Once a carder gets hold of the necessary data from a given card, they can sell cvv to the interested party for a fair price regulated by the offer and demand law on the underground economical market of the dark web or not so dark, because today there exist many websites that support this type of trade, which can be reached out through a simple google browser search.
Usually you can buy cc fullz online on any of the available current websites that offer carding services and market platform for data such as cvv, dumps, bins and so on. When buying fullz we are actually waiting for them to be an all inclusive information about the card holder, so when we are shopping at an online store we can easily prove that we are the real card holder.
When you are making any purchases in a e-commerce, basically every single shop will ask their buyer to provide the cvv2, which is the three digit number at the back of any credit or debit card. The thing is that cybercriminals can buy this and any other information on the websites that can be comfortable found in a common browser just by typing cvv, dumps, fullz, cvv2 shop.