--- description: Learn how CAVV cryptographic tokens in 3D Secure protect payments, shift fraud liability to issuers, and optimize authorization rates for fintech teams. title: What Is CAVV in 3DS: Boost Auth Rates & Shift Liability image: https://cdn.smartretry.com/cdn-cgi/image/width=1200,height=630,quality=85,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F11%2Fcavv-cardholder-authentication-verification-value-3ds.jpg --- Payment Approval Optimization # Understanding CAVV: How 3D Secure Tokens Secure Approvals and Shift Liability Published November 10, 2026 Last updated November 10, 2026 ![Reading time](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Fclock.337f-cmnyb532.svg)9 min ![](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=85,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F11%2Fcavv-cardholder-authentication-verification-value-3ds.jpg) ## Still letting failed transactions slip through? SmartRetry turns declines into approvals - automatically, intelligently, and without changing your payment provider. Table of Contents ![](https://cdn.smartretry.com/cdn-cgi/image/width=48,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Fblog_star.1bil3v51fayky.svg) Every online transaction hinges on immediate trust between merchant and issuer. Capturing a **CAVV** during 3D Secure provides cryptographic verification that calms bank risk models. For payment teams, transmitting this token cleanly shifts **fraud liability** and turns borderline declines into approvals. Key Takeaways 1. The **CAVV** is a single-use cryptographic token proving cardholder authentication occurred before the authorization message reaches the issuer. 2. Securing a valid authentication token shifts financial liability for **fraud chargebacks** directly to the issuing bank. 3. Cryptographic payload mismatches in transaction amount or currency will trigger an immediate **decline code 05** or validation error. 4. Recurring billing retries cannot reuse expired tokens and must instead pass the stored **Network Transaction ID**. **The Secret Handshake of Online Payments: Decoding the Cryptographic Value Behind Secure Approvals** Every online transaction involves a quiet crisis of trust. A customer clicks buy, and an issuing bank has milliseconds to decide whether the person at the keyboard is the real cardholder. A wrong call either costs the bank fraud losses or declines a good customer. That tension is why the cardholder authentication verification value, or CAVV, exists. It is a cryptographic token from a 3D Secure check, proving the bank verified the cardholder before authorization. For payment engineers and fraud teams, the CAVV is more than a security artifact. It shifts fraud liability away from the merchant, calms [issuer risk models](https://www.smartretry.com/blog/issuer-risk-model-shift), and influences whether a transaction succeeds. Handled properly, it turns a guess into a verified handshake. Mishandled, it quietly drains revenue. ## What Is CAVV and How Does It Anchor the 3D Secure Flow? It is a cryptographic hash generated by the issuing bank’s Access Control Server (ACS) during a 3D Secure session. [Visa](https://www.smartretry.com/payment-providers/visa) coined the term, [Mastercard](https://www.smartretry.com/payment-providers/mastercard)‘s equivalent is the Accountholder Authentication Value (AAV), and [American Express](https://www.smartretry.com/payment-providers/amex) calls it the SafeKey Reference value. Engineers use CAVV for all three. To see why it matters, separate authentication, which asks whether the cardholder is who they claim to be, from authorization, which asks whether the account can pay for the purchase. Without 3D Secure, the merchant sends a single authorization message and the issuer must guess at authentication from the card number, expiration date, and billing address. EMV 3DS, the modern protocol, routes the two phases along separate paths that eventually converge: * **The Authentication Path:** The merchant’s 3DS Server sends device, browser, and transaction data via the card network’s Directory Server to the issuer’s ACS. The ACS assesses risk, then either passes the user silently (frictionless flow) or prompts for a one-time passcode or biometric check (challenge flow) before generating the CAVV. * **The Handoff:** The ACS returns the CAVV to the merchant along with an Electronic Commerce Indicator (ECI) and a transaction identifier, such as an XID in legacy 3DS1 or a Directory Server Transaction ID in EMV 3DS. ![Diagram illustrating the EMV 3DS authentication flow routing transaction data through the Directory Server to the ACS, which returns the CAVV and ECI tokens.](https://cdn.smartretry.com/uploads/2026/11/emv-3ds-cavv-authentication-handoff-768x429.jpg) The issuer’s host does not take the merchant’s word for it. It validates the CAVV with internal keys against the amount, currency, and card number. Because the issuer created the token moments earlier, this closes the loop and proves nothing changed between browser check and backend