Short answer
A CVV dump is card data copied from a magnetic stripe or a payment terminal. A fullz record is a bundle of personal data: name, birth date, Social Security number, address, and card details. People who use the phrase "sell cvv dumps fullz" trade stolen records. In the United States this trade is a federal crime. A single-device offense carries up to 10 years; two or more access devices, or losses above $1,000, carry up to 15 years.
What the terms mean
- Dump: the data on track 1 or track 2 of a card stripe. Track 2 holds the account number and the expiration date.
- CVV: a three or four digit code printed on the card or encoded on the stripe. It exists to prove the physical card is present.
- Fullz: a file with identity fields plus card data. It sells for more than a dump because it supports account takeover and loan fraud.
None of these fields are legal goods. A card stripe belongs to the bank that issued it. A Social Security number belongs to the person named on it.
US law
18 U.S.C. § 1029 bans producing, selling, and trafficking in access devices. 18 U.S.C. § 1028 covers identity documents. 18 U.S.C. § 1028A adds a mandatory two-year sentence, served after any other term, when a stolen identity is used during another felony. 18 U.S.C. § 1343 covers wire fraud. Federal prosecutors stack these counts. A forum post that offers fullz is evidence, and payment records behind it are subpoenaed.
Where to Buy CVV Dumps Exclusively for Bitcoin Transactions
Scale
The FTC received more than 1 million identity theft reports in 2023. The FBI Internet Crime Complaint Center logged 880,418 complaints that year, with reported losses of $12.5 billion. Card-not-present fraud, which covers most dump and fullz use, is the largest single loss line for US issuers.
How records get taken
Skimmers on fuel pumps and ATMs copy stripes. Point of sale malware reads terminal memory. Phishing pages clone bank logins. Data breaches at processors and merchants expose stored numbers. Brute force scripts test checkout pages for weak card verification.
What cardholders should do
- Freeze credit at Equifax, Experian, and TransUnion. A freeze is free.
- Report the theft at IdentityTheft.gov and file a complaint with IC3.
- Read statements line by line and dispute charges in writing within 60 days.
- Use virtual card numbers for online checkout.
- Set transaction alerts on every account.
Banks replace cards and reverse charges in most cases. The time cost stays with the account holder. A stolen fullz also feeds tax refund fraud and medical billing fraud, which take longer to unwind than a card charge.
Bottom line
There is no legal US market for cvv dumps or fullz. Sellers face prison, restitution, and a permanent record. Buyers face the same charges. The only lawful steps around this topic are reporting a theft, freezing a file, or contacting an issuer about a card that was exposed.