You want to buy CVV online, but no legal market for it exists. The CVV on your own bank card is the only one you are allowed to use, and the bank issues it free when the card is printed. Anyone selling CVV numbers is running a stolen-data operation, a scam, or both.
This buying guide covers what a CVV is, what a legal card purchase costs, and how to recognize fake sellers. It also lists the price bands scam sites use so you can spot them. Nothing here is legal advice, and it is not an endorsement of carding shops.
Why the Code on Your Card Is Not a Product
A CVV is a three-digit code on Visa, Mastercard, and Discover cards. American Express prints a four-digit code on the front, called the CID. The code proves you hold the physical card during a card-not-present purchase.
Banks generate the CVV from the card number and expiry date using a cryptographic key. The printed value is not stored in the magnetic stripe or the chip. That design means no merchant database of valid CVVs exists for an online shop to sell.
Carding shops collect CVVs from phishing pages, data breaches, and skimming devices. The numbers are old by the time they appear for sale. The cardholder may have reported the card stolen, which makes the code useless right away.
What to Look For in a Legit CVV Source
If you need a working CVV for your own purchases, start with your card issuer. A legitimate source is a bank, credit union, or payment processor that issues cards under its own license. It never asks you to pay for the CVV as a standalone item.
Check three things before you pay any card-related fee:
- Does the issuer offer a physical or virtual card with EMV chip protections?
- Can you request a virtual card number for online checkout without exposing your main account?
- Is the card replacement or issuance fee a flat dollar amount, not a percentage of an unknown balance?
United States banks must give you a dispute process for unauthorized charges under Regulation E and the Fair Credit Billing Act. That protection is the real product you are buying. A carding shop offers no protection at all, because the card belongs to someone else.
Price Bands: What a CVV Costs
For a standard physical card from a U.S. bank, the CVV costs $0. The card itself may carry a replacement fee between $0 and $15 when you order a duplicate. Expedited shipping can add $20 to $30.
Virtual cards from payment processors and fintech apps cost $0 to $5 per card on most plans. That fee buys a card number, an expiry date, and a fresh CVV generated at your request. You buy the card; the code is a free part of it.
Scam sites list stolen CVVs in tiers. Prices run $5 to $25 for a standard consumer card, $25 to $60 for "Premium" or "Business" cards, and $100 or more for "high balance" cards. The price tracks perceived value, not any real guarantee, and refund promises disappear after payment.
Pitfalls: What Goes Wrong When You Buy CVV Online
Every step of a CVV shop transaction works against you. Here is the sequence:
- You send payment in crypto or a prepaid card, so no chargeback is possible.
- The seller sends a random list of card data, much of it expired or declined.
- If a number is live, the cardholder's bank flags the attempt and records your IP and device details.
- You have no dispute rights, because the contract is illegal.
Using a stolen card number is access device fraud under 18 U.S.C. § 1029. The maximum sentence is 10 years in federal prison. Even buying one CVV is enough.
How Do I Get a Fresh CVV for My Own Shopping?
Check the back of your Visa, Mastercard, or Discover card. The last three digits of the signature panel are the CVV. If you hold an American Express card, the four-digit code is on the front, above and to the right of the account number.
If you want a card that hides your main account number, ask your bank about virtual cards. Request a second physical card for online purchases if virtual cards are not offered. Both options produce a legal CVV tied to your own account.
Is Paying for a CVV Ever Legal?
Yes, in two narrow cases. A bank may charge a replacement fee for a card that carries the CVV, and a payment processor may charge for a virtual card that generates one. In both cases you buy the card, not the code.
If you want to buy a CVV online, the only legal seller is the bank that issued the card. No legitimate business prices CVVs by the line. When you see a list of CVVs with prices attached, you are looking at stolen data.
Short FAQ
Can I use another person's CVV if they give me permission?
No. The cardholder agreement binds only the named cardholder. Banks treat transactions by anyone else as unauthorized, and the dispute lands on the account even when the cardholder claims they approved the use.
What if the CVV shop offers a refund?
It is a lie. Refund policies in carding markets are unenforceable because the agreement is illegal. Sellers use the promise to make buyers feel safe before sending money.
Does my bank ever ask for my CVV by text or email?
No. Legitimate banks never ask for the full CVV by text, email, or phone. If a message does, it is a phishing attack, so report it to your bank.