charge. ## Why Chargeback Liability Shift Depends on Cryptographic Proof A chip card dipped into a terminal generates an EMV cryptogram proving the card was present. Ecommerce lacks that proof, and historically merchants bore almost the entire cost of card-not-present fraud: when a stolen number was used and the owner disputed, the merchant lost the revenue and goods and paid a dispute fee. Notably, authenticated eCommerce transactions show approximately a 45% reduction in fraud compared with non-authenticated transactions [(Source)](https://corporate.visa.com/en/solutions/visa-protect/insights/3d-secure.html). The main incentive for adopting EMV 3DS is the chargeback liability shift. When a valid CAVV and matching ECI travel in the authorization payload, fraud chargeback responsibility moves from merchant and acquirer to the issuer, which by generating the CAVV is effectively vouching for the cardholder and session. For example, Best Buy Canada observed a 61% reduction in its card-not-present fraud rate two quarters after implementing EMV 3DS [(Source)](https://corporate.visa.com/content/dam/VCOM/corporate/solutions/documents/best-buy-improving-customer-experience-and-reducing-fraud-with-emv.pdf). This protection is conditional. Nor does the shift require every customer to type an SMS code. Under modern protocols it covers three outcomes, each with its own ECI value: * **Fully Authenticated (Challenge or Frictionless):** The issuer verifies the user through a challenge prompt or background risk scoring. * **Attempted Authentication:** The merchant requests authentication and the network confirms eligibility, but the issuer’s ACS is temporarily unreachable or does not support the check. Though the bank never verified the cardholder, the merchant did their part, so the liability shift still protects them in most regions. A merchant who forces the transaction into authorization anyway keeps full liability. For fraud and dispute teams, the CAVV and ECI pair is the core evidence. When one slips through, the stored CAVV and transaction ID in representment are the standard way to reverse it. ## Balancing Payment Authorization Rates and Checkout Friction For years, growth leaders and product managers saw authentication as a conversion killer. The original 3DS1 protocol redirected buyers to a clunky bank page demanding a static password they had probably forgotten, and cart abandonment was common. Teams had to choose between more fraud and chargebacks or losing good customers at the finish line. Modern protocols changed the math. Merchants can now pass dozens of contextual signals, like shipping address history, device fingerprint, and account age, so issuers approve low-risk sessions in the background and the CAVV becomes a lever for [higher authorization rates](https://www.smartretry.com/blog/how-3d-secure-affects-authorization-rates). In fact, 40% of global eCommerce merchants use Strong Customer Authentication specifically to boost authorization rates [(Source)](https://info.merchantriskcouncil.org/hubfs/Documents/Reports/Fraud%20Reports/2025%5FGlobal%5FFraud%5Fand%5FPayments%5FReport.pdf). With a CAVV attached after frictionless authentication, the issuer sees the transaction far more favorably. Indeed, fraud rates for card payments were found to be about seventeen times higher when the counterpart was outside the EEA compared to domestic transactions [(Source)](https://www.ecb.europa.eu/press/intro/publications/pdf/ecb.ebaecb202512.el.pdf?ec91bb383ee748aee38978b6470d01d6=). With one, the host knows its own ACS already vetted the session, so approval becomes much more likely. Across its network, Visa reports a 9% lift in authorization approval rates for transactions authenticated through Visa Secure [(Source)](https://corporate.visa.com/en/solutions/visa-protect/insights/3d-secure.html). ![Visual representation of a finalized, high-confidence authorization record achieved via frictionless CAVV validation.](https://cdn.smartretry.com/uploads/2026/11/frictionless-cavv-authorization-approval-outcome-768x429.jpg) Still, authentication needs calibration. Pushing every transaction through 3DS is rarely optimal, and outside regulated markets like Europe, where PSD2’s Strong Customer Authentication mandates it, optional 3DS carries real trade-offs: * **ACS Downtime and Latency:** Every authentication call adds a network hop to an external bank server. If an issuer’s ACS is slow or down, the customer stares at a spinning wheel and abandonment risk rises. * **Challenge Drop-off:** Even with better mobile app integrations and biometric prompts, some users will abandon checkout whenever an issuer forces a step-up challenge. * **Issuer Scoring Discrepancies:** In some markets, primarily the United States, certain issuers’ 3DS setups lag their authorization engines, so sending a low-risk domestic transaction through 3DS unexpectedly can trigger a needless challenge. Even so, the average 3DS success rate in the United States reached 88% in 2026 [(Source)](https://www.ravelin.com/blog/3d-secure-rates-2026). Experienced