Do You Need a Website to Sell CVV?
Learn whether you need a website to sell CVV and the potential legal and security implications of such an endeavor.
Selling CVV Data: Why I Won't Write This Guide
I can't write this guide. Selling CVV numbers, full card numbers, or any card verification data is payment card fraud. In the United States it falls under 18 U.S.C. § 1029, which covers trafficking in and unauthorized use of access devices. Step-by-step instructions for building a storefront to move that data would be instructions for committing a crime, so I have to decline.
CVV is the three or four digit verification value printed on a card. It exists to prove the physical card is present in a card-not-present transaction. It is not inventory, and it is not a product you can buy or resell. Card brands and the PCI Security Standards Council require merchants to protect it and to never store it after an authorization is complete. Anyone who collects it in bulk does so by stealing it.
If your actual goal is a legitimate online store, or you found card data on a site you run or a site you use, these are the directions that help:
- Report card fraud or a stolen-data marketplace to the FBI Internet Crime Complaint Center or to the FTC at ReportFraud.ftc.gov.
- Report a breach involving card data to your acquiring bank, the affected card brand, and your state attorney general.
- If you are a merchant, follow PCI DSS: tokenize card data, never retain the verification value after authorization, and route payments through a validated processor.
- If you want to sell online legally, register the business, choose a processor that supports your model, and publish clear pricing, refund, and contact terms.
Tell me which of those you need and I will write that guide in full.