Jaysu
Banned
- Joined
- 21.09.20
- Messages
- 121
- Reaction score
- 758
- Points
- 63
The article does not in any way justify the actions of scammers and does not carry a call to action. Written for a general understanding of what is happening on the shadow side of the clothing business. Article 159 of the Criminal Code of the Russian Federation Fraud is the theft of someone else's property or the acquisition of the right to someone else's property by deception or abuse of trust
Carding is a type of fraud in which an operation is performed using a payment card or its details, not initiated or confirmed by its holder.
Garment carding is aimed at purchasing goods, gift certificates, subscriptions and services using someone else's bank details. To do this, fraudsters only need a card number, date and a three-digit code (CVC). For efficiency and country specificity, the owner's name, address and telephone number may be required. More often than not, card information is sold with all of this data. The more information the cardholder has about the cardholder, the more opportunities to withdraw funds.
Where do carders get this information from?
Information about cards and their owners is sold on special resources. They can be either open-registered or paid. Some require an invitation from a community member (Invite). Prices vary, for information ("material" - as carders call the data about the card and its owner), at a discount you can buy one unit for $ 1.5. American cards cost $ 20.
How do carders work?
First of all, set up a computer for work. Most often they use remote access servers (Dedicated servers). They choose the Dedicated Deed of the country on whose cards they are going to work. Connect a sock (SOCKS) - an ip address under the address of the card holder, set the desired time on the computer, language. A new mailbox is prepared for work (usually gmail or yahoo). Gmail asks for a phone number when registering, they can also be found on open resources.
What else do carders need to work?
We need a physical address (drop) to which the fraudster will order goods from resources. The closer the address is to the address of the cardholder, the better. Then the choice of resources for the order increases. There are sites that are sent all over the world and it may not matter where you order the goods. Each store is customized individually. One store will not send to a drop close to the address of the caldholder, but will send it to another country, the other will work only if the indices match. Scammers try to find work sites and never share them with others. This is their earnings. The more fraudulent orders pass through the store, the faster the resource owners will revise their security policy.
Stores are searched by the engine the store is running on. Shopify, Magento, WooCommerce, osCommerce, BigCommerce, Adyen. There are a lot of them. Some engines have an anti-fraud system (protection against fraudulent actions) configured for strong protection, while others do not. With experience, carders can see the engine the store is running on by looking at several pages.
What do carders order in 2021?
The times when carders polls ordered expensive equipment are over. Now it is extremely difficult to find a site with expensive laptops, phones and other equipment that will lead to a fraudulent order. But experienced carders still find and promote the store for valid (in great demand) expensive goods. They communicate with live chat support, call store numbers and chat live, invent a story and convince the store that it is true. They register a few days before placing an order and warm up the site. That is, they walk around it, choose products, read descriptions. Everything that a regular customer does on an online store website.
Most often, carders work with an illiquid (not popular) product. Highly specialized sites and new brands are a field for scammers. It's much easier to order camping gear for the same amount than an expensive laptop. It's easier to get clothes of an expensive and high-quality, but young brand, than ordering goods at a discount on major sales platforms.
What do scammers do next with the product?
After the goods have arrived at the drop's address, the scammers either send it to the buyers who pay, on average, 30% of the item's value, or send it through forwarding points (official websites that have nothing to do with fraudulent activity) to addresses to which, usually have access. They sell such a product on marketplaces (Amazon, Ebay, Avito, Yula), in trade groups of social networks, sell to friends.
Other areas of work of scammers
Carders love to buy gift certificates and sell them on forums to ordinary people or special buyers. The option is not as profitable as described above, but simple.
They buy, in principle, everything that can be bought with stolen data. Subscriptions to paid resources that ban the account when the cardholder notices the loss of funds.
Recently, a new direction was born - paying for flights and booking hotel rooms. They are also sold on forums to ordinary people. The process of canceling a fraudulent transfer takes time. You can manage to stay in an expensive hotel at someone else's expense. Fraudsters know which cards to use to maximize the withdrawal process.
Like any fraudulent way of making money, there is a risk that the fraudster will sooner or later get caught. But, unfortunately, with the development of means of protection against fraudulent transfers and ways to identify carders to call for criminal responsibility, in contrast, new ways of protection and disguise are being created.
