Skip Ribbon Commands
Skip to main content
Personal
About Us Global Network

K-Contact Center Vietnam

Phone(028) 3821 8888

menu
Kasikorn Bank
  • Blog - What is the CVV/CVC Code on a Credit Card?
​​​
​​​

What is the CVV/CVC Code on a Credit Card?

What is the CVV/CVC Code on a Credit Card?

In the digital age, online payments have become an essential part of everyday life. When linking an international payment card or credit card to shop on e-commerce sites, users are often asked to enter a short number found on the back of the card. This number is called the CVV/CVC code. So, what exactly is CVV/CVC, what role does it play in protecting your account, and how can you keep this important information safe?

 

What is a CVV/CVC Code?

CVV/CVC codes are security numbers used to verify payment cards during transactions where the physical card isn’t present, especially online purchases. While often referred to together, the actual term used depends on the card issuer:
  • CVV (Card Verification Value: This term is used for payment and credit cards issued under the Visa brand.
  • • CVC (Card Verification Code): This is the term used for cards issued under the MasterCard brand.
 
Caption: The CVV/CVC code acts as a layer of verification, proving that you physically have the card in hand.

the card in hand. In essence, both CVV and CVC serve the same security function. They are part of a broader group of security codes known as CSC (Card Security Code). Depending on the card issuer, CSC codes may have different names. For example:
  • CID (Card Identification Number): Used for American Express cards.
  • CAV (Card Authentication Value): Used for JCB cards.
  • CID (Card-ID): Used for Discover cards.
  • CVN (Card Validation Number): Used for UnionPay cards.
The main purpose of these codes is to confirm that the person making the transaction actually has the physical card, helping to reduce the risk of fraud.

Understanding the Different Types of CVV/CVC Security Codes

In practice, the security codes on payment cards are divided into two main types, each serving a different purpose. These are commonly referred to as Type 1 and Type 2:
  • CVV1/CVC1: This type of security code is encrypted and stored directly on the card’s magnetic stripe (the black strip on the back) or within the card’s electronic chip. It is used for transactions where the physical card is present. For example, when swiping at a POS (Point of Sale) terminal or withdrawing cash at an ATM. The card reader scans and decodes the CVV1/CVC1 to verify that the card is authentic and issued by a legitimate bank. Users never see this code and are not required to enter it.
  • CVV2/CVC2: This is the 3- or 4-digit code that’s printed (either embossed or flat) on the surface of the card, and it’s the one we commonly use. This is the second layer of security, specifically designed for “card-not-present” transactions, mainly online or over-the-phone payments. When you enter your card information for an online purchase, entering the CVV2/CVC2 confirms that you physically possess the card.
For the remainder of this article, when we mention CVV/CVC, we’ll be referring mainly to CVV2/CVC2, the code that cardholders need to protect carefully.

The Role and Function of the CVV/CVC Code

The core function of the CVV/CVC code is to act as a security barrier against card fraud. Its importance is most evident in online transactions.

When a website asks you to enter your CVV/CVC code, it’s performing an essential verification step. Even if a fraudster manages to get your card number, name, and expiration date (for example, through a data breach), they still won’t be able to complete the transaction without the CVV/CVC code.

 
Caption: The CVV code is usually required at the final step of the online checkout process.

Another important security aspect related to this code is the PCI DSS (Payment Card Industry Data Security Standard). This is a set of security rules applied to all organizations that process, store, or transmit card information.

According to PCI DSS standards, service providers and merchants are strictly prohibited from storing CVV/CVC codes after a transaction has been authorized. This means that even if a website’s system is compromised, hackers still won’t be able to retrieve customers’ CVV/CVC codes from its database.

How to Use the CVV/CVC Code for Card Payments

Using the CVV/CVC code for payments is simple but requires caution. Typically, when you pay in person at stores or supermarkets by swiping your card through a POS (Point of Sale) machine, you don’t need to enter this code. Instead, you may be asked to enter your PIN or sign the receipt.



Caption: Modern payment technologies like Apple Pay and Google Pay help protect your original card data.

However, the CVV2/CVC2 code is a required piece of information for most online transactions — and also when you want to link your card to digital wallets or payment platforms like Apple Pay, Google Pay, or e-commerce apps.

The typical payment process using a CVV2/CVC2 code includes the following steps:
  • Step 1: Choose your payment method On the checkout page of a website or app, select Credit/Debit Card as your payment option.
  • •Step 2: and also when you want to link your card to digital wallets or payment platforms like Apple Pay, Google Pay, or e-commerce apps.
    • Cardholder Name
    • Card Number – the 16-digit number on the front of the card
    • Expiry Date
    • CVV/CVC Code – the 3-digit security code on the back
  • Step 3: Verify the transaction: After entering your card info, many payment systems will require an extra step of verification using an OTP (One-Time Password), which is sent to your registered phone number or email. This is a form of 2-Factor Authentication to enhance security.
  • Step 4: Complete the transaction: Once verification is successful, the transaction is completed and you’ll receive a confirmation message.

How to Protect Your CVV2/CVC2 Code

Because the CVV2/CVC2 code — along with your card number and expiration date — can allow someone to make unauthorized online purchases, protecting this information is absolutely critical. If this code is exposed, your account could be at serious risk.

Here are some strict but essential precautions you should take:

Never Share Your CVV/CVC Code with Anyone

This is the golden rule. Never disclose your CVV/CVC code to anyone — not over the phone, via email, text message, or any other method. Keep in mind that bank staff, financial institutions, or official agencies will never ask you for this code. Any such request is a red flag for phishing or scams designed to steal your financial information.

Only Shop on Secure Websites

When shopping online, make sure you're making transactions only on trusted websites. A secure website typically starts with “https://” and shows a padlock icon in the browser’s address bar. The HTTPS protocol encrypts your data — including card details — before it’s sent, making it difficult for hackers to intercept.
It’s also a good idea to use well-known, reputable websites or those that integrate with trusted third-party payment gateways like PayPal, Apple Pay, or Google Pay. These services add an extra layer of security and let you avoid entering your card info on multiple different sites.

Cover the CVV2/CVC2 Code on Your Card When Not in Use

To reduce the risk of someone copying your card info, especially if your card is lost or seen by others, a simple yet effective method is to cover the CVV2/CVC2 code on the back. You can use a small sticker or piece of tape to hide the 3-digit code. Before doing this, make sure you’ve either memorized the code or stored it securely somewhere only you can access. Some cautious users even choose to memorize the code and scratch it off the card entirely for maximum protection.

Monitor Your Account Regularly

Enable transaction notifications via SMS or your mobile banking app. This way, you’ll be alerted immediately whenever a transaction occurs. These alerts help you quickly detect any suspicious activity and allow you to contact your bank right away to resolve the issue.

Use Virtual Cards and Modern Payment Technologies

Many banks now offer virtual cards (also called digital-only cards). These exist only in your banking app, but they come with all the necessary details: card number, expiration date, and CVV/CVC code. You can easily lock/unlock the card, set spending limits, and use it for online purchases, all without putting your physical card at risk.
Additionally, contactless payment methods like Google Pay, Apple Pay, and Samsung Pay use a technology called tokenization. When you add your card to these digital wallets, your real card data is replaced with a unique token. During a transaction, only the token is shared — keeping your actual card information safe from theft.

Protecting your finances starts with safe and secure transactions.

Explore the advanced credit and payment card solutions from KASIKORN Bank Vietnam (KBank) to spend with confidence and manage your money more effectively.