The most reliable answer to where you can buy a CVV is that you should not buy one at all: the top pick is a virtual card number issued by your own bank, which arrives with its own CVC and can be frozen or deleted the moment you finish a checkout. The options below are ranked on four criteria: whether the number is legally yours to use, who absorbs fraud losses if something goes wrong, whether ordinary merchants will accept it, and how fast you can shut it off.
What a CVV is, and why no legitimate seller exists
A CVV, CVC, or CID is the three or four digit code printed on a card or generated for a digital one. It exists to prove that whoever is typing the number has the card in hand, which is why card-not-present merchants ask for it. Card network rules and the PCI Data Security Standard forbid merchants and processors from storing that code after a transaction is authorized. A business therefore cannot keep CVVs in stock, and it has nothing to resell. Anyone advertising CVVs in bulk is selling account data taken from someone else. In the United States, trafficking in that data is a federal crime, not a gray-market shortcut.
Option 1: Virtual card numbers from your own issuer (top pick)
Many banks and card issuers let you create a virtual card inside the banking app. It gets its own number, expiry date, and CVC, and it draws on your real account.
Pros
- The number belongs to your account, so using it is legal and defensible.
- Your existing fraud liability protections usually still apply.
- You can set a spending cap or delete the number after one merchant.
- If a merchant leaks the number, the damage is contained to that one card.
Cons
- Not every issuer offers the feature, and some limit how many virtual cards you can hold.
- A handful of merchants reject virtual numbers, especially for subscriptions or travel holds.
- Setup takes a few minutes and usually requires strong login verification.
Use this when you are paying a merchant you do not fully trust, or when you want to keep a subscription from following you to a replacement card.
buy cvv online safe with bitcoin
Option 2: Prepaid and reloadable cards bought at retail
Prepaid cards sold in stores carry a real CVC and can be registered in your name. They are a workable fallback for one-off online purchases.
Pros
- Available without a credit check and accepted almost everywhere major cards are accepted.
- Your exposure is capped at whatever balance you loaded.
- Registration in your own name keeps the purchase legitimate.
Cons
- Some online merchants block unregistered or gift-style prepaid cards.
- Fees can apply for activation, reloads, or inactivity.
- Dispute rights are weaker than on a credit card, so a bad merchant is harder to fight.
Use this when you want a hard spending ceiling and do not need chargeback leverage.
Option 3: Tokenized cards in a digital wallet
Wallets replace your card number with a device-specific token and often handle the CVC step in-app. You never see or type a stored code.
Pros
- The merchant never receives your real card number, so there is nothing for a leak to expose.
- Checkout is faster and works well on mobile.
- Losing the device does not expose the underlying account number.
Cons
- Not accepted by every online store.
- You cannot read or share the code, which rules out phone orders and some manual checkouts.
Use this when the merchant supports wallet checkout and you want the least data exposed.
The option to reject: "CVV shops" and carding markets
Sites and chat channels that sell CVVs, "fullz," or card dumps are not a product category you should evaluate on price or delivery speed. There is no version of this purchase that ends well.
- Buying the data is itself a federal offense, and the buyer leaves payment and contact traces.
- The seller already has your payment details, so the transaction is an easy setup for a second theft.
- Files commonly carry malware, and buyers are often blackmailed after paying.
- Nothing is guaranteed: the same number is typically resold many times and is dead on arrival.
There is no use case recommendation for this route. If a checkout page or a stranger is offering to sell you a CVV, treat it as a fraud attempt and stop.
Parameters to check before you pay
- Is the page served over HTTPS, and does the padlock stay on the checkout form itself?
- Does the site ask for the CVC on a page it controls, rather than redirecting you to a chat or email?
- Are the return policy, billing descriptor, and support contact visible before you enter card data?
- Does the merchant post a current privacy policy that explains what card data it keeps?
- Is your card issuer's virtual number or wallet option available for this merchant?
- Will the charge be traceable to you, with a receipt you can use in a dispute?
Pitfalls that cost buyers money
- Paying by gift card, wire, or crypto for anything card-related, which removes your ability to reverse the charge.
- Trusting a screenshot of a "valid" card as proof of anything.
- Using a debit card where a credit card would give you better dispute rights.
- Skipping your issuer's transaction alerts, which are the fastest way to catch a bad charge.
- Sharing your own CVC over email, chat, or a phone call you did not initiate.
The short version: a CVV is an authentication code, not merchandise. Get yours from your own bank, cap what it can spend, and rotate it when a merchant no longer needs it.