teams apply authentication selectively, using dynamic routing and pre-authorization risk scoring instead of a blanket rule. Underscoring this demand, 78% of merchants report using 3DS exemptions to reduce checkout friction [(Source)](https://www.ravelin.com/blog/3d-secure-rates-2026). Low-risk returning customers go straight to authorization for speed. High-value orders, mismatched billing and shipping addresses, and BINs with strict fraud filters go through 3DS to capture the CAVV, secure the liability shift, and give the issuer confidence to approve. ## What Happens When a Payment Declined Response Follows a Valid CAVV? Product managers and merchants are often baffled when a customer passes 3D Secure, gets a valid CAVV, and is still declined. Why would the bank verify the user and then reject their money? The ACS handles authentication while the authorization host manages balances and credit limits, and they are often separate systems inside the bank, sometimes run by different vendors. Passing authentication proves identity, not that the customer can pay. Declines can also stem from how the CAVV was handled between steps. Common triggers include: * **Payload Mismatches:** The CAVV is cryptographically bound to specific parameters, most notably amount and currency. If a merchant authenticates one amount and then adds shipping or tax before authorization, the issuer’s check fails because the parameters no longer match the hash. * **Stale or Expired Tokens:** A CAVV is meant for immediate, single use during a live checkout. If a merchant holds an authenticated order for manual review or delayed fulfillment and authorizes days later, the issuer may reject it as expired. * **PSP Mapping Errors:** In multi-processor setups, where a standalone 3DS provider hands tokens to a separate gateway, formatting errors creep in. When troubleshooting, engineers should check raw gateway logs. Beyond the two-digit response code, networks return a CAVV Result Code, such as Visa’s single-character indicator, showing whether the issuer validated it, rejected it over a bad hash, or ignored it. Validation failures almost always trace to the merchant’s or PSP’s data mapping, not the customer’s card. ## How Should You Retry Failed Payments That Involve 3D Secure? The CAVV lifecycle matters most when designing retries for failed payments in recurring billing and recovery flows. Because a CAVV is single-use and tied to one customer-present session, you cannot store it and reuse it tomorrow, let alone next month. For subscriptions, the day-one CAVV authorizes the first charge and establishes a stored credential. To charge off-session later without pulling the customer back, the merchant must flag that transaction as a Credential-on-File (COF) or [Merchant-Initiated Transaction](https://www.smartretry.com/glossary/merchant-initiated-transaction) (MIT) setup and capture the card brand’s Network Transaction ID (NTI). Later recurring charges and soft-decline recoveries send that NTI, not the old CAVV. It points the issuer back to the original 3D Secure authentication, letting the off-session retry proceed without a fresh CAVV. ![Conceptual illustration of an ephemeral CAVV passing cryptographic provenance to a persistent Network Transaction ID for recurring transactions.](https://cdn.smartretry.com/uploads/2026/11/mit-nti-recurring-cavv-lineage-768x429.jpg) Transactions still fail because of network timeouts, issuer hiccups, or timing around available funds, and the follow-up attempt decides whether the sale is saved. Platforms like [SmartRetry](https://www.smartretry.com) analyze the issuer response and context, including whether the payment came from an authenticated session or recurring chain, to run intelligent retries that recover revenue and lift approval rates without duplicate authentication prompts or network rule violations. In a pilot study by Worldpay, AI-driven 3DS optimization demonstrated a 5.5% average improvement in authorization rates [(Source)](https://worldpay.com/en/press-releases/worldpay-unveils-patent-pending-ai-powered-3d-secure). Teams building workflows around authenticated declines generally follow a few principles: * **Never Re-send a Burned CAVV:** Once a CAVV reaches the issuer and draws a business decline like insufficient funds, it is consumed. Re-sending the same payload risks a replay rejection, so later off-session attempts must move to an MIT framework with proper network trace IDs or wait until the user returns. * **Isolate Soft Declines from Authentication Failures:** If the CAVV itself failed validation, retrying only adds fees and hurts merchant standing with the networks. Fix the integration payload or ask the user for a fresh payment method. * **Use Decoupled Authentication Only Where Supported:** Newer EMV 3DS specifications let issuers push an authentication prompt to the user’s banking app outside a live checkout. Adoption is still maturing, but it offers a structured way to get a fresh CAVV when recovering high-value declines via email or SMS links. Treat the CAVV as what it is: a time-sensitive cryptographic receipt of trust between cardholder and bank. Generate it only when needed, map it cleanly, and link it to future recurring identifiers, and it both shields the business from fraud chargebacks and gives issuers the signal to turn borderline declines into approvals. ### Frequently asked questions about this topic What is CAVV and how does it work in 3D Secure? The Cardholder Authentication Verification Value (CAVV) is a cryptographic hash generated by an issuing bank's Access Control Server, proving cardholder identity was verified before authorization. What is CAVV verification failure during payment processing? A CAVV verification failure occurs when the cryptographic hash does not match payload parameters like amount or currency, or if formatting errors occur during merchant-to-processor transmission. How does a valid CAVV provide a chargeback liability shift? When an authorization includes a verified CAVV and matching ECI, card networks shift financial liability for fraud-related chargebacks from the merchant to the cardholder's issuing bank. Can you reuse a CAVV for subscription retries? No. CAVVs are single-use tokens valid only for the initial checkout. Subsequent subscription charges and off-session retries must reference the original Network Transaction ID instead. #### Share this article [![Share on X](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Ftwitter.21z6yr9njnznr.svg)](https://twitter.com/intent/tweet?text=Understanding%20CAVV%3A%20How%203D%20Secure%20Tokens%20Secure%20Approvals%20and%20Shift%20Liability&url=https%3A%2F%2Fwww.smartretry.com%2Fblog%2Fwhat-is-cavv-in-3ds "Share on X")[![Share on Facebook](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Ffacebook.3sbfjbsxa26qg.svg)](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.smartretry.com%2Fblog%2Fwhat-is-cavv-in-3ds "Share on Facebook")[![Share on LinkedIn](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Flinkedin.09sdc8tnlrn4a.svg)](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.smartretry.com%2Fblog%2Fwhat-is-cavv-in-3ds "Share on LinkedIn") Make us your preferred source ![Roi Lagziel](https://cdn.smartretry.com/cdn-cgi/image/width=256,quality=75,format=auto,fit=cover/https%3A%2F%2Fsecure.gravatar.com%2Favatar%2F1254b13a4046ec9afd9201af95f94ee86855795acf38e0112ef0752cd44e4ab2%3Fs%3D96%26d%3Dmm%26r%3Dg) Author ##### Roi Lagziel CEO [![LinkedIn](https://cdn.smartretry.com/cdn-cgi/image/width=32,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Flinkedin.09sdc8tnlrn4a.svg)Find me on Linkedin](https://www.linkedin.com/in/lagziel) Roi Lagziel is a payments engineer specializing in authorization optimization, retry strategies, and issuer-level behavior. His work focuses on building practical, data-driven systems that help payment teams reduce false declines and recover lost revenue. [Read all articles >](/authors/roi-lagziel) ## Join our newsletter! Real strategies to recover lost revenue - straight to your inbox ## Articles you may find interesting: [View all](/blog) [![Does Numeral Offer Load Balancing for Payment Requests?](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F11%2Fnumeral-payment-routing-load-balancing-guide.jpg) November 7, 2026 Does Numeral Offer Load Balancing for Payment Requests? Discover why traditional load balancing fails across banking rails and multi-acquirer setups, and how intelligent routing protects your transaction approval rates.](/blog/numeral-load-balancing-payment-requests)[![Managing Chase Stop Payments: Why Recurring Billing Retries Backfire](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F10%2Fhandling-chase-stop-payment-ach-declines.jpg) October 31, 2026 Managing Chase Stop Payments: Why Recurring Billing Retries Backfire Blindly retrying stopped payments exposes subscription merchants to Nacha compliance fines and dispute spikes. Discover how to interpret Chase ACH and card revocation codes to protect recovery operations and merchant account health.](/blog/chase-stop-payment-ach-rules)[![Verifying Your Payment Security Posture to Protect Authorization Rates](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F10%2Fverify-payment-security-posture-authorization-rates-hero.jpg) October 22, 2026 Verifying Your Payment Security Posture to Protect Authorization Rates Outsourcing checkout does not eliminate PCI obligations. Learn how verifying your payment posture, isolating card data, and auditing scripts safeguards issuer trust and prevents avoidable card declines across your payment pipeline.](/blog/verify-payment-security-posture-authorization-rates)[![The Hidden Mechanics of Recovering Failed PayPal Transactions](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F10%2Frecovering-failed-paypal-transactions-hero.jpg) October 19, 2026 The Hidden Mechanics of Recovering Failed PayPal Transactions Discover the underlying mechanics of digital wallet failures on PayPal and how dynamic recovery strategies protect recurring subscription revenue from churn.](/blog/recovering-failed-paypal-transactions) --- ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Understanding CAVV: How 3D Secure Tokens Secure Approvals and Shift Liability","url":"https://www.smartretry.com/blog/what-is-cavv-in-3ds","datePublished":"2026-11-10T07:20:24.000Z","dateModified":"2026-11-10T07:26:31.000Z","image":"https://cdn.smartretry.com/uploads/2026/11/cavv-cardholder-authentication-verification-value-3ds.jpg","description":"Learn how CAVV cryptographic tokens in 3D Secure protect payments, shift fraud liability to issuers, and optimize authorization rates for fintech teams.","publisher":{"@type":"Organization","@id":"https://www.smartretry.com/#organization","name":"SmartRetry","url":"https://www.smartretry.com","logo":{"@type":"ImageObject","url":"https://cdn.smartretry.com/logo.png","width":{"@type":"QuantitativeValue","value":175,"unitCode":"PX"},"height":{"@type":"QuantitativeValue","value":29,"unitCode":"PX"}},"description":"SmartRetry is a smart payment recovery platform that helps businesses save revenue from failed payment transactions and reduce false declines.","sameAs":["https://x.com/smartretry","https://www.facebook.com/smartretry","https://www.instagram.com/smartretry","https://www.linkedin.com/company/smartretry","https://www.youtube.com/@smartretry","https://github.com/smartretry"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","availableLanguage":["Hebrew","English"],"url":"https://www.smartretry.com/contact"},"address":{"@type":"PostalAddress","streetAddress":"Menachem Begin","addressLocality":"Tel Aviv-Yafo","addressCountry":"IL"}},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.smartretry.com/blog/what-is-cavv-in-3ds","name":"Understanding CAVV: How 3D Secure Tokens Secure Approvals and Shift Liability"},"inLanguage":"en","author":{"@type":"Person","@id":"https://www.smartretry.com/authors/roi-lagziel","name":"Roi Lagziel","url":"https://www.smartretry.com/authors/roi-lagziel","jobTitle":"CEO","image":"https://secure.gravatar.com/avatar/1254b13a4046ec9afd9201af95f94ee86855795acf38e0112ef0752cd44e4ab2?s=96&d=mm&r=g","sameAs":["https://www.linkedin.com/in/lagziel"]},"articleSection":"Payment Approval Optimization","wordCount":1750,"keywords":"CAVV, what is cavv, cardholder authentication verification value, EMV 3DS liability shift, Visa, Mastercard, American Express, payment authorization rates"} {"@context":"https://schema.org","@type":"FAQPage","author":{"@type":"Organization","@id":"https://www.smartretry.com/#organization","name":"SmartRetry","url":"https://www.smartretry.com","logo":{"@type":"ImageObject","url":"https://cdn.smartretry.com/logo.png","width":{"@type":"QuantitativeValue","value":175,"unitCode":"PX"},"height":{"@type":"QuantitativeValue","value":29,"unitCode":"PX"}},"description":"SmartRetry is a smart payment recovery platform that helps businesses save revenue from failed payment transactions and reduce false declines.","sameAs":["https://x.com/smartretry","https://www.facebook.com/smartretry","https://www.instagram.com/smartretry","https://www.linkedin.com/company/smartretry","https://www.youtube.com/@smartretry","https://github.com/smartretry"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","availableLanguage":["Hebrew","English"],"url":"https://www.smartretry.com/contact"},"address":{"@type":"PostalAddress","streetAddress":"Menachem Begin","addressLocality":"Tel Aviv-Yafo","addressCountry":"IL"}},"mainEntity":[{"@type":"Question","name":"What is CAVV and how does it work in 3D Secure?","acceptedAnswer":{"@type":"Answer","text":"The Cardholder Authentication Verification Value (CAVV) is a cryptographic hash generated by an issuing bank's Access Control Server, proving cardholder identity was verified before authorization."}},{"@type":"Question","name":"What is CAVV verification failure during payment processing?","acceptedAnswer":{"@type":"Answer","text":"A CAVV verification failure occurs when the cryptographic hash does not match payload parameters like amount or currency, or if formatting errors occur during merchant-to-processor transmission."}},{"@type":"Question","name":"How does a valid CAVV provide a chargeback liability shift?","acceptedAnswer":{"@type":"Answer","text":"When an authorization includes a verified CAVV and matching ECI, card networks shift financial liability for fraud-related chargebacks from the merchant to the cardholder's issuing bank."}},{"@type":"Question","name":"Can you reuse a CAVV for subscription retries?","acceptedAnswer":{"@type":"Answer","text":"No. CAVVs are single-use tokens valid only for the initial checkout. Subsequent subscription charges and off-session retries must reference the original Network Transaction ID instead."}}]} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.smartretry.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.smartretry.com/blog"},{"@type":"ListItem","position":3,"name":"Understanding CAVV: How 3D Secure Tokens Secure Approvals and Shift Liability","item":"https://www.smartretry.com/blog/what-is-cavv-in-3ds"}]} ```