What a CVV is
A CVV is a 3-digit code printed on the back of most Visa, Mastercard, and Discover cards. American Express prints a 4-digit code on the front. Card issuers generate the code from the card number and an encryption key at the time of issue. The code is not written to the magnetic stripe or the chip.
Top CVV Shop to Buy? Here's What's Actually Safe
PCI DSS classifies the CVV as sensitive authentication data. A merchant may pass it to the issuer to authorize a transaction. The merchant may not store it after the authorization finishes.
What CVV marketplaces sell
Sites that advertise CVV numbers for sale traffic in stolen payment card data. Listings use terms such as fullz, fresh, non-VBV, and high balance. Those terms describe stolen accounts and attempts to bypass issuer checks. The cardholder did not consent to the sale. The seller does not own the data.
Legal status in the United States
18 U.S.C. 1029 covers fraud and related activity in connection with access devices. Trafficking in one or more access devices carries a maximum of 10 years. Possession of 15 or more devices with intent to defraud carries up to 15 years. 18 U.S.C. 1343 covers wire fraud. Buying the data is a separate charge from using it.
Top CVV Shop with Bitcoin: Comparison Review
Pitfalls for buyers
- No recourse. Card data marketplaces sit outside contract law. A buyer cannot dispute a sale.
- Exit scams. Many listings are fabricated or already used. Payment leaves the buyer with no delivery.
- Malware. Some shops push banking trojans to visitors.
- Evidence. Transaction records, chat logs, and crypto ledgers appear in prosecutions.
What is legal
Consumers can cut card-not-present fraud on their own accounts. Do not read a CVV aloud on a call you did not start. Do not send it by email or text. Use a virtual card number at merchants you do not know. Check statements each month and report unknown charges to the issuer. For merchants, PCI DSS requires tokenization and network tokens so the real CVV never sits in a database.