No, you cannot sell a CVV to a legitimate shop. A CVV is a card verification value issued by the cardholder's bank to prove the physical card is present, and merchants are prohibited from storing or trading it. Any business, marketplace, or person offering to buy CVVs is engaged in card fraud, not retail.
What exactly is a CVV?
A CVV is a 3 or 4 digit security code printed on a payment card and generated by the issuing bank. It is not a product, a license, or a transferable asset, so it has no legal market value to a store.
Guide to Finding a Reliable CVV Selling Platform
Visa calls the printed code on the back of a card CVV2, while the magnetic stripe version is CVV1. Both exist to verify that the person paying holds the real card, which is why card networks treat them as sensitive authentication data.
Why can't a shop buy a CVV from you?
Under the PCI Data Security Standard, merchants may not store sensitive authentication data after a transaction is authorized, including the full CVV. A shop that bought a code from you would be breaking network rules and card brand contracts at the same time.
Legitimate merchants only transmit the code to a payment processor for a single authorization. They do not collect, resell, or warehouse codes, because the data belongs to the cardholder and the bank that issued it.
Is selling a CVV illegal?
Yes. In the United States, trading card security codes that belong to other people falls under access device fraud and identity theft statutes, and the FTC treats it as a form of payment card fraud.
- Selling a CVV that is not yours can be prosecuted as access device fraud.
- Buying CVVs to test or use them is also a crime, even if a single attempt fails.
- Operating a shop, forum, or bot that brokers CVVs adds conspiracy and money laundering exposure.
The FBI's Internet Crime Complaint Center tracks carding activity, and reports from victims and businesses feed directly into those investigations.
What do legitimate shops actually do with CVV data?
A real store asks for your CVV only while you are checking out and passes it straight to the processor for one authorization decision. After that, the code is discarded and never written to the order record.
If a merchant asks you to email, text, or message your CVV outside a secure checkout page, that is a red flag. Genuine processors use tokenization so the raw code never sits in the shop's database.
Someone offered to buy my CVV. What should I do?
Do not respond, do not send the code, and do not accept payment. Report the contact to your bank's fraud line and file a report with the FTC at IdentityTheft.gov or with the FBI's IC3.
- Stop the conversation and screenshot the request.
- Contact your card issuer and ask them to monitor or reissue the card.
- Report the solicitation to the platform where it happened.
How do you keep your CVV out of the wrong hands?
Never share the code in chat, email, or DMs, and never photograph the front and back of a card together. Cover the code with your thumb when handing a card to a server or clerk, and check statements for small test charges.
If you receive an unsolicited offer to sell a CVV, treat it as a scam aimed at your card or your bank account. There is no legitimate shop on the other end of that offer.