4 ms·
In addition to not being on the magnetic stripe, merchants are also not allowed to save it, so if you steal a merchant's database of stored CCs, you don't get t
by _delirium 10y ago
In addition to not being on the magnetic stripe, merchants are also not allowed to save it, so if you steal a merchant's database of stored CCs, you don't get the CVVs.
- rlucas 10y agoThat probably works approximately as well as how merchants weren't allowed to store the cc number itself.
- theWatcher37 10y agoRequiring CVV's for online transactions invalidates this security feature.
- pjc50 10y agoNo, that's what the CVV is for. It's only for card-not-present online transactions. (Yes, there are probably a lot of retailers breaching their PCI-DSS compliance by storing the CVV, but the point is they're not supposed to. Until we can do chip-and-pin or similar for online purchases, e.g. Apple Pay, the problem remains)