You can't sell CVV data through any legal marketplace, period. The only outlets that buy stolen card numbers are dark web carding shops and private Telegram channels, and both are full of scammers and undercover federal agents. If you're asking where sell CVV safely, the honest answer is nowhere: it's a federal felony, and the odds of getting paid are worse than the odds of getting arrested.
What is a CVV, and what are people actually selling?
A CVV is the three or four digit code on the back of a credit card. By itself it's worthless, so sellers bundle it with the card number, expiration date, cardholder name, and billing ZIP. When the bundle includes full personal details like a Social Security number and date of birth, it's called “fullz” and sells for more.
Sellers group cards by brand, country, or price tier. Some sell “fresh” cards straight from a data breach. Others sell “tested” cards that still work.
- CVV plus card number and expiry: the basic product
- Fullz: card data plus the cardholder's identity details
- Dumps: magnetic stripe data used to clone plastic cards
Every package traces back to a stolen card. Every sale is a crime, no matter how small the amount.
Where do people actually try to sell CVV?
The real market sits in three places: dark web markets, private carding forums, and messaging apps like Telegram and Discord. Each one depends on cryptocurrency and some version of anonymity, which makes sellers feel invisible. That feeling is the product being sold to you.
Dark web markets move the largest volume. These sites run on Tor, take Bitcoin or Monero, and offer escrow systems built to be scammed or seized. Carding forums act like clubs, with invitations, reputation scores, and “verified vendor” badges that cost money and prove nothing.
Telegram and Discord channels are where beginners trade. They are easier to find, which means they are easier to trace. Federal agencies monitor all three layers, and many of the biggest shops are run by agents or by operators who hand over logs when it saves their own sentence.
Most buyers are not carders at all. They are other sellers running recovery scams, or agents building a case file against you. Everyone in the room is playing the same long game: take your money, or take your arrest.
Why do these markets exist if they're monitored?
Because the profit looks real and the risk feels distant. A seller watches other vendors post thousands in Bitcoin and assumes the same will happen to them. Tor and crypto create the illusion of technical safety that collapses at the first subpoena.
Most sellers last a few weeks. They get scammed by buyers, exit-scammed by market admins, or arrested. The people who actually make money are market operators, not card sellers, and operators are the first targets investigators go after.
The forums that stay online the longest are usually the ones that cooperate with law enforcement early. That cooperation is what keeps the domain running while arrests stack up elsewhere. Stability on the dark web is a bad sign, not a good one.
What happens to someone caught selling CVV?
Selling stolen card data is prosecuted under 18 U.S.C. Section 1029, the federal access device fraud statute. A single count of trafficking carries up to 10 years in prison. Add aggravated identity theft and you face a mandatory two more years on top, served consecutively.
Loss calculations drive the final sentence. Prosecutors stack counts across every card sold, and forensic accountants trace every transaction, wallet, and withdrawal. Fines, restitution, and forfeiture of crypto and equipment are standard parts of any plea deal.
The Department of Justice takes down entire forums on a regular schedule. In 2018, DOJ charged 36 people linked to the Infraud carding forum, with prosecutors putting losses above half a billion dollars. That case is not an outlier.
State prosecutors add their own charges for identity theft and fraud. A federal case doesn't end the exposure. It just starts the line that forms behind it.
Is there any legal way to sell or use CVV data?
Only with the cardholder's authorization. Companies can test their own payment systems with their own cards, and security researchers can work under a merchant's written consent. Selling the card data of real people is never legal, no matter how it is framed.
Ignore anyone offering “legal CVV shops” or “white label card services.” Those pitches exist to separate you from your money or your freedom. There is no gray area, no loophole, and no country where selling stolen card data is a real business.
What should you do if you're already involved?
Stop now. Do not send another message, cash out a balance, or warn your buyers and partners. Every extra transaction is another charge, and federal agents read the same channels you do.
Call a federal criminal defense lawyer before you talk to anyone. Do not speak to law enforcement without counsel, and do not lie if you are questioned. Deleting apps and wiping drives does not remove traffic logs that already exist.
- Stop all activity immediately and leave any funds alone.
- Talk to a lawyer who handles federal cases.
- Say nothing to investigators without your lawyer present.
- Assume your devices, accounts, and messages are monitored.
Quick answers to the questions people actually ask
These are the real questions that land on this page, and they all have the same short answer. The answer is never “it works out.”
Can you sell CVV and not get caught?
Most first-time sellers are caught within weeks or months. Undercover buys, seized market servers, and cryptocurrency tracing make sellers visible. The few who last longer are usually cooperating with investigators or running a scam of their own.
How much do people get paid for CVV data?
A single card sells for a few dollars. Fullz go for $10 to $50 depending on the bank and country. You would be risking a decade in prison for the price of a pair of shoes.
Do buyers actually pay?
Sometimes. Most disputes end in scams, blackmail, or doxxing, because nobody involved can call the police. There is no trustworthy escrow, and your best customers are often federal agents paying with seized crypto.
What if I only sell a few cards or “tested” ones?
Same crime. The law counts every card and every transaction. A smaller volume might lower the sentence, but it does not change whether you go to prison.
The bottom line
The search “where sell CVV” reads like a shopping question. It is actually a request for instructions on committing a felony. The honest answer is nowhere.
No legitimate market exists. Every illegal market is infiltrated, and the payment you would receive is measured in pennies per card. The price of the attempt is measured in years.
If you hold real card data, the only legal move is to report it. If you were about to look for buyers, walk away. The sellers who do best in the carding world are the ones who never started.