What the Two Codes Do
A CVV is a 3 or 4 digit code printed on a payment card. A PIN is a 4 to 12 digit code the cardholder types at an ATM or a card terminal. The codes serve different jobs. The CVV supports card-not-present orders by mail, phone, or web. The PIN authorizes cash withdrawals and some in-person debit transactions.
Search terms like "sell cvv with pin cheap" appear in forum posts, chat channels, and marketplace ads. Those ads claim to sell both numbers for one card. No card issuer releases PIN data to a reseller. No bank sells account credentials to a third party.
Why the Offers Fail
- Online merchants do not ask for a PIN. A stolen PIN has no use at a checkout page.
- Banks freeze a card once fraud signals appear. The average compromised card is blocked within hours of the first failed charge.
- PIN blocks live in the issuer host system, not on the card stripe alone. A reseller cannot copy that block.
- Most listings take payment and send nothing. The buyer has no recourse and no way to complain.
Legal Exposure
18 U.S.C. 1029 covers access device fraud. Trafficking in access devices carries up to 10 years for a first offense and up to 15 years for repeat offenses. Possession of 15 or more counterfeit or unauthorized devices triggers separate charges. Buyers face the same statute as sellers.
What Protects a Card
- Tokenization swaps the card number for a token that works at one merchant only.
- EMV 3-D Secure adds a bank check at checkout for card-not-present orders.
- Virtual card numbers expire after one merchant or one purchase.
- Card freeze controls in a banking app stop new charges in seconds.
If a Listing Crosses Your Screen
Do not send money. Do not send identity documents. Report the ad to the FBI Internet Crime Complaint Center and to the FTC fraud reporting portal. Both agencies publish annual loss totals and use the reports to trace payment networks. Cardholders who spot an unauthorized charge should call the number on the back of the card and request a chargeback.