Carding with brute PayPal accounts

Carder

Professional
Messages
2,619
Reaction score
1,926
Points
113
Let's start with the basics and general information
What is brute PayPal accounts, these are accounts received after checking
email databases : a password with complex checker software. These softwares like to break or not withstand PayPal updates, new captchas and other things. Sometimes they are
restored in a day, sometimes longer.
For understanding, let's imagine these accounts as any taxi service. where you can link a credit card as a payment method. The principle is the same here.
The following can be attached to the PP: CC (credit card), BA (bank account), in different quantities.

Most of the PP accounts come with a zero balance, that is, they are debited from the CC or BA. Just like in any other service where the card is linked.
By country: I prefer Germany, but most of them work in England, as there are the most stingy. They work with the USA less often, since there we need to select an IP for the state of the account.
On the sum of hammering: Depends entirely on the Holder and its solvency for what amount he shopitsya and public stores, etc.
are driven best Monday through Thursday night and early morning time, I hit them with 2 nights before 7 in the morning, firstly, they are unlikely to immediately notice the alerts, in the morning there will be not only a letter of payment, but also a bunch of other notifications to the mail, whether it is banal to Instagram or other letters to the mail, and even in the morning when going to school / work, the holder has no time to check mail, I think, if you also flood mail.
With a spam program, the probability of order cancellation is minimal, after I stopped hitting during the day and started hitting only at night / in the morning, the percentage of order cancellations significantly decreased.

Why Mon-Thu I think it's understandable, if you hit on Friday, then most stores will deliver only on Monday, the holder will have more time to notice a fraudulent transaction. Also, in the middle, they do not accept packages on weekends.
Well, in general, you can work at any time, these are just recommendations received thanks to many months of tests.
Best of all, according to the method presented below, things and electronics costing up to 200 euros are best suited, it happens that 1000 comes in, but for this we you need to get caught an account with very large transactions. For larger purchases, we have other destinations such as ebay and private keeper.
First, let's figure out what a brute account looks like, the type of log may differ depending on the checker:

Code:
Login details - marco.gudella@web.de: mellon83
Holder name - Marco Gudella
Address - Poststrabe 19 27442 GNARRENBURG
Account type - PREMIER
Primary e-mail: marco.gudella@web.deStandard)
Limited: False
Country - DE
State -
Phone - 017644610916
City - Gnarrenburg
Zip - 27442
Confirmation - Unconfirmed
Balance - 0,00EUR
Card - master_card | x-1284 | 02/2020
Bank - Raiffeisenbank
Transactions:
129.00EUR - eBay - GS Goodstore Germany GmbH
12.00EUR - Zalando SE
9.99EUR - Spotify Limited
146.90EUR - Zalando SE
17.84EUR - CHECK24 Vergleichsportal Shopping GmbH
20,85EUR - BEST FOR DOGS ... UND FEINES F? R DIE KATZE
9.99EUR - Spotify Limited
7.25EUR - Fotoservice
9.99EUR - Spotify Limited
Proxy (SOCKS4) - 217.23.1.87:14250

By transactions, we can immediately, without entering the account, determine where our cardholder is purchased and how much we can approximately count on, of course, if he only rides a taxi or orders pizza and almost never buys in stores, this is bad. We need accounts with large transactions and preferably in shops, Ebay does not count.
We need accounts with fresh transactions, ideally so that cardholder buys something in the last 2 weeks, then it gives the best. The account may have a balance, but such accounts sell much more expensive, yes, it gives better from the balance, but no one guarantees that it will give 100%. Like most of your colleagues, I work with "zeroes", with those accounts where the debiting will go from the card or BA. Same way.
It is desirable that the accounts be in the same country where the address is in the middle / stingy, firstly, this is the delivery speed, within the country it is usually 1-2 days and the parcel is less likely
to be deployed in case of cancellation. Secondly, there are not so many stores that will send a parcel from Germany to another European country, there are some, but you need to look for and test which ones will be sent and which ones will not.
Paypal has various locks and SMS requests when entering from the main page of paypal.com, in order to avoid them, we will carry out one manipulation to get into your account bypassing the entrance through the main page.
To do this, we will go through authorization in a third-party store and then we will go to drive into our shop. To do this, we need a store in which the Paypal merchant is installed, a merchant or a merchant is a payment system-intermediary between the bank and the store, there are countless of them, it is impossible to
list all of them . How to understand that a merchant PP in a store is very simple, the store must have a PayPal Express Checkout button, it looks like this:

fcfc94c4-3337-4d0a-a05f-d96ec3ad6f84.jpeg


There are a few more variations, gray. white, silver, but we are interested in yellow.
We bought accounts with fresh transactions, we chose those that are more sophisticated.
We turned on a VPN based on, connected to the Dedicated Server, immediately downloaded ccleaner free, created a small history in the browser by poking random pages on Wikipedia and go to our store for authorization, we need a store with a product for a small amount, for example I will take this site and product, here we see the coveted yellow button.

