CVV2 is slightly different (enhanced security). Because this is not what HSBC receives back in the transaction from the merchant, it bombs.
Citibank confirmed the same technical detail.
Surely other people are buying online somehow??
↧