There is no legal place to buy CVV numbers. Anyone selling CVVs, "fullz," or card dumps is selling stolen payment data, and buying it is a federal crime in the United States under 18 U.S.C. § 1029. The shops that pop up on Telegram, dark web forums, and throwaway websites are either scams that take your crypto or police operations.
Is there a legal way to buy CVV numbers?
No. A CVV is a short code printed on the card that proves the person paying holds the physical card. A cardholder has no reason to sell a code that exists to protect their own account.
Payment companies do move card data as part of authorizing payments, but that work happens under banking licenses, PCI DSS rules, and contracts that no individual can sign.
What happens when you try to buy CVVs online?
Buyers lose money in one of four ways. None of them end with a working card.
- Straight theft. The seller takes the crypto and blocks you. There is no refund path, no support desk, no chargeback.
- Junk data. Batch files are often generated numbers that fail authorization, or real numbers already reported stolen and blocked.
- Exposure. To pay, you hand over an email, crypto wallet, or messaging handle that links back to you.
- Prosecution. Carding forums host undercover agents. Chat logs, wallet records, and IP data end up in indictments.
What does a CVV do?
The CVV (also called CVV2, CVC2, or CID) is the 3 or 4 digit code on the front or back of a payment card. It exists to confirm the card is in hand during a card-not-present purchase, such as an online order or a phone order.
The code is not stored in the magnetic stripe or the chip. That design detail is why a cloned card is not enough to shop online: without the CVV, most transactions fail.
Card networks also ban merchants from keeping the CVV after a transaction is approved. If a site asks you to save your CVV for faster checkout, treat that as a red flag.
How do you protect your CVV when you shop online?
- Type your own card details into a page you reached by typing the address or using a saved bookmark. Links in emails and ads lead to fake checkout pages.
- Use virtual card numbers when your bank or card issuer offers them. Each number works with one merchant and can be frozen after a single purchase.
- Never send a CVV by text, email, or chat. No real bank or store asks for that.
- Turn on transaction alerts and a card lock in your banking app, so a charge you did not make reaches you within seconds.
- Keep your card number and CVV out of notes apps, spreadsheets, and photos on your phone.
What should you do if someone steals your CVV?
Act on the card first and the paperwork second.
- Freeze or lock the card in your bank or issuer app. This stops new charges while you sort out the rest.
- Call the number on the back of the card, report the fraud, and ask for a new card number. The old CVV dies with the old card.
- Read your statements line by line for small test charges, which thieves run before bigger ones.
- File a report at IdentityTheft.gov if your identity is at risk, and report the crime to the FBI's Internet Crime Complaint Center.
In the U.S., your liability for unauthorized card charges is capped, and many issuers waive it. Report fast and the money is usually returned.
Common questions about CVV buying and selling
Where can I buy CVV numbers?
Nowhere legal. Every seller is offering data taken from someone else's account, which makes the buyer part of the crime rather than a customer of it.
Are CVV shops real?
Some are real scams and some are real stings. A few hand over genuine stolen numbers for a short time to build trust before a larger batch sale goes wrong.
Can I sell my own card's CVV?
No. Selling your card data for someone else to spend is fraud, it breaks your cardholder agreement, and it can leave you holding the debt when the other person stops paying.
Is it safe to store my CVV in a password manager?
Storing card details in a locked password manager beats a browser autofill field or a note on your phone. Even so, a virtual card number is the safer tool for shopping.
Bottom line
The search for a place to buy CVVs ends in one of two places: an empty crypto wallet or a criminal charge. The CVV system works because the code stays with the cardholder. Keep yours private, use virtual numbers, and the same protection that blocks carding also protects you.