We press the yellow button, another payment window will open in front of us.
Here we are asked if we have an account or if we want to register, click Log In.

Here we are waiting for a window in which we must enter data from our paypal account, mail and password.
What scenarios await us:
First: The password did not fit, well, it happens that we cannot do anything here, we take the next account.

4d514283-c583-42a1-babb-6468dc218521.jpeg


We do not put a tick, the holder will receive a message by mail: You have chosen a device such and such, there, with such and such an IP for quick payment.

Second: midrange or security check, here we are asked to receive SMS and confirm that we are the owner of the account, such an account is sent to sleep, just sign next to
it "midpoint" and try to access it at least a day later from the same Dedicated Server, almost 100% chances are it will let you into the account, he just remembers the IP of the Dedicated Server Person, and thinks that you are yours.

8fce4e0c-1410-4d66-9fac-331fb41d4a3b.jpeg


Before the next options, we must go loading, this is already a good sign.

005f38f3-7da9-4427-8c25-4f62e6704a8c.jpeg


Third: the midrange after loading, the same as on the penultimate screen, this is not very good, we also send such an account to sleep for a day.
Fourth: The return is bad, the PP does not let the trance through, the return often leads to the blocking of the account, after the return, I strongly recommend changing the deed, but you can limit yourself to cleaning with the cleaner.

90c17a71-afd3-45d3-9742-cc056b0d5393.jpeg


Fifth: Suspicious activity or "Activity".

b0d191fd-0fea-4566-a2c9-f403ce37b922.jpeg

5bb543e6-ad80-43ea-815d-3f633cf818d4.jpeg

af39c08f-22d4-4169-8670-6daec5da4b27.jpeg


An activity without a yellow frame can pass after a few days' rest, an activity with a yellow frame cannot be dispensed with, the holder needs to take a call or upload documents.

Sixth: We are thrown to the main page. There is also nothing we can do about it. you can try to go in a day.

d6bf16d4-86f2-4358-bd32-0e622c995e7f.jpeg


Seventh: The review is what we need, accounts that will show exactly it are suitable for us, the review means that the account allows us to pay, but we do not need to pay, we achieved our goal, logged in to the account.

If we have fresh accounts and we do not use more than 5 accounts on one RDP, out of 10 reviews we will be shown about 5-6. There are days when the Paypal swears and
a lot of accounts show the count, if 4 accounts in a row showed the count, change the deadline, the PP also has "monthly" ones, usually this is the end of the month, this is due to the fact that a certain amount is allocated for fraud for each month transactions and when 50% is reached, the PP begins to "tighten the screws", the permeability is lower at such a time.
And so, we "caught" the review, now we close the payment window, open a new tab and search for PayPal in Google, click on the first link, voila, we got into the account.

72429b4a-6d92-4e11-b8c8-0f06c97d5f60.jpeg


In the account, we can also see the last transactions and stores where we bought cardholder, something in between his last transactions is exactly what we can count on. You don't need to change anything in your account. There are several points that you need to pay attention to when logging into your account.
The account may be in the limit, you will definitely understand this, a window will pop up on the right that will inform you about it. We throw away such an account.

e30e4dab-3b55-48be-8bd5-e2051d7196be.jpeg


Also, such a window can pop out if the card or bank has expired, if so, then there will be an exclamation mark next to them.

f1ba4de6-4a9b-4b3f-932d-b9158b2a38cc.jpeg


If the account does not have such symptoms, and they are extremely rare, we can safely go to drive into our store. I want to note that it gives better to the holder's stores, you can also often find good stores there for driving, so I advise you to look where your kx is purchased. Before we go shopping, we remember one thing, PayPal automatically logs out of the account after 5 minutes, and re-authorization is not desirable for us, so update the main payal every 3-4 minutes.

