A “cvv dump” is stolen credit or debit card data copied from a card’s magnetic stripe and resold in underground card shops. The price of a single cvv dump starts below $5 and can climb past $100 when the seller adds a PIN or a full profile of personal data. Buying one is a crime in the United States, and it also puts you in a market that cheats its own customers as often as it fuels card fraud.
What Is a CVV Dump, Anyway?
A cvv dump is the raw magnetic-stripe data that payment terminals and ATMs read when you swipe a card. It is usually sold with the visible 16-digit card number, the expiration date, and the CVV2 security code so the buyer can also shop online. In dealer slang, dump means card data ready for physical fraud, while fullz means the same data paired with a Social Security number, date of birth, and other identity details.
Forums and Telegram channels often blur the lines between these terms. A seller may list a “fresh cvv dump” when what it actually contains is a card number, an expiration date, and a code for e-commerce checkout. If your search is “where buy cvv,” you are looking at the same resale ecosystem that handles card data from breaches, skimmers, and phishing sites.
- Track 1 and Track 2 data. These encoded fields sit on the magnetic stripe and identify the account. Crooks copy them onto blank cards for store purchases or ATM withdrawals.
- Card number and expiration date. These support online and phone orders, especially when the site asks for the three-digit security code.
- Cardholder details. Name, billing ZIP, and PIN raise the price. Fullz packages add identity documents and more personal records.
Where Do CVV Dumps Come From?
Skimming devices placed over card readers at gas stations and ATMs capture data as customers pay. Point-of-sale malware inside retailers does the same on a bigger scale. Breaches at merchants and payment processors feed the largest batches into criminal markets, often months after the stolen data first leaves the store.
Phishing campaigns also play a role. A fake login page or a lookalike delivery site can collect card details directly from the cardholder. Call center workers and payment processors with inside access occasionally sell records they view while helping customers.
Fresh data moves through Telegram channels, invite-only forums, and automated card shops. Resellers buy large blocks, split them into regional lists, and mark up the price before buyers arrive.
How Much Does a CVV Dump Cost?
Prices move daily, often dropping when a big breach floods the market. Court exhibits and card shop listings suggest a few general tiers.
- Plain dumps from common consumer banks: $2 to $10 per card when bought in batches. These are the cheapest listings and the most likely to be dead on arrival.
- Premium and business card dumps: $10 to $40 per record. Higher credit limits make these attractive to fraudsters.
- Dumps with PINs and full track data: $50 to $120 per card. Sellers claim the cards are “tested” at an ATM, though testing often means the victim already noticed the loss.
- Fullz bundles: $20 to $80 per record. These pair card data with Social Security numbers, birth dates, and addresses for identity theft.
Most shops also charge for extras such as fast delivery or proof that the card still works. The CVV dump cost is only the upfront loss. The real price includes forfeitures, legal fees, restitution, and jail time.
What Do Criminals Do With a CVV Dump?
Buyers with PIN data encode the track onto blank plastic and withdraw cash from ATMs before a bank blocks the card. Others use the card number online to purchase gift cards, smartphones, or other items that are easy to resell. Some simply trade the same data to another criminal for cryptocurrency.
- Physical card fraud: Card data written to a counterfeit card works at gas pumps and stores that still accept magnetic stripes.
- Online shopping fraud: Card numbers with CVV codes can pay for digital goods or ship physical products to a mule address.
- Identity opening: Fullz packages let criminals open new credit cards, take out loans, or file fake tax returns.
None of this ends in a positive outcome for the buyer. Police can trace shipping addresses, IP logs, cryptocurrency wallets, and the devices used to check a card’s balance.
Who Actually Sells CVV Dumps Without a Scam?
The honest answer is a painless word: no one. A merchant with real profit does not need to gather strangers on Telegram and sell access to it. Public sellers run ads to collect your money, your messenger ID, or your payment details for a second scam.
Card shops disappear overnight, delete their channels, and reopen under a new name. Some sellers threaten buyers who complain, and others report the buyer to the police to clear their own path. One recurring trick is the “refund on request” promise, which exists only until you file the request.
The same market also hosts undercover officers. Federal agents buy and sell card data to map the network, and they arrest buyers after the transaction completes. A forum with thousands of users is not a private club; it is a surveillance environment.
What Happens If You Buy a CVV Dump?
You may lose your money without receiving any usable data. You may receive a file full of random numbers that a “checker” tool later rejects. Or you may complete a purchase with an undercover agent and meet a prosecutor instead of a supplier.
If you do use the stolen card data, the trail leads back fast. Banks monitor card tests for unusual patterns, and merchants flag failed authorization attempts. A single $1 test charge on a stolen card can reveal the device location and account that funded it.
Even storing a cvv dump on a phone or laptop can be evidence. Possession of unauthorized access devices is prosecuted on its own when the person intends to defraud. You do not need to complete a purchase to face charges.
What Legal Penalties Do CVV Dump Buyers Face?
Federal prosecutors use the access device statute, 18 U.S.C. 1029, for stolen card data. A conviction can bring up to 10 years in prison on each count, and repeat offenders face more. State laws add separate charges for identity theft, fraud, and computer crimes.
Aggravated identity theft charges can add two years on top of the underlying sentence when the offender uses another person’s identity. Restitution orders force defendants to repay victims and card issuers for the full amount stolen. Forfeiture can also seize the money and cryptocurrency used in the scheme.
Investigations do not stop at the person holding the dump. Buyers can be compelled to name their seller, which creates a chain of arrests. Federal agencies cooperate with local police on skimming and data breach cases, and card fraud cases move through courts with regular announcements.
What Do You Do With a CVV Dump if You Find One?
Do not open the file, test the numbers, or send a sample to anyone. Handling stolen card data creates evidence and can trigger an alert at your bank or internet provider. Report the find through official channels and then delete it.
The FBI’s Internet Crime Complaint Center accepts reports about stolen card data and card fraud. The Federal Trade Commission also collects fraud reports and encourages identity theft victims to place a fraud alert on their credit files. If a specific card belongs to you, call the issuing bank and ask for a new card number right away.
Security researchers who encounter dumps during a breach investigation should follow their company’s incident response plan and notify the payment processor. Random curiosity should stay out of the file entirely.
Frequently Asked Questions About CVV Dumps
Can I test a CVV dump without paying?
Sellers sometimes offer a “tested” card at a discounted price. The test usually involves running a small charge to see if the card is alive, and the seller controls the process. You have no legal way to verify stolen data without committing a crime.
Is a cvv dump the same as a credit card number?
A credit card number is only one part of the data bundle. A cvv dump adds the magnetic stripe encoding and often the cardholder name, expiry date, and security code. Without the extra fields, the stolen number has less resale value.
What is a checker in a card shop?
A checker is a tool that sends a small authorization request against a stolen card to see if the card still works. Using a checker is itself a fraudulent transaction. Banks notice these probes and freeze cards, and police use the logs to trace buyers.
Do banks refund victims of CVV dump fraud?
Federal rules limit cardholder liability for unauthorized charges, so most consumers get their money back. That loss does not disappear. The issuer, the merchant, and the payment network absorb the costs and pass them to other customers.
If someone stole your card data, you can act fast. Check recent transactions, dispute anything unfamiliar, and set up alerts for new charges. You want to stop the damage before the dump gets sold again.