Can you buy CVV numbers from a website?
No. There is no legal website that sells CVV numbers, because a CVV is a security code tied to a payment card and only the cardholder has the right to use it. Online markets that advertise CVV sales deal in stolen card data, and buying from one is card fraud with criminal penalties in most countries.
If you came here looking for a shop selling card codes, that shop does not exist on the open web. What follows covers what a CVV does, how to keep yours safe when you order greeting cards and gifts, and the signs that mark a fake store.
What is a CVV?
A CVV (card verification value) is the short code printed on a payment card. It confirms that the person typing the card number has the physical card in hand.
- Visa, Mastercard, Discover: three digits on the back, to the right of the signature strip.
- American Express: four digits on the front, above the card number.
- Other names: CVC, CVV2, card security code, and CID all point to the same thing.
Card networks added these codes for card-not-present purchases: phone orders, mail orders, and online checkouts. A thief who copied a card number still needs the code, and that extra step blocks a large share of basic fraud attempts.
Why merchants cannot store your CVV
The PCI Security Standards Council bars merchants from storing the code after a transaction is authorized. That rule is why a shop asks for your CVV at checkout but cannot read it back to you weeks later. A support agent who claims to have your CVV on file is lying.
Why sites that sell CVV data are fraud markets
Sellers on those sites list card numbers with matching codes, billing addresses, and sometimes bank logins. The cards behind the listings come from data breaches, skimming devices, and phishing pages.
Buyers carry real risk, and the sellers carry none.
- Card fraud and identity theft charges under laws such as the U.S. Computer Fraud and Abuse Act, plus parallel state statutes.
- Frozen accounts. Banks and payment processors trace these transfers and shut down the accounts that touch them.
- No recourse. When a seller vanishes with your money, you cannot report a stolen-card purchase to police without admitting to a crime.
This is general information, not legal advice. Speak with a lawyer if you face a charge.
How to protect your CVV when you buy gifts online
- Open the store yourself and type the card details on its own checkout page, not on a page a text message or ad sent you to.
- Check the address bar for the padlock and read the domain letter by letter before you type anything.
- Use a virtual card number from your bank for one-off gift purchases. It expires or locks after the order.
- Avoid public Wi-Fi for checkout. Mobile data is safer on a train or in a cafe.
- Keep the card out of photos and screenshots. A CVV in a picture is a CVV shared.
How to spot a fake gift shop
- Prices far below retail on popular gift cards, consoles, or flowers.
- A domain registered this year, with no street address, no phone number, and no company name.
- Checkout that asks for a photo of your card, a code sent by email, or a code sent through chat.
- Payment by gift card, crypto, or bank wire only. Those methods cannot be reversed.
- Missing terms, returns page, or contact details.
What to do if your card data leaks
- Call the number on the back of your card, freeze the card, and dispute any charge you do not recognize.
- Change the password on the store account and turn on two-factor login.
- Read two billing cycles of statements, not one. Small test charges often come first.
- File a report. In the United States, use IdentityTheft.gov and the FBI's IC3 portal, then tell your bank the case number.
FAQ
Is buying a CVV illegal?
Yes, when the code belongs to a card you do not own. That counts as unauthorized use of a payment card, and the act of buying the data can be charged on its own.
Do gift cards have CVVs?
Prepaid and retail gift cards often print a security code, and some checkouts ask for it. It is not a bank CVV, and it offers no protection when the card itself was bought with stolen funds.
Can I email my CVV to a seller?
No. No store needs your code outside a secure checkout page. A request for a CVV by email, chat, or phone is a scam, and legitimate gift retailers never work that way.
Why does a store ask for my CVV again?
Common reasons include a first order, a shipping address that differs from the billing address, or an order the fraud system flagged. The store verifies the code with your bank, then must delete it.
What should I check before paying on a new gift site?
Look for a named company, a working phone line, a returns policy, and a checkout hosted by a known payment processor. If any of those are missing, buy the same gift from a shop you already trust.