There is no shop that sells CVVs
If you came here looking for where to buy CVV numbers, the honest answer is that no such store exists. What gets sold in those places is stolen card data, and using it is card fraud in the US, UK, EU, Canada and most everywhere else. The listings are run by people who either traffic in stolen numbers or take payment from buyers and vanish. Both endings are the same for whoever paid.
I would rather spend this page on the thing you probably actually need: paying for a card, a gift or a present online without getting burned, and understanding the one field that keeps showing up in every scam story.
What the three digits actually do
The CVV (Visa and Mastercard call it CVV2, Amex calls it CID) is a short code printed on the card itself. Three digits on the back for most cards, four on the front for Amex. It exists for card-not-present checkouts, where nobody can physically read the chip. The issuer generates it and ties it to the account, and it is not supposed to sit in a merchant's database once the transaction clears. PCI DSS rules forbid keeping it after authorization, which is precisely why criminals want it: a bare card number is far less useful without those digits.
So when you type it into a checkout form for a birthday card and a box of chocolates, that is the normal use. When someone asks you to read it out over the phone, in a chat window or by email, that is the abnormal use, and it is nearly always a scam.
Buying cards and gifts online: what to check first
A greeting card shop, a florist or a gift marketplace is a card-not-present merchant by default. Payment happens through a processor, not through the shop's own server. Before you enter anything, look at a few concrete things.
- Checkout URL and padlock. The payment step should sit on a hosted payment page or a processor domain, not a random subdomain of a small shop.
- 3-D Secure prompts. A bank app confirmation or one-time code during checkout is a good sign, not an annoyance. It shifts liability and blocks a lot of stolen-card use.
- Billing address matching. Address verification is why a mismatch between your billing address and the one on file triggers a decline. Enter it as your bank has it.
- Delivery versus billing country. Gifts shipped to a different country than the card is registered in will often fail manual review, which is normal.
- Refund policy in writing. For gift orders, this is the parameter people forget until they need it.
Pitfalls that cost real money
- Shops that ask for your CVV by email, chat or a phone call. No legitimate processor needs that.
- Discounted gift card resale listings at deep cuts. Stolen balance is the usual source of the discount.
- Pressure to pay outside the site, by bank transfer, crypto or a gift card code. That is the pattern agencies keep warning about.
- Screenshots of your card front and back sent to a seller as proof of funds. Never do this.
Gift cards are the other half of this problem
Scammers who cannot get a card number go after gift card codes instead, because a greeting card and gift niche is full of them. The pitch is always some version of: buy the cards, then read me the numbers on the back. Once those digits are shared, the balance is gone and it is very hard to recover. Treat the code on the back of a gift card exactly like a CVV. It is a payment credential, and it belongs to whoever is holding the plastic.
Quick checklist before you hit pay
- Buy from a shop you can find outside of an ad, with a real address and a reachable support channel.
- Pay inside the merchant's own checkout, with a card or a wallet you control.
- Never share the CVV, the gift card code or a photo of the card with another person.
- Keep the order confirmation, and set a bank alert on the card for anything you did not expect.
- If a deal requires urgency or secrecy, it is not a deal.
That is the whole guide. The keyword you searched for describes a crime, not a purchase. The purchase you probably wanted, a card or a gift sent to someone you like, is a normal transaction with a normal checkout, and it is worth doing properly.