The short answer: nowhere
There is no legitimate place to sell a CVV. Not a marketplace, not a forum, not a channel that promises escrow and a fast payout. A CVV is the three or four digit security code on a payment card, and it exists for one reason: to prove the person typing it is holding the physical card. The moment it gets separated from that card and sold, it stops being a code and becomes stolen financial data.
If you came here looking for a buyer, the honest answer is that the listings you'll find are traps, crime scenes, or both. Most operations advertising CVV sales are run by people who take the seller's cut and vanish, or by investigators building a case.
What the CVV actually is
Visa, Mastercard and Discover print three digits on the back of the card. American Express prints four on the front. The networks call it a card verification value or card verification code. It is not written to the magnetic stripe and it is not inside the chip.
That design is the whole point. A card number can leak in a database breach. The CVV is supposed to be un-leakable, because no compliant payment system is allowed to keep it once a transaction is authorized.
Why selling one is a felony, not a grey area
In the United States, 18 U.S.C. § 1029 covers trafficking in access devices, and courts apply it to bulk card data without much hesitation. Sentences run into years, and fines stack on top of restitution to the banks. The UK Fraud Act 2006, Canada's Criminal Code, and equivalent statutes across the EU cover the same ground.
There's a second risk sellers rarely think about. Issuers and processors run their own monitoring. When a ring gets rolled up, the people who sold the data are often identified first, because sellers leave records that buyers do not.
If you run a greeting card or gift shop
You take card payments, so you live under PCI DSS. The standard is blunt on this: the CVV must never be stored after authorization. Not in a database, not in a log file, not on a note by the register. Keeping it is a compliance failure, and in a breach it becomes a liability that can close a small business.
Gift cards deserve their own attention. Fraud rings favor them because they resell fast. That is why many retailers cap bulk gift card purchases and flag orders where the billing address and the shipping address do not match.
If you're a shopper watching your own statement
- Look for small test charges, often a dollar or two, before a larger one follows.
- Report unauthorized charges to your issuer quickly. Credit card protections limit what you owe, but the clock matters.
- Walk away from any site that asks you to email a photo of your card or read the code aloud in a chat window. Neither is normal.
- Buy gift cards from the retailer or a store you know, not from a stranger on a resale site.
If someone approaches you about selling card data
Do not reply, and do not negotiate. Save what they sent and report it: the FBI's Internet Crime Complaint Center in the US, Action Fraud in the UK, or your bank's fraud line. That report is what turns a message into a case. It also gets your name out of the file if the ring is taken down later.