The CVV2 is a 3- or 4-digit value printed on the card or signature strip, but not encoded on the magnetic stripe. The number is generated when the card is issued, by encrypting the card number and expiry date under a key known only to the issuing bank. Supplying this code in a transaction is intended to verify that the customer has the card in their physical possession.