Buying CVV online is a federal crime in the US, and no shop, forum, or vendor can change that. If you still decide to buy cvv online, the core buying advice is: pick a vendor with multi-year history on a serious carding forum, order one cheap card as a test, and never send money without escrow. This guide breaks down real price ranges, trust signals, scam signs, and the legal exposure that buyers rarely factor in.
How much does CVV data actually cost?
Prices vary by card type, country, and whether the card is "fresh" (recently stolen and unburned). For US-issued consumer cards, the current going rate on active markets sits around $5 to $15 per number. Business cards, high-limit platinum cards, and cards tied to big bank accounts run $25 to $100 each.
- Standard US Visa/Mastercard with CVV2: $5-$15
- US Amex or high-limit business cards: $25-$60
- Cards with full cardholder details (name, address, phone, DOB): $15-$40 extra
- European and Asian cards: $10-$30, depending on country
- "Fresh" cards sold within hours of theft: up to double the base price
Bulk packages drop the per-card price to $2-$4, but sellers use bulk deals to dump invalid batches. That is the most common way buyers lose money on a single transaction.
What separates a carding shop you can trust from a scam?
No CVV shop is trustworthy in the legal sense, because the whole industry operates outside the law. What separates a functioning shop from a garbage one is the same thing that protects you from its owner: proof of work over time.
Vendor age and forum history
Serious vendors live inside invite-only forums, not public websites indexed by Google. A vendor with 2+ years of activity, hundreds of sales, and an unbroken dispute record is a safer bet than a shiny new Telegram bot. Check their feedback threads yourself; screenshots and profile banners are easy to fake, forum post history is not.
Escrow and dispute systems
Every established carding forum offers escrow, where the money sits with a moderator until the buyer confirms the cards work. If a vendor demands direct payment with no middleman, treat it as a red flag, regardless of their reputation. Escrow does not make the deal legal, it only reduces the chance of being robbed twice.
Refund and reship policies
Working shops guarantee their cards or reship a replacement within 24 hours. The standard policy is "no refund, reship once," and a reship window of 24-48 hours is considered normal. Any vendor that refuses to discuss invalid cards before payment will sell you dead data.
Red flags that should end the conversation
- Payment demanded in gift cards or non-escrow crypto. Real vendors accept escrow, period.
- A "verified" badge you cannot trace to a forum moderator. Badges appear on scam shops within an hour.
- Prices 80% below market. Cheap cards are batches that real banks have already flagged.
- A Telegram or Discord storefront with no forum thread, no escrow, and no aged reviews.
- Pressure to buy "instantly before the batch dies." That is a sales tactic used to skip due diligence.
Do you face real legal risk buying CVV? (what buyers ignore)
Yes, and the risk is worse than most forum posts admit. Federal access device fraud charges under 18 U.S.C. Section 1029 carry up to 10 years in prison for a first offense, plus fines and restitution. State identity theft laws add separate penalties, and both apply even if you never use the card.
Prosecutors treat buyers and sellers similarly in carding cases. If a forum is seized, the full transaction log becomes evidence, including your username, payment wallet, and the cards you bought.
How do CVV buyers actually get caught?
Buyers get caught through three paths: seized forums, undercover vendor operations, and tracing crypto payments back to an exchange account. The FBI and Secret Service have run carding forums and shops as sting operations, sometimes for years, before arresting the people who transacted on them. Law enforcement also subpoenas exchanges like Coinbase and Binance to link wallet addresses to real identities.
One extra path is simpler: using a card you bought on your own billing address or a proxy tied to your home network. Credit card companies and card networks flag these purchases and report them to the issuing bank, which forwards the evidence to investigators.
Frequently asked questions about buying CVV online
Is buying CVV online illegal if you never use the cards?
Yes. Possession of stolen card data with intent to defraud is a separate offense from using it. Courts have convicted buyers who never made a single purchase with the stolen numbers.
What payment methods do CVV shops accept?
Most serious shops accept only cryptocurrency, usually Bitcoin or Monero. Some use forum escrow wallet systems that hold the crypto until both sides confirm. Any shop demanding a bank transfer or credit card payment is a scam.
What does "fresh" mean when buying cards?
"Fresh" means the card data was stolen in the last few hours and has not been tested or sold to anyone else. Fresh cards cost more because they have a higher chance of still working. The label is seller-reported, so only buy fresh from a vendor with a long, verifiable history.
Can you verify a card works before paying full price?
Some vendors sell test cards or single-card samples at a discount, usually $2-$5, specifically for buyers to check the current batch. Good shops stand behind a 1:1 reship if the sample comes back dead. Scam shops sell samples that are actually old dead numbers collected from previous batches.
Nothing in this guide removes the legal risk. The only zero-risk option is not buying CVV at all; every transaction leaves a cryptographic and forensic trail that investigators know how to follow.