What is CVV2/CVC2/CID?
CVV2 (Visa's Card Validation Value), CVC2 (MasterCard's Card Verification Code), and
CID (American Express' and Discover's Card Identification) are fraud prevention services
for card-not-present environments or non-swiped transactions. During a transaction, the 3-
or 4-digit security code that you manually enter into PCCharge is compared to what is on
record for that credit card.
PCCharge receives the CVV2/CVC2/CID response and displays it after the transaction is
processed. You can either make business decisions for individual transactions, or you can
use the Card Verification Setup window and configure PCCharge to automatically filter
out those transactions whose CVV2/CVC2/CID responses are unacceptable to you.
For Visa, MasterCard, and Discover credit cards, look on the back of the card. The last
three digits of the string of numbers below the magnetic strip are the numbers you would
type into PCCharge during a transaction For American Express credit cards, look on the
front of the card. The four-digit number above the account number is what you would type
into PCCharge during a transaction.
CVV2/CVC2/CID Response Descriptions
• Match -- CVV2/CVC2/CID match.
• No Match -- CVV2/CVC2/CID mismatch.
• Not Processed -- Either the expiration date was not provided, or the card does not
have a CVV2/CVC2/CID value.
• Not Present on Card -- Issuer indicates that the CVV2/CVC2/CID data should be
present on the card, but the merchant has indicated that the CVV2/CVC2/CID data is
not present on the card.
• Issuer Not Certified -- Issuer has not certified for CVV2/CVC2/CID or issuer has not
provided Visa/MasterCard with the CVV2/CVC2/CID encryption keys.
• Server Did Not Respond -- System is unavailable or timed out.
CVV2/CVC2/CID Usage Scenarios
The following usage scenarios will give you examples that you can use as a basis when
configuring your own Card Verification Setup window.
CVV2/CVC2/CID Usage Scenario #1
1. In this example, all the options in the Card Verification Setup window HAVE NOT
been checked.
2. You manually enter (not using a card reader) a $10 credit card sale transaction into
PCCharge, including the incorrect Card Verification Value.
70