Short answer
There is no lawful way to sell CVV dumps online in 2024. A dump is a record of stolen card data, typically a magnetic stripe track or a card number paired with an expiration date and security code. Selling, buying, or holding that data for an account you do not own is a federal crime in the United States. Every storefront that advertises this trade falls into one of three groups: a law enforcement operation, a scam that takes the seller's deposit and disappears, or a marketplace that logs IP addresses and hands them to investigators. The sections below explain the vocabulary, the legal exposure, and the steps that protect real cardholders and merchants.
How to Safely Sell CVV Dumps in 2024
What the terms actually mean
A fullz is a bundle of personal data that includes a name, address, and card details. A dump usually refers to Track 1 or Track 2 data lifted from a card's magnetic stripe. A CVV or CVC is the three or four digit verification code printed on the card or stored in a chip. Carding is the practice of using that stolen data to buy goods. None of these terms describe a legitimate product. Banks and payment processors issue cards under contracts that forbid transferring account access to third parties, so there is no authorized resale market at any price.
Best Way to Sell CVV Dumps in 2024
Why the listings are a trap
- Escrow claims are fake. The site acts as the buyer, the judge, and the holder of your funds.
- Payment rails block the trade. Banks and card networks flag the transaction patterns and freeze accounts.
- Identities leak fast. Sellers who upload samples publish their own handles, wallet addresses, and device fingerprints.
- Chargebacks follow the seller, not the site. You carry the loss and the record.
What US law says
18 U.S.C. Section 1029 criminalizes the production, sale, and possession of unauthorized access devices, which includes stolen card numbers and track data. Penalties reach 15 years in prison for aggravated cases, with fines and forfeiture on top. Wire fraud, identity theft, and money laundering charges commonly stack onto the same conduct. State laws add their own counts. A seller who never completes a single sale can still be charged for offering the data.
Is Selling CVV Dumps Legal in 2024? The Law Explained
How to protect your own cards
- Turn on transaction alerts in your banking app so every charge triggers a notification.
- Use a virtual card number for online checkout and set a spending limit on it.
- Keep the security code out of saved browser profiles and note fields.
- Check card readers and checkout pages for overlays or unexpected scripts before you pay.
- Freeze your credit with each of the three major bureaus if you suspect exposure.
If your card data is exposed
- Call the number on the back of your card and ask for a replacement with a new number.
- Review 12 months of statements and dispute every charge you did not make.
- File a report at IdentityTheft.gov to generate a recovery plan.
- Report the incident to the FBI Internet Crime Complaint Center.
- Change passwords on any account that stored the card, starting with email and banking.
For merchants
Tokenize card data so your systems never hold a raw number. Keep your checkout scripts in a content security policy that blocks unknown domains. Complete an annual PCI DSS self assessment and patch the e-commerce platform on the vendor's schedule. Skimming code injected into a checkout page is the most common source of the dumps that appear for sale, and a merchant who stores plain card numbers becomes the source.