Buying a CVV is a crime in the US, UK, EU, Canada, and most other markets. A CVV is the 3 or 4 digit security code printed on a payment card, and it exists to prove the buyer holds the physical card. Every site that sells CVVs is trading stolen card data, running a scam, or both.
If you found this page while shopping for a gift and saw a "buy CVV" offer, stop there. The rest of this guide covers what the code is, why the offers are traps, and how to pay for gifts online without putting your own card at risk.
What is a CVV on a card?
The CVV (card verification value) is the short number kept separate from the main card account number. Visa, Mastercard, and Discover print three digits on the back; American Express prints four on the front. Banks generate it from the account number and an encryption key, so a thief who copies your card number still lacks the code.
- Visa, Mastercard, Discover: 3 digits, back of the card, right of the signature strip
- American Express: 4 digits, front of the card, above the account number
- Other names: CVV2, CVC2, CID, card security code
Online stores ask for the CVV at checkout to confirm the card is in the buyer's hand. That single check blocks a large share of card fraud, which is why payment rules bar merchants from storing the code after a sale.
Is it legal to buy a CVV?
No. Card numbers and their security codes belong to the account holder and the issuing bank, so selling them is trafficking in stolen data. In the US, that falls under 18 U.S.C. 1029, which covers fraud with access devices and carries fines plus prison time.
Buyers face charges too. Prosecutors read a purchase as intent to commit fraud, and the payment itself leaves a trail through crypto exchanges, chat logs, and bank transfers. There is no legal marketplace for card codes anywhere.
Why "buy CVV" offers are a trap
Shops that advertise CVVs exist to take money from buyers. The card data is dead, the seller vanishes, and the buyer has no way to complain without admitting to a crime.
- Dead cards. Most numbers sold are canceled, blocked, or drained before they change hands.
- No recourse. You cannot dispute a payment for illegal goods.
- Malware add-ons. Many of these shops serve a script that lifts your own card and login data.
- Legal exposure. Buying is the offense the seller's own logs document.
- Blackmail. Some sellers keep chat records and demand more money later.
Free "CVV checker" tools are the same trap in another wrapper. They capture whatever card number you type in, including a valid one.
How to buy gifts online without exposing your CVV
Pay with a service that hides your card
PayPal, Apple Pay, Google Pay, and Shop Pay send a token instead of your card number and CVV. The store never sees the code, so a breach at the store cannot leak it.
Check the shop before you type
- Look for https and a padlock, then read the domain spelling. Fake shops swap one letter.
- Read the returns policy and the physical business address.
- Search the brand name plus "scam" before a first order.
- Ask your bank for a virtual card number for one-off gift purchases.
Keep the code off paper and out of chats
Never send a photo of your card, and never read the CVV to someone who calls you. Banks do not ask for it by phone, text, or email. If a seller on a marketplace asks for your card code to "verify" a gift order, that is a scam, not a checkout step.
What happens if your CVV leaks?
Call the number on the back of your card and ask the bank to freeze the account. Then check recent charges, change passwords on shopping accounts, and enable alerts for every transaction.
- Report the charge as unauthorized and request a replacement card with a new code.
- File a report with your national fraud body, such as the FTC in the US or Action Fraud in the UK.
- Keep the card, receipts, and packaging if a gift card you bought turned out to be empty.
Cardholders can dispute unauthorized charges, so a stolen CVV purchase gets reversed at the bank. The merchant and the account tied to the order are the ones who lose.
FAQ
Can I buy a CVV for my own card?
No purchase is needed. Your bank issues the code with the card, and a replacement card arrives with a new one.
What happens if I use a CVV that is not mine?
That is card fraud. The charge gets reversed, the merchant reports it, and the account tied to the order is the first place investigators look.
Are gift card codes the same as CVVs?
No. A gift card code is a prepaid balance; a CVV is a security check on a credit or debit card. Gift card codes are a common scam target on their own, so buy them from a store you trust and keep the receipt.
Do legitimate sellers ever bundle card data with a gift order?
Never. A greeting card shop sells cards and gifts. Any seller offering card codes with your purchase is committing fraud and pulling you into it.