What the CVV number is
A card verification value is a short code printed on a payment card. Visa, Mastercard and Discover cards carry three digits on the back, inside the signature strip. American Express cards carry four digits on the front, above the card number. The code is not embossed. It does not sit on the magnetic stripe and it is not stored in the chip.
Banks issue the code so a merchant can check that the person typing the card number holds the physical card. Gift orders often ship to an address that differs from the billing address. That gap is where card-not-present fraud lives, and the CVV is one control against it.
Why a greeting card or gift shop asks for the code
Card networks treat a matching CVV as one signal in a risk score. A mismatch raises the score and can void the transaction. A merchant that ships to a new address carries the loss when an order turns out to be fraudulent.
PCI rules bar merchants from storing the CVV once the transaction completes. If a shop shows your stored code on a later visit, treat that as a problem with the site.
Checks before you pay
- The address bar shows https and the domain matches the shop name.
- The payment form is hosted by a processor you recognize, or the shop names the processor.
- Return and refund terms appear on the site.
- A business address and a phone number are listed.
- The statement descriptor is explained, so you know what to look for on the bill.
Pitfalls
- Sellers who offer card numbers, CVV lists or fullz for sale. The data is stolen. Buying or selling it is a crime in most countries, and the buyer holds no protection when the card is cancelled.
- Anyone who asks for the CVV by email, chat or phone. No honest merchant needs the code outside a payment form.
- Forms that ask for the CVV plus a photo of the card, or the card PIN.
- Gift card codes sold at a deep discount on a resale marketplace. The balance is often already spent.
- A checkout page that sits on a different domain from the shop.
If you think your code was taken
Call the number on the back of the card. Ask for a replacement card and a new number. Read the statement for charges you do not recognize. In the US, report card fraud to the FTC and file a complaint with the FBI Internet Crime Complaint Center.