What "cheap CVV selling sites" are
The phrase points to storefronts that sell payment card data: the card number, expiry date, cardholder name, and the card verification value. Card verification values run 3 digits on Visa, Mastercard, and Discover cards and 4 digits on American Express. Sellers get the data from breaches, skimming devices, and phishing pages. The storefronts sit outside the card networks. Buying from one is a federal crime in the US under 18 U.S.C. § 1029.
Advice first
- Do not send money to a site that advertises card data for sale. You cannot verify the data, and you cannot recover the payment.
- Do not enter your own card details on these sites. Registration forms on carding markets collect buyer data and resell it.
- Expect legal exposure. Card issuers and the FBI track carding markets. Buyer records get seized with seller records.
- Report the site to the FBI Internet Crime Complaint Center.
How the market works
Sellers price data by card type, issuing bank, and claimed balance. "Cheap" listings carry the highest failure rate. A buyer who tests a code against a live merchant creates a card-testing attempt. The merchant logs it as fraud. The issuer then blocks the card and flags the IP address.
Some sites are pure scams. They take payment in crypto and deliver a text file of invalid numbers. Others run a double scheme: they sell the data and then spend on the same cards before the buyer does.
What the card verification value does
The code proves the physical card is present. It is printed on the card and is not encoded on the magnetic stripe. PCI DSS prohibits storing the code after authorization. That rule is why a stolen card number alone fails at most US checkouts. Online merchants pair the code with address verification and, for higher-risk orders, a 3-D Secure challenge.
Checks for your own account
- Turn on transaction alerts for every charge above a set amount.
- Use a virtual card number for online merchants. Most large issuers let you rotate the number.
- Watch statements for $1 to $5 test charges. Card testers start low.
- Dispute unauthorized charges in writing. US liability rules cap your loss when you report fast.
What is unknown
No public dataset counts how many card data storefronts operate at a given time. Counts change weekly. Treat any figure as an estimate.