Online CVV marketplaces are underground shops and chat channels that trade stolen credit card data. Selling card numbers through them is a federal crime in the US under 18 U.S.C. § 1029, and it exposes sellers to civil suits from banks and cardholders. Sellers also face a second problem: the marketplaces themselves take their money.
What is a CVV marketplace?
A CVV marketplace is a criminal storefront for payment card data. Some run as web shops with search filters, others as invite-only forums or Telegram channels. The "CVV" name refers to the card verification value, but listings bundle the card number, expiry date, cardholder name, and billing address.
These platforms exist to move stolen data from the people who capture it to the people who use it. Sellers are the supply side. That is also the side that leaves the clearest trail.
How to List a New CVV Shop Online for Sellers
How do these marketplaces work?
- Sellers upload batches of card data, often from skimming devices, phishing pages, or breached merchant databases.
- Buyers pay in cryptocurrency and the platform holds funds in escrow, taking a cut of each sale.
- Reputation scores and feedback replace trust. New sellers start with no history and get challenged on every listing.
- Automated shops push data straight from a collection point to a storefront with no human review.
Most of these operations are small. Admins run them from rented servers or a phone, and the storefront vanishes when the admin gets arrested, gets robbed, or decides to exit with the balance.
which platform is better to sell cvv
What are the legal consequences for sellers?
Federal criminal charges
In the US, trafficking in card data falls under 18 U.S.C. § 1029, which covers unauthorized access devices. Penalties reach 10 years in prison for a basic offense and 15 years when a case involves 15 or more cards or $1,000 or more in value within a year. Courts can add fines, restitution, and forfeiture of accounts, computers, and crypto.
Civil liability
Card issuers and cardholders can sue for fraud and related claims. Banks process chargebacks, and they pursue the people who supplied the data, not just the ones who used it. A judgment can follow a seller for years.
Sellers get scammed too
Rippers take the data and never pay. Fake escrow services hold funds and vanish. Some platforms charge a deposit before a seller can list, then close the account. There is no consumer protection, no chargeback, and no one to report the loss to.
Why sellers carry more risk than buyers
The supply side of a stolen data market leaves records. Uploads, crypto transfers, forum accounts, and chat handles create a trail that investigators can link. Buyers receive data and leave; sellers stay in the system to get paid.
Law enforcement takedowns target admins and high-volume sellers first because they are the visible part of the operation. A single arrest can expose years of transaction history.
What can sellers do that is legal?
If the goal is to earn from online payments, there are routes that carry no prison risk.
- Accept card payments for your own products or services through processors like Stripe, Square, or PayPal.
- Sell digital goods, courses, or subscriptions and use a merchant of record to handle tax and payments.
- Work as an independent contractor on platforms that pay through standard payroll and invoicing.
- Move into fraud prevention. Chargeback analysts, PCI compliance consultants, and risk teams at payment companies hire people who understand how card fraud works.
Payment companies run background checks, so a carding history closes those doors. A clean record keeps them open.
FAQ
Is selling CVV data legal in any country?
No. Theft and trafficking of payment card data is a crime in the US, EU, UK, Canada, and most other countries. Weak enforcement in one jurisdiction does not protect a seller when the cards belong to banks elsewhere.
How do banks catch stolen card data in use?
Issuers watch for odd purchase patterns, test charges, and mismatched billing details. Tokenization swaps card numbers for one-time codes, which cuts the value of a raw number. Real-time alerts also let cardholders freeze a card within seconds of a suspicious charge.
Do carding marketplaces pay sellers on time?
Many do not. Exit scams, rigged escrow, and disputes over card validity are common complaints in the underground. Payment disputes have no neutral party and no appeal.
What should I do if someone asks me to sell card numbers?
Refuse, keep the message, and report it. In the US you can file a complaint with the FBI's Internet Crime Complaint Center or the FTC. Passing along the data makes you a participant, even if you never use a card yourself.