Is Selling CVV Online Legal? What US Law Actually Says

Our Cards

Choose from any of our gift cards to give to your loved ones

related article

giftcardimage

Where to Use?

Redeem your gift cards at any of our Merchants

related article

Where to Buy?

You can purchase a gift card from any of these locations

sell cvv online without getting scammed

ABOUT US

about

What is ONYX GiftCards?

Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.

What is a Gift Card?

Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.

How it Works?

  • Buy an Onyx Gift Card at these local stores
  • Give your gift card to friends, family, co-workers, etc.
  • The recipient can shop at our select merchants nationwide
  • Your friends, family, co-workers, etc. will present their gift card at checkout to pay for your item(s)
  • They will walk away happy with the best gift ever...the gift of Choice

Why ONYX GiftCards?

  • Save TIME. No need to run around looking for the perfect gift
  • Redeem from a variety of business island-wide. We will continue adding businesses as fast as ONYX grows.
  • ONYX Gift Cards do not expire
  • Cards are valued at convinient amounts to meet every need and occasion

Short answer

No. Selling CVV data online is illegal in the United States, and it is illegal in nearly every country you could name. A CVV is part of an access device under federal law, and selling it without the cardholder's authorization is a felony. There is no licensed marketplace, no gray-area reseller program, and no jurisdiction where a "CVV shop" is a recognized business category. When a site calls itself legal, that is marketing, not law.

What the law actually covers

The core statute is 18 U.S.C. § 1029, fraud and related activity in connection with access devices. It is not limited to hackers who steal card numbers. It covers anyone who knowingly and with intent to defraud produces, uses, or traffics in a counterfeit access device, and anyone who sells, transfers, or otherwise makes available card data they know was obtained without authorization. Buying and selling are both covered, and so is the middleman who only moves files.

Prosecutors rarely charge that count alone. A typical case stacks:

Sentencing adds up fast. Loss amounts from the cards sold get aggregated, and a long run of small sales can push the guideline range into years rather than months. Courts order restitution and forfeiture of the money and equipment tied to the operation.

Penalties at a glance

Under § 1029, a first offense generally carries up to 10 years, with up to 15 or 20 years for conduct involving factors like a prior conviction or offenses affecting financial institutions. Section 1028A adds two years that cannot be served at the same time as the other sentence. Fines can reach $250,000 per count for an individual. If the operation is charged as a conspiracy, everyone involved is exposed, including the person who only wrote listings or processed payments.

The myths that get people charged

I see the same arguments in forums and in court filings.

Why the "legal CVV shop" pitch falls apart

An authorized transfer of card data happens inside a narrow set of relationships: the cardholder consented, or the data moves between parties to a payment transaction under contract and inside a PCI DSS compliant environment. Tokenization exists so merchants never have to store or pass raw CVVs at all. Outside that, a seller cannot produce the one thing a defense would need, which is the cardholder's permission. That is why these cases usually end in a plea, and why undercover buys and processor records do most of the work for investigators.

What is legal instead

  1. Get registered as a merchant or payment facilitator with an acquiring bank.
  2. Handle card data only through a PCI DSS compliant processor or vault, using tokens instead of raw account numbers and CVVs.
  3. Sell payment services, not card data. Reselling processing, gateway access, or fraud tooling under contract is a real business.
  4. If you hold card data you were not authorized to have, delete it and report it. Keeping it creates liability with no upside.

Bottom line

Selling CVV data online is a federal felony in the US, it triggers mandatory identity theft time on top of the fraud count, and there is no legal version of that business. The only real question a court asks is whether you knew the data was unauthorized. A terms of service page does not change the answer.

Contact Us

Latest

Latest

CVV Test API Endpoint

Discover the ultimate CVV Test API Endpoint for verifying credit card details.

Read our complete guide: Should You Buy CVV From a Card Shop? The Honest Buyer's Guide