FundSvcs Community

We are researching practices around requesting CVV on mail-in gift forms. I've conducted research and heard from credible sources that it is not compliant to request CVV by mail or write it down -- that it must be entered directly into an EMV or other secure device. I hear from others that they do request CVV on printed mail-in forms. Can anyone direct me to definitive information on laws and best practices regarding the handling of CVV numbers? Many thanks in advance. 

The PCI rules do not prohibit collection of CVVs on mail-in forms. What they prohibit is your staffer copying down payment info that a donor provides, eg to a slip of paper. This is more typically an issue with telephone orders rather than mail orders.

 

Visa, on the other hand, prohibits collection of CVVs on written forms:

 (https://usa.visa.com/content/dam/VCOM/download/about-visa/visa-rules-public.pdf section 5.4.3.1)

Practically speaking, this means you probably ought not ask for the number on your remits. You could write text to exclude Visa, but it will probably confuse donors. 

Thank you,
Isaac Shalev
Data Strategy Expert
Sage70, Inc.
(917) 859-0151
isaac@sage70.com

Schedule a 30-minute consultation now:

https://calendly.com/sage70/30min

We are researching practices around requesting CVV on mail-in gift forms. I've conducted research and heard from credible sources that it is not compliant to request CVV by mail or write it down -- that it must be entered directly into an EMV or other secure device. I hear from others that they do request CVV on printed mail-in forms. Can anyone direct me to definitive information on laws and best practices regarding the handling of CVV numbers? Many thanks in advance.