What a sell CVV website is
A "sell CVV website" is a criminal storefront. It advertises stolen card numbers and the CVV security code printed on the card. Buying, selling, or holding those numbers is fraud in the United States, the United Kingdom, the European Union, and most other jurisdictions. No legal version of this business exists.
What a CVV is
CVV stands for card verification value. Visa and Mastercard print three digits on the back of the card. American Express prints four digits on the front. The code is evidence that the buyer holds the physical card. Online merchants request it when the card is not present at checkout.
Why greeting card and gift shops see this traffic
Gift card racks attract card testing. A thief buys a stolen number, places a small order, and checks if the charge clears. Stolen numbers also convert into store credit and gift cards, which are hard to trace. A small shop with one payment terminal can absorb losses for weeks before anyone notices.
Legal status and penalties
In the United States, 18 U.S.C. § 1029 covers access devices, a category that includes card numbers. Penalties reach 10 years in prison for a first offense and 15 years for repeat offenses. The UK Fraud Act 2006 covers the same conduct. Europol coordinates cross-border cases through its European Cybercrime Centre.
How gift retailers cut the risk
- Keep PCI DSS compliance current. Never store CVV data after authorization.
- Require the CVV and the billing address ZIP code on every card-not-present order.
- Set velocity limits. Cap the number of gift cards one address can buy in a day.
- Flag many small orders from one IP address in a short window.
- Train staff to question bulk gift card buys paid by card.
What to do if you find one
Report the site to the FBI Internet Crime Complaint Center, the UK Action Fraud line, or your national cybercrime unit. Do not place a test purchase. Save the URL and any screenshots.