Short answer
There is no lawful way to sell CVV data. A CVV is a card verification value tied to a payment card. Selling card data that belongs to another person is card fraud under US federal law. A site built for that trade is evidence in a criminal case, not a business.
What a CVV is
A CVV is a 3 or 4 digit code printed on a payment card or generated for a token. It exists to show the buyer holds the physical card. Merchants use it to lower chargeback risk. Card networks classify it as cardholder data under PCI DSS.
how to sell cvv website for carding
Which statutes apply
- 18 U.S.C. § 1029 covers access devices. A card number and CVV are access devices. Selling, transferring, or holding them with intent to defraud is a federal crime. Statutory maximums reach 15 years for a first offense in several subsections and 20 years in aggravated cases.
- 18 U.S.C. § 1028 covers identity documents and authentication features.
- 18 U.S.C. § 1343 covers wire fraud. A website that moves data across state lines meets the wire element.
- State statutes add charges. Most states treat card fraud as a felony above a low dollar threshold.
Civil liability
Card issuers and merchants can sue. Loss figures include the fraudulent charge, chargeback fees, and investigation cost. Payment networks fine acquiring banks, and those fines reach the account holder.
Sell CVV Website for Carding with Bitcoin
What payment rules require
PCI DSS forbids storage of the CVV after authorization. A business that stores or resells CVVs cannot pass a PCI assessment. No acquiring bank will underwrite the account. Sites that advertise CVV sales lose hosting and domain service when abuse desks receive reports.
Enforcement
The FBI and the Secret Service run card fraud investigations. The US Postal Inspection Service handles cases that involve mailed cards. The DOJ reports prosecutions under § 1029 each year. Takedowns of card marketplaces produce server logs, chat records, and payment trails that support charges against sellers.
Adjacent work that is lawful
People who want to work with card data can work in fraud analytics, chargeback operations, or PCI compliance. Those roles handle the same data under contract, audit, and consent.