Token cryptogram (TAVV)
A single-use value that rides along with a network token and proves it is being used by whoever it was issued to.
A network token is, in a sense, just another card number. Without something extra, a stolen one would be as good as a stolen PAN. So the token service demands a cryptogram for every customer-initiated payment. The merchant or wallet requests one just before checkout, and it travels with the authorization through the acquirer. Visa calls it the TAVV, Token Authentication Verification Value; Mastercard's equivalent is the DSRP cryptogram.
It is bound to the token, often to the amount and merchant as well, and works exactly once. In a shop the chip's ARQC does the same job. Not to be confused with the CAVV, which proves that 3-D Secure took place. Both are called something-something verification value, which does not exactly help.