The short answer
No legitimate site sells CVV data. A CVV is a security code attached to a real card account. Any site that offers CVVs for sale is trading in card numbers taken from other people. Buying, selling, or using that data is a federal crime in the United States. There is no legal vendor and no licensed marketplace.
Where to Sell CVV Legitimately
Search results for this term lead to carding shops, forums, and chat channels. None of them are legitimate businesses. Some are run by thieves. Some are run by people who take payment and deliver nothing. Both kinds cost the buyer money.
What a CVV is
A CVV is a three or four digit code printed on a card or stored in a digital wallet. It exists to prove the person checking out holds the physical card. Merchants use it for card not present transactions. It is not a password and it is not a product.
Where to Sell CVV 'Legit' With Bitcoin: The Honest Answer
What "CVV selling" means in practice
Sellers use "CVV" as shorthand for a full card record: number, expiry, holder name, code, and at times billing address and ZIP. Listings name the issuing bank, the country, the card brand, and a price. Buyers get no title to the account and no recourse if the data fails.
Federal law
18 U.S.C. § 1029 covers fraud and related activity with access devices. A card account number counts as an access device. Trafficking in access devices carries fines and prison terms that can reach 15 years. State statutes add separate charges for identity theft and larceny. Card network rules and merchant agreements ban the activity as well.
How card data leaks
- Skimming hardware on fuel pumps and ATMs
- Breaches at merchants, processors, and payroll vendors
- Phishing pages that copy a checkout screen
- Malware on point of sale terminals
- Card details photographed from receipts or invoices
Why the market is also a scam
- Payment is taken and no data is sent
- Sample cards decline at checkout
- Reviews come from a small set of accounts
- Support moves to encrypted chat and goes silent
- Escrow claims cannot be checked
A buyer of stolen data has no legal claim against a seller. Reporting a loss means describing a crime the buyer took part in.
Protect your own card
- Use a virtual card number for online checkout
- Turn on transaction alerts for every charge
- Freeze the card in the bank app when it is idle
- Type the store address instead of clicking email links
- Keep the CVV out of notes, photos, and spreadsheets
If your card data is exposed
- Call the issuer and request a new number
- Read statements for small test charges
- File a recovery plan at IdentityTheft.gov if accounts were opened
- Report the fraud to the FBI Internet Crime Complaint Center
- Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion
Reporting a CVV site
Send the domain to the card network fraud team and to IC3. Visa, Mastercard, American Express, and Discover each run a reporting channel. Hosting providers and search engines accept abuse reports. Include the domain, the date, and screenshots of the listing.