Choose from any of our gift cards to give to your loved ones
cvv attack indicator detection
Redeem your gift cards at any of our Merchants
You can purchase a gift card from any of these locations
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
It means finding the artifacts in your own systems that prove someone is verifying stolen card data, or that CVV data has already escaped. The CVV is the three or four digit value printed on a card, and under PCI rules it must never be stored after the authorization is complete. That single fact drives everything. Because legitimate systems do not keep CVVs, any pattern that looks like repeated CVV submission is either an attack or a storage violation, and both are incidents.
I break the question into three parts: is someone probing our payment endpoint, has card data left our environment, and is a stored credential being reused elsewhere. Each one leaves different evidence.
Your processor returns a CVV result code alongside the authorization response. The common values are M for match, N for no match, P for not processed, U for unavailable, and S for the issuer does not support verification. I filter on N first, group by card number, and count within a rolling hour. A card with three or more N responses from the same source is worth a manual look. Codes U and P are softer signals, but a spike in them usually means someone is probing which issuers respond and which do not.
Shared corporate IP ranges, gift card programs, subscription retries after a card reissue, and a new checkout release that changed field names all generate noise. So do travel portals, where the same customer legitimately enters a new card from a new country. The distinguishing factor is breadth. A real card-testing run touches many card numbers from one source. A false positive touches one card number from many sources.
Rate limit the payment endpoint by IP and by device, enforce a hard cap on CVV attempts per card per hour, and make sure your own systems physically cannot write a CVV to disk. Card data traded in bulk on illicit markets exists because it was captured somewhere, so the strongest CVV IoC program is the one that also proves your environment never became the capture point.
