Did you know your credit cards can be charged without security code? It happens to be possible.
Common procedure for online transactions involves all security measures to avoid hackers fraud, but in the real world Credit Cards can be charged without security code.
If you are used to buy stuff online, you already know most retailers asks you to fill out Credit Card Number, Holders Name, Billing Address and CVV/CVV2/CSC Security Code Number with expiration date to allow the customer to purchase.
The needing for a security code at the time of an online purchase has a reason to avoid hackers or unauthorized people to use financial data from holders.