CVV selling marketplaces are illegal online forums that trade stolen credit card details, not legitimate retailers. A CVV is the 3- or 4-digit security code printed on a payment card, and selling that code without the cardholder's permission is access device fraud under U.S. law. I cannot compare these marketplaces or tell you where to buy CVVs, because doing so means helping commit card fraud and identity theft.

What is a CVV?

A CVV (card verification value) is a short security code that confirms you hold the physical card during an online or phone payment. Visa, Mastercard, and Discover print a 3-digit code on the back of the card; American Express prints 4 digits on the front.

The code is not stored in the magnetic stripe or the chip. That design keeps the CVV out of most card-skimming attacks, which is why merchants ask for it on card-not-present transactions.

When someone sells a "CVV" online, they are selling the card number, expiry date, name, and that security code together. Nothing about this is a normal retail transaction.

Why CVV marketplaces are criminal operations

These sites exist to move stolen card data. The listings come from data breaches, phishing pages, card skimmers, and malware on checkout pages, and the sellers have no legal claim to the numbers.

U.S. law treats buying, selling, and possessing stolen card data as access device fraud. Under 18 U.S.C. § 1029, a conviction can carry fines and prison time, even if the buyer never uses the card.

What buyers actually get

• Data that is often stale. Cards get cancelled after the real owner reports the charge.
• Data that is often fake. Marketplace sellers disappear with the payment and ship nothing.
• A permanent record. Payment trails, wallet addresses, and chat logs can be subpoenaed later.
• Exposure to malware. Fraud forums are a common delivery channel for credential stealers.

What the real risk looks like

Card fraud is not a victimless transaction. The cardholder deals with blocked accounts, declined payments, and hours on the phone, and banks pass fraud losses back to merchants as higher processing fees.

Buyers face a second problem: the people running these sites know their customers are committing a crime and cannot report a scam to police. That makes fraud marketplace customers a target for extortion and repeat theft.

How to protect your own cards

• Keep the CVV out of emails, chat apps, and text messages. No real merchant needs it there.
• Check your statement every month for charges you do not recognize.
• Turn on transaction alerts so your bank contacts you the moment a card is used.
• Use a virtual card number for subscriptions and unfamiliar sites.
• Cover the keypad at ATMs and fuel pumps where skimmers are common.

If your card data is stolen

Call the number on the back of your card and ask the issuer to freeze the account. Under federal rules, you are not responsible for unauthorized charges reported in a reasonable time, and most major issuers offer zero liability.

Then place a fraud alert or credit freeze with the three credit bureaus, and file a report at IdentityTheft.gov to get a recovery plan.

Where to report card fraud

• Your card issuer, for charge reversals and a new card number.
• The FTC at IdentityTheft.gov, for a formal identity theft report.
• The FBI Internet Crime Complaint Center (IC3), for online fraud and marketplace scams.
• The U.S. Secret Service or local police, for large or organized fraud cases.

Frequently asked questions

Is buying a CVV illegal?

Yes. Buying card data that belongs to someone else is federal access device fraud in the United States, and similar laws exist in most countries. There is no legal marketplace for CVVs.

Can a stolen CVV be used more than once?

Sometimes, until the cardholder or the bank catches the charge. Fraud models and issuer monitoring usually flag repeated card-not-present purchases from new devices, so the window is short and unpredictable.

Do "CVV shops" offer refunds or guarantees?

No real guarantee exists, because the product is stolen data and the transaction itself is a crime. Any seller promising a refund is running a scam on top of a fraud scheme.

How do I check if my card details leaked?

Watch for small test charges, unexpected password reset emails, and bank alerts. You can also check breach notification services, then change passwords on any account that used the same card or email.