Short answer
Selling CVV codes on Telegram is a federal crime in the United States. A CVV is the three digit code on the back of most cards, or the four digit code on the front of American Express cards. It is not a product. Sellers who run channels, bots, or group chats to move card data face charges under 18 U.S.C. 1029, the access device fraud statute. Telegram's terms of service ban illegal activity on the platform.
What US law covers
18 U.S.C. 1029 covers producing, selling, transferring, and possessing access devices. Courts treat a card number paired with its CVV as an access device. A seller who moves card data in bulk can also face charges under 18 U.S.C. 1343, wire fraud, and 18 U.S.C. 1028A, aggravated identity theft. The identity theft count carries a mandatory two year prison term that runs after any other sentence.
Sentences in these cases include prison time, fines, restitution to banks and cardholders, and forfeiture of computers, phones, and crypto proceeds.
Enforcement
The Department of Justice files carding cases each year. Many indictments name Telegram channels, bot shops, and card checking services. The FBI runs the Internet Crime Complaint Center, IC3, which collects reports from banks and cardholders. Cases cross borders. US prosecutors work with police in Europe and Asia on extraditions.
No public figure exists for the number of Telegram channels that sell card data, or for the dollar volume those channels move. Telegram does not publish takedown counts.
How card data reaches those channels
- Skimming devices placed on fuel pumps, ATMs, and door readers.
- Phishing pages that copy a bank login screen.
- Breaches at merchants and payment processors.
- Malware on point of sale terminals.
- Resale of the same records between forums over several years.
What Telegram does
Telegram's terms of service prohibit use of the platform for illegal activity. The company accepts abuse reports and removes channels that break the terms. Removal is not instant, and some channels return under new names.
What cardholders can do
- Read statements each month. Small test charges come first.
- Turn on transaction alerts in the issuer app.
- Freeze the card from the app when a charge is unknown.
- Use single use virtual card numbers for online checkout.
- Report fraud to the issuer, the FTC, and IC3.
Why buyers on Telegram lose money
Card data sold this way is dead on arrival in many cases. A stolen card gets canceled after the first fraud report, and banks flag the account number. Buyers pay in crypto with no refund path. Some sellers take payment and send nothing. A buyer in the US commits a crime under the same statute.