All card entities attached to the users wallet are industry standard cards which come with their own card security code to process card not present transactions to reduce fraud and limit the issuer liability.
Depending on the network they are referred by scheme specific names like
- CSC (American Express)
- CVC (MasterCard)
- CVV (Visa)
- CVV (Rupay)
These are typically the 3 or 4 digit numbers that are printed at the back of the card. Do note the networks are the one who dictate printing of these numbers on the back of the card. Lately with the launch of newer card products , they are more open to not showing this information as part of the printed card.
Virtual cards since mirror the physical cards in all respects , are also provided with this security code and its up to the program manager how to implement the display of the same.
In addition for Singapore, MatchMove has also received approval from the Scheme partner (MasterCard) to have a dynamic CVC in which case the value retrieved via API is re-generated on each request. This CVC generated is only valid for one time use or 10 minutes. This provides an additional layer of security , though admittedly it introduces a greater friction in checkout experience for the end users.
Response
Response Attributes
valuestring Required
The value of the card security code.
expirystring
The duration until which the code is valid given no transaction performed in that period
Bad Request
| Code | Description |
| :--- | :---------- |
| resource_card_hash_id_invalid | Invalid card `hash_id`. |
Response Attributes
descriptionstring Required
Response Attributes
descriptionstring Required
Forbidden
| Code | Description |
| :--- | :---------- |
| restricted_resource | Access with method `POST` denied |
| resource_wallet_card_assoc_number_must_not_be_present | Parameter `assoc_number` must not be present for non-physical or personalized cards. |
Response Attributes
descriptionstring Required
Resource not found
| Code | Description |
| :--- | :---------- |
| resource_not_found | The requested URL was not found |
| | |
Response Attributes
descriptionstring Required
Internal Server Error
| Code | Description |
| :--- | :---------- |
| resource_risk_service_config_error | Unable to process the request due invalid risk service configuration. |
Response Attributes
descriptionstring Required
Response Attributes
descriptionstring Required
External Service Error
| Code | Description |
| :--- | :---------- |
| resource_wallet_card_assoc_number_must_not_be_present | Parameter `assoc_number` must not be present for non-physical cards. |
Response Attributes
descriptionstring Required
Response Attributes
descriptionstring Required