocard (payment card)">Eurocard</a></li>

<li><a href="The_Everything_Card" title="The Everything Card">Everything</a></li>

<li><a href="Laser_(debit_card)" title="Laser (debit card)">Laser</a></li>

<li><a href="Mondex" title="Mondex">Mondex</a></li>

<li><a href="Rail_Travel_Card" title="Rail Travel Card">Rail Travel Card</a></li>

<li><a href="Revolution_Money" title="Revolution Money">Revolution Card</a></li>

<li><a href="Switch_(debit_card)" title="Switch (debit card)">Switch</a></li>

<li><a href="Proton_(debit_card)" title="Proton (debit card)">Proton</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Accounts</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Payment_card_number" title="Payment card number">Payment card number</a></li>

<li><a href="Card_association" title="Card association">Card association</a></li>

<li><a href="Credit_card_balance_transfer" title="Credit card balance transfer">Credit card balance transfer</a></li>

<li><a href="Credit_limit" title="Credit limit">Credit limit</a></li>

<li><a href="Installment_loan" title="Installment loan">Installment loan</a></li>

<li><a href="Revolving_account" class="mw-redirect" title="Revolving account">Revolving account</a></li>

<li><a href="Deposit_account" title="Deposit account">Deposit account</a>

<ul><li><a href="Transaction_account" title="Transaction account">Current/checking account</a></li>

<li><a href="Savings_account" title="Savings account">Savings account</a></li></ul></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Credit_card_debt" title="Credit card debt">Debt</a></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Cash_advance" class="mw-redirect" title="Cash advance">Cash advance</a></li>

<li><a href="Charge-off" title="Charge-off">Charge-off</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Credit_card_interest" title="Credit card interest">Interest</a></th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Grace_period" title="Grace period">Grace period</a></li>

<li><a href="Introductory_rate" title="Introductory rate">Introductory rate</a></li>

<li><a href="Universal_default" title="Universal default">Universal default</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Payment</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Card_not_present_transaction" class="mw-redirect" title="Card not present transaction">Card not present transaction</a></li>

<li><a href="Chargeback" title="Chargeback">Chargeback</a></li>

<li><a href="Controlled_payment_number" title="Controlled payment number">Controlled payment number</a></li>

<li><a href="Dispute_(credit_card)" title="Dispute (credit card)">Dispute</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Interchange</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Surcharge_(payment_systems)" title="Surcharge (payment systems)">Surcharge</a></li>

<li><a href="Card_scheme" title="Card scheme">Card scheme</a></li></ul>

</div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th id="Interbank_networks18" scope="row" class="navbox-group" style="width:1%">Interbank networks</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Cirrus_(interbank_network)" title="Cirrus (interbank network)">Cirrus</a></li>

<li><a href="Interac" title="Interac">Interac</a></li>

<li><a href="Pulse_(interbank_network)" title="Pulse (interbank network)">Pulse</a></li>

</div></td></tr></tbody></table><div>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Security</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul>

<li><a href="Chargeback_fraud" class="mw-redirect" title="Chargeback fraud">Chargeback fraud</a></li>

<li><a href="Credit_card_fraud" title="Credit card fraud">Credit card fraud</a></li>

<li><a href="Credit_card_hijacking" class="mw-redirect" title="Credit card hijacking">Credit card hijacking</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Technology</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Automated_teller_machine" class="mw-redirect" title="Automated teller machine">Automated teller machine</a></li>

<li><a href="Contactless_payment" title="Contactless payment">Contactless payment</a></li>

<li><a href="Credit_card_imprinter" title="Credit card imprinter">Credit card imprinter</a></li>

<li><a href="Hardware_security_module" title="Hardware security module">Hardware security module</a></li>

<li><a href="Interbank_network" title="Interbank network">Interbank network</a></li>

<li><a href="Magnetic_stripe_card" class="mw-redirect" title="Magnetic stripe card">Magnetic stripe card</a></li>

<li><a href="Payment_terminal" title="Payment terminal">Payment terminal</a></li>

<li><a href="Personal_identification_number" title="Personal identification number">Personal identification number</a></li>

<li><a href="Secure_cryptoprocessor" title="Secure cryptoprocessor">Secure cryptoprocessor</a></li>

<li><a href="Smart_card" title="Smart card">Smart card</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Banking</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Issuing_bank" title="Issuing bank">Issuing bank</a></li>

<li><a href="Acquiring_bank" title="Acquiring bank">Acquiring bank</a></li></ul>

</div></td></tr></tbody></table></div></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2025-06-25" href="https://en.wikipedia.org/wiki/?title=Card_security_code&oldid=1297309814">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>