No legitimate seller offers CVV or CVC codes for cards you do not own. A CVV is a card verification value tied to a real account, and trading those numbers is card fraud under US law (18 U.S.C. § 1029). If you need to purchase a CVV online for your own checkout, the legal path is a virtual card number or prepaid card issued in your name.
Why "CVV for sale" listings are a trap
Sites that advertise CVV dumps want your money and your data. They collect crypto or gift card codes, then send nothing, dead numbers, or codes that trigger a fraud block at checkout. You cannot dispute the charge with your bank because the payment bought stolen data.
- Cards get canceled as soon as the owner or issuer spots the charge.
- The merchant flags the order and cancels the shipment.
- Your payment details and IP logs land on a resale list.
- Some operators use the fake sale to harvest ID documents for identity theft.
What you want when you search this phrase
Most people looking for CVV codes have one of three goals: pay without exposing a main bank card, buy from a merchant that rejected their card, or finish a checkout that keeps failing. Each goal has a legal fix that costs less than a fraud listing.
- Virtual card number: issued by your bank or a card app, funded from your account, with its own 16-digit number, expiry, and CVV.
- Prepaid card: bought at a retailer with cash, loaded with a fixed amount.
- Single-use card: a virtual number that dies after one merchant or one payment.
- Store gift card: works at one brand and needs no CVV at all.
How to buy online with a safe card
- Choose a source you can verify: your bank, a known issuer, or a prepaid brand sold in stores.
- Finish any identity check the issuer asks for. US rules require customer identification on reloadable prepaid accounts.
- Load only the amount you plan to spend.
- Lock the number to one merchant if the app allows it.
- Confirm the checkout page uses HTTPS before you type anything.
- Save the confirmation email and the statement for your records.
Parameters to compare before you pick a card
Fees and controls vary a lot between issuers. Compare these points side by side before you fund an account.
- Fees: monthly fee, load fee, foreign transaction fee (often 1% to 3%).
- Limits: daily spend cap, per-transaction cap, number of cards you can create.
- Lifespan: single-use, merchant-locked, or open until you close it.
- Funding: bank transfer, debit card, or cash at a store.
- Dispute rights: credit-card-backed virtual numbers keep card dispute rules; prepaid cards fall under the CFPB prepaid rule, which gives error resolution rights but less chargeback muscle.
- KYC level: anonymous prepaid cards carry low limits, verified accounts carry higher ones.
- Support: a real phone line or chat beats an email-only help desk.
How the CVV works at checkout
Card networks added the CVV to prove the person typing the number holds the physical card. Visa calls it CVV2, Mastercard calls it CVC2, and American Express calls it CID. The code sits on the back of most cards (four digits on the front for Amex) and never appears on a receipt or statement.
Pitfalls that cost people money
- Sending a CVV by email, chat, or phone. Merchants never need it that way.
- Typing card details on a site with no padlock or a lookalike domain.
- Storing the CVV in a browser, notes app, or screenshot folder.
- Buying "CVV with balance" listings. A valid card with a hidden balance does not exist as a product.
- Paying a social media or messaging-app seller. There is no refund path.
- Ignoring small test charges. Fraudsters run a $1 charge before a large one.
Protecting your own CVV
- Cover the back of the card in public and never read it out on a call you did not start.
- Use a virtual number for unfamiliar merchants so a breach cannot touch your main card.
- Check statements each week for $1 to $5 test charges.
- Freeze the card in your banking app the moment a charge looks wrong.
- Report card fraud to the FTC and the FBI's IC3 unit.
FAQ
Is it illegal to buy a CVV number?
Yes, when the number belongs to an account you do not control. US federal law treats card number trafficking as fraud, and penalties include fines and prison time.
Can a merchant store my CVV?
No. PCI DSS forbids storing the CVV or CVC after a transaction is authorized, even in encrypted form. If a site offers to "save" your code, treat that as a red flag.
Why does my CVV keep failing?
Common causes are a mistyped digit, a card that is frozen or expired, a billing address mismatch, or a merchant that does not accept prepaid and virtual numbers.
Are virtual cards accepted everywhere?
Most US online merchants take them. Some airlines, rental car desks, and subscription services block prepaid or virtual BIN ranges, so keep a backup card.
The short answer
You cannot buy someone else's CVV, and sites that sell them run a scam or a fraud operation. You can buy a virtual or prepaid card in your own name and use its CVV at checkout the same way. That route is legal, refundable in most cases, and safer for your main bank account.