Advanced Carding. CvvRamirez
Advanced Carding. CvvRamirez
(ADVANCED CARDING)
INFORMATION
ANY TYPE OF PLAGIARISM IN FRONT OF THIS PRIVATE GUIDE
WILL BE SEVERELY SANCTIONED.
CARDING BIBLE
PAGE 1 OF 16
INTRODUCTION / KNOWLEDGE
Virtual carding is the art of ordering products online using stolen credit
cards, also known as “CVV”, “pizza”, any other name that community
members use to disguise their intentions. While this seems easy, there are
many pitfalls that you may want to be wary of when doing this, especially as
merchants are becoming more aware of online fraud. Do you want to know
how to get free products? Let's get started! Section 1.1:
How it works: The first thing is to ask yourself, how much do you want to
pay and what do you want to pay? Then, you will have to choose one of
those 3 levels. Each level represents a level of difficulty and you will see the
prerequisites.
Level 1: Easy Card, This level is used for very easy card things, for
example restaurants and small phone orders, mostly under $50. This is the
entry point for most carders. For that, you will need:
Level 2: Intermediate Card This level is used for online transactions that are
slightly higher, such as background reports or a very small physical item.
Will need:
• Credit card number• Expiration date• CCV code• Cardholder name• Full
billing address• Sometimes the phone number on the account Here we are
talking about everything above level 2
If your goal is level 1 carding, you just need to call for pizza and order pizza
to another address, without needing to write long paragraphs on it. This is
easy and quite simple. If you're aiming for level 2, you can log background
reports or small physical items, mostly for under $150. All orders are placed
online and you will need to enter the correct billing address, shipping
address and card information. Now, you need to see if the websites say the
billing phone number registered with the bank or just the contact phone
number. If the website requests the billing phone number, you must enter
the phone number on file with the bank for the cardholder; Otherwise, it is
safe to enter your recorder's phone number (see section 2.1 of this guide).
Now, is the website going to call you? It depends on the order, their policy,
and their suspicions about you, so there is no sure answer to this question.
Remember that card making is often trial and error. When using a card to
access a website, do not access another website using the same card until
your order has been shipped. However, placing an order and getting a
charge approved is easy, but getting it shipped is often where the challenge
lies. This is where carders get most of their background reports. It's a good
playground to test your skills and will come in handy later. Now, let's move
on to level 3.
You probably saw the required information, now how to get it? First, if your
subject is under 40 years old, chances are you're out of luck. Otherwise,
read on. First, you need to get the right type of card. This is called finding
the correct BIN (Bank Identification Number). The BIN is the first 6 digits of
the card and is used to identify the type of card and the issuing bank. For
more information, go to bindb.com, at the top go to Bin Search and enter the
first 6 digits of the card. They will tell you the issuing bank and the type of
card. You have debit and credit cards, and the type of card may vary. From
the weakest to the strongest, they are: • Safe: very low limits, sometimes
around $300• Classic: low limits, sometimes around $1000• Gold: average
limits, can be around $3000• Platinum: high limits, they can be around
$8000• best, I got cards that had a credit limit of $30,000 Keep in mind that
those numbers are subject to change based on the cardholder's credit
score, history, and spending patterns. For the benefit of this guide, we will
only work with credit cards. From experience, debit cards are often
unfunded and have stricter security for online purchases. In other words,
they are garbage for Tier 3 cards, but can have other uses, such as Tier 1 or
Tier 2 purchases.
cardholder, Some banks have different criteria, but things that can affect
the fraud score are: • Comparison to the cardholder's usual spending
pattern • Location of the charge • Amount • Associated merchant risk factor
By For example, a $20 charge at the cardholder's local Walmart won't
trigger anything, but a large purchase of $2,000 at Newegg.com will have a
high fraud score and will likely be automatically declined if the cardholder
rarely makes purchases. online. So how is this relevant? A small card-
missing charge followed by a large charge will make the fraud score very
high, because they assume you are testing the card. If they see a small $1
charge, then a few minutes later a large online purchase, they will
automatically decline the card. The best way is to call the bank's toll-free
number and use the automated prompts. This does not represent any
danger; however, use Spooftel to spoof your number and show the
cardholder number. Once you do that, you're ready to call the issuing bank's
number and check how much is left on the card. Go for it. Call the bank
using your disposable phone and have the following information ready,
according to the bank. The automatic indicator will give you access to the
transaction list, balance and some other options. Here is the information for
the 4 largest banks: Chase Bank: 1-800-432-3117• Full card number• Zip
code Note: If you successfully spoofed the phone number, you will only be
asked for the last 4 digits of the card , otherwise you will be asked for the full
card number. Citibank: 1-800-627-3999• Complete card number• Last 4
digits of SSNBank of America: 1-888-421-2110• Complete card number• Zip
codeCapital One: 1-800-955-7070• card complete• Last 4 digits of SSN If,
for any bank, you enter the card number and the system immediately
transfers it to an agent without additional questions, it means that the
account is closed and the card is burned. your plan is likely to fail . There
are much better ways to check if a card works.
There is no need to waste time with this, just hang up and use another card.
The agent will just tell you the same thing and you will look like a fool. It is always
good practice to make a note of the latest transactions and amounts, in case you
are asked for them later. Listen to them and write them down, I recommend up to 8
transactions for maximum security. This way you already have the balance and the
line of credit available. Pleasant! So you know how much you can spend online.
