Short answer
There is no legal place to buy fullz or CVV dumps. Fullz are sets of stolen personal and card records. Dumps are stolen card track data. Sellers operate on hidden forums, not on shops with receipts or refunds.
Why this is not a shopping question
Federal law treats card account numbers, CVVs, and magnetic stripe data as access devices. Selling, buying, or holding them with intent to defraud falls under 18 U.S.C. 1029. Sentences reach 10 years for a first offense and 15 years for aggravated cases. Identity theft charges under 18 U.S.C. 1028 add more time. A purchase leaves payment trails, chat logs, and delivery addresses. Those records are evidence.
What actually happens on those markets
- Buyers receive dead cards, test data, or nothing.
- Escrow accounts are run by the same people selling the data.
- Buyer identities are collected and resold.
- Card data ages in weeks. Issuers block dumps after they appear in breach lists.
Where the data comes from
Skimmers on fuel pumps and ATMs. Phishing pages. Malware on merchant networks. Breach dumps from retailers and processors. Card testing sites that validate numbers in small charges.
If your card data is exposed
- Call the issuer and ask for a replacement card and a new number.
- Read the last 12 months of statements for charges under $5.
- File a report at IdentityTheft.gov if a Social Security number was exposed.
- Place a free credit freeze with Equifax, Experian, and TransUnion.
The Fair Credit Billing Act caps your liability for unauthorized credit card charges at $50. Debit card rules differ and depend on how fast you report.
Limits of this page
This page does not list vendors, prices, or escrow services. Any site that offers those is either a criminal operation or a scam aimed at the buyer.