Short answer
There is no legal 2024 rate for selling a CVV. Prices posted on criminal carding markets change with card type, issuing country, and the data bundled with the card. Researchers who monitor those markets report listings that range from under a dollar to several hundred dollars per card. Every listing is an offer to commit payment fraud.
Sell CVV for Bitcoin Price: What Those Listings Really Are
US law treats the sale of card data as access device fraud. Penalties under 18 U.S.C. § 1029 reach 10 years in prison for a basic offense and 20 years when aggravating factors apply. Bitcoin does not change that. Every transfer is written to a public ledger, and blockchain analysis firms sell tracing tools to law enforcement.
What a CVV or CVC is
A CVV is the 3-digit code printed on the signature panel of a Visa, Mastercard, or Discover card. American Express prints a 4-digit code on the front. It is not the card number. It is not the PIN. Issuers generate it from the card data plus a secret key, so it cannot be guessed from the account number alone.
Its job is to prove the physical card is in hand. A merchant who cannot see the card can still ask for it. That check is the main defense for phone, mail, and online orders.
Why the advertised prices differ
Carding market prices track risk and usability, not balance alone. Sellers charge more for cards that pass basic fraud screens. Factors that move a listed price:
- Issuing country. Cards from banks with weak authentication sell higher than cards that force a one-time code.
- Card type. Credit lines with high limits list above debit cards tied to checking accounts.
- 3D Secure status. Cards enrolled in Visa Secure or Mastercard Identity Check fail at checkout without the cardholder's phone.
- Bundled data. A record with name, address, and date of birth costs more than a card number alone.
- Freshness. Data sold after a breach ages fast. Issuers reissue cards, and old numbers decline.
Buyers on these forums get scammed at a high rate. Fake data, exit scams, and malware hidden in "checker" tools are common. That risk is part of the price.
How merchants catch stolen card data
Card-not-present fraud is detected at several points, not one:
- CVV verification. The issuer returns a match, no match, or not processed result on each authorization.
- Address Verification Service. The billing address is compared with the issuer's record.
- 3D Secure. The cardholder authenticates with the bank through an app or one-time code.
- Velocity and device checks. Many orders from one device, one IP block, or one shipping address raise a flag.
- Machine learning scores. Networks and processors score each transaction in milliseconds and decline high-risk ones.
PCI DSS forbids storing the CVV after an authorization, so a breached merchant database does not hand over codes. Codes leak through skimmers, phishing pages, and malware on the cardholder's own device instead.
If your card data is exposed
- Freeze the card in your bank app or call the number on the back.
- Review statements for small test charges, which often come before a large one.
- Turn on transaction alerts for every purchase.
- Dispute charges in writing. Under the Fair Credit Reporting Act, credit card liability is capped at $50. Debit card liability depends on how fast you report, and can reach the full account balance if you wait.
- Report the incident at IdentityTheft.gov and to the FBI Internet Crime Complaint Center.
Bottom line
Any 2024 "rate" for a CVV comes from an illegal market. Buying or selling card data is a federal crime in the US, and the bitcoin side of the trade is recorded and analyzed. The only rate that matters to a cardholder is the $0 liability limit that comes with prompt reporting.