Acronym for Card Security Code also known as Card Validation Code or Value, refers to
either: (1) magnetic-stripe data, or (2) printed security features.
1. Data element on a card's magnetic stripe that uses secure cryptographic processes to
protect data integrity on the stripe, and reveals any alteration or counterfeiting.
Referred to as CAV, CVC, CVV, or CSC depending on payment card brand. The
following list provides the terms for each card brand:
• CAV - Card Authentication Value (JCB payment cards)
• PAN CVC - Card Validation Code (MasterCard payment cards)
• CVV - Card Verification Value (Visa and Discover payment cards)
• CSC - Card Security Code (American Express)
2. For Discover, JCB, MasterCard, and Visa payment cards, the second type of card
verification value or code is the rightmost three-digit value printed in the signature
panel area on the back of the card. For American Express payment cards, the code is
a four-digit number printed above the PAN on the face of the payment cards. The code
is uniquely associated with each individual piece of plastic and ties the PAN to the
plastic. The following list provides the terms for each card brand:
• CID - Card Identification Number (American Express and Discover payment cards)
• CAV2 - Card Authentication Value 2 (JCB payment cards)
• PAN CVC2 - Card Validation Code 2 (MasterCard payment cards)
• CVV2 - Card Verification Value 2 (Visa payment cards)
A card enabling the holder to have his purchases directly charged to funds on his
account at a deposit-taking institution (may sometimes be combined with another
function, e.g. that of a cash card or cheque guarantee card)
For the purposes of the PCI DSS, a merchant is defined as any entity that accepts payment
cards bearing the logos of any of the five members of PCI SSC (American Express, Discover,
JCB, MasterCard or Visa) as payment for goods and/or services.
Note that a merchant that accepts payment cards as payment for goods and/or services
can also be a service provider, if the services sold result in storing, processing, or
transmitting cardholder data on behalf of other merchants or service providers. For
example, an ISP is a merchant that accepts payment cards for monthly billing, but also is
a service provider if it hosts merchants as customers.