Even if someone has your credit card number, if they don't have the corresponding CVV, it's much harder to make unauthorized purchases with it. By asking for the CVV code, the merchant is adding an extra level of security to ensure that the cardmember is the one making the purchase.