Can you buy a CVV code?
No. A CVV is a security value tied to a payment card, and no legal seller offers one for sale. Searches such as "where buy cvv" lead to stolen card data, not to a product you can own.
A CVV (card verification value) is the three digit code on the back of Visa, Mastercard, and Discover cards, or the four digit code on the front of American Express cards. It exists to prove that the person paying holds the physical card. That is the whole point of the number, and it is why a legal market for CVVs cannot exist.
What people look for when they ask where to buy a CVV
Two different needs hide behind the same phrase.
- A card number with a CVV. Needed for subscriptions, trials, ad accounts, or vendor payments where you would rather not expose your main card.
- Someone else's card data. Sold as "CVV", "fullz", or "dumps" on carding forums, chat apps, and paste sites.
The first need has answers, and they come from banks, fintech apps, and prepaid programs. The second is fraud, and it fails more often than the sellers admit.
Legal ways to get a card number and CVV
If you need a payment card with its own CVV, these are the sources that issue one.
Banks and credit unions
Most large issuers let you create a virtual card in the mobile app or online banking portal. That number carries its own CVV and expiry, and you can freeze it after a single use.
Fintech and privacy apps
Apps built for online spending issue virtual cards with merchant locks and monthly caps. You fund them from a linked bank account, so the card number stays separate from your real account.
Prepaid and reloadable cards
Prepaid cards are sold in stores, online, and at some bank branches. Confirm that the card works for online purchases and supports the merchant you plan to pay.
Business spend platforms
Companies that pay many vendors use spend management tools. Each employee or vendor gets a card with a set limit and its own CVV.
What to check before you pay for a card product
Any product that gives you a card number and CVV should pass these checks first.
- Issuer. The card comes from a licensed bank or a program backed by one. The issuer name shows up in the app and on your statement.
- Network. Visa, Mastercard, Amex, or Discover acceptance covers the sites you plan to pay.
- Number type. Single-use numbers close after one payment. Merchant-locked numbers work at one store only. Open numbers work anywhere, which carries more risk.
- Spend limits. You can set a cap per transaction and per month.
- Fees. Compare monthly fees, load fees, and foreign transaction fees before you commit.
- Identity checks. Regulated issuers ask for your name, address, and often a tax ID or SSN. A seller that skips this step is not a bank.
- Dispute rights. You can file a chargeback and reach human support. Stolen card data comes with neither.
- Refund path. You know how to close the card and get unused funds back.
Pitfalls that show up with CVV sellers
Listings for "CVV" follow a small number of patterns, and every one of them costs the buyer.
- Payment up front, no delivery. Sellers demand crypto, then block you. There is no chargeback on a stolen data purchase.
- Recycled data. The same card is sold to dozens of buyers. The first charge trips a fraud alert, and the rest fail.
- Checker tools and "valid rate" claims. These exist to make old data look fresh. Card issuers flag the test charges.
- Free CVV lists. Bait. They harvest your IP address, your email, or a small "verification" payment.
- Extortion. Buyers who pay once get asked for more, with threats to report them.
Legal risk of buying stolen card data
Trafficking in stolen card numbers is a federal crime in the US under 18 U.S.C. § 1029, which covers selling, transferring, and possessing access devices with intent to defraud. Convictions carry prison time, fines, and forfeiture. Similar statutes apply in the EU, UK, Canada, and Australia.
Buyers get caught through the payment trail. Crypto exchanges, shipping addresses, and account logins all leave records that investigators can pull.
How to protect your own CVV
- Never send a CVV by email, chat, or text. Legitimate merchants collect it on their own checkout page.
- Use a virtual card for subscriptions and stores you do not know.
- Check that the checkout page uses HTTPS and matches the store's real domain.
- Keep your card frozen in the banking app when you are not using it.
FAQ
Is it legal to buy a CVV code?
No. Card verification values belong to the cardholder and the issuing bank. Buying, selling, or sharing someone else's CVV is access device fraud.
Do virtual cards have a CVV?
Yes. Bank and fintech virtual cards include a card number, an expiry date, and a CVV, and you can rotate the number at any time.
Can an online store keep my CVV?
No. PCI DSS bans storage of the CVV after a transaction is authorized, even in encrypted form. A merchant that keeps it is out of compliance.
Where can I get a card number and CVV for a free trial?
Use a virtual card from your bank or a fintech app. Set a low limit, and the trial charge cannot grow into a full subscription.
Why do cheap CVV listings stop working?
Issuers cancel the card as soon as fraud is reported, and most cards are reported within days. That is why sellers push fast use and why buyers lose money.