Short answer

Selling CVV data, including card numbers paired with PayPal accounts, is a federal crime in the United States. There is no legal marketplace for it, no licensing path, and no legitimate vendor role. A CVV is an access device under federal law, and trading it is treated the same as trading stolen account credentials. Anyone searching for a place to buy or sell these numbers is looking at prosecution, not commerce. What follows is what the law covers and how merchants detect the fraud these numbers enable.

sell cvv online for paypal v8

What the law covers

US code 18 U.S.C. 1029 criminalizes the production, sale, transfer, and possession of access devices with intent to defraud. A card verification value, a full card number, and a PayPal login all qualify when they belong to someone else and are used without permission. Penalties scale with the number of devices and the dollar amount of the scheme, reaching felony territory quickly.

sell cvv online for paypal v3

Why PayPal is a frequent target

PayPal accounts hold balances, link to bank accounts, and move money in seconds. That speed is exactly why stolen card data gets tested against payment platforms first. Fraudsters run small charges to confirm a card works before draining it, which is why a one-dollar charge you do not recognize is worth a phone call to your issuer.

sell cvv online for paypal v6

Warning signs of card-not-present fraud

• Orders that ship to an address far from the billing address on the first purchase.
• Multiple cards attempted from one device or IP address in a short window.
• Rush shipping chosen on high-value items with no account history.
• Email addresses that are newly created or follow an obvious throwaway pattern.

How merchants reduce CVV-based fraud

1. Require the CVV on every transaction and decline the sale when it fails, even if the issuer approves.
2. Run address verification and hold orders that fail a street or ZIP match.
3. Flag any account that tries three or more cards within a single session.
4. Add 3-D Secure authentication for orders above your average ticket size.
5. Review first-time buyers manually until they complete a second clean order.
6. Never store the CVV after authorization. Retention is a compliance violation and a breach liability.

If your card or account is involved

Call the issuer and freeze the card, change your PayPal password, and turn on two-factor authentication. Report the incident to the FTC at IdentityTheft.gov and file a complaint with the FBI Internet Crime Complaint Center. Merchants should preserve order logs, device fingerprints, and shipping records, because chargeback disputes are decided on that evidence.

read more