It is a federal felony, and the paper trail usually starts the day you list the data. In the US, selling card verification values that belong to someone else falls under 18 U.S.C. § 1029, the access device fraud statute. A first offense carries up to 10 years in prison, and a prior conviction pushes the ceiling to 20 years. That is before identity theft, wire fraud, or conspiracy charges get stacked on top. Nobody sells a single CVV and walks away with a warning letter.
is it safe to sell cvv online risks
The charges that actually get filed
Prosecutors rarely charge one count. A typical indictment in a card data case reads like a stack:
- Access device fraud under § 1029 for producing, trafficking, or possessing card account numbers with intent to defraud.
- Aggravated identity theft under § 1028A, which adds a mandatory two-year term that runs consecutively to whatever else you get. No probation, no suspension.
- Wire fraud and conspiracy for the communications and payments that moved the data.
- State charges, often including money laundering, for however the proceeds were handled.
I look at how these cases get charged and the pattern is consistent: the seller of the data is treated as a principal, not a bystander. The person who bought it and the person who uploaded it to a shop get named in the same document.
Legal Risks of Selling CVV Online
What the sentencing math looks like
Federal sentencing runs on loss figures. Courts add up the actual and intended losses tied to the cards, and the numbers climb fast because each compromised account counts. A defendant facing a few thousand dollars in loss may be looking at probation or a short term. A defendant tied to a batch of accounts with six-figure aggregate loss is looking at years. Restitution gets ordered on top of the sentence, and it survives bankruptcy in most fraud cases. You can leave prison still owing money to banks and cardholders.
Risks of Selling CVV Online Explained
There is also forfeiture. The government seizes the proceeds, the devices used, and sometimes accounts that held the money. The financial recovery from selling data is usually negative once the case closes.
How sellers get identified
The mistake people make is assuming card data is anonymous because the shop is. It is not. Card issuers monitor for the patterns that indicate compromised accounts, and a card that gets used shortly after it was listed creates a direct timeline. Undercover purchases of the data happen routinely. Payment trails, chat logs, and the infrastructure used to run a shop all become evidence. Cases often start with a single buyer who gets arrested and cooperates.
The civil side does not wait for the criminal side
Banks and card networks sue separately to recover fraud losses, and they have deeper resources than most defendants. Civil judgments attach to future income and assets. Payment processors and platforms also freeze accounts and ban users, which follows you into ordinary banking. A fraud flag on your record makes renting an apartment, opening a merchant account, or getting a loan much harder for years.
The honest bottom line
The expected outcome of selling CVV data online is not profit. It is a felony record, a restitution order, forfeiture, civil judgments, and a permanent mark on your financial identity. If you have already done it, talk to a criminal defense attorney before you talk to anyone else.