Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Unless you specifically ask for a new number, not at all. What's even worse it that the cvv is changing (checksum with the date and card number) but the transaction can go thru without cvv submission in most cases.


what's the point of a cvv then? This seems rather odd


It's up to the merchant; since in the event of fraud they'll be the ones who get hit with the chargeback, it's up to them to decide if they want to require that extra safety or not.


For a recurring subscription, the cvv was verified at the beginning. Cvv is for verifying the card security, not vendor account management.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: