--- description: Discover how Cardholder Verification Methods (CVM) work in EMV payments. Master CVM lists and authentication rules to optimize POS card approval rates. title: Cardholder Verification Method (CVM) in EMV Payments image: https://cdn.smartretry.com/cdn-cgi/image/width=1200,height=630,quality=85,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Fog-image.0z0q4_5kazzzo.jpeg --- # Cardholder Verification Method (CVM) CVM, EMV CVM, Cardholder Verification, Consumer Device CVM (CDCVM) Published October 28, 2026 Last updated October 28, 2026 ![Reading time](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Fclock.337f-cmnyb532.svg)5 min ## Still letting failed transactions slip through? SmartRetry turns declines into approvals - automatically, intelligently, and without changing your payment provider. Table of Contents A Cardholder Verification Method (CVM) is a security rule encoded into an EMV payment card or mobile wallet that defines how the person presenting the card proves their identity during a transaction, using mechanisms such as a PIN, signature, biometric scan, or no verification at all. ## How does Cardholder Verification Method (CVM) work? Every EMV chip card and tokenized digital wallet holds a prioritized list of acceptable verification rules known as the CVM list. When a buyer initiates a transaction at a point-of-sale terminal, the terminal reads the card’s CVM list and compares it against its own hardware capabilities and the transaction parameters, such as the payment amount and whether the interaction is contact or contactless. The terminal evaluates the rules sequentially until it finds the first mutually supported method. Common methods include Online PIN, where an encrypted PIN is sent to the issuing bank for validation, and Offline PIN, where the terminal verifies the PIN directly with the card’s microprocessor. Other methods include signature capture and No CVM Required, which is standard for low-value contactless taps. For mobile wallets like [Apple Pay](https://www.smartretry.com/payment-providers/apple-pay) and [Google Pay](https://www.smartretry.com/payment-providers/google-pay), verification relies on Consumer Device Cardholder Verification Method (CDCVM). With CDCVM, the cardholder authenticates directly on their smartphone or wearable via facial recognition, fingerprint, or device passcode before or during the tap. The device then passes a cryptographic flag in the authorization payload confirming that identity verification has already occurred. Once the verification step completes, the terminal packages the result into the EMV tag data (specifically Tag 9F34, CVM Results) and sends it within the authorization request to the acquirer and issuer. If the required CVM fails or is bypassed improperly, the terminal either halts the payment offline or forwards the failed status to the issuer, which typically returns a [hard or soft decline](https://www.smartretry.com/blog/hard-vs-soft-declines-retry-strategy). ## Why does Cardholder Verification Method (CVM) matter for payment teams? The selected verification method directly impacts checkout speed, authorization approval rates, and fraud liability shift. Stronger verification methods like Online PIN and CDCVM give issuing banks cryptographic proof that the legitimate cardholder is present, which significantly lowers the probability of [false-positive fraud declines](https://www.smartretry.com/blog/false-declines-revenue-impact) and protects merchants from fraudulent chargebacks. However, enforcing the wrong CVM for a given market or card type introduces severe checkout friction. For example, requiring PIN entry in markets where credit cardholders rarely use PINs leads to abandoned carts at the terminal and cascading PIN-try-exceeded declines. Conversely, modernizing verification flows improves throughput; contactless ATM transactions using CDCVM are on average over 20% faster than those requiring PIN [(Mastercard, 2025)](https://www.mastercard.com/us/en/news-and-trends/press/2025/september/mastercard-ncr-atleos-itcard-enhance-contactless-experiences-at-atms.html). For payment operations teams managing omnichannel commerce, understanding CVM data is critical when diagnosing [decline codes](https://www.smartretry.com/blog/issuer-decline-code-retries). When a transaction fails due to an invalid PIN or exceeds contactless CVM limits, the issuer often returns a soft decline requesting step-up verification, which requires an immediate customer action rather than an automated system retry. ## What are common use cases for Cardholder Verification Method (CVM)? * **Quick-service restaurants (QSR) and transit:** Configuring terminals to prioritize No CVM Required for transactions below regional contactless floor limits to maximize queue speed and minimize tap-to-approval latency. * **High-value luxury retail:** Using CDCVM via Apple Pay and Google Pay so customers can complete high-ticket purchases above contactless floor limits with a single biometric tap instead of inserting a physical chip card and entering a PIN. * **Omnichannel grocery and big-box retail:** Supporting Online PIN and Offline PIN fallback rules across thousands of lane terminals to ensure lowest-cost debit network routing and full EMV liability shift. * **Travel and hospitality (OTAs and hotels):** Transitioning [card-not-present](https://www.smartretry.com/glossary/card-not-present) reservations to card-present check-ins where physical chip-and-PIN or CDCVM verification is captured at the front desk to eliminate friendly fraud disputes on high-value room charges. ## Cardholder Verification Method (CVM) vs 3D Secure (3DS) | Attribute | Cardholder Verification Method (CVM) | 3D Secure (3DS) | | ----------------------- | ------------------------------------------------------------------- | ----------------------------------------------------------------------------- | | Primary Channel | Card-present (POS, contactless, ATM, in-store mobile wallets) | Card-not-present (eCommerce, in-app checkouts) | | Governing Standard | EMVCo Chip and Contactless Specifications | EMVCo 3-D Secure Protocol | | Verification Mechanisms | Online/Offline PIN, CDCVM (device biometrics), Signature, No CVM | Biometric banking app push, SMS OTP, risk-based frictionless data sharing | | Data Transmission | Sent inside the authorization message via EMV tags (e.g., Tag 9F34) | Executed prior to authorization; passes CAVV/ECI values into the auth request | ## What are best practices for Cardholder Verification Method (CVM)? * **Enable CDCVM on all contactless terminals:** Ensure POS firmware is updated to recognize Consumer Device CVM flags so mobile wallet transactions above the contactless limit do not needlessly prompt for a physical card insertion or paper signature. * **Align CVM floor limits with scheme mandates:** Regularly update terminal configuration tables to reflect the latest [Visa](https://www.smartretry.com/payment-providers/visa), [Mastercard](https://www.smartretry.com/payment-providers/mastercard), and domestic scheme contactless CVM limits to avoid unnecessary step-up prompts. * **Monitor PIN-related decline codes separately:** Track ISO 8583 response codes like 55 (Incorrect PIN), 65 (Activity count limit exceeded / contactless limit reached), and 75 (Allowable number of PIN tries exceeded) to identify terminal misconfigurations or user experience bottlenecks. * **Never blind-retry CVM failures:** Exclude transactions that fail due to incorrect PIN or missing step-up verification from automated background retry queues, as repeating the request without cardholder intervention will fail and incur scheme retry penalties. ## How does SmartRetry help with Cardholder Verification Method (CVM)? While CVM is primarily executed during card-present and digital wallet interactions, omnichannel merchants frequently store tokens generated from in-store transactions to power recurring subscriptions, auto-reloads, and card-on-file purchases. [SmartRetry](https://www.smartretry.com) analyzes the underlying network response codes and EMV metadata to distinguish between verification failures that require active cardholder presence and transient issuer declines that can be recovered automatically. When a transaction fails due to a CVM step-up requirement or PIN limit, SmartRetry immediately halts background retries to prevent network fee waste and flags the transaction for customer outreach. For subsequent merchant-initiated recurring charges where CVM is no longer applicable, SmartRetry optimizes the authorization payload and timing to recover declined payments seamlessly. Explore SmartRetry’s intelligent decline classification and retry engine to maximize recovery across your omnichannel payment flows. ### Frequently asked questions about this term What is a Cardholder Verification Method (CVM)? A CVM is a security rule encoded into an EMV card or digital wallet defining how a cardholder verifies their identity during a transaction, such as via PIN, signature, biometric scan, or no verification. What is a CVM list? A CVM list is a prioritized set of acceptable verification rules stored on an EMV chip card or mobile wallet, which the POS terminal evaluates sequentially