No. Selling CVV numbers, fullz, or dumps for Bitcoin is illegal in the United States and in most other countries. Card verification values and full cardholder records belong to the account holder, and trading them without authorization violates federal access device fraud and wire fraud statutes. Paying with Bitcoin does not change the charge, because the law targets the sale of stolen payment data, not the payment method.
What law makes selling CVV data illegal?
The main federal charge is 18 U.S.C. § 1029, which covers fraud and related activity in connection with access devices. A card number, a CVV, and a fullz record all qualify as access devices or as means of account access under that section.
Prosecutors often add wire fraud under 18 U.S.C. § 1343 for the online sale, and money laundering under 18 U.S.C. § 1956 when crypto proceeds move through wallets or exchanges. Each count carries its own sentence.
What are the penalties for selling CVV for Bitcoin?
- Up to 10 years in prison for a first access device fraud offense, and up to 15 or 20 years for repeat or aggravated conduct.
- Fines that can reach hundreds of thousands of dollars per count.
- Forfeiture of the cryptocurrency, devices, and any property tied to the proceeds.
- Restitution to banks and cardholders, plus civil suits from the card issuers.
Does Bitcoin make a CVV sale legal or anonymous?
No. Bitcoin is pseudonymous, not anonymous, and public blockchains let investigators follow funds from address to address. Exchanges that process the cash-out are regulated money service businesses and must file reports under the Bank Secrecy Act.
Federal agents have traced crypto payments in carding cases and used exchange records to match wallets to identities. Chain analysis firms sell that tracing capability to law enforcement and to card issuers.
Why do some sites claim selling CVV is legal?
They have no legal basis, and the claim is usually bait. Vendors who advertise a "legal" CVV market are often running an advance fee scam or reselling data that is already flagged as compromised.
Buying and selling carry the same exposure, so a buyer cannot cure the offense by trusting the seller's wording.
What card data can be handled legally?
Businesses may store and process card data for their own customers, with authorization and under PCI DSS rules. Merchants may bill their own cardholders for their own goods and services.
Researchers, journalists, and security teams can handle card data under controlled conditions with consent from the issuer or the holder. Outside those lanes, possession of fullz with intent to sell is the offense itself.
FAQ
Is selling CVV for Bitcoin legal in any US state?
No state permits it. Federal law applies nationwide, and state identity theft and computer crime statutes add more charges.
Can I sell my own card data for Bitcoin?
You may authorize use of your own card, but selling card data as a business pulls you into money transmission and fraud rules. It is not a workable loophole.
What happens if I am charged with access device fraud?
These cases usually begin with a seizure of devices and crypto accounts. Anyone facing charges should contact a criminal defense attorney before speaking with investigators.