Dummy CVV vs real CVV: the short answer

A dummy CVV is a placeholder code, usually three or four digits, used to stand in for a card verification value during software testing. A real CVV is the security code printed on a live payment card and tied to a funded cardholder account. Pick the dummy CVV for any test, demo, or sandbox checkout, and never handle a real CVV you do not own.

safe dummy cvv for development

How the two compare

• Dummy CVV: public, free, reusable, published by payment processors for developers.
• Real CVV: private, tied to one card, valid only while that card is active.
• Legal status: dummy values are safe to paste anywhere; buying or selling real card data is a federal crime in the US.
• Lifespan: test values never expire, while a real code dies the moment the card is replaced or blocked.

What is a dummy CVV?

A dummy CVV is a number that a processor agrees to treat as valid inside its testing environment. It triggers an approval or a specific decline so developers can check error handling without touching a real account. Stripe, PayPal, Adyen, and most gateways publish these values in their public developer docs.

read more

What is a real CVV?

The real code is generated by the issuing bank and printed on the card, often on the back for Visa and Mastercard and on the front for American Express. It exists to prove the buyer physically holds the card during a card-not-present transaction. PCI DSS forbids storing it after authorization, even by the merchant that just processed the sale.

related article

Which one should you pick?

Choose a dummy CVV for every test, tutorial, screenshot, and integration check. Test values cost nothing, cannot harm a cardholder, and keep your project inside the rules. The only time a real CVV legitimately appears is when the cardholder types it into a checkout page they control.

test credit card dummy cvv

Where do safe test CVV values come from?

1. Your payment processor's sandbox documentation, which lists approved test card numbers with matching CVVs.
2. Your own staging environment, where your team defines mock card data internally.
3. Open-source test fixtures maintained by framework communities.

Why you cannot buy a real CVV

Card verification values are issued by banks and never legitimately traded between strangers. Trafficking in card credentials is prosecuted under 18 U.S.C. 1029, and storefronts that advertise CVV dumps are usually either scams that keep your payment or law-enforcement stings. A working real CVV is not a product; it is stolen property with a felony attached.