Sites that sell CVV data for bitcoin are stolen-card marketplaces. The CVV is the 3 or 4 digit code printed on a payment card. Sellers trade that code, plus the card number and expiration date, for cryptocurrency. Federal law treats the trade as trafficking in unauthorized access devices under 18 U.S.C. § 1029. A first offense carries up to 15 years in prison.
What a CVV is
Visa, Mastercard, and Discover print a 3 digit code on the back of the card. American Express prints a 4 digit code on the front. The code proves the buyer holds the physical card. Online and phone merchants ask for it. PCI DSS Requirement 3.2 forbids storing the code after a transaction is authorized. A leaked CVV therefore points to a skimmer, a phishing page, or a merchant that broke that rule.
What these shops list
- Card number, expiration date, and CVV. Sellers call a listing "fullz" when it adds name, address, and phone.
- Billing ZIP and street address, used to pass address verification checks.
- Bank identification number ranges, used to sort cards by issuer and country.
- Cards grouped by balance range or card brand.
Prices track demand. A low-value card sells for a few dollars. A card with a verified high balance sells for more. Most listings are untested. Buyers on carding forums report dead or invalid numbers at high rates. No escrow process makes the transaction legal.
Sell CVV for Bitcoin No Fee: Why It Does Not Exist and How to Protect Your Card
Why sellers use bitcoin
Bitcoin settles without a card network. A card payment can be reversed through a chargeback. A crypto transfer cannot. Sellers use that property to avoid chargebacks and to move funds across borders. The public ledger is permanent and traceable. Chain analysis firms map wallet clusters, and U.S. exchanges file currency transaction reports. Anonymity is partial, not total.
Sell CVV for Bitcoin: What Those Prices Really Buy
Legal exposure in the United States
18 U.S.C. § 1029 covers production, sale, and possession of unauthorized access devices. Subsection (a)(2) covers trafficking, with a maximum of 15 years. Subsection (a)(3) covers possession of 15 or more devices, with a maximum of 10 years. Wire fraud charges under 18 U.S.C. § 1343 and identity theft charges under 18 U.S.C. § 1028A often follow. Aggravated identity theft adds a mandatory 2 year term on top of the underlying sentence.
How card data leaks
- Skimmers on gas pumps and ATMs read the magnetic stripe.
- Phishing pages copy card details from fake checkout forms.
- Merchants store CVV values against PCI DSS rules, then suffer a breach.
- Malware on a point of sale terminal captures data in memory.
Protection steps for cardholders
- Use a virtual card number for online merchants. Major US issuers offer them at no cost.
- Turn on transaction alerts for every charge above a set amount.
- Check statements weekly instead of monthly.
- Keep one card for subscriptions and one for one-time purchases.
- Report a lost or stolen card to the issuer the same day.
If your card number appears in a shop
Freeze the card in the issuer app. Request a new number. Dispute charges you did not make. File a report at IdentityTheft.gov and with the FBI Internet Crime Complaint Center. Under the Fair Credit Reporting Act and card network zero liability policies, you are not liable for unauthorized charges reported in time. Keep written records of each call and the reference number.
What remains unknown
Total dollar losses from these shops are not published. Card networks report card-not-present fraud in aggregate, not by channel of sale. Any single figure for marketplace volume is an estimate.