Selling CVVs is not a business, a side hustle, or a grey area. A CVV is the three or four digit verification code printed on a payment card, and it exists to prove that the person typing it is holding the physical card. Copying that code and offering it for sale is payment card fraud. In the United States it is prosecuted under 18 U.S.C. 1029 as trafficking in unauthorized access devices. There is no legal marketplace for it, no payment processor that will touch it, and no bookkeeping method that makes the income clean. The sections below explain what the term covers, what the law says about selling it, and what a greeting card or gift business can sell instead when the real goal is earning from payments.
What "CVV" means in a sales context
Card verification values come in a few forms. The CVV2 is the code on the back of most cards, the CVC is the equivalent on the front of some cards, and the CVV is the value encoded on the magnetic stripe. Any of them can be used to push a card not present transaction through a checkout page. That is exactly why they command a price in fraud forums: the buyer wants to run a purchase without the plastic in hand, and the code raises the approval rate on a stolen card number.
The phrase "want to sell CVV" usually comes from one of two places. Either someone has obtained card data through a skimmer, a breach, or a phishing page and is looking for a buyer, or someone has seen the term in a forum and assumed it describes a normal online income method. The first case is a crime in progress. The second case is a misunderstanding about how card data works.
Why there is no legitimate channel for it
Card networks prohibit storing the value
The PCI Data Security Standard treats CVV2 and CVC values as sensitive authentication data. Merchants are allowed to use them to authorize a transaction but are not permitted to store them afterward. A business that keeps those digits in a database or a spreadsheet is out of compliance even before the question of selling them comes up. Since no compliant business can hold the data, no compliant buyer can exist.
The transaction leaves a trail
Card data sales happen through channels that are themselves evidence: encrypted chat groups, marketplace accounts, crypto transfers, and file dumps. Each of those steps creates records that investigators and card issuers can pull together. The people advertising as buyers in those spaces are frequently working for, or selling to, the same investigators.
Chargebacks reverse the money
Even inside the fraud economy, a stolen card number tends to produce a chargeback within weeks. The merchant absorbs the loss, the cardholder gets credited, and the buyer walks away. Sellers who front inventory or ship goods against a card they cannot verify lose the goods and the payment.
Legal exposure for sellers
- Trafficking in unauthorized access devices is a federal offense with penalties that scale with the number of cards and the value of the transactions.
- Aggravated identity theft carries a mandatory consecutive sentence when a real person's account is used.
- Wire fraud and money laundering charges often follow the payment side of the operation.
- State laws add their own charges for possession of card data and for computer intrusion.
- Platforms, hosts, and processors terminate accounts and report activity, which builds the record for a later case.
What actually happens to people who try
The pattern is consistent. The account gets flagged, the payout gets frozen, the hosting disappears, and a subpoena arrives months later for the chat logs and wallet records. Because the offense is built on records rather than on catching someone mid act, the case can be assembled slowly and charged all at once. There is no version of this where the seller scales into a stable income and walks away clean.
Legitimate ways a card and gift shop earns from payments
If the underlying interest is money from cards, the greeting card and gift niche has real options that do not require stolen data.
- Sell your own gift cards. Closed loop gift cards carry your brand, breakage works in your favor, and customers use them to buy cards, wrapping, and candles.
- Sell digital gift cards through a compliant processor so remote buyers can send a birthday or anniversary gift the same day.
- Run a loyalty or points program tied to your own store rather than to card data.
- Offer corporate gifting accounts for offices that buy cards in bulk for clients and staff.
- Take part in a merchant referral or affiliate program run by your payment provider, which pays for signed merchants rather than for card numbers.
- Sell bundled products such as a card, a gift box, and a handwritten note service, which raises the average order value without any data handling.
If someone is asking you to sell card data
Stop the conversation. Do not send a sample, do not accept a test transfer, and do not accept "just one" as a way to check whether the buyer is real. Keep the messages, because they are useful if you report the contact. A legitimate payment company will never ask you to source or resell verification codes, and a legitimate gift business will never need them stored after checkout.
Recommendation
Use this page as a stop sign rather than a starting point. If you came here searching for a way to turn card data into income, there is no path, and the attempt becomes a federal case rather than a business. If you run a greeting card or gift shop and want more revenue from the payment side, put the effort into your own gift card program, corporate gifting accounts, and a compliant checkout with a processor that handles the data for you. That is the only version of this that survives contact with an auditor, a chargeback, or a subpoena.