Bitcoin CVV shops are illegal marketplaces that sell stolen card numbers, expiry dates, and security codes in exchange for cryptocurrency. Selling, buying, or using card data that belongs to someone else is a federal crime in the US under 18 U.S.C. § 1029, and a bitcoin payment does not change that. No legitimate business sells CVV data, and no legal version of this trade exists.
Sell CVV for Bitcoin 2024: Why Those Listings Are a Trap and How to Protect Your Card
What does a bitcoin CVV shop sell?
A typical listing bundles the three fields needed to run a card-not-present transaction: the 16-digit primary account number (PAN), the expiration date, and the 3- or 4-digit CVV or CVC code.
How to Sell CVV for Bitcoin Fast
Sellers also trade supporting data. That includes billing addresses, ZIP codes, cardholder names, and online banking credentials. Some listings carry "fullz," a package with the victim's name, Social Security number, date of birth, and home address.
- CVV dumps: Track data lifted from a card's magnetic stripe, used to clone a physical card.
- Card-not-present data: The number, expiry, and CVV used at an online checkout.
- Fullz: Identity records that pair with a card to pass address verification.
- Bank logs: Stolen online banking logins sold alongside card data.
What is a CVV, and why does it exist?
The CVV is a short code printed on the card but not stored in the magnetic stripe or the chip. It proves the buyer holds the physical card, which blocks someone who only copied a card number.
Card networks added the code in the late 1990s to cut online fraud. A merchant that asks for the CVV gets a stronger signal than a merchant that only checks the number.
Why do these shops use bitcoin?
Bitcoin lets a seller in one country take payment from a buyer in another without a card processor that follows know-your-customer rules. That is the whole appeal.
The appeal is also the flaw. Bitcoin and other public blockchains keep a permanent ledger of every transfer. Chain analysis firms such as Chainalysis have tracked these flows for years, and investigators have used that trail in prosecutions.
A crypto payment creates evidence. It does not erase it.
How does stolen card data end up for sale?
Skimming and formjacking
Attackers inject code into a checkout page, or install a physical skimmer on a gas pump or an ATM. The code or device copies card fields as the customer types them.
Phishing and fake storefronts
A fake shop or a spoofed email collects card details from people who believe they are paying a real merchant. Traffic to these sites often arrives through search ads and social posts.
Data breaches
Retail and hospitality breaches expose millions of card records at once. Stolen dumps get resold across several forums before a listing appears in a shop.
What are the penalties for buying or selling card data?
US federal law treats card fraud as a felony. 18 U.S.C. § 1029 carries up to 10 years in prison for a first offense involving one card, and up to 15 years for offenses involving multiple cards or a prior conviction.
Sentences climb with the number of victims and the dollar loss. Aggravated identity theft under 18 U.S.C. § 1028A adds a mandatory two-year term that runs after the fraud sentence.
The FBI and the FTC run takedowns of these marketplaces, and crypto seizures have followed convictions. Buyers face charges too. Possession of stolen card data with intent to use it is enough for a count.
How can you tell if a checkout page is fake?
- Check the domain. Misspellings, extra hyphens, and odd top-level domains are red flags.
- Look at the certificate details, not just the padlock. A padlock proves encryption, not honesty.
- Pay with a method that offers buyer protection. A demand for an untraceable transfer at checkout is a warning sign.
- Compare prices. A price that sits far below every other seller is bait.
- Read the contact page. A real merchant lists a phone number, an address, and a return policy.
How do banks and card networks catch stolen CVV use?
Issuers score every transaction against dozens of signals at once: device fingerprint, IP location, shipping address, purchase history, and the time of day.
Address Verification Service (AVS) checks the billing ZIP and street number against the issuer's file. A mismatch raises the risk score and can trigger a decline.
Velocity checks flag a card that gets used at three merchants in ten minutes. A stolen number rarely survives that filter for long.
How do you protect your own CVV?
Use virtual card numbers from your bank or a service like Privacy.com for online purchases. A virtual number limits the damage if a merchant leaks it.
Turn on transaction alerts so your phone buzzes on every charge. Most banks let you freeze a card inside the app, which stops a fraudulent run before it grows.
Never type your card number into a page you reached from an unsolicited text or email. Open the merchant's site yourself.
- Set a spending limit on each virtual card.
- Use one card per merchant so a leak points to the source.
- Keep your CVV off any document, chat thread, or photo.
- Check your statements every week, not once a month.
What should you do if your card data is stolen?
- Call your card issuer and ask for a freeze or a replacement card.
- Dispute every charge you did not make.
- File a report at IdentityTheft.gov and keep the confirmation number.
- Change passwords on any account that used the same card, and turn on two-factor authentication.
- Pull a free credit report and place a freeze if new accounts show up.
FAQ
Is it legal to buy a CVV with bitcoin?
No. Buying card data you do not own is fraud, and the crypto payment counts against a defendant at sentencing rather than helping.
Can you get your money back after card fraud?
Yes, in most cases. The Fair Credit Billing Act caps credit card liability at $50, and many issuers waive even that. Debit card liability depends on how fast you report the loss.
Does a VPN or a crypto payment make a CVV purchase anonymous?
No. Blockchains are public ledgers, and analysis firms link wallets to exchanges that hold identity records. Investigators have traced these payments in many cases.
Are dark web CVV shops safer than clear-web ones?
Neither is safe. Both are illegal, and both attract exit scams where the seller takes payment and ships nothing.