You cannot buy a CVV anywhere legitimate. The CVV is a three or four digit security code printed on your own payment card and generated by the bank that issued it, so it is not a product, a file, or a subscription that any seller can hand over. Every site, forum, or chat channel advertising CVVs for sale is trading in stolen card data, and buying from one is a federal crime in the United States, not a shortcut.
What a CVV actually is
The card verification value goes by several names depending on the network: CVV2, CVC2, or CID. It exists for one purpose, which is to prove that the person typing the card number is physically holding the card. The issuer generates the number and prints it on the plastic. The cardholder never chooses it and cannot change it.
- Visa, Mastercard, and Discover cards carry three digits on the back signature panel.
- American Express cards carry four digits on the front, above the card number.
- The code is not meant to sit in a merchant database. PCI DSS rules bar merchants from storing it after a transaction is authorized.
- It works alongside the card number, expiration date, and often a billing address or one-time code from your bank.
Why every "where to buy CVV" result is a scam or a crime
Sellers in this space fall into two groups, and both cost you. Some are running a pure scam: you send payment in crypto or gift cards and receive nothing, or receive numbers that were already declined. Others are trafficking real stolen card data, which means the actual cardholder is a victim and the account will be canceled as soon as that person or their bank notices.
There is no refund policy, no dispute process, and no customer service, because the entire transaction is illegal. Buyers have also been known to be recorded and extorted after paying, since the seller already holds their contact details and payment trail.
Legal exposure in the United States
Federal law treats card numbers, expiration dates, and CVVs as access devices. Trafficking in them, which includes knowingly buying them, carries serious penalties, including prison time and fines, and the offense can be charged even when the card data turns out to be fake. State laws add their own charges for fraud and identity theft. Being the buyer rather than the seller does not create a safe harbor.
What people usually want when they search this
Most searches for where to buy a CVV come from one of three goals: paying online without exposing a real card number, buying from a merchant that does not accept standard cards, or testing a checkout flow. The first two have legal answers, and the third does not.
Legitimate ways to protect your card number online
- Ask your bank or card issuer about virtual card numbers, which generate a substitute number and code tied to a spending limit.
- Use a digital wallet through your bank or phone platform, which sends a token instead of your real card details.
- Keep one card dedicated to online purchases so a problem stays contained.
- Turn on transaction alerts so you see charges as they post.
Parameters to check before you enter card details
- Confirm the domain spelling in the address bar. Lookalike domains are the most common card theft trick.
- Check that the checkout page is served over HTTPS and that the padlock is present.
- Expect to type the CVV at checkout or say it during a phone order. No legitimate business asks you to email, text, or chat the code, or to send a photo of your card.
- Be skeptical of a price far below market. Card testing scams often start with an offer that is too good.
- Save the confirmation email and the merchant's support contact before you need it.
If your card or CVV was exposed
- Lock the card in your banking app, then call the number on the back of the card.
- Dispute any unauthorized charges in writing. Under the Fair Credit Billing Act, credit card holders who report promptly generally face no more than $50 in liability for unauthorized use.
- Request a new card number rather than only a new card, since the old number can still be reused.
- Change the password on the merchant account where the card was stored and enable two-factor authentication.
- File a report with the FTC if identity theft is involved, and with the FBI's Internet Crime Complaint Center if you were defrauded.
The bottom line
There is no store, marketplace, or service where buying a CVV is legal or safe, because every listing is either stolen data or a straight scam. If your real goal is safer online payments, virtual card numbers, digital wallets, and transaction alerts give you what a purchased CVV never could: a working payment method with a bank behind it.