As any online shopper knows, all credit cards have a 3-digit card verification value (CVV or CVV2) code printed on the back. Merchants are forbidden from storing this information -- so how do online fraudsters manage to get hold of it? Here's what you need to know.