There is no legitimate way to sell CVV numbers on Reddit or anywhere else. A CVV is a security code that exists to prove the buyer physically holds the card, so selling or buying one is trafficking in stolen card credentials, which is a federal crime in the US. Searches for the best way to sell CVV Reddit threads lead to scammers, phishing pages, or law enforcement, not to a real market.
What a CVV actually is
The card verification value is the three or four digit code printed on a card, separate from the account number. It was introduced so that a merchant could confirm that whoever is entering card details has the physical card in hand. That design has two consequences: merchants are not allowed to keep the code after a transaction is authorized, and anyone offering to buy or sell one is handling someone else's payment credentials without authorization.
The Best Way to Sell CVV on the Dark Web: A Comparison Review
When people talk about "selling CVVs," they are describing carding: trading stolen card numbers plus the verification code so a fraudster can push a charge through an online checkout. It is not a resale market, a side hustle, or a gray area.
Why Reddit CVV buyers and sellers are almost always a trap
Reddit communities that discuss carding are heavily monitored and frequently seeded with fake offers. The recurring patterns are predictable:
- Advance-fee scam: a "buyer" asks for a deposit, an escrow fee, or a verification payment before the deal, then disappears.
- Escrow impersonation: a fake middleman account confirms the deal and keeps the funds.
- Credential harvesting: the seller is asked to "prove" a code or log into a dashboard, which hands over their own accounts and data.
- Platform enforcement: subreddits that host this activity get banned, and accounts get suspended, which wipes out any supposed reputation.
In other words, the people answering those posts are usually targeting the person who posted, not a cardholder.
The legal picture in the US
Federal law treats card account numbers and verification codes as access devices. Trafficking in them, or possessing them with intent to defraud, is a criminal offense rather than a policy violation. That means the "market" risk is not a moderator ban; it is a criminal charge, plus civil exposure from the card networks and issuing banks. If you have encountered an offer to buy or sell CVV data, report it through the FBI's Internet Crime Complaint Center.
Pick this first: keep CVVs out of your systems entirely
For merchants and anyone building a checkout, the one decision that matters more than any other is to never store the CVV. Pair that with requiring the code at authorization and letting a tokenization provider hold the card number instead of your database. Everything else is a detail.
Options compared
Option 1: Network tokenization with CVV required on the first charge (recommended)
The card number is replaced by a token, the CVV is collected and passed to the processor for the initial authorization, and nothing sensitive stays on your servers. Recurring billing uses the token, so the customer does not re-enter the code. This is the strongest baseline for online purchases.
Option 2: CVV verification at checkout plus address verification, no storage
A workable step for smaller merchants who are not yet tokenized. The code is verified once, the address verification system flags mismatches, and the CVV is discarded immediately. Risk is lower than skipping verification, but it depends on disciplined handling.
Option 3: Storing CVVs for convenience (not an option)
Saving the code so repeat customers can check out faster violates card industry rules and turns any breach into a much worse event. This is the choice that creates the stolen data that carding markets run on.
If your own CVV was exposed
- Request a replacement card with a new number and code from your issuer.
- Review recent statements and dispute any charge you do not recognize.
- Report identity theft and card fraud to the FTC, and file an IC3 complaint if you were targeted by an online offer.
- Treat any message asking you to confirm a CVV, by email, chat, or phone, as a phishing attempt.
The useful question is never how to sell a CVV, it is how to keep the code from being captured in the first place.