CAVV and AAV are codes used in 3D Secure transactions to ensure transaction integrity and security. CAVV is used for Visa, while AAV is used for MasterCard.
What is CAVV?
CAVV (Cardholder Authentication Verification Value); a value that allows VisaNet to verify the integrity of Verified by Visa (VbV) transaction data.
What is AAV?
AAV (Accountholder Authentication Value); a security code provided to third-party credit card authentication providers as part of Mastercard's secure payment program.
How is CAVV generated and validated?
Who validates the 3D Secure password used in 3D Secure transactions, who generates the CAVV, and who validates the CAVV?
The 3D Secure password, whether an OTP or a static password, is validated by the ACS. The CAVV is generated by the ACS and validated by the issuer host.
CAVV result codes and their meanings
| RESULT CODE | MESSAGE | MEANING FOR MERCHANTS |
| 0 | CAVV could not be validated, or CAVV data was not provided when CAVV data was expected | For this transaction, because the CAVV is considered invalid on the date the financial transaction took place, you will not receive chargeback protection from using VBV. Please check that you are following the VBV process correctly and that you are submitting the correct data in your transactions. |
| 1 | CAVV validation failed; authentication | Provided you implement the VBV process correctly, liability for this transaction, for the chargeback reason codes covered by Verified by Visa, should rest with the issuer. |
| 2 | CAVV passed validation; authentication | The CAVV was confirmed as part of the financial transaction. This is a fully authenticated VBV transaction. (ECI 5) |
| 3 | CAVV passed validation; authentication was attempted | The CAVV was confirmed as part of the financial transaction. This is an attempted VBV transaction (ECI 6) |
| 4 | CAVV validation failed – authentication attempt | Provided you implement the VBV process correctly, liability for this transaction, for the chargeback reason codes covered by Verified by Visa, should rest with the issuing bank. |
| 6 | CAVV was not validated, the issuer does not participate in CAVV validation | The CAVV value was not validated because the issuing bank does not participate in VBV. |
| 7 | CAVV validation failed – authentication attempt | Please check that you are following the VBV process correctly and submitting the correct data in your transactions. Provided you implement the VBV process correctly, liability for this transaction should be the same as for an attempted transaction (ECI 6) |
| 8 | CAVV passed validation; authentication was attempted | The CAVV was confirmed as part of the financial transaction. This is an attempted VBV transaction (ECI 6) |
| 9 | CAVV validation failed – authentication attempt | Please check that you are following the VBV process correctly and submitting the correct data in your transactions. Provided you implement the VBV process correctly, liability for this transaction should be the same as for an attempted transaction (ECI 6) |
| A | CAVV passed validation; authentication was attempted | The CAVV was confirmed as part of the financial transaction. This is an attempted VBV transaction (ECI 6) |
| B | CAVV passed validation; authentication was attempted (No Liability Shift) | The CAVV was confirmed as part of the financial transaction. However, this transaction is not eligible for a liability shift. This transaction can be placed in the same category as transactions sent with an ECI value of 7. |
| C | CAVV was not validated – authentication was attempted | This value is returned when the 3D Secure Authentication Result Code in the CAVV is 07 and the card-issuing bank did not return a CAVV result code in its authorization response. |
| D | CAVV was not validated – cardholder authentication | This value is returned when the 3D Secure Authentication Result Code in the CAVV is 00 and the card-issuing bank did not return a CAVV result code in its authorization response. |