Where can you sell CVV fullz?
Nowhere legal. Selling CVV fullz means selling stolen payment card records, and in the United States that is a federal crime under 18 U.S.C. § 1029. Every market that trades this data operates outside the law, and sellers, buyers, and forum operators all face arrest and prison.
How to Buy CVV Fullz Online Without Scams
Search results for "where to sell CVV fullz" lead to carding forums, Telegram channels, and dark web shops. All of them are criminal operations. None of them offer a lawful way to turn a batch of card records into money.
What are CVV fullz?
"Fullz" is carding slang for a complete stolen profile of a cardholder, not just a card number. The extra fields let a buyer pass address and identity checks that a bare card number would fail.
- Card number, expiration date, and CVV or CVV2 code
- Cardholder name and billing address
- Phone number and email address
- Date of birth and, in some records, Social Security number
- Bank login credentials and account balances
One fullz record can carry enough detail to open new accounts, take over email, or file a tax return in someone else's name. That is why federal prosecutors treat fullz as identity theft material, not just card fraud.
Why there is no legitimate place to sell CVV fullz
Card data is regulated at every step. Card networks ban merchants and processors from storing CVV codes after a transaction authorizes, and PCI DSS rules require anyone who touches card numbers to meet strict security controls.
Only banks, issuers, and licensed processors may hold card data, and they hold it for their own customers. A person with a spreadsheet of fullz has no lawful buyer, no lawful broker, and no lawful exchange.
The absence of a legal market is not an accident of enforcement. It is the design of the payment system, which depends on cardholders trusting that their data stays with the parties they authorized.
What are the penalties for selling card data?
18 U.S.C. § 1029 covers trafficking in counterfeit access devices. A first offense carries up to 10 years in prison, with 15 and 20 year maximums for repeat offenses and cases that involve higher dollar amounts.
Fines for individuals reach $250,000 per count. If the records include a Social Security number or other identity data, 18 U.S.C. § 1028A adds a mandatory two year sentence that runs after the card fraud sentence.
- Card fraud conspiracy: up to 10 years
- Aggravated identity theft: 2 years, served consecutive
- Wire fraud added on top: up to 20 years
- Restitution to banks and cardholders
Each card number in a batch can count as a separate charge. A seller who moves a file of 500 records is not facing one count but hundreds.
How do investigators trace sellers?
Banks chase every chargeback, and card networks feed fraud patterns back to issuers. Those reports reach the FBI, the US Secret Service, and postal inspectors, who build cases from the money side as well as the data side.
Federal agents have taken over carding forums and used the seized membership databases to charge users years later. Crypto payments leave a trail, and undercover buyers document sales before any arrest.
Prosecutions often start small. One seized laptop or one chat log ties a seller to a count of card numbers, and every count adds to the sentence.
What should you do if someone offers to sell you fullz?
Walk away and report it. Buying even one record creates the same liability as selling, and a single "test card" charge turns you into the name on the transaction log.
- Do not send money or test any card data you receive.
- Save the messages, usernames, wallet addresses, and payment details.
- File a report with the FBI Internet Crime Complaint Center at ic3.gov.
- If your own identity is involved, report at IdentityTheft.gov.
- Contact your bank if your card data was exposed.
If your card data was sold
Act fast, because the first charges usually land within days of a batch going up for sale. Most banks reverse confirmed fraud charges once you report them.
- Freeze or cancel the affected card
- Review statements and dispute unknown charges
- Place a free credit freeze with all three credit bureaus
- Change passwords on email, banking, and shopping accounts
- File an FTC identity theft report to create a paper trail
Legitimate careers that work with card data
Fraud analyst, chargeback specialist, PCI compliance assessor, and payment security engineer roles use the same knowledge without the prison term. Banks, processors, and retailers hire for these jobs, and they pay salaries that beat the promises on a carding forum.
Bug bounty programs and authorized penetration tests are another path. You get paid for finding weaknesses in payment systems with written permission, which is the difference between a paycheck and a felony.
FAQ
Is selling CVV fullz legal in any country?
No country authorizes trafficking in stolen card data. Enforcement varies, but the act remains a crime, and US charges can reach sellers who never set foot in the country.
Can I sell my own CVV or card number?
No. Card network rules bar merchants and third parties from storing or selling CVV codes, and selling your number does not transfer the account. Anyone who buys it can run charges you are left to dispute.
Do carding forums pay sellers?
Most operate as scams on both sides. Escrow services vanish, buyers dispute, and no court will enforce a contract for stolen data.