#bethany4036
stiff pond
coarse rivet
Hi 👋
Can you share an example charge where the CVC was not checked? I just need the ID. It will start with ch_
frank geyser
ah, so we're using it with a setup intent to -- should i look up a setup intent id?
coarse rivet
Sure, that will work
And how are you testing the integration to verify that it is not verifying CVCs?
frank geyser
I had a user mention it, so I went and put in my card details and it accepted the card with wrong expiry date and cvc.
here's a setup intent with wrong cvc/date: seti_0NharlDVdZbiZfMlBdNlM4n6
coarse rivet
Those validations are ones that the Checkout UI won't know. Only the bank can tell us if that is the correct data. Let me see what they said
frank geyser
does that mean that cvc check etc only work if you're also collecting a charge?
coarse rivet
We perform some checks but we can't do a CVC check without contacting the bank.
If you look at the Payment Method that was created in this event: https://dashboard.stripe.com/events/evt_0NhassDVdZbiZfMl9ctsLGcj you will see in the checks property that postal code and cvc were unchecked
frank geyser
and checkout can't check those at all when just setting the card up for future usage?
coarse rivet
Correct.
It is worth noting that issuing banks sometimes approve charges without these (as odd as that may sound).
frank geyser
huh. quelle suprise :-) -- i thought i recalled that the old version of stripe checkout would do a cvc check even without a charge but maybe I just misunderstood/misremembered.
if we were to start collecting a postal address, would that have to go to the bank for verification as well?
coarse rivet
Yes, that isn't something that is knowable from the card details themselves.
Here's our doc on those checks: https://stripe.com/docs/disputes/prevention/verification
frank geyser
ok, thanks!