Sell CVV Shop Review: None Passes
Shops that sell CVV data advertise valid rates, escrow, and bulk pricing. A review of how the category works ends at one pick: no shop. Buyers lose money, and the data is illegal to use. The working alternative is CVV verification plus 3-D Secure at checkout.
Top pick: verify at checkout, do not buy data
CVV2 and CVC2 checks require the 3 or 4 digit code at the time of sale. PCI DSS Requirement 3.3.1 bars merchants from storing that code after authorization. The rule exists because stored codes are the exact item card shops resell. A checkout that verifies and discards the code removes the inventory these shops trade.
Option 2: 3-D Secure step-up
3-D Secure adds an issuer prompt for risky orders. It shifts chargeback liability to the issuer on covered transactions. Cost to the merchant is a per-transaction fee. Coverage is not total. Some issuers skip the prompt.
Option 3: manual review for high-ticket carts
Manual review flags orders that mix a new card with a new shipping address. It adds 5 to 20 minutes per order and needs staff. It also catches resold data that clears a CVV check when the issuer has not reissued the card.
What the shop listings claim
Listings quote prices from about $5 to $50 per record. They report valid rates of 60% to 90%. No third party audits those numbers. The escrow is run by the shop operator. Many domains last under 90 days, then close with buyer balances.
Legal status
Trafficking in counterfeit access devices falls under 18 U.S.C. 1029. A first offense carries up to 10 years. Card-not-present fraud stays on the FBI Internet Crime Complaint Center list of top reported crime types. Under the Fair Credit Billing Act, a cardholder can dispute a charge, which leaves the loss with the merchant or the shop buyer.