What a CVV is
CVV stands for card verification value. Visa, Mastercard and Discover print three digits on the back of the card, next to the signature strip. American Express prints four digits on the front, above the card number. The issuing bank generates the number. Visa, Mastercard, American Express and Discover do not sell CVV codes to the public.
A CVV is an access device. It lets a merchant check that the person typing a card number holds the physical card. Card network rules forbid merchants from storing the CVV after a payment is authorized.
Why there is no legitimate listing
The search phrase "buy CVV" points to a market for stolen card data. Sellers on chat apps and darknet forums offer card numbers, expiry dates and CVV codes in batches. That data comes from breaches, skimming devices and phishing pages. No bank or payment processor issues CVV numbers for resale.
Buyers in that market face two outcomes. The data is fake and the money is gone, or the data is real and the buyer has committed a crime.
Legal position
- United States: 18 U.S.C. Section 1029 covers trafficking in access devices. Penalties reach 15 years in prison plus fines.
- United Kingdom: the Fraud Act 2006 covers possession of articles for use in fraud. Penalties reach 10 years.
- European Union: card fraud falls under national criminal codes.
Issuers monitor card data for misuse. A bank can void a card and reverse charges. A merchant that stores CVV codes after authorization loses PCI DSS compliance.
What searchers need instead
- Your own CVV: read the back of the card or open the bank app.
- A card number for checkout without exposing your main card: ask your bank for a virtual card number.
- A payment method you do not have: buy a prepaid card at a shop.
- A gift for someone: a greeting card plus a store gift card covers the same ground with no card data involved.
Pitfalls to avoid
- Sites that sell CVV codes or fullz take payment in cryptocurrency and deliver nothing.
- Chat app sellers of card data are scam operations or police stings.
- Sending your own CVV by email, chat or photo is a common path to card fraud.
- No gift shop, greeting card retailer or bank asks for a CVV by message.