guy It‘s definitely possible. The CVC code is something that can be used by merchants optionally to lower their fraud risk and liability. It‘s not a mandatory thing, but obviously almost all merchants will want to use it whenever possible because of previously mentioned reasons.
If you experience any fraud, just request a refund. Especially if the merchant hasn‘t used CVC code, then the case should be quite easy for you.