No, you cannot sell CVV online fullz without committing a federal crime. Fullz is carder slang for full information about a victim, including the card number, CVV, name, address, date of birth, and often a Social Security number. Offering that package is payment card fraud and identity theft, not a gray-market side deal.
People hunt for forums, Telegram groups, and shops that promise instant payment. The honest marketplace does not exist. Anyone who replies to your offer is either trying to steal from you or building a case against you.
What Does “Sell CVV Online Fullz” Mean in Practice?
CVV in carding language points to the 3 or 4 digit security code printed on a payment card. Fullz adds the identity record behind that card. Sellers write “sell CVV online fullz” to advertise data that works for both online purchases and full identity theft.
A fullz file often contains many identity fields beyond the card number. The seller hands over enough personal detail to open accounts in the victim’s name.
- legal name and current address
- date of birth and Social Security number
- card number, expiration date, and CVV
- bank routing and account numbers
- email addresses and login passwords
- mother’s maiden name or security questions
Some sellers separate “cards” from “fullz” based on whether those identity fields exist. That distinction matters in court. A card number alone is fraud; a card number tied to a real person’s Social Security number is identity theft.
Which Federal Laws Cover This Sale?
The federal government defines payment card numbers and CVVs as “access devices” under 18 U.S.C. § 1029. Selling, buying, or possessing 15 or more access devices with intent to defraud violates that law. Every state that follows card network rules also enforces its own stolen card statutes.
Adding fullz data triggers more federal sections. Under 18 U.S.C. § 1028, transferring or using another person’s means of identification without permission is identity theft. Under 18 U.S.C. § 1028A, aggravated identity theft adds a mandatory two-year prison term when the stolen identity is used during another felony.
The main federal laws you can face are:
- trafficking in unauthorized access devices (18 U.S.C. § 1029)
- identity theft (18 U.S.C. § 1028)
- aggravated identity theft (18 U.S.C. § 1028A)
- wire fraud for any ad or message sent across state lines
- money laundering if you convert payments to bitcoin or cash
You also violate state credit card laws in nearly every U.S. state. A single ad that says “sell CVV online fullz” supports an attempt charge even if no payment ever arrives. The mere offer counts as trafficking because the law punishes intent to sell.
Who Would Pay Money for a Fullz Record?
No legitimate business or person buys a stranger’s card data. The bank already has the card number, the merchant already has transaction records, and the cardholder owns the account. A genuine security company does not keep stolen data in its workflows.
The people who contact sellers are fraudsters or undercover agents. Fraudsters use fullz to place online orders, open loans, file false tax returns, or drain bank accounts. Undercover agents use the same language to gather evidence and set up arrests.
Some “buyers” never plan to pay at all. They ask sellers to prove the data with a small test transaction, then keep the test card and disappear. On this market, the seller is the product.
How Do Scammers and Undercover Agents Operate?
Most carding offers end in one of two ways: the seller gets ripped off, or the seller gets arrested. Both outcomes happen in the same places where sellers advertise. The chat logs and payment trails stay behind either way.
Scam buyers run recognizable playbooks. They ask for a “sample,” request an escrow fee, or send a fake payment receipt that clears no funds. When the seller delivers fullz, the buyer blocks the account.
Law enforcement runs the opposite playbook. FBI, Secret Service, U.S. Postal Inspection Service, and state task forces monitor public carding channels. When they answer a “sell CVV online fullz” post, they pose as buyers who want a large batch, meet in person or ask for a bitcoin address, and make arrests after the transfer.
- fake escrow sites controlled by the buyer
- payments sent from stolen accounts, then reversed
- requests for “proof” that contain the victim’s real data
- messages from accounts law enforcement already controls
The internet does not erase the trail. Forum accounts, IP addresses, chat exports, crypto wallet activity, and mobile phone records all become evidence. A seller who thinks the screen hides them is the reason stings work.
What Penalties Do Fullz Sellers Face?
Penalties depend on the number of records and the harm to victims. A first offense for trafficking in unauthorized access devices can bring up to 10 years in federal prison. A prior similar conviction can double the maximum.
Aggravated identity theft is a mandatory consecutive two-year sentence. A judge cannot run it at the same time as the base sentence. With multiple victims, prosecutors file many counts, and decades in prison become possible.
Courts also order restitution to victims and card issuers. That includes refunded purchases, bank fees, legal costs, and lost wages. Sellers who used bitcoin may face separate money laundering charges with another 20-year maximum.
Do state law penalties get added to federal ones? Yes. State prosecutors can file their own identity theft or computer crime counts. Those sentences often run after federal time unless a plea agreement says otherwise.
What If You Already Have Fullz Data or Posted an Offer?
If you hold stolen identity data, do not test it with a small charge. Testing proves knowledge and control, which is what prosecutors need. Delete the file and stop visiting carding forums.
If you already made a post or sent data to someone, stop communicating. Do not pay a “release fee,” no matter what the buyer threatens. Contact a criminal defense lawyer who handles federal fraud cases before you speak with investigators.
Law enforcement may call and say the case will close if you cooperate. Do not answer questions without your lawyer. A lawyer can negotiate cooperation in exchange for a reduced charge or immunity.
Will Cryptocurrency Payments Hide a Fullz Sale?
No. Bitcoin and most crypto run on public ledgers. Analysts link wallet addresses to exchanges, then to identity documents or bank accounts, and tracing firms report those links to law enforcement.
Privacy coins and mixers do not undo the original forum post or chat message. Federal agents see the ad, the sale terms, and the wallet address. Converting criminal proceeds is a separate money laundering crime, not a workaround.
The only CVV you can sell is your own, and even then you only sell it to a merchant through a valid checkout process. Someone else’s card data is not an asset. It belongs to the victim, and the person who tries to sell CVV online fullz becomes a target for scammers and federal agents.