Invalid CVC
What This Means
The CVC value provided is not in a valid format (wrong number of digits or non-numeric characters). Unlike incorrect_cvc which means the value did not match, invalid_cvc means the format itself is wrong. SaaS businesses should validate CVC format client-side.
Retrying will likely fail again. The customer needs to update their payment method or contact their bank.
Common Causes
- 1Customer entered fewer or more digits than required (3 for Visa/MC, 4 for Amex)
- 2Non-numeric characters were included in the CVC field
- 3Form auto-fill populated the CVC field with a saved but malformed value
Recovery Tactics
- 1Use Stripe Elements which enforces correct CVC length based on card type
- 2Restrict the CVC input to numeric characters and enforce correct length
- 3Show a visual indicator of the expected CVC format based on the detected card brand
How healthy is your Stripe account?
Get a free churn health report. Find pending cancellations, failed payments, and expiring cards putting your MRR at risk.
Run Free AuditRelated Decline Codes
FAQ
How many digits should the CVC be?
Visa, Mastercard, and Discover use 3-digit CVCs on the back of the card. American Express uses a 4-digit CID on the front of the card. Your form should adapt based on the detected card type.
Is invalid_cvc a sign of fraud?
An invalid format is more likely a user error than fraud. Fraudsters typically have the correctly formatted CVC from the stolen card data. However, a pattern of invalid CVC attempts across different cards could indicate automated testing.
How healthy is your Stripe account?
Get a free churn health report. Find pending cancellations, failed payments, and expiring cards putting your MRR at risk.
Run Free Audit