Sell CVV: meaning and legal status
CVV stands for card verification value. It is the 3-digit code printed on the back of most Visa and Mastercard cards. American Express prints a 4-digit code on the front. The code exists to prove the physical card is present during an online or phone purchase.
A "sell CVV" search returns pages that offer stolen card numbers and codes for sale. That trade is illegal in the United States and in most other countries. It is not a payment service, a retail product, or a marketing tactic. No greeting card shop, gift shop, or gift card seller sells CVV data.
What a CVV is
- Issued by the card network and the bank that holds the account.
- Printed on the card itself. It does not appear in the magnetic stripe.
- Required for card-not-present purchases. A missing or wrong code causes a decline.
Why the sale of CVV data is a crime
US law treats a card number plus its verification code as an access device. 18 U.S.C. § 1029 covers the production, sale, and transfer of access devices with intent to defraud. Convictions carry prison terms and fines. State laws add separate charges for identity theft and larceny.
Card networks enforce rules of their own. PCI DSS forbids merchants from storing the CVV or full track data after a transaction is authorized. A business that keeps those values is out of compliance and can lose the ability to accept cards.
How this touches gift and greeting card retail
Fraud in this sector looks different from card-data trafficking. Common cases involve gift cards taken from a display rack, the card number and PIN copied, and the balance drained before the buyer uses it. The FTC publishes consumer guidance on those scams. Retailers respond with tamper-evident packaging and activation at the register.
Legitimate greeting card and gift businesses earn revenue from the sale of cards, gifts, and gift card face value. They do not handle card verification values beyond passing them to a payment processor at checkout.
What to do instead
- Report a stolen card to the issuing bank the same day.
- File a report with the FTC identity theft site.
- Contact local police if a physical card or gift card was taken.
- Do not respond to offers to buy or sell card data.
Anyone who receives an offer to sell CVV data should treat it as a solicitation to commit a crime.