No honest shop sells CVV numbers or card data. Sites that advertise cheap CVV, fullz, or "fresh" cards are selling stolen payment data or taking money from people who cannot report the loss, and buying from them breaks US fraud law. A review of such a shop answers one question: whether the theft happened before or after delivery.
What does "CVV shop" mean in practice?
A CVV shop is a storefront on the open web or Tor that sells card numbers, expiry dates, and the three- or four-digit security code tied to each card. Sellers collect that data from skimmers, phishing pages, and breached merchant databases. Some shops sell "fullz," which adds a cardholder's name, address, and Social Security number.
The word "honest" does not fit. Shop owners rank buyers, mix live cards with dead ones, and close the site when a bank or a payment processor starts asking questions.
What does a real merchant do with your CVV?
A legitimate merchant asks for the CVV once, at checkout, on the same page where you enter your card number. The code goes to the processor for that single authorization and is discarded after it.
- PCI DSS, the card industry's security standard, forbids storing the CVV after authorization, even in encrypted form.
- No real merchant, bank, or card network asks for your CVV by email, text, chat, or phone.
- A refund, a return, or a subscription renewal never needs the code again.
- A store clerk cannot ask for the code on the back of your card.
If a site asks for the code a second time, or asks for a photo of your card, stop. That request has one use: theft.
How do you check a card site before you type your CVV?
- Read the URL. Look for the exact domain you expected, not a misspelling with a hyphen or an unusual ending.
- Check the certificate. A padlock proves the connection is encrypted, not that the seller is honest.
- Find a street address and a phone number. Copy the address into a map search and see what sits there.
- Read the refund and shipping policy. Text copied from another store is a warning.
- Search the domain name plus the word "scam" and read results from forums that are not paid ads.
- Compare the price. A price far below every other seller means the goods are stolen, fake, or never ship.
What are the red flags of a fake cheap CVV shop?
- Prices listed per card, with bulk discounts and "freshness" ratings.
- Payment only in crypto, gift cards, or peer-to-peer transfers, with no chargeback path.
- Countdown timers, fake stock counters, and reviews posted in the same week.
- Support that moves to Telegram or WhatsApp and asks for your card photo.
- No terms page, no company name, and a domain registered weeks ago.
Cheap is the bait. The cost lands after the sale: a drained account, a dispute you lose, or a card closed by your bank.
Is it illegal to buy card data in the US?
Yes. Federal law treats trafficking in card numbers as access-device fraud, and state laws add identity-theft charges. A buyer who uses a stolen number to order goods adds wire fraud and can face restitution plus a felony record.
Buying from a CVV shop also leaves you with no legal recourse. You cannot report a scam seller without describing your own crime.
What should you do if your own CVV leaks?
- Call the number on the back of your card and ask for a block and a replacement.
- Read the last 60 days of transactions line by line and dispute anything you do not recognize.
- Change the password on every shopping account where the card was saved.
- Turn on transaction alerts so a charge of any size reaches your phone.
- Report the incident to the FTC and, if money was lost, to the FBI's IC3.
How do you keep your CVV safe during normal online shopping?
Type the code each time instead of saving it. Use a virtual card number from your bank for subscriptions and one-off sites, and set a spending limit on it.
Carry the card in an RFID-blocking wallet in crowds. Check your statement weekly rather than monthly, because small test charges tend to come first.
Should you trust a "cvv shop review" site?
No. Review sites in this niche earn money from shop owners, so they rank the shops that pay. Some of those reviews are written by the shop under another domain.
What does a CVV code actually do?
It confirms that the person entering the card number holds the physical card. That is why a merchant that keeps the code after a purchase creates a breach risk.
Are cheap card-checking tools legal?
No. A service that tests whether a card number is live works on stolen data, and using one is part of the same fraud.