CSC = Card Security Code
CSC refers to the printed, not imprinted, number on your Visa, MasterCard, American Express, or Discover Card. This number is never transferred during card swipes and should only be known by person in physical custody of the credit card.
Visa, MasterCard, and Discover cardholders can find their CSC in the signature area on the back of the credit card.It is the three-digit number printed immediately following the signature stripe. American Express cardholders can find their four-digit CSC printed above and to the right of the imprinted card number on the front of the card.
Card Security Code (CSC) checks are provided as additional fraud protection for online transactions to verify the code entered during transaction. This number is also known as the Card Verification Value or CVV2. The CSC code appears only on the physical credit card itself. It is never printed on statements or receipts.
There are three possible return values from the preferred gateway for CSC checks. Y(Yes), N(No) or that they do not participate in CSC checking.
To enable CSC checks in Blackbaud products, select the CSC level under the merchant account. There are three levels from which to choose:
- None: Performs no CSC check
- Full: Accepts transactions where the preferred gateway supports CSC checking AND a Y value is returned
- Light: Accepts transactions where the preferred gateway sends a response of "Does not participate" OR a Y value
Implications of setting it to Full:
The processor used by your Internet Merchant Account with the preferred gateway account may prevent some cards from being accepted.
Paymentech - Salem, Vital, FDMS South, Global Payments - East require a Y value return. If a value of "Does not participate" is returned, the credit card will not be processed.
NOTE: Blackbaud cannot advise your organization on what level is right for your configuration. Please consult with someone at your organization that can advise what legal or security requirements are appropriate for credit card processing in your database.