However, before you go crazy, there's one more hurdle you should be aware of:
many sites like Newegg or TigerDirect refuse to ship to an address that isn't
registered with the bank. And most likely, your cardholder does not reside at your
destination address. This is how we will solve this problem, introducing account
takeover fraud, also known as ATO. ATO is the process where a scammer (you)
calls the bank to make the changes they want to the account, without the
cardholder knowing. This involves speaking to a customer service agent and using
social engineering. Before you even think about pressing 0 to speak to an agent,
make sure you have at least the following information on hand: • Full card number,
expiration date, CCV code • Cardholder's full billing address (and county) • Date of
Birth (and write down age too, not just DOB)• SSN• MMN (Mother Maiden Name)•
Employer Name (optional, try to find it on Facebook if possible)•••••Brand and car
model (optional, if possible, try to do a Google StreetView on CH's house) Size and
value of the house (optional, if possible, look it up on realestate.com as it is public
information) License number drive, expiration, status (optional) Previous addresses
Background report In case you don't have the MMN, try to guess using common
last names in the background report. If you really can't find it, it's sometimes
possible to get around it with other questions. Once you have this information at
hand, study it, try to remember it. Remember, you are the cardholder, the card is
yours and you trust it, just like when you call your own bank with a legitimate
request.
When you call the bank, you will usually be asked for 3 security tokens. Those
tokens can be, but are not limited to: DOB, SSN, address, CCV code, cell phone,
MMN. If 1 token fails, you will be prompted for 2 more. At this point 2 things can
happen: 1. You did it correctly, so the agent will listen to you and make any
requests you have to make on the CH account, and no flags will be raised.2. The
agent suspects that an ATO is occurring and transfers it to the security department.
This is called the Verid department and you will be asked 2 OoW (Out of Wallet)
questions. Those are multiple choice questions based on the cardholder's credit
history and public records. They can be easy or tricks, it's random every time it
happens. If you fail them, they will tell you that they can't help you and suggest that
you show up at their bank in person. They will also call the cardholder. So if you fail
this one, forget about this card, it will burn to a crisp. The first thing you need to do
on your account is change your billing phone number. That's all. Do nothing else,
as making too many changes will raise a red flag on the account. Call to change
the primary billing number and allow the card to sit still for at least 5 days. Alright,
are you ready? Relax, sit on your favorite couch, call the bank, listen to the
prompts and press 0. The message continues, this call may be recorded for quality
purposes. This is the first example, if you have the correct MMN (this is the most
frequently asked token). Agent: Thank you for calling Chase, my name is Bob, who
am I talking to? You: James R Layton.Agent: Thank you Mr Latyon, and for
security reasons, can I have the mother's maiden name on the account? You:
Lucile. Agent: Thank you, and what is your date of birth? You: October 1, 1965.
Agent: Thank you Mr. Layton, what can I do for you today? This is the second
example, if you do not have the MMN. Guess, and don't hesitate. You know
yourself better than the agent, and they can only rely on the information on their
screen to validate your answers. Agent: Thanks for calling Chase, my name is Bob,
who am I talking to? You: James R Layton. Agent: Thank you Mr. Latyon, and for
security reasons, can I have the mother's maiden name on the account? You:
Smith. Agent: Actually, I have something different here, it starts with C. You: With
C? It is impossible! Her name was Lucy Smith, she never used any other name!
Agent: Well, don't you have any other names that might start with C? (if you have a
last name that begins with C on the background report) You: My aunt's maid my
name is Charlotte, but I doubt that is the answer you have on file. (if you don't have
anything like that in the report) You: No, no one in my family uses that name.
Agent: Well let me make a note of this for you, can you confirm the last 4 digits of
your social security number? You: 4456. Agent: Thank you, and what is your date
of birth? You: October 1, 1965. Agent: And your billing address with zip code? You:
123 Fake Street, Fakeville, NY, 10008. Agent: Thank you Mr. Layton, how can I
help you today? If you hear that, it means you entered. Otherwise you will be
transferred to the security department for multiple choice questions, please have
your report in hand. If you fail, the card is dead. Be sure to forge the cardholder
number, otherwise you may be asked other questions such as driver's license
number, vehicle license plate number, etc. Those are questions you probably don't
have the answers to. Now, what you want to do is change the billing phone
number. Below is a sample dialog with the agent. You: I would like to change my
phone number. This phone will be disconnected tomorrow and I want to give you
my new main number so you can contact me if there is anything. Agent: Well, I
see, what's the number? You: 234-567-8901. Agent: Thank you, is there anything
else I can do for you? You: No, thank you. Agent: Thank you for calling Chase,
have a wonderful night. Once you get past the verification part, the rest is pretty
easy and relaxing. Now that you've changed your billing number, let the card rest
for at least 5 days. Do not make any transaction. The cardholder will also continue
to use their card as normal. During your call, at the end, if you failed the MMN
question, you may want to remind the agent to change the registered MMN to
avoid problems the next time you call. Also take note, at any time, if the agent
wants to put you on hold, or says he needs to verify something and will be back,
wait for him to call the cardholder. If this happens, you may want to wait at least 48
hours before calling again, and you will only see automatic prompts whether the
card is burned or not. Maybe they didn't call the cardholder, but in 90% of the
cases they did. It happens, especially with Citibank, who likes to replace Verid
questions with a quick ring to the cardholder. The questions often change when
you call, but they always follow a certain pattern. From experience, I will give you
the tokens that the big 4 banks usually ask for, but we are aware that they may
