There is no legit shop for selling CVV codes. Any store, website, or messaging channel that offers to buy card verification data operates outside the law. The only CVV you can handle within the law is the one printed on your own card, and no licensed business pays money for that number.
Why do people ask about a legit shop for selling CVV?
That search phrase comes from carding forums and fraud discussions. Sellers use it when they have stolen card profiles and need a buyer who will not cheat them. The word 'legit' is a sales label, not a legal status, so it does nothing to change what the product is.
No bank, payment processor, or licensed data company calls itself a CVV shop. The term appears only in underground markets. A seller offering a legit shop for selling CVV is telling you which side of the law they operate on.
What is a CVV and what are people selling?
CVV stands for Card Verification Value, the three or four digit code printed on credit and debit cards. Merchants request it during online checkout to prove the customer has the physical card. The code is checked at the payment step and is not meant to live in a merchant database.
When someone talks about selling CVV, they mean full card records. Those records include the card number, expiration date, cardholder name, billing address, and the CVV code.
Contents of a typical CVV card record
- Cardholder name and billing address
- Card number, expiration date, and the CVV code
- A PIN when the seller claims debit card data
- Extra personal details, which fraud groups call fullz
Buyers use the record to place orders on websites that do not verify the shipping address. The victim sees the charge after the order ships. The seller is paid before anyone notices the loss, and that is why this market keeps operating.
Is there a legal marketplace for CVV codes?
No legitimate marketplace for CVV codes exists. Card brands and payment networks ban merchants from storing CVV data after a transaction is authorized. PCI DSS, the payment card security standard, bans keeping sensitive authentication data in any merchant system.
Because compliant merchants never store CVV codes, they have no inventory to sell. A business that follows card rules cannot offer card codes to a buyer. A shop that advertises CVVs is either reselling stolen records or running a scam on top of the same illegal market.
What card network contracts require
Every merchant agreement with Visa, Mastercard, American Express, and Discover includes a simple rule: do not store the CVV after a purchase ends. Keeping the code for later marketing use violates the contract. Sharing it with a buyer ends the merchant account, triggers a forensic audit, and opens the business to card brand fines.
What U.S. law says about selling CVV card data
Selling card numbers and CVV data is a federal crime. 18 U.S.C. § 1029 bans trafficking in access devices, and card numbers tied to cardholder data qualify as access devices. A person convicted under this statute faces up to ten years in prison for a first offense, plus fines.
State laws add identity theft, computer crime, and fraud charges. Prosecutors can file multiple counts even when the total stolen value is small. An undercover agent who buys one card record from you is enough to support an arrest and a conviction.
Who investigates CVV shops?
The FBI, the Secret Service, and U.S. Postal Inspection Service handle these cases, depending on how the data moves. Federal agents work inside carding forums and encrypted messaging groups. A vendor who advertises fresh data may be sending it to an agent in real time.
How a 'legit CVV shop' scams the seller first
Many CVV shop ads are fake. The operator takes the seller's sample card data, uses it, and disappears. The seller cannot complain to police because the attempted sale is itself a crime.
Another outcome is a sting operation. An agent poses as a bulk buyer, downloads your data, and later uses that evidence in a search warrant. Payment histories and chat logs connect sellers to earlier fraud, so a case can be opened long after the sale.
Can you sell the CVV from your own card?
No licensed buyer needs the code from your own card. A CVV is useful only when your card is used for an online or phone order. Giving the code to a stranger who pays you opens the door to card-not-present fraud in your name.
Sharing your own CVV outside an authorized payment likely violates your cardholder agreement. If that person uses the code to run charges, the issuer can treat you as part of the fraud. The bank may close the account and mark the loss as suspicious.
What should you do after seeing a CVV shop ad?
Report it and leave the site. The Federal Trade Commission accepts reports about CVV selling and card data trading under its identity theft categories. If the ad arrived by email, forward it to your bank's fraud team.
Do not contact the seller to test the market. No legit shop for selling CVV can exist under card network rules. The safe move is to end the conversation and keep your own card details private.
FAQ about CVV selling legality
Is a CVV shop legal in any country?
No card brand approves resale of customer CVV data anywhere in the world. Local enforcement may be slower, but the sale violates global payment network rules. If a U.S. card is involved, federal agencies can still open a case.
Can a data broker legally buy card CVVs?
Reputable data brokers do not buy or sell individual card security codes. They work with anonymous purchase behavior and marketing lists. A broker who accepts CVV data is trading stolen authentication information and can face the same federal charges as a seller.
Is selling fullz different from selling CVV?
Fullz includes more identity data, often a Social Security number and date of birth. Selling fullz bundles a card with a victim's identity. Courts treat that as identity theft and access device fraud, and the penalties increase with the added damage.
Bottom line: treat any 'CVV selling shop' as a red flag
The search for a legit shop for selling CVV has one answer: no such shop exists. Card security codes exist to stop fraud, so they are never sold as inventory. Anyone offering cash for your card data is an investigator or a fraudster, and neither ends well for you.
If you found card data that does not belong to you, do not move it and do not sell it. Return it to the issuer or merchant security team that controls the account. This article is not legal advice; if you have an active case, talk to a U.S. criminal defense attorney.