# Pay with tokenized CVV

Our Frames Mobile SDKs allow you to tokenize a Card Verification Value (CVV), so that you can process transactions with stored card details. With this tokenization process, you do not have to store any sensitive information.

> **Note**
>
> - You must be SAQ-A compliant to use this feature.
>
> - Some regions require you to send a security code when you perform a payment with a stored card. To remain at PCI compliance level SAQ-A, you can use the SDK's security code component to securely tokenize a security code.

---

## Request a payment with a stored CVV

To perform a payment with the tokenized CVV, pass the value into the request's `source.cvv` field. The token ID is prefixed with `tok_`.

### Request example

> **Information**
>
> Your base URL's `{prefix}` value is unique to your account and environment. To learn how to retrieve your base URLs for the sandbox and production environments, see [API endpoints](https://www.checkout.com/docs/developer-resources/api/api-endpoints.md).

**Production**

`POST` `https://{prefix}.api.checkout.com/payments`

**Sandbox**

`POST` `https://{prefix}.api.sandbox.checkout.com/payments`

```json
{
  "source": {
    "type": "id",
    "id": "src_6pbkv36rtojuxosxczx34fes4u",
    "cvv": "tok_ubfj2q76miwundwlk72vxt2i7q"
  },
  "amount": 5000,
  "currency": "USD",
  "payment_type": "Regular"
}
```

### Response example

```json
{
  "id": "src_6pbkv36rtojuxosxczx34fes4u",
  "action_id": "act_mbabizu24mvu3mela5njyhpit4",
  "amount": 5000,
  "currency": "USD",
  "approved": true,
  "status": "Authorized",
  "auth_code": "770687",
  "response_code": "10000",
  "response_summary": "Approved",
  "risk": {
    "flagged": false,
    "score": 0
  },
  "source": {
    "id": "src_6pbkv36rtojuxosxczx34fes4u",
    "type": "card",
    "last4": "4242",
    "fingerprint": "F31828E2BDABAE63EB694903825CDD36041CC6ED461440B81415895855502832",
    "bin": "424242"
  },
  "processed_on": "2024-09-10T10:11:12Z",
  "reference": "ORD-5023-4E89",
  "scheme_id": "489341065491658",
  "links": {
    "self": {
      "href": "https://{prefix}.api.checkout.com/payments/pay_mbabizu24mvu3mela5njyhpit4"
    },
    "action": {
      "href": "https://{prefix}.api.checkout.com/payments/pay_mbabizu24mvu3mela5njyhpit4/actions"
    },
    "void": {
      "href": "https://{prefix}.api.checkout.com/payments/pay_mbabizu24mvu3mela5njyhpit4/captures"
    },
    "capture": {
      "href": "https://{prefix}.api.checkout.com/payments/pay_mbabizu24mvu3mela5njyhpit4/voids"
    }
  }
}
```

If the payment failed due to an issue with the CVV token, you'll receive a `422` response with one of the following error messages:
- `cvv_token_invalid`
- `cvv_token_used`
- `cvv_token_expired`