change, or they may ask you other questions if they think you are fake. They may
ask you for your age to confuse you, as you may not have to calculate it quickly
enough using the DOB. If you fail this verification, you will be transferred to the
Verid department. Chase Bank, level: hard• Full name• MMN (if failed, last
transaction)• Last 4 of SSNCitibank, level: medium• Full name• Password (pet
name, MMN, favorite hobby or best friend, if failed, latest 4 of SSN and CVV)•
Mailing address• Telephone numberBank of America, level: easy• Full name•
(sometimes) Verbal password, which is MMN (if failed, date of birth)• Last 4 of
SSNCapital One, level: medium• Full name• Last 4 of SSN• MMN (if failed, date of
birth and postal address)Since you have to wait 5 days, it is a good idea to create
an account on your target website, browse the articles, put some in your cart, go to
checkout, come back, delete items, read descriptions. Just try to look like a
legitimate buyer. Remember that $1000 is a lot of money for the average American
and if you show that you don't care about their money and just throw items in your
cart, you will raise flags. You seem to care how much it costs. Once you've gotten
rid of this verification process, it will be easier the next time you call the bank about
this account. So let's say you followed me and let it sit for 5 days. Please call again
and this time we will add a temporary shipping address to the account. A transcript
may go like this: (pass verification questions) You: I want to make a purchase on
Newegg.com but they ask me to add a temporary shipping address on file. I'm not
sure how that works, do I just tell them where I want my order sent? Agent: Let me
help you with that, we can add an alternate address on the account, what would
the address be? You: 123 Fraud Street, Cardingville, CA, 98765. Agent: No
problem Mr. Layton, I have written down the bill for you, is there anything else I can
help you with today? You: No, thank you Agent: Have a good afternoon. Almost all
banks allow that, except Bank of America, which can only change the mailing
address. This is why their cards are not the best when it comes to level 3 cards,
but some stores will hold a conference call with the bank to get around this
restriction. Chase works best for temporary shipping addresses, but is difficult for
ATO. It all depends on your skills and what you are comfortable with. Once you've
added the alternate address to the account, it's time to take the plunge. Take your
account on the website you want to register, shop a little again, and then proceed
to checkout. Try not to go over $2000 per order. Please enter the correct billing
address, double check the information. Enter the billing phone number (the one
you added on file at the bank), then your shipping address. Please triple check all
information for accuracy. Then submit the order. You may receive a VBV or MCSC
form, but if you have the required information, it shouldn't be a problem. Enter the
information you wish to obtain and submit the order. Additionally, some websites
like TigerDirect will ask you for your date of birth and give you 3 verification
questions to answer. Those are public records and can be easily found in your
background report, so don't panic. If you miss 1 question, you will be asked an
additional question. If you fail 2 or more, the order will be put "on hold" and things
will get more difficult, so try not to fail. At this point, 2 things can happen when you
submit the order. It depends on the cardholder's spending habits and will make
things easier or harder for them.1. The order is processed without any problem and
becomes "pending" status.2. The transaction was declined and the website says to
call the issuing bank. If this happens, call the bank, the system will act as if the
card was burned (transfer without additional questions), and a fraud agent will
respond. Remember, the card is yours, tell them you authorized the transaction,
but you don't know why it was declined.
When the agent tells you that everything is ready, resubmit the order on the
website. Call as soon as you receive the rejection, don't wait, otherwise the real
cardholder will receive a call you don't want them to receive. Very good, the order
has already been sent and the status is "pending". The next section will tell you
why some orders are canceled (newbie mistakes) and why in your case everything
should be fine. Take a deep breath and skip to the next section. Section 1.3: Why
Orders Are Canceled When a website receives an order of approximately $1000,
we understand that they are trying to protect themselves. What is the first thing a
website will do to verify the order? That's right, they will call the issuing bank and
check if the billing phone number you have entered is correct, if not, they will ask
you for it and call you. You may receive the call, or the cardholder will receive it,
depending on whether you ATO the account correctly. This is why orders are
canceled when newbies place a credit card order and expect to receive a free
iPhone from the Apple store. They are not stupid and they want to protect
themselves. However, if you took care to change the billing number on file, you will
receive the call and can confirm the order. Not so fast, a call is not just "is
everything okay?", but a verification call where I want to see if you are really the
cardholder or not. Sometimes you are asked verification questions similar to Verid
questions, but all questions are taken from public reports. They may also ask you if
you recorded the shipping address on file with the bank (hopefully you did), and
they will call the bank to verify. Also, in some rare cases, they may do a conference
call with you and the bank, but you will be asked the usual questions, meaning last
4 of SSN, date of birth, last transactions, etc. If you're a newbie and just put some
credit card information on a website in hopes of getting a free iPhone, you'll just
see the order go to Canceled status without any details and you won't even get a
call. This is why people post threads about "card not working" and get the same
responses. If you passed the verification call, the representative will tell you that
everything is fine and they will ship the order today. This are good news! At this
stage, I received 100% of my items. I never had any problems after the verification
stage. Now you may be tempted to go somewhere else; resist temptation. Your
ATO card can almost be considered a level 4 card as you own the account and can
do whatever you want, so it has high sentimental value. Wait for the order to be
shipped and the package to leave the merchant before going to another web store.
