You cannot legally sell CVV codes online. A CVV is the security code that proves the person paying is holding the physical card, so offering one for sale means trafficking someone else's payment account data. In the United States that falls under federal access-device fraud law, and it is a criminal offense in most other countries too. No marketplace, forum, or broker can turn that sale into a legal transaction.
What a CVV actually is
The card verification value is a short numeric code printed on a payment card and never encoded on the magnetic stripe. It exists for one purpose: to confirm that whoever is entering card details has the card in hand. Merchants are allowed to send the code to the issuer for authorization, and that is all. Card security rules forbid storing it after the transaction completes.
Because of that design, a CVV is only valuable to two kinds of people: the cardholder making a purchase, and a criminal trying to use card numbers they obtained elsewhere. That is why search results for selling CVVs lead to fraud forums and scam pages rather than any legitimate service.
Why selling CVV data online is illegal
Selling a CVV is not a gray-area transaction. It typically involves stolen account numbers, which brings it under statutes that cover unauthorized access devices, identity theft, and wire fraud. A few points that catch people off guard:
- It does not matter whether the seller obtained the card data themselves or bought it from someone else.
- It does not matter whether a buyer ever completes a purchase. The offer to sell is enough.
- Using a foreign-hosted site, encrypted chat, or cryptocurrency payment does not remove US jurisdiction when a buyer or victim is in the US.
- Receiving funds from the sale can add money laundering exposure on top of the fraud charge.
What sellers actually run into
People who look for a place to sell CVVs usually encounter the same three outcomes. The first is a scam: the "marketplace" takes the data or the deposit and disappears, because the operators know their users cannot report a stolen card codes deal to law enforcement. The second is a sting. Carding forums are heavily monitored, and undercover accounts are common. The third is a data trail. Payment processors, hosting providers, and messaging platforms keep records, and those records outlast the forum.
Why "CVV shops" advertise so openly
Automated shop sites that list card numbers for sale are usually built to collect money from aspiring fraudsters, not to deliver working data. Test cards are fake, balances vanish, and the operators reimburse nobody. From a security standpoint, these sites are a useful reminder that the same techniques that steal card data are also used to steal from the people buying it.
Legitimate work that involves CVV data
There are real careers around card verification, and they sit on the defense side:
- Fraud analyst or risk analyst at a bank, processor, or merchant, reviewing authorization patterns and chargeback trends.
- Payment security or compliance roles focused on card data handling rules and checkout design.
- Security engineering and penetration testing on payment systems, performed under written authorization.
- Chargeback and dispute operations, which resolve the damage when card data is misused.
None of these roles involve selling a code. They involve preventing authorization data from leaking in the first place.
How to keep your own CVV out of criminal hands
- Never type your CVV into a message, email, chat, or phone call. No legitimate seller needs it that way.
- Check that checkout pages are served over HTTPS and belong to the merchant you intended to buy from.
- Avoid saving card details in browsers on shared or public devices.
- Use virtual or single-use card numbers from your issuer for unfamiliar sites.
- Photograph nothing. A picture of your card in a camera roll is a full card record waiting to leak.
- Review statements each month and turn on transaction alerts.
What to do if your card data is exposed
Call the number on the back of your card and ask for the card to be closed and reissued. Then review recent transactions and dispute anything you do not recognize. If identity details were exposed along with the card, report it to the FTC through IdentityTheft.gov and place a fraud alert with the major credit bureaus. Filing a report with your local police is optional but creates a record that helps with disputes.
The short version: the question of where to sell CVV codes online has no legitimate answer, and searching for one puts you in the same pool as the people stealing the data. If you are interested in this space professionally, the work is in protecting card verification data, not trading it.