A "CVV2 shop" is an illegal online marketplace that sells stolen credit and debit card numbers together with the three-digit verification codes printed on those cards. Legitimate greeting card and gift retailers do not run CVV2 shops, do not sell card data, and never need your full card details outside a secure checkout. Searching for one puts you in contact with fraud networks, phishing pages, and advance-fee scams, and buying or selling card data is a crime in most countries.
What does CVV2 actually mean?
CVV2 is the three-digit value printed on the back of a Visa card, used to confirm that the person paying is holding the physical card. Visa introduced the code so that a stolen card number alone would not be enough to complete a purchase. Merchants ask for it once, during payment, and then it should be discarded.
Why are CVV2 shops dangerous?
Sites advertising card data for sale are usually traps rather than stores. Some exist only to phish your own card details, while others take payment in cryptocurrency and vanish. Anyone who trades in that data is committing payment fraud and can face prosecution, chargebacks, and permanent account bans.
How do real card and gift shops verify a card?
Reputable retailers follow the PCI Data Security Standard, which forbids storing sensitive authentication data such as CVV2 after a transaction is authorized. Most also use tokenization, so the shop keeps a random token instead of your card number, plus 3-D Secure prompts from your bank for extra confirmation. This is why a normal gift shop checkout asks for your code once and never again.
Does buying a greeting card online require your CVV2?
Yes, but only inside the payment form at checkout, on a page secured with HTTPS. A shop that requests your CVV2 by email, text, phone, or chat is a serious red flag. No genuine retailer needs your code to "confirm" an order, "release" a refund, or "unlock" a discount.
What should you do if you find a CVV2 shop?
- Do not browse further, register, or send payment of any kind.
- Report the site to your national cybercrime portal, such as the FBI's Internet Crime Complaint Center.
- Report consumer fraud to the FTC, and use IdentityTheft.gov if your own details were exposed.
- If your card number leaked, call your issuer to freeze the card and request a replacement.
The bottom line for shoppers
Cards and codes belong on secure checkout pages, not in markets. Treat any "CVV2 shop" as a fraud signal, keep your code private, and buy gifts only from retailers with published security and privacy policies.