Selling fullz or CVV data online is not a loophole, a hustle, or a gray-market job. In the United States it is a federal crime, and the people who do it get prosecuted as identity thieves and access-device traffickers. There is no legal version of this business, no licensing path, and no "it's just data" defense. If you are looking for a guide to running one, this isn't it. What follows is what the trade actually is, what it costs, and where the real work in this space sits.
What "fullz" and "CVV" actually refer to
"Fullz" is carding slang for a bundle: a person's name, address, date of birth, Social Security number, and card details sold together so a buyer can open accounts or pass verification. "CVV" is the three- or four-digit verification code printed on a card. When someone sells either one, what they are selling is stolen financial and personal data. It belongs to someone else, it was taken without consent, and the person it belongs to usually has no idea it changed hands.
How to Sell Fullz Online Without Scamming
That distinction drives the entire legal picture. You cannot sell data you never owned, and possession with intent to traffic is enough to support charges in most federal cases.
Fullz Seller Guide: How to Sell CVV Online Safely
The statutes that apply
- 18 U.S.C. § 1029 covers fraud and related activity involving access devices: producing, trafficking, or possessing card numbers and CVVs with intent to defraud. Penalties reach 10 to 15 years depending on the counts and the amounts involved.
- 18 U.S.C. § 1028 covers identity theft and identity fraud, including trafficking in means of identification.
- 18 U.S.C. § 1343 is wire fraud, and it attaches to nearly any transaction conducted over the internet.
- 18 U.S.C. § 371 is conspiracy, which is how a seller who worked alone ends up charged alongside everyone they ever talked to.
Federal sentencing runs on loss amounts. A few hundred cards can push a case into guideline ranges measured in years, and restitution gets ordered on top of prison time.
Why the market mostly burns the people in it
Carding forums have a structural problem: everyone in them is a criminal, and none of them can call the police. That makes the space a magnet for exit scams, fake escrow, and "rippers" who take payment and vanish. It is also a place where undercover agents work routinely. Several large marketplaces have been taken down after investigations that ran for years. Sellers who assume they are anonymous are usually the last to learn otherwise, and the evidence trail they left behind is what gets read aloud in court.
Who actually pays for it
Cardholders spend hours on the phone and months rebuilding credit. Small merchants eat chargebacks and sometimes lose the ability to accept cards at all. Banks raise fees for everyone to cover the losses. The cost never disappears. It moves to people who never chose to be part of the transaction.
The legitimate version of this work
Payments and fraud prevention is a real career, and it hires constantly: fraud analyst, chargeback specialist, threat intelligence researcher, identity verification engineer. You work with the same data, on the side that stops it. Employers include banks, card networks, payment processors, and large e-commerce companies. Credentials like the Certified Fraud Examiner exist, and none of them require a criminal record.
If your own data is being sold
Freeze your credit with all three bureaus, file a report at IdentityTheft.gov, and report the listing to the FBI's Internet Crime Complaint Center. Call your bank and card issuer the same day. Speed matters more than anything else here.