What is a CVV code?
CVV code stands for card verification value, or card verification code (CVC). It’s a 3-4 digit number written on your credit or debit card. The CVV number is used as an extra layer of security to prevent anyone who knows your card number from making purchases online in your name.
Where can you find your CVV code?
You can find the CVV code either on the back of the card (Visa, Mastercard), or the front (American Express).
Why is a CVV code important?
Here’s something you may not know. While you can see one CVV code on your card, a second one is embedded into the magnetic strip of your card. Because of this code, when you swipe your card in a supermarket, you don’t need to enter the CVV code written on your card.
Card security measures help bring down physical card scams, but online scams are booming because so much credit card data is involved in data leaks. For example, hackers often get their hands on credit card numbers, the holder’s name, and the expiration date because merchants store your credit card information in their databases. That’s pretty bad. But the risks of leaked credit card scams are much lower because of CVV codes. Online merchants can’t store this data, so it’s usually not exposed in the case of a data breach. If you keep your CVV number secret, you’re much more likely to stay safe even if your credit card data is exposed.
Real examples of CVV code scams
CVV scams happen daily. However, most are too small to be picked up by the media. When they are, they affect many thousands of people. For example, in 2018, a consortium of cybercriminals called “MageCart” inserted malicious code into the payment pages of thousands of websites, stealing payment information of hundreds of thousands of unsuspecting customers.
More recently, the UK police have warned anyone using ATMs to be extremely careful because a new attack can drain people’s accounts in seconds. Scammers across the UK are installing discreet card-reading devices on top of ATMs. If the person inserts their card into the ATM, their data is sent to the hacker, who tries to spend the victim’s money as soon as possible.
How to keep your CVV code safe?
Here are a few rules that help you keep your CVV code safe:
- Do not write down your CVV code. Don’t write down any of your credit card information. Instead, you can try to memorize it or use a password manager to store your financial information safely.
- Use a VPN to browse online, especially if you’re using public Wi-Fi. A VPN encrypts all your traffic and helps protect your privacy.
- Double-check the address when shopping online. To make sure you shop safely online, check whether the website address is correct and whether it has the lock icon next to it.
- Use a virtual credit card, when possible. If your credit card issuer allows it, use a virtual card to shop online. These cards are temporary and can help protect your actual credit card number and the CVV code.
- Keep an eye on your credit card activity. Regularly review your credit card statements for unauthorized charges. If you see any suspicious activity, contact your bank immediately.
- Keep your smartphone locked. One of the best mobile banking safety tips is to never make it too easy to unlock your phone or banking apps. If you ever lose your phone, you don’t want to make it easy for someone else to rummage through it.
Common CVV code scams
Since they are much harder to get, CVV codes often are a target for online scammers. Here are a few examples of CVV code scams:
Phishing email
The most common scam is phishing. It can take many forms, from targeting anyone you can catch to being designed to target one specific person. Since email is cheap to send, this scam doesn’t even need to work often for criminals to keep using it.
In the case of a CVV, phishing emails usually contain an urgent message from a bank, citing problems with your account and the possibility of you losing your money. Scammers then leave a link to a fake website, hoping you will think it’s real and enter your banking information and credit card data.
Fake websites
Today, various AI-powered tools allow scammers to create copycat websites more easily than ever before. Scam websites can look indistinguishable from real ones, the only difference being the URL. But people rarely pay attention to the address bar, which makes this scam so dangerous.
For example, a scammer can make a fake banking website and try to trick people into entering their emails, passwords, credit card, and personal information.
Social engineering
Social engineering is a tactic where, by using psychology and elaborate stories, the scammer tries to trick their victim into giving up key information. Social engineering attacks can be used as a stepping stone for a larger goal or be the goal itself and may include different desired outcomes such as getting into a secure area, finding out the name of a client, or tricking someone into revealing their CVV number.
For example, you may receive a call from your bank. They explain that there is a problem with your account and they need your credit card information to check it. The best course of action is to hang up and call your bank yourself.
Skimming
Skimming is an attack where the scammer uses a small hacking device that can capture your credit card information. While skimming is a physical threat, web skimming can be performed by injecting malicious code into a website.
What to do if your CVV code has been stolen
If you suspect that someone knows your CVV code, you should act immediately. Here’s what you should do to protect yourself:
- Contact your bank as soon as possible and tell the service representative that somebody has your code. Or if you have your bank’s app on your smartphone, check if you can block your card yourself.
- Check your account for suspicious activity or unauthorized charges.
- Stay vigilant. After you’ve blocked your card, your bank account should be relatively safe. However, take note of unusual messages and calls you may receive going forward, especially if they involve unexpected bills.
By taking these steps, you can protect your account and limit the damage CVV code theft can cause. And remember to keep your sensitive information secure, no matter whether you’re shopping in your local corner shop or browsing online.
