There is no legal price for a CVV, because selling card data is a crime in the US and in most countries that matter for card payments. The numbers that float around fraud forums and threat reports sit between about $1 and $60 per card, and they describe criminal chatter, not a product you can buy at a set rate. Any "buy CVV with bitcoin" offer aimed at you as an individual is a scam, a sting, or both. This page covers what those numbers mean and why the transaction falls apart.
Sell CVV for Bitcoin Price: What Those Listings Really Are
Why a CVV has no real market price
A price needs a market: sellers who can advertise, buyers who can compare, and a way to enforce a deal. Card data has none of those things. Listings vanish with the forum, sellers rotate handles, and nobody can check a number before paying.
Prices in these venues move on rumor. A seller claims a "high valid rate" and charges more, then buyers find out later what they got. There is no index, no benchmark, and no refund desk.
That is the core reason the question has no clean answer. A quoted figure reflects what one anonymous seller said on one day to people with no legal recourse.
What reported price ranges look like
Threat intel firms and law enforcement write-ups describe a rough ladder of prices. Treat every number as an estimate built on criminal self-reporting, not an audited figure.
- Card type: basic consumer Visa and Mastercard records get quoted from the low single digits to about $20.
- Card tier: business, corporate, and premium cards draw more because spending limits are higher.
- Country of issue: US-issued data is quoted higher than most, since it works on more US checkout pages.
- Extra data: a "fullz" bundle with name, address, SSN, and date of birth costs more than a bare number.
- Freshness: newer batches cost more than aged ones, though no buyer can prove age.
- Volume: bulk lots get heavy discounts, which tells you what sellers think of their own hit rate.
Where the card data in those listings comes from
Most card numbers for sale trace back to a handful of channels. Knowing them helps you see why the supply keeps flowing and why quality is erratic.
- Skimmers on fuel pumps and ATMs that copy the magnetic stripe.
- Magecart-style scripts slipped into checkout pages that capture form fields.
- Merchant and processor breaches that expose stored card records.
- Phishing pages and fake delivery notices that ask for card details.
- BIN guessing, where bots run through card numbers until one approves.
Why bitcoin makes the deal worse for the buyer
Bitcoin transfers cannot be reversed. A card network will refund a stolen card; nobody refunds a sent bitcoin payment. That one-way flow is the whole business model.
The escrow that never exists
Sellers point to a "trusted escrow" that is either run by the same crew or a name in a chat window. Once the coin moves, the escrow stops answering.
Test cards and dead batches
A common pattern: the first small order works to build trust, then the bulk order arrives dead. Some sellers buy one valid number and resell it to a dozen buyers.
Stings and honeypots
Payment card trafficking is a standing priority for the FBI and the Secret Service. Forums that look busy are sometimes run for evidence collection, and the seller is an agent.
What buying card data costs you in the US
Trafficking in access devices falls under 18 U.S.C. § 1029. A basic count carries a statutory maximum of 10 years, aggravated counts go to 15, and wire fraud under § 1343 carries up to 20 years. Sentences can stack across counts, and courts order restitution to banks and cardholders.
There is also the paperwork that follows a felony. Professional licenses, security clearances, and immigration status all take the hit, whether or not prison time is imposed.
How merchants block this trade
- Require the CVV on every card-not-present order, and never store it. PCI DSS forbids keeping the CVV or CVC after authorization.
- Run AVS checks on billing address and ZIP, and decline mismatches on high-value orders.
- Use tokenization so your systems never hold a real card number.
- Turn on 3-D Secure for online checkouts where your processor supports it.
- Watch for BIN attacks: many small declines on sequential numbers from one IP range.
- Set velocity limits per card, per IP, and per device.
For shoppers, the practical step is a virtual card number for online purchases. It caps exposure and can be frozen after a single use.
If your card data shows up for sale
Call your issuer first so the card is reissued, then file a report with the FTC at IdentityTheft.gov. Add an FBI IC3 report if money was lost. Keep the old statements, because disputes run on dates.
Questions people ask about CVV pricing
Can you legally buy a CVV?
No. Buying card data is trafficking in access devices, even if the number turns out to be dead and even if you never use it.
Why do sellers demand bitcoin?
Because transfers are irreversible and hard to trace back to a person. That protects the seller, not the buyer.
Is selling your own card data legal?
No, and it is a bad idea anyway. "Sell your CVV" recruiting posts often harvest your banking details or push you into receiving stolen funds, which makes you the traceable link in the chain.
Does a high "valid rate" claim mean anything?
No. Nothing enforces it. A claim is marketing from someone who faces no penalty for lying.
Can a CVV be stored by an online store?
No. PCI DSS forbids keeping the CVV or CVC after authorization, so any store that asks you to save it is a red flag.
The short version
A CVV price list is fiction dressed up as a market. The reported $1 to $60 range exists to make the offer look ordinary. The real costs are a drained account, a dead card, or a federal charge.