Selling CVV numbers is illegal. A CVV is the three or four digit security code printed on a payment card, and trading those codes without the cardholder's permission is payment card fraud in every U.S. state and in most countries worldwide. There is no legitimate broker, marketplace, or storefront where a person can sell a CVV, and the sites that advertise one exist to defraud the people who use them.
What does CVV stand for?
CVV stands for Card Verification Value. Visa and Mastercard print a three digit code on the back of the card, while American Express uses a four digit code on the front, sometimes labeled CID.
The code exists as an anti-fraud check for card-not-present purchases, such as ordering a birthday gift or a bouquet online. It proves the buyer is holding the physical card rather than reciting a stolen number.
Is it legal to sell CVV numbers?
No. Federal law treats payment card data as an access device, and trafficking in it falls under fraud statutes that carry prison time and heavy fines. State laws add their own penalties for identity theft and computer crimes.
Buying is just as unlawful as selling. A person who purchases card codes can be charged as a participant in the same scheme, even if they never used a single number.
Why do gift shops and greeting card stores ask for a CVV?
Online gift shops ask for the CVV because they cannot inspect the physical card at checkout. The code confirms that the person typing the order has the card in hand, which lowers the chance of a fraudulent purchase going through.
Card network security rules also forbid merchants from storing the code after a transaction is authorized. That means a shopper has to enter it fresh for every purchase, including repeat orders of the same gift box.
How do you protect your card when buying gifts online?
- Buy only from checkouts that show a secure connection and a known payment processor.
- Use a virtual card number or a payment app that hides your real card details from the shop.
- Never read your CVV aloud to someone who calls or texts and claims to be from your bank or a gift store.
- Review statements after holidays and birthdays, when small fraudulent charges hide best.
What should you do if someone offers to buy your card details?
Treat the offer as a scam, a crime, or both. Anyone who asks to buy your CVV is trying to move stolen funds, and the person most likely to be caught is the account holder whose name is on the card.
Report the contact to the Federal Trade Commission, the FBI's Internet Crime Complaint Center, or your card issuer. Then request a new card number so the old details stop working.
Frequently asked questions
Can I sell the CVV of my own card?
No. Sharing your card data with a third party for payment still breaks your cardholder agreement and can make you liable for charges and for fraud committed with your account.
Do any legitimate businesses buy CVV data?
None. Banks, processors, and retailers verify card codes in real time through the card networks and never purchase them from individuals.
What happens to small gift shops hit by card fraud?
They absorb chargeback fees, lose the merchandise, and can face higher processing costs. That is one reason a greeting card or gift store may ask for extra verification on a large order.
Does a CVV alone let someone use a card?
A code by itself is not enough for most purchases. Fraudsters need the full card number, expiration date, and often the cardholder's billing address, which is why data is traded in bulk rather than one number at a time.