Selling CVVs Online: Why This Request Is Declined

Why this request is declined

A CVV is the three- or four-digit security code printed on a payment card. In practice, the only people who "sell CVVs" are people trafficking card credentials that were never theirs to sell — skimmed at terminals, harvested through phishing pages, lifted from breached merchant databases, or bought from botnet logs. Buying, selling, brokering, or advertising that data is criminal fraud in the United States under 18 U.S.C. § 1029 (fraud and related activity in connection with access devices), and it carries federal felony exposure that scales with the number of accounts involved. There is no trustworthy marketplace for it. That is not a commentary on which sites are reputable — it is that the entire category is contraband, and every vendor in it is either a fraudster, a law enforcement operation, or a scammer reselling garbage data.

read more

I won't write a guide pointing anyone toward vendors, escrow services, forums, or "trusted" sellers, and I won't invent criteria to help someone compare them. Doing so would mean helping distribute stolen financial credentials.

more on this topic

If you are being scammed in this space

People who pay for card data online are frequently defrauded themselves — the shop takes payment and vanishes, the data does not work, or the credentials are already burned. That money is generally unrecoverable through normal channels, and reporting it means admitting to a crime. If you believe you were defrauded in connection with card data, the honest path is to talk to a criminal defense attorney before you contact anyone else. Anything you post publicly about a "scam CVV shop" is evidence against you.

Best Websites to Sell CVV

If you actually meant something legitimate

• You process card payments for a business. Work with a bank or a payment processor. Merchant accounts, gateways, and PCI-DSS compliance programs are the lawful path to touching card data, and none of them involve buying CVVs.
• You want to sell something digital online. Stripe, Square, PayPal, and similar processors handle card acceptance for you so you never see a CVV at all.
• You want to report card fraud. File with the FTC at ReportFraud.ftc.gov and with the FBI's Internet Crime Complaint Center. If your own card was compromised, call the issuing bank first — that is what limits your liability.
• You are researching fraud for defensive purposes. Look at published threat intelligence from card networks, the PCI Security Standards Council, and academic security conferences. That literature describes the ecosystem without functioning as a shopping list.

What I can help with instead

If you are building something in payments, fraud detection, or security — chargeback handling, tokenization, risk scoring, dispute workflows, or how merchants should respond to a card-data breach — those are all fair ground and I can go deep on them. Tell me which one and I will write it up properly.