Short answer
Selling CVV numbers online is illegal in the United States and in almost every other country. A CVV is not a separate product you can trade. It is one piece of a payment card's access credentials, and the law treats the whole credential as an access device. Selling, transferring, advertising, or possessing someone else's card number with the intent to defraud is a federal crime under 18 U.S.C. section 1029, usually called access device fraud. State prosecutors add their own identity theft, computer crime, and money laundering charges. No license, registration, disclosure page, or offshore server makes a CVV marketplace lawful.
What the law actually covers
Federal access device fraud reaches further than most people assume. You do not have to use the card, and you do not have to profit. Offering a card number for sale, brokering a sale between two other people, running the forum where the sale happens, and accepting payment for it can each be charged on their own. Courts read the word trafficking to include selling, transferring, and advertising.
best way to sell cvv online legit
Charges that commonly appear together
- Access device fraud, 18 U.S.C. section 1029
- Aggravated identity theft, 18 U.S.C. section 1028A
- Wire fraud, 18 U.S.C. section 1343, for the online payment side
- Conspiracy, 18 U.S.C. section 371, which covers people who help but never touch a card
- Money laundering, 18 U.S.C. section 1956, for moving the proceeds
Penalties
Access device fraud carries a statutory maximum of 10 years in prison, and up to 15 years for certain offenses involving counterfeit or unauthorized devices. Federal sentencing guidelines then scale the range by dollar loss, the number of victims, and whether the operation was organized. Large carding operations routinely produce sentences of a decade or more, plus restitution to the banks and cardholders. Aggravated identity theft adds a mandatory two-year term that runs on top of the underlying sentence.
Why the common defenses fail
Sellers often claim they are selling data rather than cards, that the numbers belong to closed accounts, or that the site is hosted abroad. None of that works. Card numbers tied to closed or expired accounts are still access devices, and jurisdiction follows the victims, the issuing banks, and the servers, not just the seller's address. A disclaimer on a website has no effect on criminal liability.
can you sell cvv online without getting caught
The buyer side is a scam market
People who try to buy card data are defrauded at a high rate. Common tactics include selling numbers that were already reported and blocked, using escrow bots that disappear with the funds, and requiring a deposit before access to a shop. Because the transaction itself is illegal, a cheated buyer cannot sue, dispute a charge, or call the police without exposing their own conduct. That is the practical trap: the market has no enforcement, so the only reliable outcome is loss.
If your card data was exposed
- Call the number on the back of your card and ask for the account to be closed or the number reissued.
- Review recent statements and dispute any charge you did not make.
- Place a free fraud alert or credit freeze with the major credit bureaus.
- File a report with the Federal Trade Commission and keep the confirmation number.
- Report the marketplace or forum to the FBI's Internet Crime Complaint Center.
FAQ
Is selling CVV online legal if the card is expired?
No. An expired or closed account number is still an access device, and offering it for sale with intent to defraud falls under the same statute.
Is buying a CVV illegal too?
Yes. Attempt and conspiracy charges cover buyers, and the wire fraud charge usually applies to the payment method used.
Can a site make CVV sales legal by calling itself a marketplace?
No. The label on the platform does not change what is being sold. Operators, moderators, and payment processors can all be charged.
Does it matter which country the seller is in?
It can affect who prosecutes and how extradition works, but it does not make the sale legal. US law applies when victims or banks are in the US, and most countries criminalize the same conduct.
What if I sell my own card number to someone?
Sharing your own credentials is not automatically a crime for you, but it breaks your cardholder agreement, voids fraud protection on that account, and can make you a suspect if the number is later used in a scheme.