Short answer

There is no legal website that sells CVV numbers. A CVV is a card security code tied to one account. Buying, selling, or trading a code that belongs to another person is access device fraud under 18 U.S.C. 1029. A first offense carries up to 10 years in prison. Repeat offenses and cases involving 15 or more cards carry up to 15 years.

related article

What a CVV is

• Visa, Mastercard, and Discover print a 3-digit code on the back of the card. The card networks call it CVV2 or CVC2.
• American Express prints a 4-digit code on the front. Amex calls it the CID.
• Issuers generate the code at card production. It does not appear on statements, receipts, or account portals.
• PCI DSS Requirement 3.2 bars merchants and processors from storing the code after an authorization. Storage is prohibited even when the data is encrypted.

Where CVV data comes from

Codes reach criminal markets through four channels: skimmers placed on fuel pumps and ATMs, phishing pages, merchant breaches at companies that break PCI rules, and card numbers typed into fake checkout forms. Each channel is a federal offense.

CVV Shopping Platform

Sites that advertise CVV sales operate on card-checking forums, Telegram channels, and onion markets. Payment runs through cryptocurrency. The seller holds the code and the buyer holds no contract, no receipt, and no legal remedy.

more on this topic

Why these sites are not a real market

Card-checking forums carry a documented scam problem. Sellers collect payment and deliver dead numbers, then block the buyer. Escrow services on those forums are frequently run by the same account that posts the listings. Buyers cannot report a loss without admitting to a crime. Losses stay unreported.

cvv buying platform choice

Exposure for buyers

Buying is charged as a separate offense from stealing. Prosecutors use 18 U.S.C. 1029(a)(3) for trafficking in access devices and 1029(a)(6) for fraud involving card data. Courts order restitution to the issuing banks. Banks also file civil claims. The FTC Consumer Sentinel Network logged 2.6 million fraud reports and $10 billion in reported losses in 2023, with credit card fraud among the largest categories.

Legal use of a CVV

A cardholder reads the code to a merchant for a phone or online order. The code proves the physical card is in hand. It has no value apart from the account it protects, which is why no licensed processor, bank, or retailer resells CVV numbers. Any listing that offers them for sale is either a fraud operation or a criminal one.