What does "sell CVV" mean?
Selling CVV means trading stolen card numbers and the security codes that go with them. The CVV is the three-digit code on the back of most cards, or the four-digit code on the front of American Express cards. A listing that offers CVVs for sale is trading stolen financial data, which is a crime in the US, UK, EU, Canada, and most other countries.
No legitimate seller does this. Greeting card shops, gift stores, and online gift retailers take payments through banks and card networks, and they never sell customer card data. If a site offers CVVs for sale, it is a fraud operation and not a merchant.
Why is selling CVV data illegal?
A CVV belongs to the cardholder and the issuing bank. Copying it and selling it breaks laws against fraud, identity theft, and unauthorized access to computer systems. Penalties include prison time plus restitution to the banks and cardholders who lost money.
- United States: wire fraud carries up to 20 years in federal prison, and aggravated identity theft adds a mandatory two-year term on top.
- United Kingdom: fraud by false representation under the Fraud Act 2006 carries up to 10 years.
- European Union and Canada: similar terms for unauthorized card use and trafficking in payment data.
Buying is treated like selling. Possession of stolen card data can be charged as fraud or conspiracy, even if the buyer never uses the numbers.
How do real gift shops handle card security?
Honest merchants follow payment card industry rules, and those rules exist to make stolen numbers useless at checkout.
- 3-D Secure checks: the bank asks the cardholder to confirm the purchase with an app or a one-time code.
- Tokenization: the card number is swapped for a random string, so a breach exposes nothing usable.
- No CVV storage: PCI DSS bans keeping the security code after a payment is authorized.
- Address and CVV checks: mismatched details flag an order for review.
What should you do if your card details leak?
- Call the number on the back of your card and ask for a freeze or a new number.
- Report the theft at IdentityTheft.gov to get a recovery plan.
- File a complaint with the FBI's Internet Crime Complaint Center if the fraud started online.
- Dispute each charge in writing and keep a copy of the letter.
- Check your statements for the next 12 months. Small test charges come first.
Under the Fair Credit Billing Act, your liability for unauthorized credit card charges is capped at $50. Debit cards have weaker protection, which is one reason to use credit for online gift shopping.
How do you buy gifts online without handing over too much?
- Pay with a credit card, not a debit card or a bank transfer.
- Use a virtual card number from your bank when a shop is new to you.
- Check that the checkout page uses HTTPS before you type the code.
- Skip "save my card" options on small shops.
- Buy gift cards from the retailer or a known resale platform, not from a stranger on social media.
Why do fake gift shops appear around the holidays?
Card fraud rises in November and December, when shoppers buy fast and fake gift sites copy real storefronts. A cloned site takes your card number, the CVV, and your address, then sells the data on. Warning signs include prices far below retail, no phone number, and payment by bank transfer only.
Can you resell gift cards?
Yes. Unused gift cards can be resold in most countries, and that is legal because you own the balance on the card. The line is ownership: a gift card is prepaid money you bought, while a CVV gives access to someone else's credit line. One is a legal resale, the other is card fraud.
Frequently asked questions
Is selling CVV legal in any country?
No. Every country with a banking system criminalizes card fraud and the trade in stolen payment data.
Does an online gift shop need my CVV?
Yes, at checkout the shop sends the code to your bank to confirm the card is in the buyer's hands. The shop must delete it once the payment is approved.
What happens if you buy CVVs?
You can be charged with fraud, conspiracy, or possession of stolen financial data. The sentence can match what a seller receives.
What if a gift site asks for your CVV by email or chat?
Refuse and stop the order. Real merchants collect the code on a secure checkout page and never ask for it by message.
Where do you report someone selling CVVs?
Report the site to your card issuer and to the FTC at ReportFraud.ftc.gov. In the UK, Action Fraud handles the report.