Stripe Test Card CVV: Which Code to Use in Test Mode

With Stripe's standard test card number 4242 4242 4242 4242, the stripe test card CVV can be any three digits — 123, 000, or 999 all work. Stripe only validates the format of the CVC in test mode, not the value, so the code you type does not need to match anything.

How the CVV works on Stripe test cards

Test mode is a sandbox. The card number, expiry date, and CVC are checked for structure so the payment form behaves the way it will in production, but no real card network is contacted. That means a test card number is accepted whenever the format is valid, and the CVC field simply needs the right number of digits.

• Visa, Mastercard, Discover, JCB, Diners Club: any 3 digits.
• American Express: any 4 digits, because Amex uses a four-digit security code.
• Expiry date: any date in the future.
• Postal code and name: any value, unless you are testing address verification rules.

Common Stripe test card numbers

Each number below pairs with any valid-format CVC and any future expiry date. They exist so developers can trigger specific outcomes without moving real money.

• 4242 4242 4242 4242 — Visa, succeeds.
• 4000 0566 5566 5556 — Visa debit, succeeds.
• 5555 5555 5555 4444 — Mastercard, succeeds.
• 3782 822463 10005 — American Express, requires a 4-digit CVC.
• 4000 0000 0000 0002 — generic decline.
• 4000 0000 0000 0127 — incorrect CVC error.
• 4000 0000 0000 0069 — expired card error.

The decline and error numbers matter for the stripe test card CVV workflow: 4000 0000 0000 0127 returns a CVC check failure no matter which digits you enter, which lets you confirm that your error handling surfaces the right message to the customer.

Testing CVC verification behavior

If your integration uses Radar rules or manual review based on CVC checks, you can simulate outcomes with dedicated test numbers instead of guessing at CVC values. Stripe maps each of these numbers to a fixed result, so the CVC you type is irrelevant — the card number alone decides the response.

1. Use 4000 0000 0000 0101 to simulate a CVC check that fails.
2. Use 4000 0000 0000 0127 to trigger an incorrect CVC decline.
3. Use a standard success number to confirm the passing path.

Mistakes to avoid

• Using live keys. Test card numbers are rejected when your publishable and secret keys are in live mode. Confirm the dashboard toggle and the key prefix first.
• Entering a past expiry. The CVC is flexible, the expiry is not — it must be a future date.
• Short CVC on Amex. Three digits will fail validation on a four-digit Amex card.
• Assuming real card data is needed. Never enter genuine card details into a test environment; test numbers exist precisely so you do not have to.

Why test CVCs are format-only

Security standards prohibit storing the CVV after authorization, so there is nothing for a sandbox to compare against. Stripe's test mode therefore checks length and character type only. Once you switch to production, the issuing bank performs the real verification and the result arrives as a CVC check response on the charge object.