CVV2/CVC2 CID Response Codes
These are the expected responses from Elavon’s STP test host pre-programmed responses.
Visa
Visa STP
Expected Visa CVV2 value length is 3 digits. Any CVV2 value beginning with 2 zeros or contains spaces will return a “No Match” response.
| CVV2 Indicator | CVV2 Last Digit | CVV2 Response | Results |
|---|---|---|---|
| 0 | Bypass | (Blank) | No response given |
| 0 | Bypass | S | Visa EMV test accounts MAY return “S” |
| 1 | 0 | M | Match |
| 1 | 1 | M | Match |
| 1 | 2 | N | No Match |
| 1 | 3 | M | Match |
| 1 | 4 | P | Not Processed |
| 1 | 5 | U | Issuer not certified/registered to process |
| 1 | 6 | N | No Match |
| 1 | 7 | M | Match |
| 1 | 8 | N | No Match |
| 1 | 9 | M | Match |
| 2 | Illegible | (Blank) | No response given |
| 2 | Illegible | S | Visa EMV test accounts MAY return “S” |
| 9 | Not Present | (Blank) | No response given |
| 9 | Not Present | S | Visa EMV test accounts MAY return “S” |
Visa BACKUP switch
Expected responses when BACKUP switch is used - Approval Code = CVI. The last digit controls the response.
| CVV2 Indicator | Indicator Desc. | Digit | Response |
|---|---|---|---|
| 0 | Bypassed | N/A | (BLANK) |
| 1 | Present | xx0 | M |
| 1 | Present | xx1 | M |
| 1 | Present | xx2 | N |
| 1 | Present | xx3 | U |
| 1 | Present | xx4 | P |
| 1 | Present | xx5 | M |
| 1 | Present | xx6 | N |
| 1 | Present | xx7 | M |
| 1 | Present | xx8 | N |
| 1 | Present | xx9 | M |
| 1 | Present | xx* | N |
| 2 | Illegible | N/A | P |
| 9 | Not Present | N/A | S |
note
Visa no longer allows processing of CVV2 values on card present requests. The CVV2 data will be dropped from all chip, tap, swipe, or keyed card present requests. No CVV2 response will be returned: Response = (blank).
MasterCard
MasterCard STP
Expected Visa CVV2 value length is 3 digits. Any CVV2 value beginning with 2 zeros or contains spaces will return a “No Match” response.
| CVV2 Indicator | CVV2 Last Digit | CVV2 Response | Results |
|---|---|---|---|
| 0 | Bypass | (Blank) | No response given |
| 1 | 0 | M | Match |
| 1 | 1 | M | Match |
| 1 | 2 | N | No Match |
| 1 | 3 | M | Match |
| 1 | 4 | P | Not Processed |
| 1 | 5 | U | Issuer not certified/registered to process |
| 1 | 6 | N | No Match |
| 1 | 7 | M | Match |
| 1 | 8 | N | No Match |
| 1 | 9 | M | Match |
| 2 | Illegible | (Blank) | No response given |
| 9 | Not Present | (Blank) | No response given |
MasterCard BACKUP switch
Expected responses when BACKUP switch is used - Approval Code = CVI.
The last digit controls the response.
| CVV2 Indicator | Indicator Desc. | Digit | Response |
|---|---|---|---|
| 0 | Bypassed | N/A | (BLANK) |
| 1 | Present | xx0 | M |
| 1 | Present | xx1 | M |
| 1 | Present | xx2 | N |
| 1 | Present | xx3 | U |
| 1 | Present | xx4 | P |
| 1 | Present | xx5 | M |
| 1 | Present | xx6 | N |
| 1 | Present | xx7 | M |
| 1 | Present | xx8 | N |
| 1 | Present | xx9 | M |
| 1 | Present | xx* | M |
| 2 | Illegible | N/A | (BLANK) |
| 9 | Not Present | N/A | (BLANK) |
AMEX
AMEX STP
Expected AMEX CID value length is 4 digits. Any CVV2 (CID) value beginning with 3 zeros or contains 2 or more spaces will return a “No Match” response.
| CVV2 Indicator | CVV2 Last Digit | CVV2 Response | Results |
|---|---|---|---|
| 0 | Bypass | (Blank) | No response given |
| 1 | 0 | M | Match |
| 1 | 1 | M | Match |
| 1 | 2 | N | No Match |
| 1 | 3 | M | Match |
| 1 | 4 | P | Not Processed |
| 1 | 5 | (Blank) | No response given |
| 1 | 6 | N | No Match |
| 1 | 7 | M | Match |
| 1 | 8 | N | No Match |
| 1 | 9 | M | Match |
| 2 | Illegible | (Blank) | No response given |
| 9 | Not Present | (Blank) | No response given |
AMEX BACKUP switch
Expected responses when BACKUP switch is used - Approval Code = CVI. The last digit controls the response.
