That's mainly because online merchants typically require the CVV, criminal dumps sellers don't bundle CVVs with their dumps. Instead, online fraudsters turn to “CVV shops,” shadowy cybercrime stores that sell packages of cardholder data, including customer name, full card number, expiration, CVV2 and ZIP code
