Selling CVV data online is illegal. A CVV is a card verification value. It is a 3-digit or 4-digit code on a payment card. That code proves the card is present during a transaction. Selling the code without the cardholder's consent is fraud.
What CVV data is
Visa, Mastercard, and Discover cards use a 3-digit CVV on the back. American Express uses a 4-digit code on the front. The CVV is not stored in the magnetic stripe or chip. It is used for card-not-present transactions, such as online purchases. The code helps merchants verify that the buyer has the physical card.
How CVV selling sites operate
Websites that sell CVV data operate on the dark web or on hidden forums. They are also called carding shops. A seller offers a list of CVV numbers, expiration dates, and cardholder names. Buyers pay with cryptocurrency. The site may be a scam. It may take money and never deliver valid data. Law enforcement runs some of these sites as stings.
How to Safely Sell CVV Dumps Websites
Legal consequences
Selling CVV data violates the Computer Fraud and Abuse Act, 18 U.S.C. § 1030. It also violates wire fraud statutes, 18 U.S.C. § 1343. Penalties include fines and prison time. The FBI and Secret Service investigate these crimes. A conviction for wire fraud can lead to up to 20 years in prison. Identity theft charges can add 2 years.
How to Sell CVV on a Website: A Guide to CVV/CVC Security for Online Purchases
How to protect your card data
- Never share your CVV over email or text.
- Check websites for HTTPS. Look for a lock icon.
- Use a virtual card number for online purchases. Many banks offer this.
- Review card statements each month.
- Set transaction alerts for your card.
What to do if you find a CVV selling site
Do not buy or sell data. Report the site to the FBI's Internet Crime Complaint Center. Report to the Federal Trade Commission. Both agencies collect reports on card fraud. Your report can help law enforcement shut down the site.