Answer first

In the Worldpay test environment, a test CVV is any three-digit value you type into the card security code field. The sandbox does not send the value to an issuer, so it cannot match or mismatch a real card. Enter 123 for a normal approval path, and switch to a documented test card or a forced result code when you need a decline. Card verification data belongs to the live payment flow only, so never load a real card into a test account.

Prerequisites

  • A Worldpay test merchant account or sandbox credentials for your integration type.
  • The current Worldpay test card list for that integration.
  • A request log that captures the full response, including the CVV result code.

Steps

  1. Open your Worldpay merchant configuration and confirm the environment is set to test, not production.
  2. Copy a test card number from the Worldpay test card list that matches your integration, such as Direct or Hosted.
  3. Set the expiry date to a future month and year, for example 12/2030.
  4. Type 123 in the CVV field to run a standard approval scenario.
  5. Submit the payment and read the CVV result code in the response.
  6. Repeat the payment with the test card documented for a verification failure if you need a decline path.
  7. Submit again with the CVV field left empty to test the missing-code branch of your form.
  8. Record each request and response pair so your QA notes map inputs to outcomes.

CVV result codes

Worldpay returns a single-letter result code for card verification. M means match, N means no match, P means not processed, S means the code should have been present, U means the issuer does not support verification, I means the check was skipped, and X means no response arrived. Your integration should branch on these values instead of on the decline text.

Common mistakes

  • Typing a live card number into the sandbox. Test data only.
  • Expecting a three-digit value to fail. The sandbox ignores the digits unless a scenario asks for them.
  • Using a 3-digit code on an Amex test card, which expects four digits.
  • Hardcoding one test card number in your fixtures after Worldpay rotates the list.

Keep the CVV out of any stored order record. Capture the result code, then discard the value.