I recommend doing the card in the morning, to avoid leaving a charge on the card
for too long. You never know how often a cardholder checks their online statement.
I had cards that died within a few hours, and others lasted 3 months. Once the
package is shipped, you can send the card to another store, without needing to call
the bank, since your delivery address is already registered. Repeat until the card is
burned. Once it's burned, never show your face in the drop again. The alternate
address is on file with the bank and they may send law enforcement to this
location. A drop is like a condom, use it once, do all your business and throw it in
the trash because it gets dirty. Another verification step they can take is to send
you an email requesting scans of your Driver's License documents. These can be
easily touched up with Photoshop and templates are available everywhere. Utility
bills are also pretty easy to fake, so don't worry about this part. Do what you have
to do, but be quick. Another step you can take is to put the shipping name on the
package to a family member, for example, if the cardholder's name is James
Latyon, send the package to a Harry Layton (look for a name that is on the report
and have your date of birth, just in case) and say that you are sending the package
to your son/brother/whatever relationship you have on your report. Also, keep in
mind that no method is perfect, and the website may cancel the order simply
because they feel it is unsafe to process. Nothing is perfect, but if you ATOed the
account successfully it should be easy. Remember to stay under $2000 per order.
You never know what other tricks they may use to trap you. Always choose the
fastest shipping method. Some say it raises flags, but if you did everything else
correctly, that won't be the reason your order fails. Additionally, it greatly reduces,
there are no large windows that allow the driver to see that the house is empty.
You don't want the package to be returned to the sender for that reason. Just use
your brain to find a decent house that you think is worth sending a package to.
Typically, choose a city close to yours, but not in your neighborhood. The big day
has arrived: UPS tracking shows "Out for delivery." Yeah! Now check if the
package requires a signature. All carriers require it except UPS. For UPS, you can
see if Signature Required is written on your tracking page. Method 1: Act as if you
are not there If you do not need a signature, you can leave a note on the door, "We
are out, please leave the package here, take this as my signature" and you can
also print the order confirmation page that Show the tracking number and put it
with your note to strengthen your case. The driver makes the final decision whether
to leave the package or not, but there is usually no problem with UPS when they
do not require a signature. Sign the note, attach the order confirmation page, tape
it to the door, and wait in your car not far from the location. When the driver leaves
the location, take the package and put it in your car. Then skip method 2 and
continue reading. Method 2: Act as if you own the place The second method is
when a signature is required. You will have to meet the driver face to face.
Remember one thing, you can relax. The driver's job is not to investigate fraud, but
only to ensure that the package is received correctly. So you have to make him
believe that the package is yours, they don't care about fraud (but don't be stupid
and talk about your crime). Carry a printout of the order confirmation page, open
the tracking number on your smartphone (use VPN!) and look like you've been
waiting for it. You can wait at the drop-off point, sit on the front lawn, or do
whatever you want. However, be aware that waiting in the car when the driver sees
you getting out of the car is highly suspicious. If you choose to wait in the
warehouse while visible, remove any "for sale" or "for rent" signs and call the
bank's automated system before showing up to make sure the card is still valid and
the police are not waiting for you . Greet the driver, show the documents, sign the
cardholder's name and continue to the next section. From experience, when you
have to pay brokerage fees (such as an international package), you can call UPS
before receiving the order and ask the amount. Leave a money order at the door
and the driver will take it and drop off the package. You'll avoid receiving an
InfoNotice that way, and the driver will think you own the place. I've done it many
times and so far I haven't failed. After receiving your package, sometimes I skip
this part when I'm lazy, but you need to be very careful. Your freedom is priceless,
so take 5 more minutes to do this precaution. Drive to a nearby park or public place
and open the cardboard packaging. Look for any devices that may be tracking your
position, such as bugs, GPS devices, etc. Then destroy the shipping label (you can
burn it to be sure), discard the cardboard packaging, and now you have in your
hands a precious item that you loaded. using your ATOd card.At this point, you can
consider your carding heist a "success"! Drive home, relax, you own the bank and
the website. You can brag about it on the forums with good reason. If the card is
still valid and there was no tracking device, you can put the card back in the same
delivery until it is burned. Get everything you can out of it. Burn the card until crisp.
I remember receiving $10,000 worth of electronics on a Chase card in the same
delivery, split into 5 orders. This was a week to make money. Alright, you charged
the item, ATOed the account, got items, more items, burned that drop to a crisp
too, now the card is dead...either over the credit limit, or flagged by the cardholder.
Never show your face to that blob again and enjoy your goods! What happens
next? Read on to find out. Section 1.5: Chargebacks A recurring question on the
forums is, when the card is declared stolen and the transaction is disputed due to
fraud, who takes the hit? In the case of a card-present transaction using chip and
PIN in countries where they use that technology, the bank takes the hit when the
transaction is declared fraudulent. In all other cases, it is the unlucky trader who
takes all the loss. So if you give Newegg a card for $2000, they pay about $1600
for the merchandise they send you, and they're short money because you charged
them, so they have to make 6.
There is a 99% chance that the police will not even open an investigation into that.
