The short answer: a Stripe test CVV number is a placeholder value you type into a sandbox payment form, and for the standard success card the exact digits do not matter. Enter 4242 4242 4242 4242 with any three digit CVC and any future expiry date, and the test charge completes. The digits change the result only when you choose a test card that Stripe has wired to return a specific card verification value (CVC) check outcome, such as a failed CVC check. Every one of these values is fake, issued for developers, and mapped to no live account.

stripe cvv test

What the CVV field does in test mode

In live mode, the CVC is the three or four digit code printed on the card, and the issuer compares it against its records. In test mode there is no issuer. Stripe reads the card number you submit, looks it up in a table of documented test cards, and returns the response that card is programmed to produce. The CVC you type is stored with the test token and surfaced in the API response, but it rarely drives the outcome on its own.

stripe cvv checker

When a payment is created, the charge or PaymentIntent includes a cvc_check field. Valid values are pass, fail, unavailable, and unchecked. Testing all four states before launch is the point of using test cards at all.

related article

How to choose a test CVV

Work backward from the behavior you need to verify, not from the code itself.

more on this topic

• Successful payment, CVC passes: use the default success card and any CVC. This is the baseline for checkout flow testing.
• Card declined for unrelated reasons: use a generic decline card. The CVC you enter is irrelevant because the authorization is refused before verification matters.
• CVC check fails: use the specific test card Stripe documents for a failed CVC check, then confirm the cvc_check value is fail in your dashboard or API response. Entering a wrong code on the success card will not produce this result.
• CVC unavailable: test the path your code takes when the issuer cannot verify the code, which matters for stored credential and recurring billing logic.
• American Express style cards: the CVC field accepts four digits rather than three, so check that your form does not truncate input.

Parameter bands to keep in mind

• CVC length: 3 digits for Visa, Mastercard, and Discover, 4 digits for American Express.
• Expiry: any future date passes on test cards. Past dates trigger an expired card decline.
• Card number length: 15 digits for American Express, 16 for most others.
• Postal code and address fields: separate test cards exist for AVS failures, so do not assume a CVC failure card also fails the address check.

Common pitfalls

• Entering a real card number in test mode. Never do this, and never store live card data in a development database.
• Expecting a decline card to fail because of the CVC. Declines are triggered by the card number, not the code you type.
• Client side validation that rejects short or unusual CVC values, which blocks you from reaching the failure states you need to test.
• Assuming a passing sandbox test proves the live integration is correct. Test mode skips issuer behavior, 3D Secure routing, and most risk checks.
• Hard coding a single test card into automated tests and never exercising the failure paths.

Compliance note

Real CVV data belongs to the cardholder and the issuer. Acquiring, selling, or using someone else's card verification value without authorization is card not present fraud, and it violates PCI DSS requirements for protecting sensitive authentication data as well as the operating rules of every card network. There is no legitimate market for live CVV data, which is exactly why test values exist: they let you build and verify a payment integration without touching anyone's real account.

FAQ

Does the CVV matter for the standard 4242 test card?

No. Any three digit value works, and the charge succeeds as long as the expiry date is in the future.

How do I simulate a failed CVC check?

Use the test card Stripe publishes for that behavior, then read the cvc_check field in the response to confirm the result is fail.

Can I reuse a test CVV across cards?

Yes. Test codes carry no meaning of their own, so the same three digits work across different test card numbers.

Do test cards work in live mode?

No. Test numbers are rejected in live mode, and live card numbers should never be entered in test mode.