What "Buy CVV" Websites Really Are
A CVV or CVC is the three or four digit code printed on a payment card. It exists to prove the person paying holds the physical card. A website that offers to sell CVV numbers is selling stolen payment credentials or running an advance-fee scam. Either way, the transaction is illegal in the United States under wire fraud and access device statutes, and the "seller" is usually a criminal operation or a law enforcement sting. There is no legitimate marketplace for CVV data, so there is no honest way to shop for one.
What shoppers actually need is the opposite skill: keeping their own CVV and card number away from criminals, confirming a checkout page is safe, and knowing what to do when a CVV seller shows up in a search result or a message.
Prerequisites
- A payment card with a CVV or CVC printed on it, or a virtual card issued by your bank.
- Your card issuer's app installed so you can freeze a card and dispute charges.
- The merchant's full checkout page open in your browser before you enter any card data.
How to Protect Your CVV During Online Purchases
- Open the merchant's checkout page and read the address bar before typing anything.
- Confirm the page uses HTTPS and that the domain matches the store you meant to visit.
- Enter your card number, expiry date, and CVV only on that page, never in a chat window, email, or text thread.
- Use a virtual card number from your issuer when it is offered, then set a spending limit on it.
- Decline any request to text or email a photo of your card, because the CVV is visible in the image.
- Save the order confirmation and the merchant's support contact in case you need to dispute later.
- Check your statement within a few days and flag any charge you do not recognize.
- Freeze the card in your issuer's app the moment a charge looks fraudulent.
How to Evaluate a Checkout Before You Pay
- Search the merchant name plus the word "scam" and read results from the past year.
- Look for a street address and a working customer service phone number on the site.
- Confirm the return policy and shipping window are stated in writing.
- Pay with a credit card rather than a wire transfer, gift card, or crypto, because credit cards carry dispute rights.
- Close the tab if the price sits far below market or the page pressures you with a countdown timer.
Pitfalls to Avoid
- Listings that offer to sell CVV numbers, "fullz," or card dumps are fraud or entrapment and carry federal criminal exposure.
- Sellers who demand gift card codes or cryptocurrency leave you no way to reverse the payment.
- Lookalike domains often differ from the real store by a single character.
- Browser extensions and auto-fill tools from unknown publishers can read the CVV field.
- Public Wi-Fi without a VPN exposes checkout traffic on pages that are not secured.
If You Run Into a CVV Seller
- Do not send money, gift card codes, or card data.
- Take screenshots of the listing, the profile, and any payment instructions.
- Report the listing to the platform hosting it.
- File a complaint with the FBI Internet Crime Complaint Center.
- Report card fraud or identity theft to the FTC.
- Call your card issuer if you already shared any card details.
Treat every unsolicited offer to sell card verification codes as a crime in progress. The safe path for a legitimate shopper is simple: buy only from merchants you can verify, keep the CVV off any channel that is not a secured checkout page, and use the dispute tools your issuer gives you when something goes wrong.