However, if they report a loss of $3,000 on a card stolen in the same state and sent
to a nearby city, the police may move into action. It also depends on the volume of
complaints, the size of the loss compared to the size of the city, and whether or not
there is an obvious pattern among fraud complaints. It also depends on whether
the cardholder decides to file a complaint or not. As long as the bank gives them
their money back (which is what they do), chances are they won't care and will
forget about it. But some crazier ones may decide to file a police report for identity
theft. Again, an investigation will be opened if there is an obvious pattern. It all
depends on the city you are referring to, so remember that when you pay by card
to a website, they assume the losses in case of a return, so they want to protect
themselves. You have to be smart and ask yourself: if I were in the website owner's
shoes, how would I catch the fraudsters? Section 1.6 - Warranty Fraud A very fun
type of virtual carding is warranty fraud. I've gotten $1,000 worth of Intel CPUs and
ASUS motherboards using this trick. Many companies, especially electronics, offer
what is called "early RMA." This is a type of warranty replacement in which the
company sends you the new product first, along with a return box so that you can
return the defective item to them. Sometimes they ask for a credit card number to
ensure that you return the defective item to them. Works with Dell, Intel and ASUS,
maybe many others, but those are the ones I have experience with so far. You can
PM sellers on eBay to ask for product serial numbers, or you can simply card
aproduct and request an RMA using your serial number. Call the manufacturer, say
that their product is defective (use a diagnostic that ensures that it is really this
product that is defective, such as "the video card does not show anything on the
screen, I have tried 2 screens, but it works with other cards video", and ask if they
offer RMA upfront, most will. Use a level 2 card and have it sent to your delivery
address. If they ask you why, tell them that you are on vacation there and your
computer is broken. You just get more free stuff with a credit card than eventually,
maybe, get a chargeback, but you get the point. For Intel, they require 5 lines of
text on the CPU itself, and a credit card to hold, so you need to have the unit in
your hands for it to work. For ASUS, the serial number is enough, they require a
credit card. For Dell, it is the easiest, no credit card needed, simply order your free
item on the phone without credit card, you only need a name and an address.Feel
free to discover weaknesses in other companies.
Look up the father's marriage records. Please note that not all states/counties have
their records madepublic, so you may not find them at all; nothing happens, just do
one when you ATO the card. This way, you can scour the autoshops and select
only the cards where you can have complete information. This is my trick to get
only good cards. Of course, the best option is to find a fullz provider, but there
aren't many of them, so scale your cards the way you desire. Then, just check the
balance, study the background report, and that's it. is ready to hit big stores and
gettuff on your drop! Section 1.8 - Commercial FraudWant another (and probably
easier) way to get items shipped to your drop and tired of cardingNewegg and
TigerDirect? Alright, I'll show you another method for that. This method works best
for Canada, but is really good for the US. You can find any major supplier that only
sells to commercial customers. For computer parts, for example, you can target
ASI, Syntex, and so on. The goal is to obtain the commercial registration certificate
of a company in the city where you want to have your drop. This certificate is
usually public information and can be found in registration records depending on
the state or province in which you are located. Once you have obtained the
registration documents of a company operating in the same field of activity for
which you want to obtain items, you can now go to the supplier: apply for an
account at one of those suppliers using that document, put all the information
about the company address, but put a delivery address close to that location and
your contact telephone number. Both providers (ASI and Synnex) do not usually
call, but just in case, it is better to be sure. Opening an account usually takes
between 24 and 48 hours. "Your name" is the name of the real owner of the
company. On the credit card authorization form, enter the cardholder's name
(pizza), address, card number, expiration date, and CVC code. Let them know that
this person is an "official" of your company, such as a remote sales representative.
Once the request is approved, you are good to go and hit large quantities. The
reason is that they do not do verification when submitting orders, since they almost
never getfraudulent orders. They assume that business clients are always going to
be trustworthy, but in reality, we use someone else's business documents to trick
them into believing that you are the owner of the business. I was able to throw
away over $5,000 per order using that technique; The trader is considered low risk,
there are very few rejections, and verifications are almost non-existent. With
computer parts, extremely easy to do, you can try other commercial suppliers. Now
he's playing big, and the possibilities are endless. Make sure you never show your
face in the fall once the cardburns, as they will really try to find out what
happened.Section 1.9 - Newegg And TigerDirectAlways wanted those 2 big card
merchants to get the electronics? I'll tell you how. This is normal, difficult if you
know what you are doing and if you are good at social engineering. You need, at
least:
1)
2)
3)
4)
5)
Cardholder account ATO and billing phone number changed to your burner
Shipping address on file with the bank Complete cardholder background report
History of why you ship to that address Cardholder's local area card: restaurants,
shopping malls...And remember, mail forwarding companies are on the blacklist of
those merchants. Please do not attempt to ship to MyUS, Bongo, etc. as they will
automatically cancel the order. What American would use a UScard to send a
shipment to a shipping company to get it out of the country? None. They have a
normal shipping address. The number 5 may seem strange, but it is true. Some
people, including myself, have been asked "can you name a local restaurant near
your home?" to make sure you are the cardholder. So it's not a bad idea to
familiarize yourself with the surroundings (large shopping centers and restaurants)
in case that happens. You'll thank yourself later. So take your time to browse, look
around, read the descriptions and look like a legitimate buyer. Once you've done
that for a few days and the account is ready, submit the order, and try not to
exceed $2,000. The order will be in "waiting" status, and you will have to speak
with the verification department. I'm going to describe the procedure for
TigerDirect, but Newegg is quite similar. TigerDirect website will ask you for
directions, credit card information, then you will have to pass VBV/MCSC. Next,
they will ask you for your date of birth. Below are 3 Wallapop verification questions.
