Razorpay Test CVV: Any 3 Digits Work in Test Mode

Answer

In Razorpay test mode, the CVV field accepts any three digits when you use a standard test card number. The sandbox does not compare your digits to a stored value. Enter 123, 456 or 999 and the payment goes through if the test card number is valid and the expiry date is in the future.

Two limits apply. The field rejects a CVV that is not three digits, and American Express test cards want four digits. Razorpay also publishes dedicated failure cards that return a set error code, including a CVV failure.

Why the sandbox skips the CVV check

A live CVV check runs at the issuing bank. Razorpay passes the CVV to the card network, the network routes it to the issuer, and the issuer compares it to the value on file. Test mode stops before that step. No issuer is involved, so no comparison runs. The sandbox validates length and format, then returns a simulated result.

Test card numbers

Razorpay publishes these numbers for the sandbox. The dashboard holds the current list and the list changes without notice.

• 4111 1111 1111 1111, Visa, 3-digit CVV
• 5267 3181 8797 5449, Mastercard, 3-digit CVV
• 5555 5555 5555 4444, Mastercard, 3-digit CVV
• 3782 822463 10005, American Express, 4-digit CVV
• 6011 1111 1111 1117, Discover, 3-digit CVV

Testing a CVV failure

Typing wrong digits into a standard test card does not produce a CVV error. The sandbox returns success. To exercise the failure path, pick one of the failure cards in Razorpay's test card list and read the error object the checkout returns. Take the error code and message from the response payload. Do not infer the result from the digits you typed.

What a test CVV is not

A test CVV is not a real card code and carries no value outside the sandbox. Live mode rejects every test card number on this page. Keep the CVV out of your database. PCI DSS bans storage of sensitive authentication data, CVV included, after authorization. If you need repeat charges, store the Razorpay token, not the card data.

Checklist before you switch to live keys

1. Replace test key IDs and secrets with live keys.
2. Strip hard-coded test card numbers from the codebase and from fixtures.
3. Confirm the CVV field posts to Razorpay and is never written to a log or a table.
4. Run one live transaction for a small amount with a real card.