In your Authorize.net account, do you have it set to require a CVV code?