Buying CVV for Carding: Legal Status and Risks

Buying CVV data for carding

Buying CVV data for carding is a federal crime in the United States. Carding means using payment card numbers without permission. A CVV is a security code. The code does not make a transaction legal. The owner must authorize the charge.

There is no lawful marketplace for CVV data. Sites that sell CVV data operate outside the law. Buyers face charges under 18 U.S.C. § 1029. That statute covers access devices. Card numbers and CVV codes are access devices. A conviction can bring up to 10 years in prison for a first offense. Sentences can reach 15 years for certain aggravated offenses. Fines can reach $250,000 for an individual. Restitution and forfeiture can follow.

Card networks and banks monitor card-not-present transactions. Fraud models flag mismatched billing data, repeated declines, and unusual order values. A merchant can cancel an order and hold funds. A bank can reverse a charge. The buyer can lose the money paid for the data. The seller can disappear. Law enforcement can seize devices and accounts.

This page does not list vendors, prices, or methods. If you have card fraud, report it. In the US, contact the FTC at IdentityTheft.gov. Contact the FBI Internet Crime Complaint Center at ic3.gov. Contact your card issuer. The Secret Service investigates payment card fraud.