Start here: a CVV is not a product you can buy
The CVV is the three-digit code printed on the back of most bank cards, or the four-digit code on the front of an American Express card. Your bank generates it and ties it to one account. It is not inventory, it is not a gift item, and no legitimate seller lists it for sale. Anyone advertising a CVV for purchase is either handling stolen card data or running an advance-fee scam, and both are criminal offences in the United States, the United Kingdom, the European Union and most other markets.
This guide covers the lawful version of that search intent: buying greeting cards and gifts from real shops, understanding why a checkout asks for your code, and recognising the listings that exist only to take your money.
Prerequisites before you order from any gift shop
- A card in your own name, or written permission from the account holder
- A checkout page with a valid HTTPS certificate and a visible business address
- A saved copy of the order confirmation and the shop's returns window
How a legitimate card-not-present purchase works
- Enter the card number, expiry date and the name printed on the card.
- Enter the CVV from the physical card. You read it, you do not buy it.
- Complete the bank's authentication step if the shop uses 3-D Secure, such as an in-app approval or a one-time code.
- Wait for the authorisation result before the shop prepares your gift for dispatch.
- Check the statement entry matches the shop name within a few days.
What a shop may and may not keep
Payment card industry rules require merchants to protect the card number, and they forbid storing the CVV after a transaction is authorised. That single rule explains why no honest shop can email you a stored code, resend it, or sell it onward. If a support agent offers to "look up your CVV" from their system, treat that as a red flag about the whole business.
Parameters worth comparing between gift retailers
- Which payment methods are accepted, and whether your bank's authentication is required
- Refund and replacement policy for personalised cards and perishable gifts
- Whether the shop shows a real company registration number and phone line
- Delivery tracking, because untracked gift orders are the hardest to dispute
- Data retention statement covering card details and address history
Pitfalls that cost buyers real money
- Forums, chat groups and marketplaces selling "CVV" or "fullz" bundles. You receive nothing usable and your own card details become the next item they sell.
- Sellers who demand payment in gift cards or cryptocurrency, which removes your chargeback rights.
- Discounted gift card codes from unknown resellers, which are frequently cancelled after purchase.
- Lookalike domains that copy a real card shop but ask for the code on a second, unrelated page.
If your card details were exposed
- Call the number on the back of your card and ask for the card to be frozen.
- Request a replacement card with a new number and a new CVV.
- Dispute every charge you do not recognise in writing.
- Change passwords on shopping accounts that stored the card.
- Report the incident to your national fraud reporting service.