CVV and Fullz Selling Websites: What They Are and the Law

Answer first

A CVV and fullz selling website is an illegal marketplace. Sellers list stolen card numbers, card verification values, and complete identity records. Buyers use the data for card-not-present fraud. Running or using such a site breaks US federal law. Penalties reach 15 years in prison and $250,000 in fines for an individual.

fullz cvv shop

What the terms mean

The CVV is the three-digit code on the back of a Visa, Mastercard, or Discover card. American Express prints a four-digit code on the front. The code is meant to prove the buyer holds the physical card.

more on this topic

"Fullz" is fraud slang for a full identity package: name, address, date of birth, Social Security number, and card data. The word comes from "full information."

cvv fullz store

How the market operates

These sites run on the open web and on Tor hidden services. Data moves in bulk listings and single records. The FBI and the US Secret Service investigate them. The Secret Service holds jurisdiction over access device fraud and financial crime.

Federal law

18 U.S.C. § 1029 covers fraud with access devices. An access device is any card, code, or account number used to get money, goods, or services. The statute bans producing, trafficking in, or using counterfeit or unauthorized access devices. Prison terms reach 15 years under § 1029(a)(1), (a)(4), and (a)(5), and 10 years under other subsections.

18 U.S.C. § 1028A adds a mandatory two-year sentence, served consecutively, when identity theft is tied to another felony.

15 U.S.C. § 1644 makes fraudulent use of a credit card a federal crime with up to 10 years imprisonment.

Scale

The FTC Consumer Sentinel Network logged 1,037,291 identity theft reports in 2023. Credit card accounts were the most reported category. The FBI Internet Crime Complaint Center records credit card fraud complaints each year.

Chip cards moved the fraud

US merchants adopted EMV chip cards after the October 2015 liability shift. Chip data is hard to clone. Fraud shifted to card-not-present channels: online orders, phone orders, and mail orders. A stolen card number plus CVV needs no physical card.

If your data appears

• Request a new card number from the issuer. The old number stops working.
• Place a credit freeze with Equifax, Experian, and TransUnion. Federal law makes freezes free.
• File an identity theft report with the FTC.
• Report the charge to the card issuer in writing.
• Contact the Social Security Administration if a Social Security number is misused. New numbers are issued in narrow cases.

No lawful version exists

No US state permits the sale of stolen card data. No card network authorizes it. A storefront that sells CVVs or fullz has no legal form.