The short answer
There is no legal place to buy CVV data. A card verification value belongs to the cardholder and the issuing bank. A person who offers to sell you CVV numbers is committing access device fraud. A person who pays for those numbers joins the same crime.
Search results and chat ads that promise "fresh CVV" for bitcoin describe a product that does not exist in any lawful market. Card issuers do not sell card data. Card networks do not sell card data. Banks do not sell card data.
What a CVV actually is
A CVV is a short code printed on a payment card. Visa, Mastercard, and Discover print 3 digits on the back. American Express prints 4 digits on the front. The code proves that the person typing the card number also holds the plastic.
PCI DSS bars merchants from storing the code after a transaction is authorized. That rule is why the field is blank or masked on receipts and statements. Online merchants ask for the code at checkout, pass it to the issuer, and drop it.
Buying CVV Online: A Comprehensive Guide
Who sells CVV numbers
Sellers who advertise card codes on forums, chat apps, and dark web markets fall into 3 groups:
- Scammers who take the bitcoin and send random digits or nothing.
- Resellers who pass on card numbers that issuers already blocked.
- Undercover law enforcement accounts that log the payment and the buyer.
All 3 leave the buyer with a loss. Bitcoin transfers cannot be reversed, so there is no refund path and no dispute process.
Penalties in the United States
18 U.S.C. § 1029 covers access device fraud. Trafficking in unauthorized access devices carries up to 10 years in prison. The maximum rises to 15 years when the value of the devices totals $1,000 or more in a 12-month period. A conviction can also bring fines and restitution.
If you already sent money
- Accept that the bitcoin is gone. The network has no chargeback.
- Keep records. Save the wallet address, the chat log, and the payment date.
- Report the loss to the FTC at ReportFraud.ftc.gov and to the FBI Internet Crime Complaint Center at ic3.gov.
- Contact your bank or card issuer if your own card data was exposed.
Lawful ways to pay online
Use a virtual card number from your bank. Many issuers issue single-use numbers that expire after one merchant. Digital wallets such as Apple Pay and Google Pay replace the card number with a token, so the merchant never sees the 16 digits. For subscriptions, set a spending limit on a separate card.
Card safety steps
- Check the statement each month and dispute unknown charges inside 60 days.
- Turn on transaction alerts for every charge above $1.
- Freeze the card in the issuer app when it is not in use.
- Never send a CVV by email, text, or chat. No real merchant asks for it that way.
Bottom line
There is no product behind the search term. The code on your card is a security feature, not merchandise. The lawful actions are to protect your own card and to report any offer to sell card data.