Quick answer

Razorpay does not ship a separate CVV test tool. Test mode handles it for you: every test card in the Razorpay test card list comes with a fixed CVV value, and the standard success card 4111 1111 1111 1111 pairs with CVV 123. In test mode no bank is contacted, no real card is charged, and no money moves. You are testing your own checkout integration, not a live card.

more on this topic

What test mode does with the CVV field

Razorpay Checkout validates the CVV format before it sends anything to the payments API. Visa, Mastercard and RuPay cards accept 3 digits. American Express accepts 4. A malformed value stops at the client side, so you can check your error handling without an authorization attempt. When the format passes, the test simulator reads the test card number and returns the outcome tied to that number. The CVV has to match the value Razorpay publishes for that card, or the simulator returns a CVV failure result instead of a success.

razorpay cvv test api

Before you start

• A Razorpay account with test mode available
• Test API keys that start with rzp_test_
• Access to the test cards list in the dashboard
• Your production checkout code loaded with the test keys

How to test CVV handling in Razorpay

1. Log in to the Razorpay dashboard and switch the mode toggle to Test.
2. Open the test cards list for your account and copy one card number with its paired CVV.
3. Load your checkout page using the test API key instead of the live key.
4. Enter the test card number in the card field.
5. Enter the CVV that Razorpay pairs with that number.
6. Enter an expiry date in the future.
7. Submit the payment and confirm it appears as captured or authorized in the test dashboard.
8. Run the same flow again with a wrong CVV, such as 000, and confirm your code shows the failure to the customer.
9. Repeat with a 2-digit and a 5-digit value to verify your client-side format checks.
10. Repeat with an American Express test card and a 4-digit CVV to check that branch of your logic.

Failure cases worth covering

The test card list includes numbers that force specific results, such as insufficient funds, declined cards and CVV mismatches. Use those to confirm that your order stays unpaid, that your webhook handler records the failure, and that a retry does not create a duplicate charge in your own database. Test mode returns these results without any connection to a real issuer.

razorpay cvv check

Rules that still apply in live mode

CVV data is sensitive authentication data under PCI DSS. You may pass it to your gateway, but you may not store it after authorization, and you may not write it to logs, databases or support tickets. Razorpay's live gateway performs the real CVV check with the issuing bank. Test mode only mimics the response, so a passing test run is not evidence that your live verification works.

Razorpay Credit Card CVV Validation Test: Guide

What not to do

Never enter a real card number in test mode, and never treat test card data as a way to validate a live card. Test numbers are public and are rejected by live gateways. If you need to verify a live card flow, use your own card with a small amount, then refund it.