There is no legal way to buy a CVV. A CVV or CVC is the short verification code tied to a single payment card, and buying, selling, or sharing it without the cardholder's consent falls under federal access device fraud law in the United States. People who search for the phrase 'want to buy CVV' usually mean one of two things: they want to pay online with their own card and are unsure how the code works, or they have run into someone offering card data for sale.
What the CVV code actually does
Card issuers print a verification value on the card to show that whoever is paying has the physical card in hand, not just the number. Online merchants ask for it because card numbers alone are easy to copy, and the code adds a second piece of evidence at checkout.
- Visa, Mastercard, and Discover use a three digit code on the back of the card.
- American Express uses a four digit code on the front.
- The code is generated with the card and stays the same for the life of that card.
- PCI DSS rules bar merchants from storing the code after a transaction is authorized.
Because the code belongs to one account, there is no legitimate marketplace where it can be listed, resold, or transferred. A shop selling CVVs is selling stolen account access, not a product.
Why offers to sell you a CVV are a trap
- Legal risk: trafficking in card credentials is a federal offense, and buyers can be prosecuted alongside sellers.
- Scams: many sellers take payment and deliver nothing, or deliver card numbers that are already blocked.
- Data reuse: the same people who sell card data often keep a copy and use it later.
- No recourse: you cannot dispute a payment for stolen data with your bank without admitting to the transaction.
How to check a checkout page before you enter your CVV
If your goal is simply to buy something online, these are the parameters worth confirming first.
- Connection security: the address bar shows HTTPS and a valid certificate for the store's real domain.
- Payment handling: card fields are hosted by a known processor rather than a plain form on the site.
- Authentication: a 3-D Secure step, one time code, or banking app approval appears for larger purchases.
- Total and currency: the amount matches your cart and the currency matches your card.
- Support and returns: a real address, phone number, or support channel exists before you pay.
Legitimate ways to lower your card exposure
- Virtual card numbers from your issuer, which link to your account but can be capped, frozen, or set to expire.
- Digital wallets such as Apple Pay or Google Pay, which send a token instead of your card number.
- Prepaid or single load cards for one-off purchases.
- One card for subscriptions and a separate card for stores you have not used before.
Each option keeps your real card number and CVV out of a merchant's database while still letting you check out normally.
Common pitfalls
- Forum posts or marketplace listings that try to buy a CVV or sell one.
- Sites that ask for your CVV by email, chat, or phone. Legitimate processors never do this.
- Checkout pages that ask for the code twice or ask for a PIN alongside it.
- Prices far below market that require payment by gift card or crypto only.
If your CVV was exposed or you already paid a seller
- Contact your card issuer, freeze the card, and request a replacement number.
- Review recent transactions and dispute anything you do not recognize.
- Report identity theft at IdentityTheft.gov and file a complaint with the FBI's IC3 if you were defrauded.
- Change passwords on shopping accounts that stored the card.
The takeaway is simple: pay online with your own card and its CVV, and treat any offer to sell you a CVV as fraud.