This is public information about the cardholder and can be found in the
cardholder's background report. Try to have so much information that you feel like
the cardholder is your friend. Answer all three questions and be quick. If you miss
one, you will be asked an additional question. If you miss 2 or more, forget about
your order. Once you submit everything, your order will be placed in "on hold"
status. You will need to call the verification department. The conversation usually
goes like this: Representative: Thank you for calling the TigerDirect verification
department, can I have your order number? You: 123456
Rep: Very good, what is your name? You: James LaytonRepresentative: Thank
you Mr. Latyon, please allow me to verify the order (will be on hold for about 2
minutes): Yes (wrong answer voids the order)Representative: I have not been able
to locate that person in the system. You will be offered two options. Either we ship
the order to your billing address, or you have to call your bank to add the shipping
address as an alternate address so we can ship there: I've already done that. Oh
really? Okay, let me check it. Please wait (you will be on hold while they call your
bank, sometimes they can do a three-way call). Thank you, can I call you at 123-
456-7890? (Whatever the primary billing number is) You: Thank you, please wait
(the phone will ring, pick up the call or the order will be voided). We will send your
order tonight. For example, if the cardholder's name is James Latyon, you can
send to Joseph Layton and assume he is your son, but make sure that name is on
the background report and that you have his date of birth. Next, you need to make
sure you can pick up the phone when they call the "billing" number. If you do all of
that correctly, you can go and get your parts. They don't ask for document scans,
everything is done over the phone. Section 1.10 - Stripe CashoutIf you're not really
into carding physical products, then you might want to be interested in how to
make real money with your cards. For this technique to work, you will need:1) A
bunch of level 2 cards (address not needed)2) Hat-trick program (can be
downloaded for free)3) Notepad++ program (can be downloaded for free) )4) Drop
bank account5) Full age (name, address, DOB, SSN), called "cardholder"6) Basic
computer skills First step is to check on stripe.com to see if your country is on the
list active. If not, you may want to get a bank drop in an active country, usually the
US is the easiest. The first step is to create a fake online store. This is very easy,
you can Google, for example, "usaclothes online", and jump to page 12 of the
results, to get smaller stores. Try to find a store that has a very simple design, with
about 100-200 items, avoid the big ones. Look for one that doesn't seem to use a
lot of JavaScript. Next, open HTTrack, start a new project, and mirror that website.
This will create a local copy of that website on your computer. In the best case, try
to make it less than 800 - 900 MB. Once you have a local copy of the store, see if
you can browse it, view items, etc. Of course, not the entire store will be functional,
for example, you will not be able to register, this is normal. Try viewing item
descriptions, browsing categories, and viewing as a normal user. The next step is
to open the contact page with Notepad++ and edit the contact information with the
custom name you decided to make, and the address/phone number to match the
cardholder's address and the phone. If there is a Google map, be sure to edit that
as well. This is where basic computer skills come in handy. If you have no idea
how to edit HTML, I suggest you sign up for an online course, as it can be an
invaluable skill. Look for some footers, privacy policies, and terms of use where the
old name appears and edit it. You now have your custom clothing store, which took
less than 1 hour to make, and it looks like you have a legitimate business. The next
step is to host your website. It's important that you use an anonymous host, so for
this example, we'll use bitcoinwebhosting.net. I used to have this a lot with my
scam sites. Use a Hotmail address that corresponds to your cardholder, open an
account with the hosting company and host your files there. Almost all hosting will
allow you to register a domain. They may ask for address information, so give them
your cardholder's address. Set up the account, register the domain, and host your
files for the fake store. Just upload them via FTP (if you don't know how to do it, get
basic lessons). Make sure your store is online and working, for example, let's say
your store is myfraudsite.com. Make sure myfraudsite.com displays your store and
is navigable. Next, create an email address related to this host, usually prefixed
with "Amin." In this example
Agent: No problem, I have activated it for you. When you return home, you can use
*72 again to deactivate forwarding. I thanks. Agent: Some phone companies, AT&T
for example, ask for a 4-digit PIN, but this can be easily avoided by using the date
of birth and the last 4 digits of the social security number. The good thing is that if
you are very unlucky and fail (which shouldn't happen because it's easier than
banks), the card won't burn. This is PTO, Phone Take-Over fraud. This word was
invented by me. Now you are ready to call the bank for ATO. If they decide to call
the billing number (it happens very rarely), you will answer the phone, destroying
any suspicions they have. They may block the cardholder's account, but that's not
your problem. The first dialogue (failed ATO) can be avoided if you do that first.
When your business is done, don't forget to call Verizon (or your carrier) to turn off
call forwarding. The goal is to get free stuff, not to make the cardholder lose friends
because they can't reach you, use a little compassion. If you think you'll need their
phone line for a few days, you can use Ring Central's phone system and decide
which numbers you want to receive calls from and which ones you want to blindly
transfer to the cardholder. Some websites do not require the shipping address to
be registered with the company; In those cases, you can do a PTO without doing
an ATO and put the correct billing number on the website. Answer their call,
confirm the order and restore their phone line. Use your imagination for the rest.
