There is no legitimate buyer for CVV numbers, so the honest answer to "want to sell cvv" is that the top pick is not a marketplace at all. It is a hosted checkout service with tokenization, used by a real business such as a greeting card or gift shop. The criteria that matter are simple: whether your business ever touches raw card data, whether you stay inside PCI scope without storing verification codes, and whether you get dispute tools you can actually use when an order goes wrong. Everything else described as a CVV market is criminal trade, and the people who enter it lose money, accounts, or their freedom.
What a CVV actually is, and why it cannot be sold
A CVV is the three or four digit code printed on a payment card and generated by the issuing bank. It exists to prove the physical card was present at the moment of purchase. Card networks and the PCI Security Standards Council treat it as data that must never be stored after authorization, even in encrypted form. That single rule makes a retail market impossible: the code is worthless the moment the transaction settles, and holding it is itself a compliance failure for any merchant.
Selling the numbers is not a grey area. In the United States, 18 U.S.C. Section 1029 criminalizes trafficking in unauthorized access devices, and card account numbers are named in that statute. Similar provisions exist in the UK, Canada, the EU, and Australia. A person who lists CVV data for sale is not running a business, they are committing a felony with a paper trail attached to their own bank account and IP address.
Top pick: hosted checkout with tokenization
If you sell greeting cards, gift baskets, or custom printed cards, this is the structure that lets you take card payments without ever holding a CVV. The checkout page lives on the provider's domain, the card data goes straight to them, and you receive a token you can reuse for refunds or subscriptions.
- Pros: card data never lands on your server, so your PCI obligations shrink to a short self-assessment questionnaire. Recurring billing and saved cards work through tokens. Dispute evidence and fraud filters come with the account.
- Cons: per-transaction fees apply on every order. You depend on the provider's uptime during holiday peaks. New accounts with no history may see payouts held while the provider reviews chargebacks.
Best for: a card or gift shop that wants to accept orders this week without building a payment stack.
Gift cards and store credit: the legal thing people confuse with CVV resale
Gift card resale is legal in many jurisdictions and often gets mixed up with card data trading in search results. The two have nothing in common. A gift card is your own stored value, issued by a retailer, and reselling it transfers a balance you own.
- Pros: no card data involved, so no verification code ever enters the picture. Balances can be tracked in the same system you use for orders. Buyers understand them.
- Cons: resale platforms take a cut. Local consumer protection rules can require disclosures about expiry and fees. Fraudsters do target gift card balances, so you still need order checks.
Best for: shops that want a secondary revenue line from a product they already control.
If someone offers to buy card data from you
Do not respond, do not negotiate, and do not send a sample. Anyone asking you to supply CVV numbers is either running a scam against you or recruiting you into one, and the offer usually turns into an extortion attempt once you have sent anything. Report the contact to your national fraud reporting service and keep the messages. If the approach came through a marketplace or social platform, report it there as well.
What to sell instead, by use case
- You already run a greeting card business: add hosted checkout with tokenization and promote gift cards for repeat buyers.
- You want income from card designs: sell digital downloads or print-on-demand cards through a marketplace that handles payment and printing.
- You want recurring revenue around gifting: offer a monthly card subscription billed through tokens, so no raw card data is stored on your side.
- You were approached about card data: report it, block the sender, and change any passwords that were shared.
The short version
Selling CVV numbers is card fraud with a criminal statute attached, and it has no legitimate market, no escrow, and no recourse when you are cheated. Legitimate card and gift businesses make money the other way around: they move card data away from themselves, use tokens, and sell things people actually want to give as presents. If your goal is income from a small shop, the hosted checkout route is the pick, and it costs you nothing but a standard processing fee.