What a CVV Is
The three or four digit code printed on a payment card is a verification value. It exists so a merchant can confirm that the person typing the number has the physical card in hand. That single purpose is why the code is short, why it is not embossed, and why it is not stored alongside the rest of the account data. It is not a product, a gift code, or a transferable token. It has no separate market because it cannot be separated from the account it belongs to.
Why Buying a CVV Is Not a Purchase
Pages and forum posts that offer card verification values for sale are offers to sell stolen financial data. In the United States, trafficking in card numbers and the credentials that unlock them is prosecuted under 18 U.S.C. 1029, which covers unauthorized access devices. Buyers are not bystanders in that transaction. Paying for the data completes the offense and creates a payment trail that leads back to the buyer. Card networks and issuers also flag, block, and reverse charges tied to reported numbers, so goods bought with a purchased code can be reclaimed.
What Happens After You Pay
- The seller takes the payment and disappears, because there is no honest counterparty to complain to.
- The same number is often sold to many buyers at once and stops working within hours.
- Delivery addresses, handles, and payment records become evidence in an investigation.
- The bank account or card used to send the money may be closed by the issuer.
Legal Ways to Pay Online
If the goal is to buy something without exposing a primary bank account, there are legal tools. Prepaid cards bought at a retail counter carry a balance you load yourself. Virtual card numbers issued by a bank or card issuer are single-merchant tokens that expire after use. Payment services that hold a balance let you pay a merchant without handing over card details at all. Each of these is issued to you, in your name, and can be replaced if it is compromised.
If the Goal Was a Gift
For gifts, a store gift card or a prepaid card with a set balance does the same job a card code would, and it can be replaced when lost. Retailers can check the balance and reissue a card when you have the original receipt.
If Your Own Code Was Stolen
Contact your issuer, then file a report with the FTC through IdentityTheft.gov or with the FBI Internet Crime Complaint Center. Reporting early limits your liability and helps the issuer shut the number down.