There is no legitimate CVV2 seller
Every week someone lands on a gift shop looking for the wrong thing. The search "buy cvv2" turns up next to "buy gift card codes" and "cheap e-gift card," as if they were the same kind of purchase. They are not, and I want to be straight with you about that before anything else on this page.
CVV2 is the three digit code on the back of a Visa, Mastercard or Discover card, or the four digit code on the front of an American Express. Its only job is to prove that whoever typed the number is holding the physical card. A code that anyone can buy in bulk proves nothing. That is why no bank, payment processor or retailer sells them, and why a page like this one has nothing to offer you on that front.
What those listings actually are
Offers promising CVV2 numbers by the hundred tend to fall into two buckets. The first is a plain scam: you send crypto or a transfer, the seller goes quiet, and you have no recourse because you were buying something that does not legally exist. The second is real stolen card data. Buying it is carding, a federal offense in the US, and the paper trail runs through payment networks that employ people whose whole job is tracing it.
If you are worried about your own card, the useful move is not buying anything. It is calling the number on the back of the card and asking for a replacement.
Buying gift cards and gift codes instead
Gift cards are the honest version of what most people searching that phrase actually want: a code they can spend. A few things I check before buying one online.
- Buy from the retailer or a known national chain, not from a marketplace seller with a screenshot for a photo.
- Treat a discount deeper than about 10 percent as a warning sign, not a bargain.
- Check the card's balance at the register or the issuer's site right after purchase, before you gift it.
- Keep the receipt and the card number. Both help if the balance turns up empty.
- Never send a gift card code to someone who contacted you first. That request is a scam, every time.
When the code on your card leaks
Report the unauthorized charge to your issuer within a couple of days and follow up in writing. Federal rules cap your liability when you report promptly, and reporting fast also shortens the window a thief has to work with. Then file a report with the FTC at IdentityTheft.gov if the card was opened in your name, and with the FBI's IC3 if you lost money to a seller who promised card data.
That is the short version. A code printed on plastic is a lock, not a product. Anything sold as one is either fake or stolen, and neither is worth your money.