Braintree card verification is the process of confirming that a payment card is valid and authorized before a merchant captures funds. It typically combines CVV validation, address verification (AVS), and optional 3D Secure authentication to reduce fraud and declined transactions.
What Braintree card verification checks
Braintree runs several checks on a card before a transaction is finalized. Each check returns a result that the merchant can use to decide whether to proceed.
- Card Verification Value (CVV): The 3-digit code on the back of most cards or the 4-digit code on the front of American Express cards. Braintree verifies the code with the issuing bank without storing it.
- Address Verification System (AVS): Compares the billing address and ZIP code provided by the customer with the address on file at the card issuer.
- Authorization: A request to the issuer to reserve the transaction amount. Some merchants use a zero-dollar or small-amount authorization to verify a card before charging it.
- 3D Secure: An additional authentication step where the cardholder confirms identity with their bank. Braintree supports 3D Secure 2 for Strong Customer Authentication (SCA) where required.
How the verification flow works
- The merchant submits card details to Braintree through a secure API or hosted form.
- Braintree sends a verification request to the card issuer, including CVV and AVS data.
- The issuer returns response codes for CVV, AVS, and authorization.
- Braintree passes the results to the merchant, who can capture, void, or request another payment method.
The entire flow usually happens in seconds. Merchants can review the response codes to decide whether a transaction meets their risk rules.
Reading verification results
Braintree returns separate result codes for CVV and AVS. A match means the data aligns with the issuer's records. A mismatch or not verified result does not automatically mean fraud, but it may trigger additional review. Authorization results show whether the issuer approved the charge.
Merchants can configure rules in the Braintree control panel to reject transactions when CVV or AVS fails, or to accept them and flag for manual review.
When to use card verification
Card verification is useful for subscriptions, stored card setups, and any transaction where the card is not physically present. It helps confirm that the card details are correct before a merchant commits to a recurring charge or a high-value order.
For one-time purchases, a standard authorization with CVV and AVS checks is often enough. For repeat billing, a zero-dollar verification can confirm the card is active without placing a hold on funds.
Best practices for merchants
- Require CVV for all card-not-present transactions where the issuer supports it.
- Use AVS checks and set clear rules for mismatches.
- Enable 3D Secure for transactions that fall under SCA regulations.
- Never store CVV data after authorization, as PCI DSS prohibits it.
- Review declined verification attempts for patterns that may indicate fraud.
Card verification tools are intended for legitimate merchant use only. Using unauthorized card data is illegal and violates card network rules.