If a shop asks for your card's security code outside a normal checkout, or wants it "confirmed" by email or chat afterward, close the tab. That three or four digit code is not a password and it is not an identity check. It exists to show the physical card was on hand for one purchase. No greeting card shop, florist, or gift retailer needs it again once the order is placed.
Why that little code matters more than shoppers think
Card networks added it to cut down on phone and mail orders where someone had the card number but not the card itself. Merchants that keep it after authorization are breaking card industry rules, which is why a request to re-enter it days later is nearly always someone fishing. I keep one rule: the code goes in the checkout field, once, and nowhere else.
Red flags I look for on gift and card sites
- A checkout or follow-up form that asks for the code by email, chat, or text.
- Prices far below every other shop for the same gift bundle or bouquet.
- No business address, no phone number, no returns policy, no real contact page.
- Pressure to pay by gift card, wire, or crypto instead of a card.
- A new domain with stock photos, invented reviews, and a countdown timer.
Payment methods that keep you in control
Virtual card numbers from your bank or a card app can be locked to one merchant or one spending limit, so a leak stays small. Wallets do the same job by keeping your real number out of the shop's hands. Either way, check your statement within a few days, since gift orders often post under a parent company name you won't recognise.
If your details end up somewhere they shouldn't
Call the number on the back of your card, ask for a new number, and dispute anything you don't recognise. In the US you can file a report with the FTC and the IC3. Federal law caps your liability for unauthorized charges, but only when you report fast. Save the order emails and screenshot the pages before you delete anything.
Buying cards and gifts without the worry
Stick to shops you could find again on a high street, pay with a card or wallet, and buy gift cards straight from the retailer instead of a reseller. If a deal on a birthday card bundle feels too good, it usually is.