Selling CVV fullz is offering a stolen payment card number, its security code, and the cardholder's identity file to a buyer on an illegal market. In the United States, that single act is a federal crime, and the people who advertise their willingness to sell CVV fullz on the open internet are often the first to get caught. Here is what the trade looks like, who profits from it, and what happens when a seller faces a judge.

What does 'fullz' mean in stolen card markets?

A 'fullz' package is the complete file on a victim. It includes the card type, number, expiration date, and CVV, then adds the cardholder's full name, billing address, phone number, email, date of birth, and where available the Social Security number and driver's license number.

Banks and fraud filters use this identity data to verify purchases. A buyer who holds fullz can do more than order goods online. They can submit fake tax returns, open prepaid cards, or take over account access in the victim's name.

• Card data: card number, expiration date, CVV, card brand
• Billing and contact: full name, address, phone, email, date of birth
• Extended identity records: Social Security number, driver's license, bank account details

The term 'fullz' comes from 'full information.' Sellers use it so buyers know they are not getting a bare card number with only a three-digit code attached. If a listing lacks identity fields, it is not a fullz record.

Where does the 'sell CVV fullz' economy actually live?

No durable public website says 'sell CVV fullz' and stays up for months. The market shifts between Telegram channels, Discord servers, and underground forums that demand invitations or proof of past fraud.

Market administrators act as middlemen. They hold cryptocurrency in escrow, settle disputes, take commissions, and keep reputation scores for vendors. In exchange, they try to block police accounts and identify informants.

That security is an illusion. Federal investigators create fake vendor accounts, buy samples, and trace crypto payments to exchange accounts. A forum that seems active and trusted can be run entirely by federal agents.

Can a new seller make money selling CVV fullz?

In practice, almost no newcomer sees a profitable month. The buyer pool is tiny, suspicious, and unwilling to risk money with an unproven vendor. To attract attention you must give away free samples, and free samples are the evidence investigators need to build a case.

Even after a sale closes, the money often never arrives. Sellers accept bitcoin or other cryptocurrency because it seems private, but blockchain records are permanent. A fake buyer who grabs the fullz and disappears leaves the seller with no payment and no way to reverse the transfer.

High-volume sellers in court files sometimes show weekly revenue in the low thousands of dollars. That income collapses the moment an account is seized. The people who profit the longest are forum owners and crypto exchangers, and they face the harshest sentences in takedowns.

What US federal penalties apply to selling stolen fullz?

The main federal tool is the Access Device Fraud Act, 18 U.S.C. Section 1029. Trafficking in unauthorized card data carries up to 10 years in prison per count, and each stolen card record can be charged separately. A file containing 1,000 fullz records can create 1,000 potential counts.

Prosecutors also use aggravated identity theft under 18 U.S.C. Section 1028A. That charge adds a mandatory two-year prison term that runs after any other sentence. State laws add separate penalties for identity theft, computer fraud, and money laundering.

Forfeiture is part of the sentence. Courts can take phones, cars, bank accounts, crypto wallets, and cash that came from the carding operation. Most sellers who are convicted leave with nothing.

How do buyers and middlemen try to rip off carders?

The people trying to sell CVV fullz are cheated far more often than they are paid. The oldest trick is the free sample request. A fake buyer takes one record to 'check quality,' keeps it, and never returns.

Another pattern is the fake escrow account. The buyer points the seller to a webpage that looks like a neutral escrow service but is controlled by the buyer. The seller sends the fullz, the account disappears, and the seller is out of every record.

• Rippers ask for free samples and block the seller after delivery
• Fake buyers send a doctored crypto transaction screenshot
• Middleware contacts collect the fullz and forward nothing to the seller
• Undercover officers chat like buyers and collect evidence for an arrest

Cryptocurrency does not fix these risks. Public blockchains link wallet addresses, and analysis firms sell tracing services to law enforcement. Even a successful-looking sale can be the final exhibit in a criminal complaint.

What does the enforcement cycle look like in the carding world?

Carding forums often run for months before a coordinated takedown. Sellers inside feel safe because everyone uses a handle and messages are encrypted. Then the FBI, Secret Service, and European agencies seize the servers, and the administrator's chat logs become public record.

A seller who planned to quit after one batch still left a trail. The exact fullz records, the transaction timestamps, and the wallet addresses sit in market logs. That evidence can surface years later.

Frequently asked questions about selling CVV fullz

What is the difference between a CVV and a fullz?

A CVV is the three or four digits printed on a payment card. Fullz includes the CVV plus the cardholder's identity file needed for broader financial fraud. Buyers pay more for fullz because the data lets them commit more crimes.

Can you buy CVV fullz on the open internet?

Almost every open website that says 'buy fullz' is a scam, a police operation, or both. Genuine vendors hide in invitation-only forums and private chats. Search engine listings for CVV fullz appear mainly to collect visitor data for later fraud.

Do carders earn real money from bitcoin payments?

Some experienced operators earn money before they are caught, but bitcoin's audit trail works against them. Arrests often follow a purchase of crypto through a regulated exchange. The government tracks the whole chain: market, wallet, exchange, bank account, and person.

What should you do if a file of stolen fullz lands in your inbox?

Do not open the contents, test a card, or send a sample to anyone. Delete the file and note the sender. If the data came through work, tell your compliance team. If it came to your personal account, contact the US Secret Service electronic crimes task force or the FBI. Intent to use or share stolen data is already a chargeable offense.

The bottom line

When you search for how to sell CVV fullz, you are looking for a way to monetize stolen identities. The actual market is a trap filled with scammers, undercover agents, and sudden forum shutdowns. The realistic ending is a drained wallet, a federal case, or both.

There is no safe first step because the act of selling data is the crime. If you are trying to exit the fraud scene, stop now, do not send another record, and get legal advice if you have taken part in carding. The second best time to walk away is the day after it started, and the best time is today.