A card verification test is a small check a merchant or payment gateway runs to confirm that a payment card is open, valid, and matched to the person using it. It is not a sale. Depending on the method, the test returns a pass or fail result, places a short hold on the card, or sends the customer to their bank for approval.

card verification value test

What is a card verification test?

Card verification covers a group of checks that run during authorization, the moment between checkout and settlement. Processors use them for two reasons: they cut fraud from stolen card numbers, and they cut chargebacks from orders the real cardholder never placed.

card verification value test

A test result does not prove the buyer is honest. It only shows that the card data matches what the issuing bank holds. Merchants combine several checks to lower risk.

related article

The main types of card verification test

Card security code check

The card security code is the three-digit number on the back of Visa, Mastercard, and Discover cards, or the four-digit number on the front of American Express cards. The merchant sends the code to the issuer during authorization. A mismatch returns a specific response code that flags the order for review or decline.

Card Verification Number Test: Safe CVV Validation Guide

Address verification service (AVS)

AVS compares the billing address and ZIP code the customer typed at checkout with the records the issuer holds. The processor returns a short result, such as a full match, a ZIP-only match, or no match. US merchants lean on AVS because it is cheap, fast, and built into most gateways.

Zero-dollar or small-amount authorization

Some businesses place a hold of $0.00 or $1 on the card to prove the account is active. The hold drops off or is reversed once verification ends. App stores, subscription services, hotels, and car rental desks use this method before granting access.

3-D Secure authentication

3-D Secure adds a bank step, such as a one-time code or a push approval inside the bank app. The issuer, not the merchant, decides the outcome. A failed step stops the transaction before any authorization is created.

Why is there a small charge on my statement?

A pending authorization is a hold, not a charge. The bank sets aside the amount, and the merchant either voids it or lets it expire. Most holds fall off within one to five business days, though hotels and gas stations may hold more than the final bill to cover incidentals.

If a hold becomes a real charge you did not approve, call the number on the back of your card. Under the Truth in Lending Act you must notify the creditor within 60 days of the statement date to protect your dispute rights.

How do merchants run a card verification test?

1. Collect the card number, expiry date, security code, and billing address at checkout.
2. Send the data to the payment gateway over an encrypted connection.
3. The gateway passes the request to the card network and the issuing bank.
4. The issuer returns an authorization response with AVS and security code result codes.
5. The merchant compares those codes against its own rules and accepts, reviews, or declines the order.
6. Void or reverse the test authorization if the order is cancelled or abandoned.

Step five is where most fraud rules live. A merchant may accept a ZIP-only AVS match on a small order and decline the same result on a $2,000 order.

What makes a card verification test fail?

• Wrong billing ZIP code or a recent move the issuer has not recorded yet.
• Typed security code that does not match the digits on the card.
• Expired card or a reissued card with a new number.
• A card that is not enabled for online or international purchases.
• Insufficient funds for the hold amount, even when the final charge would be lower.
• Name mismatch between the cardholder record and the billing details.
• Issuer blocks the transaction as out of pattern for that account.

Card verification test vs. a real charge

• Amount: a test is $0.00 or a token hold, while a charge equals the order total.
• Duration: a test clears in days, while a charge stays until refunded.
• Purpose: a test confirms the account, while a charge transfers money.
• Accounting: a test never appears on a monthly invoice, while a charge does.

Rules that apply to card verification

The PCI Data Security Standard bans storing the card security code after authorization, even in encrypted form. Merchants may keep the card number only in a truncated or tokenized format. This rule exists so a data breach cannot expose codes that verify a card.

Card network rules also require clear disclosure before any hold. A merchant that runs a test without telling the customer risks a chargeback and a fine from its acquirer. Cardholders who spot an unexplained hold should dispute it in writing.

Frequently asked questions

Does a card verification test cost money?

In most cases, no. A zero-dollar or $1 authorization is a hold, and the amount returns to your available balance when it expires. Some processors charge the merchant a small authorization fee, not the cardholder.

How long does a card verification test stay on my statement?

Pending holds clear in one to five business days for most merchants. Hotels, fuel pumps, and rental companies sometimes hold funds for up to two weeks, since the final amount is unknown at check-in.

Can a card verification test affect my credit score?

No. Authorizations and holds are not reported to credit bureaus. Only an unpaid debt that goes to collections can reach your credit file.

Who is allowed to run a card verification test?

Only the merchant you are paying, through a licensed payment processor, may run a test on your card. A third party with no transaction behind the request is not allowed to test card numbers, and doing so violates card network rules and, in many cases, federal law.

What should I do if a test fails on my own card?

Check the billing address on file, retype the security code, and confirm the card is open for online use. If the decline repeats, call the issuer. Banks can see the exact response code and explain the block.