Short answer
There is no lawful way to sell CVV numbers. The CVV is the three or four digit code printed on a payment card. It exists to prove the card is in the buyer's hands at the moment of purchase. Selling, buying, or trading that code, along with card numbers and cardholder names, is payment card fraud under federal law and in every U.S. state. No bank, payment processor, or hosting provider will carry that business, and listings that promise bulk or "fresh" CVV data are usually stolen records or an advance fee scam. If your goal is to run a store that sells greeting cards and gifts, the workable path is to sell your own goods and let a licensed processor handle the card code.
Why a CVV cannot be a product
- The code is issued by the cardholder's bank and tied to that account. It is not the property of whoever is holding the plastic.
- PCI DSS forbids merchants from storing the CVV after a transaction authorizes. Even a compliant shop cannot keep a stock of them.
- Card networks flag accounts that touch raw card data, so processors shut them down and report them.
- Penalties include restitution, fines, and prison time, and the loss falls on real cardholders and small shops.
How to sell greeting cards and gifts lawfully online
- Choose a product line you can source, such as boxed greeting cards, gift wrap, or personalized keepsakes.
- Register the business and get any resale permit your state requires for tax collection.
- Apply for a merchant account with a processor that supports card-not-present sales.
- Build the storefront on a hosted platform so the payment page is served by the processor.
- Let the processor's checkout collect the card number, expiry, and CVV inside its own fields. Never copy those fields into your site.
- Set the order confirmation to show only the last four digits of the card and the approval code.
- Ship the order and store the receipt for the retention period your processor and tax authority specify.
- Delete or mask any card data you receive, and confirm in writing that your staff and tools do the same.
How to handle a request for card data
If a buyer, a "partner", or a message in your inbox asks you to supply CVV numbers, decline, keep the message, and report it to the Internet Crime Complaint Center. Do not test a card on your own terminal to check it. If a customer asks why they must re-enter the code on a repeat order, explain that the code is never stored, which is what protects their account.
Build the shop, not the data trade
A greeting card and gift business earns money from products people want to send. That model needs a clean payment setup, clear shipping terms, and records you can show an auditor. A CVV trade has no supplier you can verify, no processor, and no exit.