Your cart is empty
Shop now
+

Test Cases for CVV Field: 30 QA Checks

Explore

Test Cases for CVV Field: 30 QA Checks

We guarantee gift cards direct to your inbox immediately.
Shop Now!

Let's Work Together

Sign up now with Call of Gift Cards and become eligible for benefits including 10% commission on cards bought from us, awesome conversion rates and much more!
Find Out More

Digital Gift Cards

The market for digital goods and services are growing rapidly. One of the true shifts in online behaviour is the switch from traditional direct online payments and purchase to wallets and gift cards. ...read more
+

Digital Gift Cards

The market for digital goods and services are growing rapidly. One of the true shifts in online behaviour is the switch from traditional direct online payments and purchase to wallets and gift cards. We invite you to start your own online business as a partner of ours. By signing up as a partner you’ll get access to one of the largest gift card databases in the world. All you need to focus on is to market your website and products. Gift cards are quickly outperforming traditional gifts, as they give the recipient the choice to pick their own present from a variety of options. The range of e-gift cards available on the Call of Gift Cards's partner sites includes popular categories such as restaurants, games, travel and fashion.

Gift Vouchers

Traditional gift vouchers are printed paper gifts available in set values that can be spent in specific stores. Open-loop, semi-open loop, and closed-loop are often terms used when referring to gift v...read more
+

Gift Vouchers

Traditional gift vouchers are printed paper gifts available in set values that can be spent in specific stores. Open-loop, semi-open loop, and closed-loop are often terms used when referring to gift vouchers. All gift cards sold via our partners’ websites are closed loop. This means that the gift card can only be spent at a single brand location, for example, an Xbox voucher can only be spent at Xbox etc.

Our Gift Cards

Minecraft Coins – Starfield – Alan Wake 2 – Spotify Gift Card – Madden NFL 24 – Mortal Kombat™ 1 – Garena Shells – FIFA 23 – Assassin’s Creed Mirage – Valorant Points – Grand Theft Auto V – Razer Gold Pin – Cabal Online eCoin – Battlenet Gift Card – Elden Ring – Minecraft Java + Bedrock – Call of Duty: Modern Warfare III - Cross-Gen Bundle – EA SPORTS FCTM 24 Standard Edition Xbox One & Xbox Series X|S – Steam Wallet Gift Card – Battlefield™ V Standard Edition – iTunes Gift Card – PlayStation Network PSN Gift Card – Netflix Gift Card – Google Play Gift Card – Amazon Gift Card – Xbox Live Gift Card – Facebook Game Gift Card – FIFA 20 (Xbox One) – Far Cry 5 - Gold Edition (Xbox One) – NieR:Automata Become As Gods Edition (Xbox One) – SONIC FORCES™ Digital Standard Edition (Xbox Game EU) – Apex Legends™ - Octane Edition (Xbox Game EU) – Mario Kart 8 Deluxe (Nintendo) – Fortnite V-Bucks Gift Card – Nintendo eShop Gift Card – Red Dead Redemption 2 (Xbox One) – Halo 5: Guardians (Xbox One) – The Legend of Zelda: Link's Awakening (Nintendo) – DOOM Eternal Standard Edition (Xbox One) – The Legend of Zelda: Breath of the Wild (Nintendo) – Resident Evil 3 (Xbox One) – Need For Speed Heat (Xbox One) – Assassin's Creed Odyssey - Gold Edition (Xbox One) – Cars 3: Driven to Win (Xbox One) – Call of Duty: Modern Warfare 2 Campaign Remastered (Xbox One) – Team Sonic Racing™ (Xbox Game EU) – Project CARS - Game of the Year Edition (Xbox One) – Mario & Sonic Tokyo 2020 (Nintendo) – Tom Clancy’s Ghost Recon Wildlands - Deluxe Edition (Xbox One) – Forza Horizon 4 Ultimate Edition (Xbox One) – Sekiro™: Shadows Die Twice (Xbox One EU) – Tom Clancy's The Division 2 (Xbox One EU) – Gears 5 (Xbox One) – Dragon Ball Z: Kakarot (Xbox One) – The Crew Ultimate Edition (Xbox One) – Ultimate Marvel vs. Capcom 3 (Xbox One) – Pokemon Let's Go Eevee! (Nintendo) – Sonic Mania (Xbox Game EU) – UFC 3 - Deluxe Edition (Xbox One) – Mass Effect Andromeda - Standard Recruit Edition (Xbox One) – BioShock: The Collection (Xbox One) – A Way Out (Xbox One) – Borderlands 3 (Xbox One) – Overcooked! 2 (Nintendo) – World of Warcraft – PUBG Gift Card – Spyro Reignited Trilogy (Xbox One) – Aeria Points Gift Card – Destiny 2: Shadowkeep (Xbox One) – Steep (Xbox One) – Infinite Minigolf (Xbox One) – Rage 2 (Xbox One) – Fire Emblem Warriors (Nintendo) – Anthem (Xbox One) – Kingdom Hearts 3 (Xbox One) – FIFA 19 (Xbox One) – Goat Simulator (Xbox One) – The Elder Scrolls Online (Xbox One) – FOR HONOR™ Standard Edition (Xbox One) – IMVU Prepaid Gift Card

