What a CVV dump is
A CVV dump is stolen payment card data. The term comes from criminal forums. A dump can be a magnetic stripe file, or a card number with its expiry date and the three or four digit verification code. Carding is the use of that data to buy goods or move funds. Both are fraud.
In the United States, selling or using card data falls under 18 U.S.C. 1029. Penalties reach 10 years for a first offense and 20 years for a repeat offense, plus fines. The FBI lists carding as a federal crime.
Track2 CVV Dumps: What They Are and Why Selling Them Is a Crime
Why this page does not list prices
A buying guide cannot be written for this market. There is no verified price list. Figures in forum ads and in some industry reports vary by issuer country, card brand, bank, and the amount of data attached to the record. One listing can appear on several forums at different prices. Buyers in these markets have no recourse when a seller takes payment and sends nothing, which happens.
Sell Dumps with CVV to Carders Guide
Court records and threat reports show that law enforcement watches these channels. A transaction is evidence.
What protects a real purchase
The card verification value is one signal among several. Merchants combine it with:
- Address Verification Service, which checks the billing address and postal code.
- 3-D Secure, where the issuer asks the cardholder to approve the order.
- Tokenization, where a token replaces the card number in storage and in transit.
- Device and behavior checks at checkout.
PCI DSS Requirement 3.2 forbids storage of the CVV or CVC after authorization. A merchant that keeps the code in a database fails the standard.
What cardholders can do
Keep the card number and the verification code off the phone, off email, and out of chat. Use a virtual card number for online merchants. Read statements each month. Freeze the card in the issuer app when it is idle. Report fraud at IdentityTheft.gov.
Pitfalls
An offer to buy or sell card data is either a crime or a scam aimed at the buyer. Some sites that claim to sell dumps collect payment and deliver nothing. Others deliver records that were canceled months before. Either outcome leaves the buyer open to prosecution and to loss of the money paid.