There is no legal way to sell a CVV with a PIN. A CVV is the card verification value printed on a payment card. A PIN is the personal identification number that unlocks cash access. Selling the two together means trafficking in stolen payment card credentials, and under U.S. federal law that is access device fraud with prison exposure.
What does "CVV with PIN" actually mean?
The CVV is the three or four digit security code used in card-not-present purchases. The PIN authorizes debit and ATM activity. A bundle that includes both lets a buyer attempt online orders and cash withdrawals, which is why criminal listings market it as a premium package.
Is it illegal to sell a CVV with a PIN in the United States?
Yes. 18 U.S.C. § 1029 makes it a federal crime to traffic in unauthorized access devices. Penalties reach 10 years for a first offense and 15 years for repeat or aggravated conduct, plus fines and restitution. The statute applies to a single device, so small volume is not a defense.
Does it help if the cardholder agreed?
No. Card network rules and issuer agreements prohibit transferring account credentials to a third party. A cardholder who hands over card data for someone else to use is facilitating fraud, not authorizing a lawful sale.
Why most "CVV with PIN" sellers are also scammers
Forums that advertise card data with PINs are full of fabricated records, recycled numbers, and bait listings. Some are operated or monitored by law enforcement. Buyers frequently pay and receive nothing usable.
Any data that does work belongs to a real victim who can dispute the charge. The transaction reverses, and the buyer's expected value collapses.
How do banks detect PIN-based card fraud?
- Mismatch between an online order and the card's recent physical use.
- ATM withdrawal velocity and geographic jumps that break the cardholder's pattern.
- Repeated PIN failures followed by a successful magnetic stripe or contactless read.
Issuers score these signals in real time. A correct PIN that is out of pattern can freeze the card before a withdrawal clears.
What are the legal consequences?
Federal convictions under § 1029 carry prison time, supervised release, and mandatory restitution to issuers and victims. State prosecutors add identity theft and forgery counts. Civil suits from banks and cardholders commonly follow the criminal case.
What should you do if someone offers to sell you card data?
Do not pay and do not reply. Preserve the message as evidence and report it to the FBI Internet Crime Complaint Center at ic3.gov and to the FTC at ReportFraud.ftc.gov.
If you are the cardholder whose details are being offered, call the number on the back of your card and request a replacement card and a new PIN.
FAQ
What does "fullz" mean?
Fullz is criminal slang for a complete package of a victim's identity data, often name, address, Social Security number, and card details. It is a fraud product, not a legitimate credential.
Can I sell my own card details?
No. Issuer agreements void the transfer, and furnishing credentials for another person to use still supports unauthorized transactions. Consumers have no lawful route to monetize their own card data.
How much does a CVV with a PIN sell for?
Prices quoted on criminal forums are unreliable and frequently invented. Treat any figure as part of a scam listing rather than a real market rate.