There is no legitimate product called a v4. The security code printed on a payment card is a CVV, CVC, or CID, and it is generated by the issuing bank and sent out attached to that one card. It is not sold separately by merchants, and it is not something a buyer can legitimately purchase. Sites that advertise card numbers or verification codes for sale are trading in stolen payment data. Using that data is fraud, and in the US it falls under wire fraud and identity theft law. The rest of this guide covers what the code does, why "v4" keeps appearing in search results, and how to keep your own card data out of circulation.

more on this topic

What a CVV actually is

The card verification value is a short numeric code that exists to prove the person typing in a card number is holding the physical card. On Visa, Mastercard, and Discover cards it is three digits on the back, printed in or next to the signature strip. On American Express cards it is four digits on the front, above the card number. That is the entire function: a check against someone who has memorized or copied the long number but never had the card in hand.

Buying CVV Codes Is Illegal: No V9 Shortcut Exists

The code is deliberately hard to retain. Payment card industry rules bar merchants from storing the CVV after a transaction is authorized, so even a retailer you shop with every week should not be able to read it back to you. If a company support agent asks you to read the code aloud over the phone for a refund, that is a warning sign, not a normal process.

v3

Why "v4" is not a card feature

Nothing on a payment card is labeled v4. The term circulates in underground marketplaces as a loose label for bulk card-data listings, and it also gets used for the fourth version of software products. Neither usage describes anything a bank issues. A page promising a v4, a "fullz" bundle, or a "fresh base" is advertising stolen records, and buyers typically receive data that has already been sold to several other people and is often canceled within days. The seller keeps the money either way.

more on this topic

When you need a card number you can hand over

The real problem behind most searches for disposable card data is a practical one: you want to pay for something online without exposing your main account. Virtual card numbers solve that legitimately. Most large US card issuers let you generate a temporary number in their app, set a spending limit, and lock it to one merchant.

Pros of virtual card numbers

• Issued by your own bank, so the number is real and the transaction is protected by your normal dispute rights
• You can set a dollar cap or a single-merchant restriction
• Freezing or deleting the number takes seconds and does not affect your physical card

Cons of virtual card numbers

• Not every merchant accepts them, particularly some subscription services and travel bookings
• Refunds to a deleted virtual number can take longer to route back to you
• Availability varies by issuer and card tier

Use virtual numbers for unfamiliar merchants, free trials, and one-off purchases. Keep your physical card for recurring bills and anything where a return or chargeback is likely.

Red flags on any site selling card data

• Prices per card number, or tiered "quality" ratings for card data
• Payment accepted only in cryptocurrency, with no refund path
• Claims of "guaranteed live" or "non-vbv" cards, which describe bypassing bank verification
• Forums that require an invite and screen new members for law enforcement
• Instructions to test a card on a small donation page before larger use

How to protect your own code

1. Never read the code to someone who calls you, even if they claim to be from your bank or from fraud prevention. Banks do not ask for it.
2. Cover the back of the card with a sticker or your thumb when handing it to a server or cashier.
3. Check card readers and ATM slots for loose fascias or extra plastic before inserting a card.
4. Shop only on sites with a full checkout that redirects to a payment processor, not ones that ask you to type card details into a chat window.
5. Review statements weekly. Card testing fraud usually shows up as several small charges before a large one.

If your card data has already been exposed

1. Lock the card in your bank's app immediately. This stops new charges without closing the account.
2. Call the number on the back of your card and request a replacement with a new number and code.
3. Dispute every charge you do not recognize in writing so there is a record with a date.
4. Change passwords on any shopping account where the card was saved, and turn on two-factor authentication.
5. File a report if the exposure was part of a breach or a scam call, and keep the report number for your dispute file.

In the US, liability for unauthorized credit card charges is limited when you report the problem promptly, so speed matters more than certainty. Report first, investigate second.