Can someone clear your bank account if they have your name, expiry date, and 16 digit card number but don't have the CVC?

It may depend on whether they have other personal details, such as your address. Not all online merchants ask for the CVC code when placing orders, so a fraudster could place orders with one of them.

But there is a higher chance of you getting the money back from your bank if that happens. The merchant is taking the risk by not asking for the CVC.

It also depends on how much money you have in the account. If it is $50.00, then probably, but if they are transacting for $5,000.00, then probably not. As @SimonB mentioned, the merchant is balancing fraud risk against ease of transaction, and it doesn’t take much before merchants aren’t willing to take the payment risk and start asking for more credentials. That risk profile also affects the transaction costs with the card systems, so like most transactions, it is a dynamic balance aiming to maximize profit.

What does a credit card have to do with clearing your bank account? Credit cards have fraud protection insurance and depending on country and the credit card itself you risk could be close to ZERO.

In the US there is usually a $50 limit to unwarranted use on a card. It is so little that most card issuers reduce that to $0 because that is just better advertising.

So no your bank account cannot be cleared out.

Really the risk exposure with credit cards is with someone you know. If someone you know uses your card you are required to file charges against them or run the risk of being on the hook for the whole thing. The only times I have seen people lose money based on stolen numbers is when a family member uses a card and the person doesn't want to report them.

Debit card rules are below.

The point made in one answer is correct in talking about limitations on your liability against fraud/theft of a debit card.

More to the point is the idea that if you're keeping a close eye on account activity then you should be able to quickly spot problems and notify the bank/credit union, in which case you're then protected against all but potentially the first small amount (varies from institution to institution) of any fraudulent activity.

And one more point...if you have ANY reason to suspect that someone has obtained that much info on your card then there should be NO HESITATION in contacting the bank and having a new card issued, even if there's no sign of fraud. Just because nothing happens right away doesn't mean it can't at some point down the road, and it's better to be safe than sorry.