Sell CVV on Dark Web Marketplaces: How the Trade Works

What selling CVVs means

A CVV is the 3 or 4 digit code printed on a payment card. Selling CVVs means trading that code with the card number, expiry date, cardholder name, and billing address. The activity is illegal in the United States and in most other countries. Trades happen on hidden forums, on chat apps, and in automated shops that accept cryptocurrency.

related article

What gets sold

• Card number, expiry, and CVV.
• Fullz: card data plus the holder's name, address, phone, and in some listings a Social Security number.
• Dumps: magnetic stripe data copied from a card at a terminal or skimmer.
• Bank login credentials sold as a package with card data.

How the marketplaces operate

Most listings sit on Tor hidden services, private forums, or Telegram channels. A seller posts inventory with the card's country, issuing bank, card brand, and a balance estimate. Buyers pay in Bitcoin, Monero, or a stablecoin. Many shops hold funds in escrow or use a bot that releases data after payment clears.

related article

Prices vary by data quality. A single US card with a CVV sells for a few dollars. A fullz record with a verified balance can reach tens of dollars. Prices drop when a bank or country is targeted often, because supply rises and issuers block the cards faster.

related article

Sellers test cards before listing. A card that fails an authorization check is sold at a discount or dropped from inventory.

Enforcement and penalties

In the US, carding is charged under 18 U.S.C. 1029, access device fraud. Penalties reach 10 years for a first offense and up to 15 or 20 years for aggravated or repeat cases, plus fines. Prosecutors add identity theft and wire fraud counts. The FBI and partner agencies seize marketplace domains and servers. Europol coordinated the 2023 takedown of Genesis Market, which closed a large card shop. Public case records show server seizures, arrests, and crypto asset forfeiture.

Detection and defense

Issuers use machine learning models, velocity checks, and 3-D Secure challenges to block card-not-present fraud. Consumers can cut exposure by freezing a card when it is not in use, turning on transaction alerts, and reading statements each month. The FTC directs identity theft victims to IdentityTheft.gov for a recovery plan. Card network zero liability policies cover unauthorized charges reported in time.

Limits of public data

Market size and current price data are not verifiable. Most figures come from vendor posts, and sellers inflate inventory claims. Treat any number without a court record or a law enforcement release as an estimate.