The phrase "sell CVV online with bitcoin" describes a criminal trade. A CVV is the three- or four-digit code printed on a payment card. In fraud forums the term CVV also means a full set of stolen card data: card number, expiration date, cardholder name, billing address, and the code. Sellers who advertise this data ask for bitcoin because it settles without a bank in the middle. Selling or buying that data is a federal crime in the United States.

What the term CVV covers

A single CVV code is not enough to charge a card online. Fraud listings sell the full record, sometimes with the cardholder's Social Security number or online banking login. Prices range from a few dollars for a card with a low balance to several hundred dollars for a card tied to a business account. Listings are graded by whether the seller can verify the card is still active.

Why sellers ask for bitcoin

Bitcoin transfers move between wallets without a bank in the middle. The blockchain is public. Every transfer is recorded and stays recorded. Investigators use blockchain analysis to group wallet addresses and match them to exchanges where users filed identity documents. That record has supported prosecutions years after a sale.

US law and penalties

18 U.S.C. 1029 covers fraud and related activity in connection with access devices. Trafficking in stolen card numbers carries up to 10 years in prison for a first offense and up to 15 years for a later offense, plus fines. 18 U.S.C. 1028A adds a mandatory two-year term for aggravated identity theft when card data is used with another person's identity. The terms run back to back.

Enforcement

The FBI runs Operation Boiling Point, which targets the sale of stolen payment card data and related theft. The U.S. Secret Service investigates payment card fraud and financial cybercrime. Cases often start with a seized server, a seized wallet, or a buyer who cooperates with agents.

What buyers get

Card data sold on these forums is often cancelled before it is used. Sellers take payment and send nothing. Bitcoin transfers cannot be reversed. A buyer has no contract to enforce and no way to complain to a bank or a court without describing their own crime.

If your card data is exposed

Call the card issuer and ask for a new card and account number. Read statements for charges you did not make. File a report with the Federal Trade Commission. A credit freeze at Equifax, Experian, and TransUnion blocks new accounts opened in your name. Under US law you owe nothing for unauthorized card charges, but you must report them.