4 ms·
My understanding is that the CVV2 is printed on the back of the card for phone and online orders and the CVV1 encoded on the strip for in person orders when the
by jschuur 16y ago
My understanding is that the CVV2 is printed on the back of the card for phone and online orders and the CVV1 encoded on the strip for in person orders when the card is swiped.
I'm not sure what the security rationale is for 2 distinct codes. Maybe the CVV1 value is designed to prevent thieves from making swipable cards when they only have the credit card number and didn't clone a card (e.g. they obtained the card number from a rogue or compromised online store).
- metageek 16y agoThe two codes are probably because the banks distinguish between merchants that take cards online and those that only accept physical cards; the latter get charged less, because they're a lower risk. (At least, that used to be the case.) With two codes, the banks can require physical-only merchants to include the CVV2.