Configuring Sage's CVVMatchResponseCodes Setting

 

Note: Use the PaymentProcessCVV system option to choose if the CVV code is required or optional for credit card purchases.

Sage provides a response code for a credit card CVV number when a credit card authorization is attempted. Depending on the CVV response code, netFORUM determines if the CVV is a valid match. If the match is not valid, then netFORUM voids the authorization.

Sage provides six codes, and by default, netFORUM identifies two of those codes. You can use the CVVMatchResponseCodes Merchant Account Code to configure what netFORUM does in response to the four CVV response codes that are undefined.

This topic describes the six codes and how to configure netFORUM to respond to the four undefined codes according to your organization's business rules.

Sage's CVV Response Codes

Below are the codes that Sage could return in response to a CVV entry:

Caution! Sage returns these codes even if the credit card number is invalid. In that case, the CVV response code is irrelevant.

Response Code DescriptionnetFORUM's Response
MThe CVV entered was a valid match for the credit card’s account.successful authorization
NA CVV code was collected and sent to the gateway, but that the CVV code did not match. declined authorization
PNot Processed. Most commonly this occurs when the CVV is not passed with the authorization.configurable
SService not supportedconfigurable
UUnavailable. This is not a common response. It tends to happen if the bank is not certified to validate CVV. This could happen for certain international credit cards.configurable
XNo Responseconfigurable

Configuring the CVVMatchResponseCodes Setting

  1. Go to the Merchant Account Profile.
    One way to get there is to go to Modules > Accounting> Overview > Accounting Setup > Payment Gateways > go to arrow beside the Gateway > Payment Gateway Profile > Merchant Accounts child form > go to arrow beside the Merchant Account > Merchant Account Profile.
  2. Click the edit icon beside the code CVVMatchResponseCodes.
  3. Decide how strict or lenient you want to make your settings:
    1. strict: allow only M Response Codes
    2. balanced: allow M, X, and S Response Codes
    3. lenient: allow all Response Codes except N
  4. In the value field, enter each of the Response Codes that you want to allow. Make sure each code is uppercase and multiple codes are separated by semicolons.

    Example: Your entered values might look like this: P;S;X