Sites Without CVV: Which Stores Skip the Back of the Card
Some checkouts never ask for the three digits on the back. It is getting rarer, but the categories that skip the CVV are the same ones that skip the address: digital, small, account-based.
The practical use is narrow but real. If a seller delivers a card with a dead back, or the CVV was mistyped in the listing, a CVV-less target is the only place that card still works.
Contents
Where the CVV is not requested
- In-app subscriptions on an existing account. The app has the card on file and charges it directly.
- Wallet top-ups inside an app where the card is already saved. Steam, Uber, PlayStation.
- One-click and stored-card checkouts. Amazon in particular, once the card is attached to the account.
- Some collection-only food orders and a handful of small regional stores.
- Recurring billing of any kind after the first successful charge.
Note the pattern: almost all of them require an account with the card already attached. The first attachment asks for the CVV. The check happens once.
Using a card with a bad back
Try to attach it to an account where the CVV field is optional or pre-filled, then use the stored card. Some platforms only ask for the digits on the first charge and never again, so if the digits are wrong the attachment fails and there is nothing to do.
The more reliable trick is to find a target where the CVV is only validated above a threshold, or where it is collected but not verified on low-value authorisations. Food apps do this inconsistently.
Test loop
Take the suspect card to a food app and order under $6. If it clears, the CVV concern was unfounded and the card is simply live. If it declines and you can confirm the other fields are perfect, then the CVV is wrong and the card is worth keeping for an account-attach target rather than throwing away.
Log it rather than guessing. A card with one known-bad field is still useful and worth marking in your notes.
Where the digits are correct
Cardvenza exports a clean base64 string, so CVV typos on import are rare, and dead cards are replaced automatically.
Account-attach carries its own risk
Attaching a card to an account makes the account the artefact rather than the card. That is good for repeat charges and bad for exposure: a flagged account takes every card on it down with it.
One account per identity, and per card where the platform allows it. Never attach three cards to one fresh Amazon account and expect all three to survive. See the Amazon method for how that estate actually behaves.
Related: stores with no address check and all target tiers.
