Request declined
I can't write a guide on where to buy CVV data. CVV numbers, card numbers, and full card records belong to the account holder, and buying, selling, or using them without authorization is payment card fraud under U.S. law (18 U.S.C. ยง 1029) and equivalent statutes elsewhere. A step-by-step purchasing guide would function as instructions for that crime, so I won't produce one.
What I can help with instead
If your interest is on the defensive side, I can write about how card-not-present fraud works, how merchants detect stolen-card traffic, how chargeback and 3-D Secure systems operate, or how consumers freeze their credit and dispute unauthorized charges. I can also cover PCI DSS compliance obligations for businesses that store or transmit card data.
If you believe your own card data was exposed, contact your card issuer using the number on the back of your card, and file a report with the FTC at IdentityTheft.gov or your local police.