to find a supported verification method. How does a POS terminal evaluate CVM rules? The terminal compares the card's prioritized CVM list against its hardware capabilities and transaction parameters, such as the amount and contact or contactless mode, to select the first matching rule. What is the difference between Online PIN and Offline PIN? With Online PIN, an encrypted PIN is transmitted to the issuing bank for verification. With Offline PIN, the terminal validates the PIN directly against the chip card itself. #### Share this article [![Share on X](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Ftwitter.21z6yr9njnznr.svg)](https://twitter.com/intent/tweet?text=Cardholder%20Verification%20Method%20%28CVM%29&url=https%3A%2F%2Fwww.smartretry.com%2Fglossary%2Fcardholder-verification-method-cvm "Share on X")[![Share on Facebook](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Ffacebook.3sbfjbsxa26qg.svg)](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.smartretry.com%2Fglossary%2Fcardholder-verification-method-cvm "Share on Facebook")[![Share on LinkedIn](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2F_next%2Fstatic%2Fmedia%2Flinkedin.09sdc8tnlrn4a.svg)](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.smartretry.com%2Fglossary%2Fcardholder-verification-method-cvm "Share on LinkedIn") Make us your preferred source ## Join our newsletter! Real strategies to recover lost revenue - straight to your inbox --- ## You might also find interest in those terms: [View all](/glossary) ["EMV"](/glossary/emv) ["Soft Decline"](/glossary/soft-decline) ## Articles you may find interesting: [View all](/blog) [![Why Good Transactions Go Bad: Unpacking Payment Failures and How to Fix Them](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F10%2Fpayment-failures-issuer-declines-recovery.jpg) October 27, 2026 Why Good Transactions Go Bad: Unpacking Payment Failures and How to Fix Them Payment failures are rarely simple rejections. Discover how leading fintech teams eliminate false declines, optimize network tokens, and deploy intelligent recovery to protect recurring revenue and preserve issuer relationships.](/blog/fix-payment-failures-decline-recovery)[![How to Choose the Right Failed Payment Recovery Software for Your Business](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F10%2Fchoose-failed-payment-recovery-software-hero.jpg) October 23, 2026 How to Choose the Right Failed Payment Recovery Software for Your Business Selecting the right recovery platform requires aligning dunning tools and smart retries with your decline profile. Learn how payment teams curb involuntary churn and lift authorization rates without adding unnecessary customer friction.](/blog/choose-failed-payment-recovery-software)[![Verifying Your Payment Security Posture to Protect Authorization Rates](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F10%2Fverify-payment-security-posture-authorization-rates-hero.jpg) October 22, 2026 Verifying Your Payment Security Posture to Protect Authorization Rates Outsourcing checkout does not eliminate PCI obligations. Learn how verifying your payment posture, isolating card data, and auditing scripts safeguards issuer trust and prevents avoidable card declines across your payment pipeline.](/blog/verify-payment-security-posture-authorization-rates)[![How Payment Teams Balance Fraud Prevention and Authorization Rates](https://cdn.smartretry.com/cdn-cgi/image/width=3840,quality=75,format=auto,fit=cover/https%3A%2F%2Fcdn.smartretry.com%2Fuploads%2F2026%2F10%2Fincrease-authorization-rates-without-increasing-fraud-hero.jpg) October 20, 2026 How Payment Teams Balance Fraud Prevention and Authorization Rates Discover how modern payment operations bridge the data gap between merchant fraud filters and card issuers to drive higher net revenue recovery without raising chargebacks.](/blog/increase-authorization-rates-without-increasing-fraud) --- ```json {"@context":"https://schema.org","@type":"DefinedTerm","@id":"https://www.smartretry.com/glossary/cardholder-verification-method-cvm","name":"Cardholder Verification Method (CVM)","termCode":"cardholder-verification-method-cvm","description":"Learn what a Cardholder Verification Method (CVM) is, how EMV terminals and mobile wallets evaluate CVM lists, and how verification rules impact approval rates.","url":"https://www.smartretry.com/glossary/cardholder-verification-method-cvm","alternateName":["CVM","EMV CVM","Cardholder Verification","Consumer Device CVM (CDCVM)"],"inDefinedTermSet":{"@type":"DefinedTermSet","name":"SmartRetry