What a CVV is

A CVV is a short code printed on a payment card. Visa, Mastercard, and Discover print 3 digits on the back, to the right of the signature strip. American Express prints 4 digits on the front, above the card number. Issuers call it a card verification value. The code is not embossed and does not appear on a receipt.

How to Buy CVV V10 Online Safely and Legitimately

What the code does

Online merchants ask for the CVV to test one thing: does the buyer hold the physical card? A card number alone can be copied from a breach dump. The printed code cannot be read from the magnetic stripe or the chip, so a thief who has only a number usually lacks it.

v2

PCI Security Standards Council rules bar merchants from storing the code after a transaction is authorized. That restriction exists because the code is the last cheap check against card-not-present fraud.

v2

Where stolen card data goes

Card numbers, expiry dates, and codes show up on criminal forums, private Telegram channels, and paste sites. Listings often bundle a name, address, and bank name. Buyers pay in cryptocurrency.

v6

Do not buy this data. Buying, selling, or using stolen account numbers is a federal crime in the US under 18 U.S.C. § 1029. Penalties reach 10 years for a first offense and 20 years for a second.

The listings are also frequently fake

Carding markets have no recourse and no escrow that holds. Common outcomes are payment taken with no data sent, data already canceled by the issuer, or data that was invented. The FBI Internet Crime Complaint Center logs these losses as fraud, and victims rarely recover funds.

How to lower your own exposure

• Use virtual card numbers from your issuer for online checkout. Each number can be capped and closed after one merchant.
• Turn on transaction alerts by text or push for every charge above a set amount.
• Keep the card in sight at restaurants and counters. Walk to the terminal when you can.
• Never read the code aloud to a caller. Banks do not ask for it by phone.
• Skip saving cards in browsers and apps you do not control.
• Check statements weekly. Small test charges often come before a large one.

If your card data is exposed

1. Call the number on the back of the card. Ask for a new number, not just a new card.
2. Review charges for the past 12 months and dispute any you do not recognize.
3. Change the password on the account tied to the card if you reused it.
4. File a report at IdentityTheft.gov and keep the confirmation number.
5. Report the incident to the FBI IC3 if money was lost.

Federal law caps your liability for unauthorized card charges at $50 in most cases, and most issuers waive it. Speed matters more than the amount.