You cannot buy a CVV, and no legitimate website sells one. The CVV is the three or four digit security code printed on a payment card, and it exists for one purpose: to prove that whoever is paying is holding the physical card. A shop offering to sell CVVs, card dumps or "fullz" is selling stolen payment data, and buying it makes you a participant in card fraud. If you are shopping for greeting cards or gifts and a seller asks for your CVV outside a normal checkout page, that is a fraud attempt, not a bargain.
What Is a CVV and Why Is It Never for Sale?
A CVV is a verification value issued by the bank that owns the card, not a product any merchant can resell. Card networks and the PCI Security Standards Council require merchants to delete the code after a transaction is authorised, so it cannot legally sit in a shop's database waiting to be traded. There is no wholesale market, no licensed distributor and no supplier for CVVs. Every listing you see is either stolen data or an outright scam that takes your money and sends nothing.
How Do You Buy Greeting Cards and Gifts Online Safely?
A safe purchase is one where you pay the retailer directly through its own checkout, never a stranger through a message. Check these points before you enter card details:
- The browser address starts with HTTPS and the padlock is present.
- The retailer has a real business address, a working phone number and a published returns policy.
- Payment runs through a recognised processor or your own bank's verified checkout.
- You were not pressured to pay by gift card, bank transfer, crypto or a payment app.
- The company name on the checkout page matches the shop you think you are buying from.
What Should You Compare Before You Check Out on a Gift Order?
For cards and gifts, delivery certainty matters more than a few cents off the item price. Compare the guaranteed arrival date, the cut-off time for same-day dispatch, the cost of tracked shipping and the rules on personalised or printed items, which are often non-refundable. Check whether the price includes tax and whether overseas delivery creates customs charges. Confirm the returns window covers the date the recipient will actually open the gift.
What Are the Red Flags of a Fake Card or Gift Shop?
Fraudulent stores often copy real product photos, run a countdown timer and advertise prices far below everyone else. Other warning signs include social media accounts created weeks ago, reviews that repeat the same phrasing, and a support contact that is only an email address. A sudden request for your card number, expiry date and CVV by chat or email is the clearest signal of all. Legitimate gift shops never ask for card details outside their payment page.
Is It Safe to Save Your Card with a Gift Retailer?
Saving a card is reasonably safe when the retailer uses network tokenisation, which replaces your card number with a token that is useless if leaked. The CVV is never stored in that process, which is why you still type it in on some repeat orders. If a site stores your full card number and asks you to re-enter the CVV every time without a token, treat that account with caution.
What Should You Do If Your Card Details Are Misused?
Contact your card issuer immediately so the card can be blocked and the charges disputed. In most countries, cardholders have limited or zero liability for unauthorised transactions if they report them promptly. Then report the incident to your national fraud reporting body so the fake shop is investigated. Keep screenshots of the order, the messages and the payment confirmation.