Selling CVV: Risks, Penalties, and Why Sellers Get Caught

Selling CVV data is a federal crime in the US, and the realistic outcome is prison time, not passive income. The underground carding market looks lucrative from the outside, but the numbers and law enforcement attention make it a terrible trade. Here is what actually happens when you try to sell CVV.

What does "sell CVV" actually mean?

CVV stands for Card Verification Value, the three or four-digit security code on payment cards. When someone says they sell CVV, they mean selling stolen card numbers, expiration dates, and the CVV codes extracted from data breaches, skimmers, or phishing scams.

The transaction usually happens on darknet forums, encrypted messaging apps, or Telegram channels. Sellers offer "dumps" of cards or "CVV2" data in bulk, often grouped by country, bank, or card type (Visa, Mastercard, Amex).

• Prices range from $1 to $50 per card depending on balance limit and freshness.
• “Fullz” packages include cardholder name, address, date of birth, and SSN for identity theft.
• Most shops are run by a single operator or a small team, not organized crime syndicates.

How does the CVV selling market work?

Sellers do not usually steal cards themselves. They buy databases from initial access brokers or scrape them from breaches, then resell the data in smaller, pricier batches.

The market works on trust and reputation. New sellers must offer samples or hold deposits in escrow before buyers pay. Payment is almost always cryptocurrency, typically Bitcoin or Monero, to avoid bank monitoring.

Successful sellers use automated Telegram bots or carding shops with checkout pages. These sites often get shut down within weeks, so sellers constantly migrate domains and use bulletproof hosting.

How do sellers monetize stolen cards?

1. They validate the card with a small test transaction (often $0.50 to $2) to confirm it works.
2. They send the valid card data to buyers via automated delivery.
3. They keep a cut of each sale, usually 15% to 30% after payment processor fees, if any.
4. They also sell "cashout methods" or "tutorials" to reuse expired cards.

How much money can someone make selling CVV?

The gross revenue numbers look impressive, but net profit is thin. A seller moving 1,000 cards per week at an average price of $8 grosses $8,000, but that is before breach costs, verification losses, and downtime.

Most small sellers walk away with a few hundred dollars per month. The ones who scale to six figures often end up as law enforcement targets, because large-scale transactions are easy to trace on the blockchain.

The real money is in "fullz" profiles, which sell for $30 to $200 each, but that market attracts identity thieves and draws severe attention. If you have the technical skill to sell CVV, you could earn more legally in a normal programming or fraud-prevention job.

What are the legal penalties for selling CVV?

In the United States, selling stolen card data violates the Identity Theft and Assumption Deterrence Act, the Computer Fraud and Abuse Act, and the Federal Wire Fraud statute. A first-time trafficking conviction under 18 U.S.C. § 1029 carries up to 10 years in federal prison.

Repeat offenders face up to 20 years, and judges often add consecutive sentences for each card or each victim. Fines can reach $250,000 or more, plus mandatory restitution to the banks and cardholders.

If you sell cards from foreign banks, the FBI and Secret Service can still prosecute you under international treaty agreements. Canada, the UK, Australia, and most EU countries treat card trafficking as a serious indictable offense.

Why do most CVV sellers get caught?

Sellers overestimate their anonymity and underestimate how much law enforcement monitors carding forums. The same forums where sellers find customers are also populated by undercover agents and informants.

Blockchain analysis tools like Chainalysis and CipherTrace let investigators trace Bitcoin transactions to exchanges, and then to a real identity. When sellers brag about sales volume for reputation, they build a evidence trail.

Another common mistake is reusing usernames, email addresses, or Telegram accounts across platforms. A single leak from one breach can tie a seller to their criminal vanity address.

Operations like Operation Card Shop and the FBI's cyber task forces have shut down dozens of CVV shops since 2020. Many sellers are arrested during sting operations where the buyer is actually a federal agent.

What happens to captured CVV sellers?

Arrested sellers face pretrial detention, because they are considered a flight risk. If convicted, they receive sentences that are longer than those for street-level fraud, because judges treat cybercrime as sophisticated and calculated.

For example, a seller who only handled a few hundred cards could still get a 3-to-5-year sentence in federal custody. If the cards caused more than $200,000 in losses, the sentence jumps sharply.

Deportation is a risk for non-citizens, even permanent residents. A CVV conviction is an aggravated felony, which triggers removal proceedings after prison time.

What should you do instead of selling CVV?

If you are thinking about selling CVV because you need money, know that the financial payoff is likely to be below minimum wage when you factor in your time. More importantly, the conviction rate is high because the industry is flooded with tattletales.

If you have the skills to set up a carding shop, you can make more money as a penetration tester or a security analyst. The same cryptography and web development knowledge is valuable to banks, payment processors, and cybersecurity firms.

If you already sold CVV and want to stop, you should consider the fact that law enforcement may already have your identity. Consulting a criminal defense attorney is a better first step than ignoring it.

FAQ about selling CVV

Can you sell CVV without getting caught?

No, because every step from payment to delivery leaves a digital trail. The darknet is not as anonymous as it looks, and investigators have years of experience following that trail.

How do CVV sellers get paid?

Sellers typically demand Bitcoin, Monero, or other cryptocurrencies. They use tumblers or privacy coins to try to obscure the flow, but blockchain analysis can still link wallet clusters to the seller's exchange account.

What is the sentence for selling CVV in the US?

First offenders face up to 10 years in federal prison for trafficking in stolen access devices. If the crime involved a financial institution or a threat to national security, the maximum increases to 20 or 30 years.

The bottom line is that selling CVV is a high-risk, low-reward crime that ends most sellers in handcuffs. If you came here looking for a way to make money, this is your wake-up call.