For that reason, sites are not allowed to store CVV2 numbers : a user input is always needed.