Top pick: virtual card numbers issued through your bank or card app. They win because the merchant never sees your real card number or CVV, and you can close a single number without touching the card in your wallet. The options below are judged on four things: whether your real CVV stays out of a merchant database, how much friction the method adds at checkout, how cleanly refunds and recurring charges work, and how fast you can kill access if a charge looks wrong.
1. Virtual card numbers (top pick)
A virtual card number is a second card number tied to your real account. Your issuer generates it, you enter it at checkout, and the charge routes back to your normal balance. The CVV on a virtual number is disposable. If a merchant gets breached, the leaked number is a dead end you can revoke.
Which Dark Web Site Sells CVV Fullz? Safer Options
- Your real card number and CVC never travel to the merchant
- Numbers can be set to expire after one use or after a set date
- Revoking a compromised number takes seconds in an app
- Spending caps limit damage if the number leaks
- Not every issuer offers them, and some limit how many you can create
- A few checkout forms reject card numbers they do not recognize
- Refunds can land on the virtual number after it is closed, so you may need to check the underlying account
Use it for: any merchant you have not bought from before, subscriptions you may want to cancel, and sites that store your card for future purchases.
2. Tokenized checkout through a digital wallet
Apple Pay, Google Pay, and similar wallets replace your card details with a device-specific token. The CVV you would normally type is never part of the transaction. This is strong protection, and it is already built into most phones.
- No card number or CVV typed into the merchant's form
- Token is tied to your device, so a stolen token is far less useful elsewhere
- Fast at checkout on mobile
- Requires the merchant to support the wallet
- Desktop checkout is often clunkier than mobile
- You get less visibility into which card was charged in some flows
Use it for: everyday purchases on sites that support wallets, especially on a phone.
3. Card freeze and real-time alerts
Most major issuers let you lock a card instantly and push a notification for every charge. This does not hide your CVV, but it shortens the window between a fraudulent charge and your response.
- Free with most accounts
- Lock and unlock takes seconds
- Alerts catch test charges, which often come before a large one
- Reactive, not preventive: the data has already leaked
- Alert fatigue is real if you turn on every notification
- Does not stop a merchant from storing your CVV if you typed it
Use it for: a baseline layer under everything else, particularly on your primary card.
4. Single-use prepaid cards
Prepaid cards cap your exposure at whatever you load onto them. The CVV is real, but the balance behind it is small.
- Hard spending limit by design
- Useful for one-off purchases from unfamiliar sellers
- No link to your main bank account
- Purchase fees and activation steps vary by provider
- Refunds and chargeback rights can be weaker than on a credit card
- Subscriptions and holds may fail when the balance runs low
Use it for: a single purchase from a seller you do not plan to return to.
5. Manual CVV hygiene
The free option: never save a card in a browser, never type card details into a chat, email, or phone call, and never store a photo of your card. Check whether a site keeps your CVV on file, which PCI DSS rules prohibit after authorization.
- Costs nothing and works everywhere
- Covers the cases technology cannot, like a seller who asks for your CVC by message
- Reduces the number of databases holding your data
- Depends on your own consistency
- Slows down repeat checkout
- Does nothing once a merchant is breached
Use it for: every purchase, as the habit layer beneath the tools above.
How to choose
Start with virtual card numbers if your issuer provides them, since they remove the CVV from the merchant side entirely. Add a digital wallet for mobile checkout and turn on transaction alerts on your main card. Reach for a prepaid card only when the seller is unknown and the purchase is one-time. Manual hygiene is not optional, it is the floor.