I find youtube tutorial with a someone showing how to purchase something and used their own details (real credit card number, expiration date, name on card, address) Has few views (less than 100) and video is few months old.
I tried details on aws where you do not need cvv and it works.


Should I sell his details on deep web, contact the person or report it to a bank? Seems like if someone steals his money and he asks for refund, the banks are already
charging customers more to cover such expenditures https://www.normantranscript.com/news/local_news/who-pays-when-your-bank-account-is-hacked/article_37b10a38-b6e9-5170-b2b7-4e71e4dc329c.html



I can setup my own wordpress and force cvv until i find but nah. Account holder is from Pakistan.