No Legal Seller Exists
Card issuers and merchants never sell CVV data. The three digit code on the back of a Visa, Mastercard, or Discover card, and the four digit code on the front of an American Express card, exists to prove the physical card is present. Banks keep that code out of stored databases after a transaction is authorized. PCI DSS Requirement 3.2 states that sensitive authentication data must not be stored after authorization.
Forums, product pages, and chat channels that advertise CVV data for bitcoin have no supply chain from a bank. They hold either stolen data or no data at all.
Interested in CVV Purchase With Bitcoin? Read This First
What US Law Says
18 U.S.C. 1029 covers fraud and related activity in connection with access devices. Buying, selling, or transferring card numbers and CVV codes falls under that statute. Penalties reach 10 years for trafficking in unauthorized access devices, and 15 years when the offense affects a financial institution. Bitcoin does not change that analysis. A blockchain record is evidence.
Common Patterns in These Listings
- Advance payment with no delivery. The seller takes the bitcoin and stops replying.
- Test cards that clear a small charge, then fail on a larger one.
- Data pulled from an old breach. The card was closed months ago.
- Extortion after the sale. The seller keeps the buyer's wallet address and chat logs.
If Your Own Card Data Leaked
Call the issuer. The number is on the back of the card. Request a new card number. Review statements for charges you do not recognize. Report identity theft at IdentityTheft.gov. File a complaint with the FBI Internet Crime Complaint Center if bitcoin was sent.
Legitimate Payments With Bitcoin
Some merchants accept bitcoin for goods and services. Those checkouts use your own card or your own wallet. No third party needs your CVV to complete them. If a page asks for your CVV and a bitcoin transfer at the same time, close the page and report the site.