We go shopping, almost any store that accepts Paypal is suitable for us. In stores where we have a merchant pp, that same yellow button, we register for the data of a drop or an intermediary and buy not through the yellow button, but through a regular checkout. The yellow button automatically substitutes the holder's data and will not allow us to enter our address.

If there is no yellow button in the store, we can make a purchase as a guest, but if you register an account it will even be a plus.
You can search for stores in any convenient way, I use the usual Google search by product, there are tens of thousands of stores, more than half of them have Paypal payments. through a short test, you will find those who can safely send the goods.
We found the store we are interested in, registered an account in it to our mail in the address, we only indicate our data everywhere, whether it is the address of an intermediary, a drop or a stingy one, the data should not appear anywhere, walked around it a little, chose the product we are interested in, added to basket, chose express delivery, since it is desirable for us that the parcel was sent and delivered as quickly as possible, speed is important for us, chose PayPal from the list, checked all the data and you can pay, at first you can use the page translator, it's not scary.
While you were doing all these manipulations, I hope you did not forget to update the main item, did you? Well done!

We pay:
Here, just as when authorizing through the yellow button, familiar pages will be waiting for us:
Security check (SC), we try to reduce the amount, if the amount is nowhere less, we clean everything with a cleaner and take the next account, at this moment you will praise yourself for
what I was not too lazy to register an account in the store and you will not have to enter all the data again, and even the basket has been preserved.

df4315ef-5cc1-47a4-9264-f026deef63a4.jpeg


By analogy with the midrange, you can be thrown into your account on the main page, the actions are exactly the same as with the account. I want to note that it can be thrown into the account even if there is money on the balance of the Paypal itself, it just does not want to give us a Paypal. Not scary, cleaned up the system, took the next account.

Return: As we already know, this means that the PP considers our transaction to be potentially fraudulent and does not allow us to pay, after the retirement, it throws us out of the account and when we try to enter it again in 95% of cases we will see an activity with a yellow frame, the same thing, after which the holder needs to change the password and load the docks. Once again, I advise you to change the Dedicated Server after the return.

1f70816f-43d4-426d-ba81-c80b696f06d3.jpeg


Review: I think everything is clear, we just have to click on the payment.

3c8921bb-3d98-42b3-be2e-72610a2ca07f.jpeg


There are some stores where, after the review, you still need to confirm the purchase in the store by pressing the PLACE ORDER button or its like, sometimes in such stores an error pops out after the review, but in most cases the review is the final point of purchase.
After payment, a letter with the order number will be sent to the mail that you indicated when registering in the store, which, in turn, will receive a letter with transaction data and, if it has the application installed, a PUSH notification of the purchase, so I advise you to mercilessly spam the holder's mail with the program after the purchase for flooding, the file for downloading is on the channel, its description will be in the appendix.

If we are not noticed and the store does not cancel the purchase, then very soon another letter will come to your mail in which they will say that our parcel has been transferred to the delivery service and will give us a track number for tracking.
After sending the parcel and receiving it by the intermediary, they will notify you by mail, after that you either immediately send the parcel to your country, or wait for the rest, combine it into one and then send it, depending on the intermediary.

It is advisable to make 2 transactions per day from one account, to different shops, so as not to seem suspicious for the store after making 2 purchases in a row. In most cases, making the third transaction per day from one account, you will receive suspicious activity.

Paypal has concepts like Pending and Complete. a transaction in the panding status is located separately from the rest at the top, usually purchases made from bank accounts go there . since the bank transfer does not arrive instantly, the transaction in the pending may also have the inscription: "payment will be made when the seller completes your order", which means that the money will be debited when the store sends our purchase. Usually, a transaction goes from pending to completing in 1-3 days.
When logging into accounts, you can use ctrl + C, ctrl + V.
Between each account, we clean the paypal on one Dedicated Server with a cleaner, putting all the checkboxes in the section of our browser.

6d51ba33-73e4-4c71-ae56-e104a9ac2f61.jpeg


Steam keys, cryptocurrencies, electronic gift cards (E-gift), subscriptions to services, and so on are quite difficult to break through with brute-force, so I advise you to work with a clothing item.
Ebay does not give as well as shops, especially ebay and brute pts from Amazon Dedicated Server, for ebay it is best to work with android emulators.
You can use any mail, just not mail.ru, I register yahoo.com with real numbers, you can enter the mail from your IP.
 
