Short answer
There is no safe place to sell CVV dumps, because selling them is not a gray area. In the United States, buying, selling, or transferring stolen card data falls under 18 U.S.C. § 1029, the access device fraud statute. Forums and marketplaces that advertise dumps are typically run by law enforcement, seeded with credentials that lead to controlled cash-out stings, or operated by criminals who take the payment and hand over nothing. None of those outcomes is safe for a seller.
where to sell cvv dumps safely
What a dump actually contains
A dump is a bundle of card numbers with attached data. The CVV or CVC is a sensitive authentication data element under PCI DSS, which forbids merchants and processors from storing it once an authorization finishes. Any batch that carries a working CVV was pulled from a place it was never supposed to persist: a card skimmer, memory scraping on a compromised checkout page, or a breach inside the payment path. Handling that data creates a record that ties back to the person holding it.
Protect your own card and CVC
- Keep the card in your sight at every terminal and decline any offer to take it to a back room.
- Never read your CVV aloud on a call you did not place and verify independently.
- Use a virtual card number, or a single-use number, for online merchants you do not buy from often.
- Enter card details only on pages with a padlock and a domain that matches the merchant exactly.
- Review transactions weekly and turn on push alerts for every charge.
If your card data is exposed
- Lock the card in your banking app.
- Call the number on the back of the card and request a replacement with a new number and a new CVC.
- Dispute unauthorized charges in writing and keep copies of everything you send.
- Pull your credit reports and place a freeze if accounts you do not recognize appear.
- File a report with the FTC and with the FBI's Internet Crime Complaint Center.
What the law caps for you
The Fair Credit Billing Act limits your liability for unauthorized credit card charges to $50. Regulation E sets separate caps for debit cards: $50 if you report within two business days, up to $500 after that, and potentially unlimited if you wait past 60 days from the statement. Speed is the whole game.
Where to report card fraud
- The FTC for an identity theft recovery plan.
- The FBI's IC3 for cyber-enabled financial fraud.
- Your state attorney general for local consumer complaints.
- Your card issuer, which must investigate a written billing error dispute.