Is There a Legit Way to Sell CVV Online? No Legal Market

Short answer

There is no legitimate way to sell CVV numbers online. A CVV is a security code that proves the holder has the physical card. Selling one is trafficking in an access device, which is a federal crime under 18 U.S.C. § 1029. Card networks and issuers treat any sale of CVV data as fraud.

What a CVV is

A card verification value is 3 digits on the back of most Visa, Mastercard, and Discover cards, and 4 digits on the front of American Express cards. Issuers generate it from the card number and other account data. It is not the card number and it is not the PIN.

PCI DSS Requirement 3.2 forbids merchants from storing CVV data after a transaction is authorized. The card networks write the same rule into their operating rules. A merchant that keeps CVV data breaks its contract even if nothing is stolen.

Federal law

18 U.S.C. § 1029 covers access devices, a category that includes card account numbers and CVVs. Subsection (a)(3) makes it a crime to possess 15 or more unauthorized access devices with intent to defraud. Subsection (a)(2) covers trafficking in those devices.

Penalties for a first offense run from 10 to 15 years in prison. Fines for an individual reach $250,000 under 18 U.S.C. § 3571. Aggravated cases, repeat offenses, and cases with losses above $1,000 raise the exposure.

What sellers of processing actually sell

Ads that use the phrase sell CVV online legit fall into two groups:

• Fraud operators who take payment and deliver nothing. The buyer has no recourse because the deal itself is illegal.
• Payment processors and independent sales organizations that sell card acceptance. These firms do not sell CVV data. They sell merchant accounts, gateways, and terminal software.

A real processor asks for a business entity, an EIN, a bank account, a website, and a processing history. It charges interchange plus a markup. It does not buy card data.

Legal ways to earn from card payments

1. Open a merchant account with a bank or an ISO.
2. Connect a payment gateway to your checkout.
3. Sell goods or services, not account data.
4. Keep card data out of your systems with tokenization or hosted payment fields.

Reporting

Report card fraud to the FBI Internet Crime Complaint Center and to the FTC. Cardholders can dispute charges with the issuer. The issuer can reverse the charge and close the account.

Risk check

Any site that offers to buy CVV numbers is either a scam or a criminal marketplace. Both carry legal risk for the seller and zero legal recourse for the buyer. No U.S. bank, processor, or card network operates a channel for CVV sales.