Chapter 2 - Protecting Yourself This chapter is about how to protect yourself when
carding online. When getting free items is fun, the police side of the operation is
less fun. You will learn techniques to ensure that you cannot be traced when you
commit online fraud. Section 2.1 - Protecting Yourself Online Let's talk about how
you can protect yourself online when placing fraudulent orders. We will talk about
your 3 best friends: VM, VPN, SOCKS. Friend 1: The VMThe VM (Virtual Machine)
is an installation of Oracle VirtualBox or VMWare, as you prefer. It's like a
computer inside your computer. Your computer is the "host machine" and your VM
is the "guest machine." On your guest machine, put everything related to the card.
Never put anything related to fraud outside of this virtual machine. Keep everything
in the same place, you don't want to leave evidence on your computer. Once your
VM is ready, create a TrueCrypt volume and put your VM files on it. Using
TrueCrypt, you ensure that your virtual machine is encrypted and that everything
related to carding "disappears" when the power is removed and you need to
decrypt the volume again to access it. So, if he breaks into your house, unplug the
computer and all the evidence is gone. You don't need to start deleting files here
and there. If they confiscate your computer for analysis, there will be nothing to
find. Your VM is totally invisible and is only accessed when you want to upload
something. Now that your physical computer is protected, you'll need to think about
hiding your identity online. If you don't know much about VirtualBox and TrueCrypt,
you should research them, they also have many uses outside of the carding world.
Friend 2: The VPN. VPN is the way you can use to hide your identity online and
appear anonymous. Route all traffic from your computer to a VPN server that hides
your identity and forwards traffic to the desired site. I personally use PureVPN, but
you are free to choose any provider, but read their privacy policy to make sure they
keep no logs. If you don't use a VPN, your IP address will be visible. The police just
have to call your ISP and get your IP information, and you're trapped. Therefore,
using a VPN is crucial for anything sensitive online. Once you think your VPN is
properly connected, you can type "what's my ip" into Google to find your location.
Make sure the location is the one advertised by the VPN server, and not your
actual location. With the VPN, you are anonymous, so everything you do is hidden.
The only problem is that the merchants know it too. Although they cannot know
who you are when you browse their website, they can see that you use an
anonymity service and therefore it is more likely that your order is fraudulent. Many
major merchants keep a list of known VPN servers and flag orders coming from
those addresses. So our next friend will solve that problem. Friend 3: The SOCKS,
We are not talking about underwear, but a Socks 5 proxy. What's that? What does
it consist of? Very easy. To ensure that you appear legitimate to the merchant, you
have to become the cardholder. If you go to vip72.org, you can buy socks from
many cities around the world. If you choose a sock from the cardholder's city, you
may appear to be from that city when you make the purchase and therefore have a
better chance of success. When you install the VIP72 software, you will be able to
choose from a wide variety of socks by city and those that are not blacklisted as
they are not public anonymity services. It's like using someone else's computer (in
that city) to make purchases. This way you really appear as the cardholder and
eliminate all problems.
Use SOCKS over your VPN for maximum security (in case the SOCKS proxy is
compromised) and you will not be able to be tracked. Combining that with your
encrypted VM, you ensure a rock-solid setup with no chance of being tracked.
Once you pick up your item at the drop and drop off, it's gone forever, there is no
way to get it back to you. Success! I see a question that comes up often on forums,
how do we chain socks and Tor? Simple. First, don't use Tor. Use any browser like
Google Chrome. Here's how we use the full setup.1) Get a VPN (like PureVPN)
from the US (Vip72 likes to hang up when using a non-US VPNlocation, so don't
take any risks).2) Connect the VPN, open VIP72 program.3) Log in, select the
country, state, city, then double click on your desired proxy.4) When the proxy is in
the selected list, open Proxifier.5) In settings From your browser's proxy, select
"use system settings".6) Google "what is my IP" and make sure it appears in the
desired city. If "what is my ip" shows the desired city, and your VPN is connected,
you are invisible now and youcan card what your heart desires. Don't skip the VPN,
you never know if your socks are going to give away your location. Prevention is
better than cure. Another way LE can catch you is by your username. In TCF and
Evolution Market, some LE officers have accounts and are looking for "big fish" to
catch. One of the measures LE takes is to Google your username and find
transparent websites that you might be registered with, in order to have a starting
path for your research, so you should use a different username of its operations on
the transparent network. This is not the way to get caught, but it will serve as
additional evidence if you are ever convicted of that crime.