Glossary","url":"https://www.smartretry.com/glossary"}} {"@context":"https://schema.org","@type":"WebPage","@id":"https://www.smartretry.com/glossary/cardholder-verification-method-cvm#webpage","url":"https://www.smartretry.com/glossary/cardholder-verification-method-cvm","name":"Cardholder Verification Method (CVM) in EMV Payments","description":"Learn what a Cardholder Verification Method (CVM) is, how EMV terminals and mobile wallets evaluate CVM lists, and how verification rules impact approval rates.","datePublished":"2026-10-28T05:26:33.000Z","dateModified":"2026-10-28T05:27:48.000Z","author":{"@type":"Organization","@id":"https://www.smartretry.com/#organization","name":"SmartRetry","url":"https://www.smartretry.com","logo":{"@type":"ImageObject","url":"https://cdn.smartretry.com/logo.png","width":{"@type":"QuantitativeValue","value":175,"unitCode":"PX"},"height":{"@type":"QuantitativeValue","value":29,"unitCode":"PX"}},"description":"SmartRetry is a smart payment recovery platform that helps businesses save revenue from failed payment transactions and reduce false declines.","sameAs":["https://x.com/smartretry","https://www.facebook.com/smartretry","https://www.instagram.com/smartretry","https://www.linkedin.com/company/smartretry","https://www.youtube.com/@smartretry","https://github.com/smartretry"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","availableLanguage":["Hebrew","English"],"url":"https://www.smartretry.com/contact"},"address":{"@type":"PostalAddress","streetAddress":"Menachem Begin","addressLocality":"Tel Aviv-Yafo","addressCountry":"IL"}},"isPartOf":{"@type":"WebSite","@id":"https://www.smartretry.com/#website","name":"SmartRetry","url":"https://www.smartretry.com","description":"Payment recovery guides, tools and reference data from SmartRetry - failed payment recovery, false decline prevention and authorization rate optimization.","inLanguage":"en","publisher":{"@type":"Organization","@id":"https://www.smartretry.com/#organization","name":"SmartRetry","url":"https://www.smartretry.com","logo":{"@type":"ImageObject","url":"https://cdn.smartretry.com/logo.png","width":{"@type":"QuantitativeValue","value":175,"unitCode":"PX"},"height":{"@type":"QuantitativeValue","value":29,"unitCode":"PX"}},"description":"SmartRetry is a smart payment recovery platform that helps businesses save revenue from failed payment transactions and reduce false declines.","sameAs":["https://x.com/smartretry","https://www.facebook.com/smartretry","https://www.instagram.com/smartretry","https://www.linkedin.com/company/smartretry","https://www.youtube.com/@smartretry","https://github.com/smartretry"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","availableLanguage":["Hebrew","English"],"url":"https://www.smartretry.com/contact"},"address":{"@type":"PostalAddress","streetAddress":"Menachem Begin","addressLocality":"Tel Aviv-Yafo","addressCountry":"IL"}}},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".term-definition"]}} {"@context":"https://schema.org","@type":"FAQPage","author":{"@type":"Organization","@id":"https://www.smartretry.com/#organization","name":"SmartRetry","url":"https://www.smartretry.com","logo":{"@type":"ImageObject","url":"https://cdn.smartretry.com/logo.png","width":{"@type":"QuantitativeValue","value":175,"unitCode":"PX"},"height":{"@type":"QuantitativeValue","value":29,"unitCode":"PX"}},"description":"SmartRetry is a smart payment recovery platform that helps businesses save revenue from failed payment transactions and reduce false declines.","sameAs":["https://x.com/smartretry","https://www.facebook.com/smartretry","https://www.instagram.com/smartretry","https://www.linkedin.com/company/smartretry","https://www.youtube.com/@smartretry","https://github.com/smartretry"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","availableLanguage":["Hebrew","English"],"url":"https://www.smartretry.com/contact"},"address":{"@type":"PostalAddress","streetAddress":"Menachem Begin","addressLocality":"Tel Aviv-Yafo","addressCountry":"IL"}},"mainEntity":[{"@type":"Question","name":"What is Cardholder Verification Method (CVM)?","acceptedAnswer":{"@type":"Answer","text":"Learn what a Cardholder Verification Method (CVM) is, how EMV terminals and mobile wallets evaluate CVM lists, and how verification rules impact approval rates."}}]} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.smartretry.com/"},{"@type":"ListItem","position":2,"name":"Glossary","item":"https://www.smartretry.com/glossary"},{"@type":"ListItem","position":3,"name":"Cardholder Verification Method (CVM)","item":"https://www.smartretry.com/glossary/cardholder-verification-method-cvm"}]} ```