Self-interest generates ideas. Ideas give rise to new schemes of shadow earnings. Carding is not dead. Billions of dollars are laundered in this way every year. But sooner or later, technological progress will replace this type of illegal earnings. Carding will become too risky, and profits are questionable, that a scammer will have nothing to do but look for new ways to steal money.
Carding is a type of fraud in which an operation is performed using a payment card or its details, not initiated or confirmed by its holder.
Garment carding is aimed at purchasing goods, gift certificates, subscriptions and services using someone else's bank details. To do this, fraudsters only need a card number, date and a three-digit code (CVC). For efficiency and country specificity, the owner's name, address and telephone number may be required. More often than not, card information is sold with all of this data. The more information the cardholder has about the cardholder, the more opportunities to withdraw funds.
Where do carders get this information from?
Information about cards and their owners is sold on special resources. They can be either open-registered or paid. Some require an invitation from a community member (Invite). Prices vary, for information ("material" - as carders call the data about the card and its owner), at a discount you can buy one unit for $ 1.5. American cards cost $ 20.
How do carders work?
First of all, set up a computer for work. Most often they use remote access servers (Dedicated servers). They choose the Dedicated Deed of the country on whose cards they are going to work. Connect a sock (SOCKS) - an ip address under the address of the card holder, set the desired time on the computer, language. A new mailbox is prepared for work (usually gmail or yahoo). Gmail asks for a phone number when registering, they can also be found on open resources.
What else do carders need to work?
We need a physical address (drop) to which the fraudster will order goods from resources. The closer the address is to the address of the cardholder, the better. Then the choice of resources for the order increases. There are sites that are sent all over the world and it may not matter where you order the goods. Each store is customized individually. One store will not send to a drop close to the address of the caldholder, but will send it to another country, the other will work only if the indices match. Scammers try to find work sites and never share them with others. This is their earnings. The more fraudulent orders pass through the store, the faster the resource owners will revise their security policy.
Stores are searched by the engine the store is running on. Shopify, Magento, WooCommerce, osCommerce, BigCommerce, Adyen. There are a lot of them. Some engines have an anti-fraud system (protection against fraudulent actions) configured for strong protection, while others do not. With experience, carders can see the engine the store is running on by looking at several pages.
What do carders order in 2021?
The times when carders polls ordered expensive equipment are over. Now it is extremely difficult to find a site with expensive laptops, phones and other equipment that will lead to a fraudulent order. But experienced carders still find and promote the store for valid (in great demand) expensive goods. They communicate with live chat support, call store numbers and chat live, invent a story and convince the store that it is true. They register a few days before placing an order and warm up the site. That is, they walk around it, choose products, read descriptions. Everything that a regular customer does on an online store website.
Most often, carders work with an illiquid (not popular) product. Highly specialized sites and new brands are a field for scammers. It's much easier to order camping gear for the same amount than an expensive laptop. It's easier to get clothes of an expensive and high-quality, but young brand, than ordering goods at a discount on major sales platforms.
What do scammers do next with the product?
After the goods have arrived at the drop's address, the scammers either send it to the buyers who pay, on average, 30% of the item's value, or send it through forwarding points (official websites that have nothing to do with fraudulent activity) to addresses to which, usually have access. They sell such a product on marketplaces (Amazon, Ebay, Avito, Yula), in trade groups of social networks, sell to friends.
Other areas of work of scammers
Carders love to buy gift certificates and sell them on forums to ordinary people or special buyers. The option is not as profitable as described above, but simple.
They buy, in principle, everything that can be bought with stolen data. Subscriptions to paid resources that ban the account when the cardholder notices the loss of funds.
Recently, a new direction was born - paying for flights and booking hotel rooms. They are also sold on forums to ordinary people. The process of canceling a fraudulent transfer takes time. You can manage to stay in an expensive hotel at someone else's expense. Fraudsters know which cards to use to maximize the withdrawal process.
Like any fraudulent way of making money, there is a risk that the fraudster will sooner or later get caught. But, unfortunately, with the development of means of protection against fraudulent transfers and ways to identify carders to call for criminal responsibility, in contrast, new ways of protection and disguise are being created.
Self-interest generates ideas. Ideas give rise to new schemes of shadow earnings. Carding is not dead. Billions of dollars are laundered in this way every year. But sooner or later, technological progress will replace this type of illegal earnings. Carding will become too risky, and profits are questionable, that a scammer will have nothing to do but look for new ways to steal money.