Keyed Transactions only - NO CID response currently on Swiped or Proximity entry
| CVV2 Indicator | Indicator Desc. | Digit | Response |
|---|---|---|---|
| 0 | Bypassed | N/A | (BLANK) |
| 1 | Present | xx0 | M |
| 1 | Present | xx1 | M |
| 1 | Present | xx2 | N |
| 1 | Present | xx3 | P |
| 1 | Present | xx4 | (BLANK) |
| 1 | Present | xx5 | M |
| 1 | Present | xx6 | N |
| 1 | Present | xx7 | M |
| 1 | Present | xx8 | N |
| 1 | Present | xx9 | M |
| 1 | Present | xx* | M |
| 2 | Illegible | N/A | (BLANK) |
| 9 | Not Present | N/A | (BLANK) |
Discover
Discover STP
Expected Discover CID value length is 3 digits. Any CVV2 (CID) value beginning with 2 zeros or contains 2 or more spaces will return a “No Match” response.
| CVV2 Indicator | CVV2 Last Digit | CVV2 Response | Results |
|---|---|---|---|
| 0 | Bypass | S | MAY return “S” or have No response given |
| 1 | 0 | M | Match |
| 1 | 1 | M | Match |
| 1 | 2 | N | No Match |
| 1 | 3 | M | Match |
| 1 | 4 | P | Not Processed |
| 1 | 5 | U | Issuer not certified/registered to process |
| 1 | 6 | N | No Match |
| 1 | 7 | M | Match |
| 1 | 8 | N | No Match |
| 1 | 9 | M | Match |
| 2 | Illegible | S | MAY return “S” or have No response given |
| 9 | Not Present | S | MAY return “S” or have No response given |
Discover BACKUP switch
Expected responses when BACKUP switch is used - Approval Code = CVI.
The last digit controls the response.
| CVV2 Indicator | Indicator Desc. | Digit | Response |
|---|---|---|---|
| 0 | Bypassed | N/A | (BLANK) |
| 1 | Present | xx0 | M |
| 1 | Present | xx1 | M |
| 1 | Present | xx2 | N |
| 1 | Present | xx3 | U |
| 1 | Present | xx4 | P |
| 1 | Present | xx5 | M |
| 1 | Present | xx6 | N |
| 1 | Present | xx7 | M |
| 1 | Present | xx8 | N |
| 1 | Present | xx9 | M |
| 1 | Present | xx* | M |
| 2 | Illegible | N/A | (BLANK) |
| 9 | Not Present | N/A | S |
Union Pay BACKUP switch
Expected responses when BACKUP switch is used - Approval Code = CVI.
The third digit controls the response.
| CVV2 Indicator | Indicator Desc. | Digit | Response |
|---|---|---|---|
| 0 | Bypassed | N/A | (BLANK) |
| 1 | Present | xx0 | M |
| 1 | Present | xx1 | M |
| 1 | Present | xx2 | N |
| 1 | Present | xx3 | U |
| 1 | Present | xx4 | P |
| 1 | Present | xx5 | M |
| 1 | Present | xx6 | N |
| 1 | Present | xx7 | M |
| 1 | Present | xx8 | N |
| 1 | Present | xx9 | M |
| 1 | Present | xx* | M |
| 2 | Illegible | N/A | (BLANK) |
| 9 | Not Present | N/A | (BLANK) |
Response value descriptions:
M = Match
N = No match
P = Not Processed
S = Issuer indicates that CVV2 data should be present on the card, but the merchant has indicated that the CVV2 data is not present on the card.
U = Issuer not certified or registered to process card verification
note
Due to format requirements in different specifications, the descriptor of “Last Digit” vs. “Third Digit” is used to define how developers and testers can control responses within the test environment – this does NOT reflect card issuer response controls in production – Test Environment response control only.
Presentment of ANY alpha characters in the CVV2 values results in a test simulator response = P – Not processed.