Short Answer

No legitimate shop sells CVV data at any rate. The search phrase refers to the market for stolen card verification values, which are the security codes printed on payment cards. Buying, selling, or using that data is a federal crime in the United States under 18 U.S.C. § 1029. There is no licensed vendor, no published rate sheet, and no consumer protection behind those listings.

What a CVV Is

A CVV is a short code printed on a payment card. Visa, Mastercard, and Discover use three digits on the back. American Express uses four digits on the front and calls it the card identification number. The code confirms that the person placing an order holds the physical card when the card is not present at checkout.

The CVV is not encoded on the magnetic stripe and does not print on receipts. Card networks require it for online and phone orders.

Why CVV Data Gets Offered for Sale

A thief who pulls card numbers from a database breach or a card skimmer still needs the CVV to pass a card-not-present check. That gap creates demand. Demand creates listings, and listings appear on closed forums, chat channels, and messaging apps. Sellers post volume, card brand, issuing bank, and a price per card.

Legal Status in the United States

Trafficking in card data falls under federal law. 18 U.S.C. § 1029 covers the production, sale, and use of counterfeit or unauthorized access devices. Penalties include fines and prison terms of up to 10 or 15 years, depending on the subsection, with longer terms for repeat offenses. State card fraud statutes apply as well, and card networks pursue civil claims.

A buyer commits a separate offense from a seller. Intent to defraud is the central element. Holding stolen card data with that intent supports a charge.

What "Best Rate" Means in Listings

Prices in this market do not work like retail prices. Sellers quote rates by card brand, issuing bank, and stated account balance. Common claims include bulk discounts and free replacements for cards that fail.

• Rates shift by card type and country of issue.
• Much of the inventory is stale or already blocked by the issuer.
• Some operations collect payment and ship nothing. Buyers cannot file a complaint or a chargeback without exposing themselves.

There is no refund process, no arbitration, and no regulator. A crypto or wire payment is final.

How Card Data Leaves a Cardholder

Sources include merchant data breaches, skimming hardware on fuel pumps and ATMs, phishing pages, and malware on checkout systems. Payment card industry rules bar merchants from retaining the CVV after a transaction, which closes off one common route. That rule does not cover phishing or a physical camera over a card.

If Your Card Data Is Used

1. Freeze the card in the issuer app or call the number on the back of the card.
2. File a dispute with the issuer. Truth in Lending Act rules cap credit card liability at $50, and most issuers waive that amount.
3. Report the case to the FTC identity theft site and to the FBI Internet Crime Complaint Center.
4. Pull all three credit reports and look for accounts you did not open.
5. Change passwords on retail accounts that stored the card.

Scope of This Guide

This page explains the term and the law. It does not list vendors, rates, or contact methods, because those listings describe criminal conduct. A site that advertises CVV data for sale is a fraud risk in both directions: toward the cardholder whose data was taken and toward the buyer who pays for it.