The short answer, before the details

There is no legitimate website or Telegram channel where you can buy a CVV, and there never will be. A CVV is tied to a real person's card account. Buying one means buying stolen financial data, and in the US that is access device fraud under 18 U.S.C. § 1029, plus whatever your state adds on top. I look at these searches the way I look at someone typing "where to buy a stolen bike." The listings exist, but every one of them is either a crime or a con, and usually both.

If you are reading this because you are curious, or because you already got taken, the rest of this page is for you. If you were hoping for a vendor list, there is not one here and there should not be one anywhere.

What the Telegram "shops" actually sell

Most channels that advertise card data follow the same script. The screenshots of a checkout page with a fake name and a balance are staged. The vouch messages come from accounts the operator controls. The "free sample" is a card number from a breach that is years old and already blocked. The escrow bot is run by the same person who runs the shop, so the escrow only protects the seller.

The business model is simple. You pay in crypto because crypto has no chargeback. The operator keeps the money whether or not the card works, and the card almost never works. A number sold for a few dollars has usually been sold to several other buyers first, which is exactly why it gets declined or flagged the moment it is used.

Red flags that show up in every one of these channels

• Payment only in Bitcoin, USDT, or gift card codes, with no refund path.
• A minimum top-up before you can "browse the shop."
• An escrow or middleman account that the admin recommends.
• Time pressure: a price change, a closing sale, a channel about to go private.
• Reviews hosted only inside the same channel, under the same admin.
• A sudden migration to a new channel after a "ban," which is how the old one disappears with your deposit.

Any one of those is enough to walk away. Seeing three together is not a shop. It is a script.

If your own card is the one at risk

That is the part worth spending your time on. Freeze the card in your banking app the moment a charge looks wrong, then dispute it. US cardholders have strong dispute rights for unauthorized transactions, and issuers would rather reverse a charge than argue about it. Report the fraud to the FTC and to the FBI's IC3 so it lands in a database that investigators actually use.

Then close the door behind you. Turn on transaction alerts for every charge, not just large ones. Use a virtual card number for subscriptions and unfamiliar merchants so a leak does not expose your main account. Stop saving cards in browsers and random apps. Check your statements once a week, not once a month, because small test charges usually come before the big one.

None of that is exciting, and none of it will get you a card number for five dollars. It will keep your own name off a fraud report, which is the only outcome here that is worth anything.