Purpose

Starting with version 2.4, H-Sphere requires that users creating credit card billing profiles enter CVV (card verification value) to prevent fraudulent signups. Merchant gateways supporting CVV verification approve the credit card. If the credit card is rejected, the billing profile is not created.

Security

H-Sphere doesn't store verification values. Once the billing profile has been created, H-Sphere assumes that the credit card is valid and doesn't supply verification values with subsequent credit card transaction requests.

Moderated Accounts

If a new account is moderated, it is added to the moderation list regardless of the validation results. If validation is successful, it is marked as cvv validated.

CVV Configuration

By default, credit card verification is usually disabled, which means all cards are automatically accepted. To enable CVV verification:

1. Go to Settings->Signup Guard
2. Check CVV Validation and click Submit Query.

CVV settings can be configured in the merchant gateway's interface (not in H-Sphere). Make sure to allow transactions without verification values, because H-Sphere sends verification values only when creating billing profiles.

Gateways that don't support CVV verification are sent transaction requests without verification values (as in H-Sphere before 2.4).