Is there a certain formula that the bank uses when changing the CVV (Card Verification Value), on a credit card. If I am trying to keep credit cards on file and they expire I know there is a form that where the CVV can be changed?

  • Are you referring to how when a CC expires a new card is often issued with the same CC number but an updated expiration date and new CVV code?
    – Daisetsu
    Oct 7, 2018 at 5:46
  • This does not appear to be an information security question but a credit card algorithm internals question.
    – schroeder
    Oct 7, 2018 at 10:20
  • 1
    If you're a merchant storing cards of your customers (or members or whatever), storing track (including CVV1) or CVV2 is absolutely forbidden by PCI DSS. If you are caught by an audit, or worse a breach, expect to pay very heavy fines. If you are making recurring charges authorized by the cardholder you shouldn't need anything beyond PAN, expiry and some data supplied by the processor on the first auth, and you can usually get expiry updates from the processor. Oct 8, 2018 at 5:28

1 Answer 1


No, You can't change CVV at anytime. It is embedded within black strip which resides on back side of the card.

Each credit card has an expiration time, after which, you'll get a new credit card, with a different CVV altogether.

Not the answer you're looking for? Browse other questions tagged .