CVV-Less Card Payments

CVV-less payments allow customers to complete transactions using saved card details without entering the Card Verification Value (CVV). This enhances the user experience by streamlining the checkout process while maintaining transaction security through tokenisation and other protective measures.

CVV-less payments support tokenised transactions using Visa, Mastercard, RuPay, American Express (Amex), and Diners Club cards.

CVV-less boosts success rates by approximately 5%.

CVV-less experience on Cashfree Checkout

Benefits and security considerations

• Broader network support: Available across Visa, Mastercard, Amex, RuPay, and Diners networks.

• Higher conversion and success rates: CVV-less payments for tokenised cards typically improve success rates by approximately 5%.

• Enabled from day 0: Enabled by default across all networks for tokenised cards from day 0.

• CVV-less indicator: Saved cards display a No CVV Required label during checkout on the Cashfree Checkout.

  

• Faster checkout and reduced friction: Customers do not need to remember or enter CVV details for saved cards.

• Secure and compliant: Transactions are protected by tokenisation, OTP validation, 3D Secure authentication, and real-time risk checks. Fully compliant with PCI DSS, RBI regulations, and card network guidelines.

Using CVV-less payments with Cashfree payment gateway

CVV-less payments integrate seamlessly with Cashfree’s infrastructure. Depending on your integration method, minimal changes may be required.

For merchants on seamless API integration

For saved card transactions across supported networks, the card_cvv field is optional by default. To enable CVV-less payments, exclude this field from your payment request.

Sample Order Pay API request

For external card tokens

curl --request POST \
  --url https://sandbox.cashfree.com/pg/orders/sessions \
  --header 'Content-Type: application/json' \
  --header 'x-api-version: <x-api-version>' \
  --data '{
  "payment_session_id": "session__CvcEmNKDkmERQrxnx39ibhJ3Ii034pjc8ZVxf3qcgEXCWlgDDlHRgz2XYZCqpajDQSXMMtCusPgOIxYP2LZx0-05p39gC2Vgmq1RAj--gcn",
  "payment_method": {
    "card": {
      "channel": "link",
      "card_number": "4111111111111111",
      "card_expiry_mm": "03",
      "card_expiry_yy": "26",
      "cryptogram": "AQBBBBBBZatIlaIAmWKSghwBBBB=",
      "card_cvv": "900",  // Optional
      "token_requestor_id": "22457512314",
      "card_holder_name": "Tushar Gupta",
      "card_display": "3243"

    }
  }
}'

Update your checkout UI

Update your checkout interface to stop collecting CVV for saved card payments.

• For tokenised cards on Visa, Mastercard, Amex, RuPay, and Diners, remove the card_cvv field from the card object.

Note: CVV input is optional only for tokenised card transactions (transactions using saved cards). For plain card or guest checkout transactions, CVV input is mandatory.

For merchants using Cashfree Checkout UI

Cashfree enables CVV-less payments by default for all saved card transactions across supported networks. You don’t need to configure anything additionally.

Frequently asked questions

What is a CVV-less card payment?

A CVV-less card payment allows customers to complete a card transaction without entering the Card Verification Value (CVV)—a 3- or 4-digit security code typically required at checkout.

How is the transaction secured without CVV?

CVV-less transactions maintain security through 3D Secure (3DS), OTP (One-Time Password) authentication, secure encryption of card data, and additional risk checks such as real-time fraud detection.

Are CVV-less payments compliant with regulatory guidelines (like RBI or PCI DSS)?

Yes. CVV-less payments are compliant as long as they involve tokenised cards and adhere to the card network and RBI guidelines for authentication.

Why should a merchant allow CVV-less payments?

CVV-less payments reduce friction at checkout, improving conversion rates and enhancing customer experience, especially for a returning user base in mobile-first markets.

What are the pre-requisites for CVV-less payments?

CVV-less card payment experience is available only for tokenised cards, meaning the card is securely saved with a merchant.

Will offering CVV-less payments increase my payment success rates?

Yes, the CVV-less card payment feature improves success rates by approximately 5% on average.

Which card networks support CVV-less payments?

CVV-less flow supports tokenized payments on Visa, Mastercard, RuPay, Amex, and Diners.

Is CVV-less payment possible via Payment Links and Payment Forms?

Yes. Both Payment Links (PL) and Payment Forms (PF) support CVV-less payments.

Is CVV-less by default enabled?

Yes. From day 0, merchants can enable CVV-less payments for their customers (only on tokenised cards).