Test Cases for CVV Field: 30 QA Checks

Answer

CVV field test cases check five items: digit count, character set, keyboard input, masking, and storage rules. Visa, Mastercard, and Discover use 3 digits. American Express uses 4 digits. The field takes digits 0 through 9 and nothing else. PCI DSS forbids storing the value after authorization.

cvv test cases for qa

Format rules to test

  • 3 digits: Visa CVV2, Mastercard CVC2, Discover CID.
  • 4 digits: American Express CID, printed on the front of the card.
  • Numeric keys 0 through 9.
  • No Luhn check. The CVV is not part of the primary account number, so checksum validation does not apply.

Valid input cases

  1. Enter 000 on a 3-digit brand. Payment succeeds on a sandbox gateway.
  2. Enter 999 on a 3-digit brand. Payment succeeds.
  3. Enter 0000 on American Express. Payment succeeds.
  4. Paste a 3-digit value from the clipboard. The field keeps all 3 digits.
  5. Submit a value with leading zeros, for example 007. The field holds 3 characters, not 2.

Invalid input cases

  1. Empty field on submit. Expect a required-field message and a blocked submit.
  2. Two digits. Expect a length error.
  3. Four digits on a 3-digit brand. Expect a length error.
  4. Letters, for example abc. Expect rejection.
  5. Mixed input 12a. Expect rejection.
  6. Symbols: space, hyphen, slash, comma. Expect rejection or a silent strip, per spec.
  7. Unicode digits and full-width characters. Expect rejection.
  8. Negative sign -123. Expect rejection.
  9. Decimal 12.3. Expect rejection.
  10. Padded value with spaces. Define the behavior: strip or reject. Test both paths.

Boundary and edge cases

  • Paste 20 digits. The field caps input at 3 or 4 characters.
  • Markup payload <script>alert(1)</script>. Expect the value to be stored as text.
  • SQL payload 1' OR '1'='1. Expect rejection.
  • Resubmit the same form in one second. Expect one charge.
  • Browser autofill and card-scan widgets. Check the value lands in the CVV field and not the expiry field.

Security and PCI DSS cases

  • CVV does not appear in application logs or server logs.
  • CVV does not persist in the database, cache, or session store after authorization.
  • CVV is absent from API responses and webhook payloads.
  • CVV is masked after entry, or the field clears on submit.
  • Transport uses TLS. Confirm the value is not sent over plain HTTP.

Record each case with an ID, a precondition, steps, and one expected result. Store the CVV only in memory for the life of the authorization request.

more on this topic

What's New

cvv test cases for qa

A practical guide to CVV test cases for QA: format rules, brand-specific lengths, paste and error handling, and sandbox-safe fixtures.

What's New

Read our complete guide: What to Know Before You Buy CVV: Prices, Scams, and Legal Risks