Short answer
There is no legitimate website to sell CVV numbers. A CVV is a bank security code tied to one card and one cardholder. Selling it or buying it is fraud. In the United States that falls under 18 U.S.C. 1029, access device fraud. A first offense carries up to 10 years in prison. Trafficking in access devices carries up to 15 years.
What a CVV is
A CVV is the 3-digit code on the back of a Visa, Mastercard, or Discover card. American Express prints a 4-digit code on the front. Banks issue it for one purpose: to show that the person entering the number holds the physical card during a card-not-present transaction.
Card networks classify the CVV as sensitive authentication data. PCI DSS Requirement 3.2 forbids merchants from storing it after a transaction is authorized. A merchant that keeps CVVs is out of compliance and subject to fines.
CV Selling Website Direct Link
Why a "legit CVV shop" cannot exist
- A CVV has no resale value to the cardholder. The cardholder already holds the card.
- No bank, processor, or card network licenses CVV data to third parties.
- A site that sells CVVs is selling stolen or fabricated data. Both are crimes.
- Payment processors that serve card data must meet PCI DSS. Selling CVVs fails every requirement.
Common patterns on sites that use this language
Most sites that advertise CVV sales are scams. Reported patterns include:
website to sell cvv online legit
- Payment in bitcoin or gift cards. No refund path.
- Free "test" cards that fail at checkout.
- Escrow accounts controlled by the seller.
- Honeypot operations run by law enforcement, which collect buyer identities and payment trails.
Buyers on these sites lose money and hand over personal data. Some face criminal charges.
Legal exposure for buyers and sellers
18 U.S.C. 1029 covers producing, using, and trafficking access devices. Prosecutors treat bulk card data as an aggravating factor. Related charges include wire fraud under 18 U.S.C. 1343 and identity theft under 18 U.S.C. 1028A. Civil suits from banks are common. Banks pursue the full amount of the losses plus costs.
If card data reaches you
Do not use it, copy it, or forward it. Contact the issuing bank using the number on the back of the card. Report the incident to the FBI Internet Crime Complaint Center and to the FTC at IdentityTheft.gov.
If your own CVV leaked
- Freeze the card in your bank app.
- Request a new card number, not just a new card.
- Review statements for small test charges.
- Place a fraud alert or credit freeze with the three credit bureaus.
- Change passwords on retailer accounts that stored the card.
Limits of this page
Penalties vary by charge, prior record, and loss amount. This page states federal statute ranges and does not give legal advice. Consult a licensed attorney for a specific case.