What is a CVV2 shop?
A CVV2 shop is an illegal marketplace that sells stolen card verification values, often bundled with card numbers and expiry dates. These sites operate outside card network rules and exist to commit payment fraud, not to sell greeting cards or gifts. Buying from one is a criminal offence in most countries and carries no consumer protection of any kind.
Any search result, ad or message promoting a CVV2 shop, a card dump or a "fullz" bundle should be treated as hostile. Legitimate retailers never sell card data in bulk because they are forbidden from storing it.
What is CVV2 on a payment card?
CVV2 is the three digit code printed on the back of most Visa, Mastercard and Discover cards, and the four digit code on the front of American Express cards. It proves the person paying has the physical card in hand, which is why it matters so much for card not present purchases. A genuine greeting card or gift checkout asks for it every single time.
Why do CVV2 shops keep appearing in search results?
Fraud operators rotate domain names and buy cheap ads, so removal never keeps pace with new listings. Some pages are pure bait that harvest card details typed in by curious visitors. Others are outright scams that take payment and deliver nothing.
Red flags at any gift or greeting card checkout
- Gift cards or gift boxes priced 20 to 70 percent below retail.
- Payment demanded by crypto, wire transfer or gift card codes.
- No business address, no refund policy, no reachable customer service.
- A checkout that asks for a card number but never asks for CVV2.
- Countdown timers and pressure copy pushing you to pay fast.
How do you protect your CVV2 when buying cards and gifts online?
Buy from retailers you can verify, and confirm the address bar shows HTTPS before you type anything. Use a credit card rather than a debit card, because credit purchases give you stronger dispute rights if goods never arrive. Many issuers also offer single use virtual card numbers that expire after one purchase.
Never send a photo of your card, front or back, to anyone who asks for it in a chat or message. Keep order confirmations until the gift has arrived and been checked.
Should you use a virtual card for gift shopping?
Yes, a virtual card limits the damage if a small shop is breached. It gives the merchant a number that cannot be reused elsewhere, and your real CVV2 stays private. This is especially useful for one off purchases from independent card and gift sellers.
What should you do if your card details end up on a CVV2 shop?
Call the number on the back of your card and ask for the card to be cancelled and reissued. Review recent statements for small test charges, which fraudsters often run before larger ones. Then file a report with your national fraud or cybercrime agency so the pattern is recorded.
Change passwords on any shopping account that stored the card, and turn on two factor authentication. Speed matters, because unauthorised charges are far easier to reverse in the first few days.
How do you buy greeting cards and gifts safely?
Stick to established card shops, supermarkets, florists and marketplaces with visible seller ratings. Pay inside the site checkout, and keep the confirmation email until the recipient confirms delivery. If a deal looks impossible, it usually is.