This section is about how to call banks safely and avoid being tracked. If you use
your home phone for that, you're sure to get caught. The first step is to register an
account with RingCentral (you can do this with a level 2 card) where you will
purchase the phone numbers necessary to impersonate all of your cardholders. Go
to ringcentral.com and register an account. Next, they will ask you for a phone
number where they can reach you. You can make up an excuse like you're at work
and you'll call them when you have 2 seconds. Call them, talk to them and agree
on an office plan. You can say that you are going on vacation for a few months and
that you need an IP phone to call home for free. Once your RingCentral account is
set up, take some time to explore its interface options and learn how to register
phone numbers. You can select by state and city to register phone numbers and
point them to your face recorder. They often change their interface, so I won't go
into details here, but make sure that all the "burned" numbers will ring on your
disposable mobile. As an alternative to this, you can get a desk phone, configure
the SIP information on it, configure port forwarding on your router, and, if your
router supports it, select VPN in the WAN connection type, so that you have a
protected desk phone that can be on 24/7. A disposable mobile phone works, but
since there is no VPN option for calls, it can be a bit dangerous. You can always
get prepaid SIM cards with a fake name for your phone, but since the phone's IMEI
can be flagged, we recommend that you get a cheap $10 phone and throw it away
after every big robbery. If you choose the desk phone, you don't need to throw
anything away, since the location can never be tracked by any means if your router
uses a VPN connection. This is the option that I use personally. Just make sure
you are available to receive the confirmation call from the trader, as a missed
confirmation call is often synonymous with failure. Many Polycom, Nokia, Aaastra
or Cisco phones serve as disposable desk phones as they also have legitimate
uses. You can also have a legitimate line and a fraud line if your phone supports 2
SIP lines, which most models do. Every time a card burns, I exchange it on
RingCentral, and I have yet to see an account canceled due to chargebacks. So far
everything is going well, and it's been months. Spotter only accepts bitcoins as
payment, but they are pretty cheap, only $0.10 per minute to any number, and they
don't block numbers for anything. Spoofcard accepts credit cards for payment (you
can card them with a level 2 card), but often, calls cut off after 30 seconds for no
reason, for all kinds of reasons, so stay away from them and I use Spoofteleven if I
have to shell out some bitcoins. Be careful, as LE can subpoena any of those 2
companies to reveal the number you used to make thespoofed call, so don't use
your real phone to make the conversation as there is a way to trace it. Use your
combination burner with Spotter for maximum safety. Section 2... 3 - AVSAVS is
the Address Verification System, a fraud prevention system used by merchants to
ensure that the billing address is correct. Compare only the numerical part, that is,
123 characters.
The street is the same as 123 Wrong Way. Why is AVS important? Because it
causes automatic rejections on many websites if the AVS does not fully match. If
the cardholder cannot type their own address, the website will not believe for a
second that you are the real cardholder. Many sellers sell cards without AVS. This
is good? Let's say you have an Amex card not Amex from Colombia (they are very
popular). People tend to use them in US online stores and put the same billing and
shipping address, hoping the card will pass AVS. And so it will be. But... a smart
fraud detection agent will see that the BIN is from Colombia. What is the chance
that someone with a Colombian card has a US billing address on file, especially
knowing that the card is not AVS? That's right, very few. Expect the order to be
canceled immediately unless the fraud agent is very stupid (they are getting
smarter and smarter these days). Don't assume you can pay with them at any store
just because they don't use address verification systems. Section 2.4 - Airline
Tickets Another common question is "how can I pay for airfare with a card?"
Although it is possible, I advise against it because it is dangerous. If you still want
to do it, I'll tell you how. If you are carding a local flight, there is usually no danger.
You must use a card from the same country as the country you are flying to. You
can enter your real name, or enter the name of the cardholder and use a fake ID. If
you decide to use your name, make sure you have evidence to support your case if
you are stopped when boarding or leaving the venue. You can say you bought the
tickets on Craigslist or a forum, but have some (fake?) proof to prove it. You'll want
to avoid any suspicion of credit card fraud in case problems arise. Prevention is
better than cure, although I have done it many times and have never had any
problems. If you use your real name, use any ID except your passport, this can
save your ass later. Use a non-governmental identification document, such as a
student ID, in many cases they accept it. Present a government ID if asked, but not
your passport. If you are going to get your license for an international flight, it is
more difficult. You have to use your real name and your passport number. Please
note that this does not make you a suspect of chargeback fraud, as they cannot
prove that you carded it yourself, as long as you have taken precautions on your
computer. Please show up at the check-in counter and do self-check-in to avoid
people as much as possible. Try to book a short flight and avoid first class flights
(they raise suspicions). Upon arrival, leave the airport as quickly as possible. If you
haven't been caught, good job! If not, then nothing, because you don't have this
guide in prison. In all cases, you should never card directly to the airline. They
have representatives waiting at the exit of the plane just to catch the fraudsters.
Third party card websites like Expedia, Chapear, etc. as they cannot move fast
enough to catch a carder. If you succeed, you will have little chance of being
caught leaving the plane. You don't want security personnel knocking on your door
at 3 in the morning to talk about fraud. If you go on a trip, card part of it, but I
assume you also have some money if you go on a trip. Use common sense: card
only outbound flights, do not card return flights unless they are very close to each
other (2-3 days maximum). If they charge you back and you are waiting for your
return flight, rest assured they will wait for you. Last but not least, have compelling
arguments if you are intercepted at the exit. As if you had bought it from someone
else. Leave no evidence of any carding. This is common sense, but it is always
good to remind our fellow carders. Section 2.5 – Glossary, This is a list of common
words used in the carding world, and many people are not sure what they mean.
These are some of them. ATO: Account Take-Over. It is when you call the bank
posing as the cardholder to carry out the operation you want on the account. CC:
Credit card. You know what it is.CH: Cardholder. The actual owner of the
card.COB: Change Of Billing. This involves changing the billing address when
carrying out an ATO. Be careful as it may result in a call to the cardholder.CVC:
Card Verification Code. Also known as CVV or CVC2, it is the 3-digit code located
on the back of the card, near the signature panel (4 digits for Amex cards).DL:
Driver's License. It is used for verification purposes.DOB: Date of birth. MCSC:
MasterCard Secure Code. Also known as MSC, it is the security mechanism that
asks verification questions during an online purchase made with MasterCard.RC:
RingCentral. Your favorite source for disposable phones.
SSN: Social Security Number. You know what it is.VBV: Verified By Visa. The
same as MCSC, but for Visa cards.