What a CVV shop is
A CVV shop is a site that sells card data. The package holds the 16-digit account number, the expiration date, a cardholder name, a billing address, and the 3-digit code printed on the back of the card. The data comes from point-of-sale skimmers, breached merchant databases, and phishing pages. The cardholder did not agree to the sale and does not get any of the money. In the United States this is access device fraud under 18 U.S.C. § 1029. Penalties reach 15 years in prison and fines on the heaviest counts.
What Reddit threads about CVV shops contain
Reddit carries a large volume of posts and comments on the topic. Three patterns repeat.
- Scam reports. A buyer sends payment and receives nothing, or receives numbers that decline. The seller keeps the money. The buyer cannot file a bank dispute, because the stated reason for the transfer is a crime.
- Sting reports. Federal task forces and state police run storefronts, forums, and Telegram channels. The FBI, the Secret Service, and the U.S. Postal Inspection Service all work card and identity cases.
- Marketing. A share of the "reviews" and "vouches" come from the people running the shop. Upvote counts are not evidence.
Why the listings fail
A bank cancels a card the moment the owner disputes a charge. Numbers bought today often stop working within hours. Merchants also verify the code with the issuer at checkout, so a wrong digit declines the order. Address Verification System checks and IP checks add two more mismatch points. Card not present fraud rates are high for a reason: the data has a short working life.
Protect your own CVV
PCI DSS states that merchants cannot keep the card verification value after authorization. If a site or a person asks you to send a photo of your card by email or chat, that request has no legitimate purpose.
Under the Fair Credit Reporting Act, your liability for unauthorized credit card charges is capped at $50. Card network policy is usually $0. That cap is your main protection. To lower your risk:
- Lock the card in the issuer's app when it is not in use.
- Turn on alerts for every charge, not just large ones.
- Read your statement each month. Small test charges often come first.
- Use a virtual card number for new merchants.
If your number is used
Call the number on the back of the card and report the charge. The issuer opens a dispute and mails a new card with a new code. You can also file a report with the FTC at ReportFraud and with the FBI's Internet Crime Complaint Center. Both agencies publish the reports as trend data. Nothing in a CVV shop protects a buyer, and no shop can undo the federal charge.