Short Answer
Buying CVV data with bitcoin is a federal crime in the United States, and the shops that advertise it take payment without sending working card numbers. No legal marketplace for card verification values exists.
This page covers what a CVV is, why the listings fail, what the law says about buyers, and what to do if you already sent bitcoin to one of these sellers.
What Is a CVV?
A CVV is the three-digit code on the back of most Visa, Mastercard, and Discover cards. American Express prints a four-digit code on the front. The number proves the person paying holds the physical card.
Card networks added the CVV as an anti-fraud check for phone and online orders. Handing that number to a stranger removes the one safeguard the card network built.
Why Bitcoin CVV Shops Are Scams
The money in carding shops comes from buyers who pay and get nothing. Delivery is optional for the seller, and bitcoin gives the buyer no way to reverse a payment.
- No delivery. The seller keeps the bitcoin and blocks the account.
- Stale data. Banks close compromised cards within days, so a "fresh base" is dead on arrival.
- Bait numbers. A shop may hand out a few valid cards to earn trust, then sell dead ones at a higher price.
- No refunds. Bitcoin transfers are final. There is no dispute desk and no chargeback.
- Extortion after payment. Some operators demand more bitcoin and threaten to report the buyer.
Complaints posted in carding forums vanish. Those forums are run by the same people who sell the cards.
Is It Illegal to Buy a CVV?
Yes. 18 U.S.C. § 1029 covers fraud and related activity with access devices, and it applies to buyers. A first offense with a single card carries up to 15 years in prison and fines.
Buying card data can also support charges for wire fraud, identity theft, and money laundering. Prosecutors stack counts, so one purchase can produce several charges.
The law does not care that you paid with crypto. Payment method changes the evidence trail, not the crime.
Can Bitcoin Hide the Payment?
No. Bitcoin runs on a public ledger, so every transfer is visible to anyone with the wallet address. Investigators use blockchain analysis to link addresses to exchanges.
US exchanges require identity documents under federal rules. Moving bitcoin to cash creates a record tied to a name, an address, and a bank account.
Who Pays When a Card Is Used
The cardholder files a fraud claim and gets the money back. The merchant and the bank absorb the loss, then pass the cost to other customers as higher prices and fees.
Small businesses take the hardest hit. A chargeback can wipe out the profit on dozens of orders.
What to Do If You Already Sent Bitcoin
- Stop all payments and stop talking to the seller.
- Save the wallet address, transaction IDs, chat logs, and screenshots.
- Report the crime to the FBI Internet Crime Complaint Center.
- File a report with the Federal Trade Commission.
- Tell your bank or exchange if the bitcoin came from an account they hold.
- Call local police if the seller threatens you.
Act early. Crypto tracing works best while funds still sit in a wallet that has not been mixed.
Legitimate Ways to Pay Online
- Virtual card numbers. Many US banks issue single-use numbers tied to your account.
- Prepaid cards. Buy one at a store and load only what you plan to spend.
- Payment services. PayPal, Apple Pay, and Google Pay add a layer between the merchant and your card.
- Store credit. Gift cards and store accounts limit exposure to one merchant.
Protecting Your Own Card Data
- Check statements every week, not every month.
- Set transaction alerts in your banking app.
- Never read a CVV aloud to a caller who contacted you first.
- Use a card freeze if the physical card is missing.
FAQ
Do CVV shops ever deliver working cards?
A few shops send one or two live numbers to build trust, then sell dead ones. A number that works today stops working within days.
Can I be arrested for buying one CVV?
Yes. The statute covers buyers, and prosecutors charge single-card cases when they can tie a payment to a person.
Is browsing a carding site a crime?
Browsing alone is not a charge. Paying for card data is.
What happens if I use a stolen card number?
The transaction fails or reverses, the merchant flags the order, and the trail leads back to the wallet. That is where cases start.