How to Find Where to Sell CVV Cards on the Web
Discover the ins and outs of finding platforms to sell CVV cards online, with a focus on reputable and secure options.
Can I Sell CVV Cards on the Internet? No | Legal Options
The short answer
No. Selling CVV cards on the internet is illegal in the United States, and no business license, marketplace listing, or privacy tool changes that. A CVV is the three or four digit security code printed on a payment card. It exists to prove that the person typing the card number is holding the physical card. When a listing advertises "CVVs," what is actually for sale is someone else's card number, expiration date, and security code taken without permission. Federal prosecutors treat that as access device fraud, wire fraud, and often identity theft.
The rest of this guide covers what the term means, which laws apply, what the penalties look like, and what you can legally sell online if your real interest is the payments business.
What a "CVV listing" actually contains
A card's front carries the issuer, the 16 digit primary account number, the cardholder name, and the expiration date. The back carries the CVV or CVC. Together those fields are enough to approve a card-not-present transaction at many merchants. That is why a complete set of fields sells for more than a partial one, and why bulk sales are treated as a volume crime rather than a single mistake.
Cardholders rarely hand those numbers to a stranger. The data in a CVV listing comes from skimming devices, merchant database breaches, phishing pages, or malware on a point-of-sale system. Each of those sources is a separate federal offense on its own.
The law that covers CVV sales
18 U.S.C. § 1029 is the main federal statute. It bans producing, using, and trafficking in unauthorized access devices. The definition of "access device" includes account numbers and the codes used to authorize a transaction, so a card number plus its CVV fits the definition. Section 1029(a)(3) makes it a crime to knowingly and with intent to defraud traffic in one or more access devices. Selling a bundle of CVVs is the example the statute was written for.
Related charges stack on top: wire fraud under 18 U.S.C. § 1343 for using the internet to move the data, identity theft under 18 U.S.C. § 1028, and aggravated identity theft under 18 U.S.C. § 1028A, which carries a mandatory two-year prison term that must run consecutively to any other sentence.
What the penalties look like
Section 1029 authorizes prison time, not just fines. At sentencing, the U.S. Sentencing Guidelines scale the punishment to the number of unauthorized access devices involved and the dollar loss attributed to them. Cases involving thousands of card records can produce multi-year sentences, restitution orders, and supervised release after prison.
Civil exposure runs alongside the criminal case. Issuing banks and card networks pursue their losses, and any merchant account connected to the activity is closed and reported.
Why "I only sold them" is not a defense
The offense is the transfer, not the use. Prosecutors do not need to show that you personally bought anything with the card numbers. They need to show that you knowingly moved access devices with intent to defraud, and a sales listing, a chat log, or a payment record can establish that.
Legal ways to make money in the payments space
Digital gift cards from authorized sources
Reselling gift cards is legal when the cards come from legitimate channels: wholesale distributors, retailer partner programs, or retail purchase. Sourcing is what matters. Cards obtained with stolen funds or through fraud remain stolen property no matter how many hands they pass through, and reselling them exposes you to the same trafficking charges.
Merchant services and payment processing
If the appeal of CVV sales is the payments industry itself, the legitimate version is merchant services. Independent sales organizations and agents sign merchants for card processing under a sponsor bank. The work pays commission per account and requires registration, training, and compliance with card network rules. Adjacent roles include chargeback management, fraud screening, and checkout software.
Your own digital products
Selling your own courses, templates, or software through a licensed processor is simple. You need a business entity, a merchant account, and a refund policy. No cardholder data changes hands, so the legal risk that defines CVV sales does not exist.
If someone asks you to sell or buy CVVs
Walk away and keep the messages. Reports of card fraud go to the FBI's Internet Crime Complaint Center, and identity theft reports go to the FTC's IdentityTheft.gov. Both accept reports from people who were recruited into a scheme and declined.
Bottom line
There is no legal path to selling CVV cards, and the marketplaces that advertise them are run by people who also steal from their own sellers. If your goal is income from the card and payments world, the use case that fits is merchant services, fraud prevention, or your own digital products sold through a licensed processor. Those carry real compliance work, and they are the only versions of this business that do not end in a federal case.