Bank of America is testing a new card feature where the CVV number changes automatically every 4 hours. The idea behind a CVV number is that it’s a verification tool that merchants are not supposed to store, in case of a data breach the rest of the card details will be accessible but attackers will not have access to the CVV number. I know a number of other countries have tried dynamic verification codes, for example I think the practice is widespread in the Netherlands.
Hat tip to reddit
