Short answer
No legitimate marketplace sells CVV numbers. A CVV is not a product. It is a 3-digit or 4-digit security code printed on a payment card and held by the card issuer. The code belongs to one card account. Passing it to another person is card fraud under US law. Sites that advertise "CVV shops" or "CVV dumps" trade in stolen card data. Buying or selling there is a federal crime, not a business.
What a CVV is
Visa calls the code CVV2. Mastercard calls it CVC2. American Express uses a 4-digit CID on the front of the card. Discover uses a 3-digit CID. The issuer generates the value and ties it to the account number and the expiration date. The code is a check that the person entering the card number holds the physical card.
Where to Sell CVV 'Legit' With Bitcoin: The Honest Answer
Why selling it is illegal
18 U.S.C. § 1029 covers fraud and related activity with access devices. Subsection (a)(3) makes it a crime to sell, transfer, or traffic in card account data. Penalties reach 10 years in prison for basic offenses, 15 years for offenses involving 10 or more cards or $5,000 or more in a one-year period, and 20 years for certain aggravated cases. Fines for an individual can reach $250,000.
Can You Sell CVV to a Legit Shop? Card Security Facts
State laws add charges. A conviction for trafficking includes restitution to the issuer and to cardholders.
where sell cvv legit with bitcoin
Where card data comes from
Markets for card numbers come from breaches, skimming devices, phishing pages, and malware on point-of-sale systems. Card numbers appear in bulk files sold as dumps or fullz. The sellers do not hold the consent of the cardholder. The cardholder is the victim of theft.
Rules for merchants and processors
PCI DSS Requirement 3.2.1 prohibits storage of sensitive authentication data after authorization. Sensitive authentication data includes full track data, the CVV/CVC/CID, and the PIN block. A merchant that keeps CVV values after a transaction is out of compliance, even if the data stays inside its own network.
Legal work in the same field
- Fraud analyst at a bank, issuer, or payment processor.
- Security engineer on a tokenization or payment authentication team.
- Chargeback and dispute specialist at a merchant or acquirer.
- Penetration tester with a payments scope and written authorization.
If a card code was exposed
Call the issuer using the number on the back of the card. Ask for a replacement card and a new account number. Report identity theft at IdentityTheft.gov. Report card trafficking to the FBI Internet Crime Complaint Center. Keep the written confirmation from the issuer.