Selling CVV numbers is illegal. The CVV is the card verification value printed on a payment card, and it exists to prove the person paying has the physical card. Trading that code for money is card fraud, not a business, and it carries criminal penalties in most countries.
What a CVV actually is
A CVV, also written CVV2 or CVC2, is the short security code printed on the back of most cards, or on the front with some issuers. Payment networks use it as one check during a card not present transaction, such as an online order or a phone order. The code belongs to the cardholder and the issuing bank. It is not a product, and nobody other than the cardholder has a right to pass it on.
Why selling CVV data is illegal
Card verification values are part of the payment credential. Moving them between buyers and sellers means handling someone else's payment data without permission, which is what fraud and identity theft laws were written to stop. The risks stack up fast:
- Criminal exposure. Card fraud, unauthorised access to payment data and identity theft are offences in the United States, the United Kingdom, the European Union and most other markets.
- Civil liability. Banks and cardholders can pursue the people involved for the money lost, and chargeback losses usually land on whoever accepted the transaction.
- Account shutdowns. Payment processors and acquirers terminate merchant accounts when they see card data being mishandled.
- Platform bans. Hosting, marketplace and messaging services remove accounts tied to carding activity, often permanently.
What PCI DSS says about storing card verification values
The PCI Security Standards Council publishes the PCI DSS standard that governs how card data is handled. It treats the CVV as sensitive authentication data. Merchants and service providers are not allowed to keep it after a transaction is authorised, and they certainly cannot sell or share it. This is one reason so many reputable checkout pages ask for the code every time instead of saving it.
Legitimate ways to earn in a cards and gifts business
If your goal is profit from the greeting card and gift space, there are real routes that do not involve payment data at all:
- Sell physical or digital greeting cards, gift wrap, hampers and gift sets through your own store or a marketplace.
- Offer personalised card design, calligraphy or message writing as a service.
- Run a gift subscription, such as a monthly card plus small gift box.
- Print on demand for cards, mugs and framed prints.
- Bundle cards with event planning, wedding stationery or corporate gifting.
Take payments through a licensed processor so the card data handling stays with them, where it belongs.
How to protect your own card verification value
- Never share the code in a chat, email or social message, even if the request looks like it comes from your bank.
- Enter it only on checkout pages you reached by typing the address or using a saved app.
- Treat messages offering easy money for card details as a scam, because that is what they are.
- Check statements often and report unknown charges to your issuer right away.
The honest answer if you wanted to sell CVV data
There is no legal market, no safe buyer and no version of this that ends well. The people who ask for card verification values are usually running a scam on the seller as well. If you have card data that is not yours, the right move is to delete it and, where a cardholder could be at risk, report it to the issuing bank or the relevant cybercrime channel. If you want income from cards and gifts, the greeting card and gift trade rewards creativity, presentation and reliable shipping far more than it ever rewards shortcuts.