You don't need to make the user enter the CVV for any transaction, it just helps with a lower fee and to shift the chargeback liability.