If you plan to sell CVV fullz, stop and read this first: no legal market exists, and the sale itself is a federal crime. "Fullz" is the carding term for a stolen payment card plus the cardholder's personal details, such as name, address, date of birth, and sometimes Social Security number. Selling that package violates US law and can bring prison time even for a first attempt.
What Does "CVV Fullz" Mean on Carding Sites?
CVV is the three or four digit card verification value printed on a payment card. It is not the PIN, and merchants are not allowed to store it after a transaction. Criminals call data "fullz" when it pairs the card number with the cardholder's identity fields.
A typical fullz package includes:
- Card number, expiration date, and CVV2 or CVC2
- Cardholder full name and billing address
- Date of birth, email address, and phone number
- Sometimes the Social Security number, bank account numbers, or answers to security questions
These extra fields turn one card number into a usable fake identity. Fraudsters use fullz to buy goods online, open new credit accounts, file tax returns, and drain bank accounts. A few dollars per record might look like easy money, but the seller is creating a permanent record of the crime.
Why Is Selling CVV Fullz a Crime Under US Law?
Stolen card numbers fall under the Access Device Fraud Act, which makes it illegal to produce, sell, or transfer unauthorized cards and card data. When the package includes a Social Security number or other identification, identity theft statutes add separate penalties. Computer fraud laws also apply if the data came from a hacked database.
The seller does not need to use the stolen cards to break the law. Simply offering the data for sale is a violation. If the offer crosses state lines or uses the internet, federal prosecutors can file charges.
Wire fraud is another common charge because the seller uses email, chat apps, or payment platforms to carry out the scheme. Money laundering charges follow when the seller moves Bitcoin or cash to hide the origin of the profit. Each stolen record can be treated as its own offense, so one chat log with hundreds of fullz records creates many separate counts.
Who Is Actually Buying CVV Fullz?
Only two types of buyers exist for stolen fullz. The first is another criminal who wants to commit card fraud or identity theft. The second is an undercover officer, an informant, or an investigator running a controlled buy.
Law enforcement agencies operate their own carding shops and telegram channels. Agents pose as bulk buyers to record sellers in the act. In many cases the chat logs, crypto wallet addresses, and delivery details are added to an evidence file before the seller receives any money.
How Do Investigators Trace a CVV Fullz Seller?
Carding forums and encrypted apps offer privacy, but not invisibility. Investigators begin with the username, the wallet address, and the content of the ad itself. From there they work backwards to the person behind the screen.
The digital trail often looks like this:
- The account that posts the ad is tied to a phone number, email address, or older profile that points to the seller.
- The seller's own internet connection leaks an IP address once the person logs into a forum without a VPN or after a small mistake.
- The Bitcoin or Monero wallet receives payment, and blockchain analysis maps where the funds move.
- Prosecutors subpoena exchanges, chat services, and hosting providers to match account records to names.
- Undercover agents arrange a final buy, and the arrest happens during that controlled transaction.
Even sellers who use prepaid cards and public Wi-Fi forget other traces. Device identifiers, browser fingerprints, and language patterns connect one alias to older known accounts. The same mistakes show up across almost every federal carding case.
What Are the Penalties for Selling Fullz and CVV Codes?
Federal sentences depend on the number of stolen records and the loss caused. Access device fraud alone carries a maximum of 10 years in federal prison for each count. Aggravated identity theft adds a mandatory two consecutive years when the stolen record contains a real person's identification.
Wire fraud, computer fraud, and money laundering can push the total much higher. A seller convicted on several counts may face decades in prison, not a quick fine. Judges also order restitution to the card issuers and the people whose identities were stolen.
Can You Sell Your Own CVV and Personal Card Data?
Some people search for "sell cvv fullz" because they wonder if their own card details have value. A cardholder cannot sell the CVV code without giving a buyer the ability to commit fraud. Banks prohibit sharing card security codes, and no legitimate merchant may legally use them after checkout.
Your payment card is not merchandise. The card network, the issuing bank, and the merchant process the transaction, and the cardholder never owns the authorization code. Trying to sell your own CVV with your personal information also creates a risk that the buyer uses it to attack you.
What Should You Do If You Have Fullz Data From a Breach?
If you hold stolen personal data, do not try to sell it or test it. The only lawful step is to report it to the Federal Trade Commission at IdentityTheft.gov and, if the breach affected a company, tell that company's security team. You can also file a complaint with the FBI's Internet Crime Complaint Center.
Cardholders who worry that their own data is in circulation should check account statements and credit reports. Place a fraud alert or credit freeze to block new account openings. Report any suspicious transaction to the card issuer immediately.
FAQ: Common Questions About Selling CVV Fullz
Can I sell CVV fullz anonymously on the dark web?
No. Dark web markets have had their servers seized and their operators arrested more than once. Payment records, forum messages, and even deleted data end up in the hands of investigators.
Anonymity tools only work until one slip occurs. One login from a home network or one deposit to a regulated exchange can break the entire mask.
Is it a crime to sell fullz without using the card numbers?
Yes. Trafficking in access devices, which includes selling stolen card numbers and expiration dates, is a crime on its own. You do not need to make a purchase or withdraw cash from the stolen cards.
Is selling fullz for Monero safer than selling for Bitcoin?
No. Monero hides the payment amount better than Bitcoin, but investigators still collect forum logins, chat metadata, and withdrawal activity. Courts have admitted Monero evidence recovered from devices and exchanges.
Where can I sell CVV fullz legally?
Nowhere. No legitimate business buys stolen card data from individuals. A payment card issuer is the only party with authority over the CVV on its own cards, and it does not purchase such data from strangers.
What happens if the police contact me after I post a CVV fullz ad?
Stop communicating and ask for a lawyer before saying anything else. The contact usually means investigators have already collected evidence. Anything you type in a chat can be used against you in court.
Searching for ways to sell CVV fullz is a search for a crime. The safer route is to report stolen card data, freeze your credit, and alert your bank.