---
id: "bankcard_cvv"
kind: "datatype"
status: "draft"
is_pii: true
categories: ["pii", "finances"]
langs: ["common"]
quality: 85
url: "http://registry.apicrafter.io/datatype/bankcard_cvv"
---

# Payment card security code (CVV, CVC, CID) (`bankcard_cvv`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

Short code printed on a payment card that card-not-present transactions use to show that the payer holds the card. Visa calls it CVV2, Mastercard CVC2 and American Express CID. Most networks print three digits on the back of the card; American Express prints four digits on the front. Card rules forbid storing it after authorization, so its presence in a data set is a finding on its own. The digits alone cannot be told apart from other short numbers.

- Personal data (PII): yes
- Categories: Personally identifiable information (pii), Finances and banking (finances)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Detection

Regular expression (Python `re`):

```
^\d{3,4}$
```

## Examples

- `418` — Constructed three-digit code (Visa, Mastercard, Discover)
- `7193` — Constructed four-digit code (American Express)
- `41` (invalid example) — Too short

## Supported by tools

- `amazonmacie`
- `awscomprehend`
- `azureailanguage`
- `collibra`
- `databricks`
- `ibmknowledgecatalog`
- `openmetadata`

## Sources

- wikipedia: <https://en.wikipedia.org/wiki/Card_security_code>

## Quality

Score 85/100. Missing: mapping (Wikidata, Schema.org, ...), translation.

JSON: <http://registry.apicrafter.io/api/v1/datatypes/bankcard_cvv.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/finances/bankcard_cvv.yaml>