Stripe Test Card CVV: Values That Work in Test Mode

Answer

Stripe test cards accept any CVC in test mode. Use three digits for Visa, Mastercard, Discover, and Diners Club. Use four digits for American Express. The code does not need to match a stored value, and it does not need to be unique. Stripe ignores the CVC on most test numbers and returns a pass result.

Test mode runs on API keys that start with pk_test_ and sk_test_. Live keys reject test card numbers.

Standard test card

• Number: 4242 4242 4242 4242
• CVC: any three digits, such as 123
• Expiry: any date in the future
• Postal code: any value, such as 10001

Other card networks

• Mastercard: 5555 5555 5555 4444, CVC 123
• Mastercard debit: 5200 8282 8282 8210
• Visa debit: 4000 0566 5566 5556
• American Express: 3782 822463 10005, CID 1234
• Discover: 6011 1111 1111 1117
• Diners Club: 3056 9300 0902 0004

American Express uses a four-digit code. The field label reads CID for Amex and CVC for the other networks. Stripe accepts either label in the test flow.

CVC check test cases

Some test numbers return a specific CVC check result.

• 4000 0000 0000 0101: CVC check fails
• 4000 0000 0000 0127: charge declines with the code incorrect_cvc
• 4000 0000 0000 0119: postal code check fails, CVC passes

Use the same three digits, 123, on these numbers. The result comes from the card number, not from the code.

Decline and authentication test cases

• 4000 0000 0000 0002: generic decline
• 4000 0000 0000 9995: decline, insufficient funds
• 4000 0000 0000 0069: decline, expired card
• 4000 0000 0000 3220: 3D Secure 2 authentication required
• 4000 0025 0000 3155: 3D Secure authentication required

Rules that apply in test mode

Stripe states that test card numbers work only with test API keys. A live key returns an error for 4242 4242 4242 4242. Test data moves no money and reaches no card network.

Do not enter real card numbers in a test environment. Storing real card data puts the account in scope for PCI DSS. Stripe publishes test cards for that reason.

Length checks still run in test mode. A two-digit CVC on a Visa test card returns a validation error before the charge is created. Use three digits for Visa, Mastercard, Discover, and Diners Club. Use four digits for American Express.

What is not published

Stripe does not list a test number that accepts one specific CVC value and rejects another on the same card. The CVC check outcome is tied to the card number. Visa and Mastercard do not publish CVC rules for test traffic because test traffic does not reach their networks.