CVV vs Fullz vs Logs - The Complete Material Guide

[Blackhatpakistan]

Material is the product. Everything downstream - checkers, checkout, cashout - depends on what kind of data is in the file. Three tiers dominate the market: CVV cards, fullz, and stealer logs. Here is exactly what each contains, what each costs, and which job each one is built for.

TIER 1 - CVV CARDS

The base unit. Minimum viable fields:

• Card number (PAN) - 16 digits for Visa/Mastercard, 15 for Amex
• Expiry - MM/YY
• CVV - 3 digits (4 for Amex)
• Sometimes: cardholder name, billing zip

CVV material is built for card-not-present online checkout. It carries no address depth, no identity, no DOB - so its ceiling is any merchant that checks CVV and zip but not full AVS. Retail gift-card loads, digital-goods checkouts, and merchants with AVS-off payment flows are where CVV-only data clears.

• Price tier: cheapest of the three - per-card cost drops steeply with batch volume and freshness
• Freshness matters most here - a 48-hour-old live card beats a week-old card every time
• Death curve: cards from any single source batch degrade over days as issuers get fraud reports

TIER 2 - FULLZ

Fullz is the complete identity record attached to a financial profile. Standard field set:

• Name, full billing address (street, city, state, zip)
• Date of birth, SSN, phone number, email
• Mother's maiden name on banking-grade sets
• Card data either attached or linked by holder reference

Fullz opens what CVV cannot: account creation with verification, WU transfers where name and address must match, banking resets, synthetic identity construction, and any flow where the merchant or counter verifies the human behind the card.

• Price tier: mid - the identity depth is what you pay for
• Source classes: breached databases, direct compromise, insider-extracted records
• Quality drivers: SSN validity, address deliverability, phone that answers - a fullz set with a dead phone is half a fullz

Fullz is the material of choice for methods where matching beats speed - remittance cashout, account funding, anything requiring ID-shaped answers.

TIER 3 - STEALER LOGS

Logs are the output of infostealer malware - a raw dump from one infected machine. This is the dominant material class of 2026. One log typically contains:

• Every saved browser password (Chromium and Firefox stores)
• Session cookies - the most valuable item in the file; a live cookie replays an authenticated session without any password or MFA
• Autofill data - names, addresses, stored card numbers
• Crypto wallet files and cached seed phrases
• System metadata - OS, locale, IP, installed software, active processes
• Screenshots and clipboard history on newer families
• App tokens: Telegram, Discord, Steam

The standard trade format is ULP - URL:Loginassword - which pairs each credential with the exact site it belongs to. Full log archives keep folder structure intact, so cookie extractors work directly against them.

• Price tier: everything from near-free aggregated dumps to premium per-device corporate logs
• Validity: fresh stealer-sourced credentials run 30-60% valid; old breach compilations sit at 0.2-2%
• MFA status: password checks fail against 2FA - the session cookie in the same log does not

Dominant families in 2026: Lumma, RedLine, StealC, Vidar, Raccoon, Atomic. Distribution runs through Telegram channels first, marketplaces like Russian Market and 2easy second - median time from infection to listing is 24-48 hours.

MATERIAL VS JOB MATRIX

Job	Material that fits
Online checkout, AVS-off merchant	CVV + zip
Gift card load / digital goods	CVV
Full-AVS merchant checkout	Fullz (address match) or log with autofill address
WU / remittance cashout	Fullz exact-match
Account takeover cashout	Log session cookie (bypasses MFA) or fullz for reset flow
PayPal / payment-app funding	Fullz for signup, log for hijack
Instant checkout with saved cards on file	Log with autofill + session cookie

QUALITY ASSESSMENT BEFORE SPEND

• Luhn check on card numbers - filters garbage rows before they touch a gateway
• Freshness stamp - hours old, not days; log harvest date beats listing date
• Checker pass on a sample slice - 20-50 rows through a real checker before committing a full batch
• Cookie expiry column on logs - a session cookie with 4 hours left is a different asset than one with 30 days
• Geo consistency - material from one country used through exits in another flags faster

The market has repriced around freshness and session validity. Old data is filler; fresh data with live cookies is where the actual value sits.

Drop your material questions in the reply - format breakdowns and field-level details get answered in full.