EMV: Get the CVV code from an ICC?

Question

I'm testing an EMV card reader, and I've done the steps indicated here here and here but I can't find a way to know if it's possible or not to get the Card Verification Value (CVV) code that I might need to contact the Merchant Server.

Does somebody has some links or explanation in order to get that value?

PS: I've also checked the EMV books from the EMV Specification and the words CVV/CVC are not even there!

CardPeak might be easier software to use. – securityauditor Jan 04 '21 at 02:33 — securityauditor, Jan 04 '21 at 02:33

score 7 · Accepted Answer · answered Jul 01 '13 at 21:01

7

CVV is not part of the EMV standard (page 7). This is just a number that is printed on the card; it's not usually present or readable from the chip itself.

You might be able to go digging in the "track 2 equivalent" data field and it might be there (as it would be on a mag-stripe), but I wouldn't bet on it.

answered Jul 01 '13 at 21:01

Gian

13,735
44
51

4

This answer is correct, but just to clarify - the CVV that is on the mag-stripe (and in the track 2 equivalent data) is used as a checksum, and therefore has a different purpose to the 3 digit CVV that is embossed onto the card. The embossed CVV cannot be machine read *by design* – PaulG Jul 02 '13 at 16:48
1

Yep, thanks for clarifying. I wasn't totally sure which CVV the OP meant, so I figured I would stress that there might be something hiding in track 2 if that's what was being requested. – Gian Jul 02 '13 at 17:52

score 2 · Answer 2 · answered May 13 '19 at 23:37

2

First, you need to understand the processing flow for reading EMV Card.

The real CVV is encoded during EMV data preparation with SFI tag 57 containing the track 2 data.

answered May 13 '19 at 23:37

Babatope.Festus

133
3

EMV: Get the CVV code from an ICC?

2 Answers2