Last edited by a moderator:

Manual: Carding the brute of PayPal accounts​


By the way, PayPal has been doing something incomprehensible lately. Return now at all, I think temporarily, I will also write about it.

So, to carding, we will need:
  1. Intermediary or drop.
  2. Brutus PayPal account
  3. Dedik

Intermediary service provider
Naturally, they won't send it to Russia. There are practically no such shops anymore, so you'll have to steam up a little. I work with intermediaries, but you can use drops or scoops. An intermediary can easily lock up your packages and ask for a scanned passport, or even burn you down. Therefore, you can work with a drop service. It may be more expensive, but your pack is not deployed on the first install. I work with intermediaries, and I recommend http://meest.us/ I advise you to register an intermediary for a friend. If it is designed for you, then the possibility of a visit by valiant police officers is not excluded, and you work at least with Tails, are you ready for this? Do you need it?
There were as many as 2 articles on intermediaries, I think there will be no problems, there is nothing complicated there.

Brutus PayPal accounts
Naturally, we will need material for carding. The success of the carding depends on the accounts. For example, if the accounts were brutalized with expired cheap proxies, then there is a high probability of activation or MF (I'll explain what it is later).
We are interested in brute PayPal accounts with transactions.

The best material at the moment in these 2 shops:
Never buy anything on http://just4you.top/ - the accounts are pretty fucked up. 1 Old transaction for 1 dollar and then transfer from the bank, how can such accounts be sold at all?

Dedik
There is of course an option to carding from Knox (there was an article already) or from a virtual machine, but still let's start with dedik. I carding dediks from Amazon. I tried it with homework, but I really didn't notice a big difference with Amazon.
Amazon Dedik buy here http://deda.ga with a 2-day warranty is fine. We take it naturally under the country of PP accounts.
Brutus PayPal UK - Amazon Dedik UK. I think it's clear.
As soon as we went to Dedik, we go to Whoer.net and we check your anonymity. It should ideally be 100%, but definitely not lower than 90%. If something is wrong, then click on the anonymity indicator on the site and a window will pop up where problems will be shown. But usually on Amazon dediks are always at least 90%(-10% for the time difference on Dedik).
Install CCleaner and clean the Dedik.
Now everything is ready for carding.

Working with brute-force PayPal accounts
So, we have accounts and we have already connected to Dedik. You can't log in to your account from the PayPal home page(they say there's a way to do this the other day, but more on that later). Authorization will be performed through the merchant.

This is what it looks like:
We need a shop with a PP merchant, for example https://store.clickinmoms.com/
Go in and select any product, for example https://store.clickinmoms.com/camera-keychain

Click add to cart.
a5ebae1c734046fbe07e2.png


Next, we see the yellow button:
09ac2ce7657bb9320f1a7.png

Click on it and enter your account details: username and password. Then there are different options for the outcome of events.

Negative ones:
16c96470886099ea0207a.png

Security Check. Just let your account sit for 24 hours and try again.

46c67244cf9b0491c6998.png

Activation. You are throwing out such an account. There's nothing you can do.

169874fbe1304c9e18a6a.png

Returned it.

Retreats, as I've said very often lately. Even on the stream on April 1, you could see it. Throw it away for a couple of hours and try again.

Positive ones:
7de6e1be4f9cc767fb2cb.jpg

Review.

If you see the review, then everything went great.
Then after the review:
Open a new tab and enter "PayPal" in Google search and click on the first link, you will be immediately logged in to your account. You can enter them

Carding themselves:
In shops, there may be a PP merchant with a yellow button (you saw the screen above). Don't touch the yellow button, just click proceed to checkout. Enter the name that the intermediary is registered for, specify your email address (preferably Yahoo, etc. foreign mail), specify the phone number of the holder, but change 1 digit. Enter the address of Line 1 and Line 2. If you don't see these lines, then look for the enter address manually button. Then pay for it. Again, there may be a midrange (then throw in the leg), there may be a retreat(try less amounts or throw in the leg).
You don't even need to log in to your account, you can just enter your payment details, they say it's better that way.
 
How to brute force PayPal? Let's start what is needed there - programs: Sentry MBA, ComboToEmailCombo, WorkwithText, this is where the programs end.

Files: config paper, a list of boxes with passwords in the login @ domain format; password.

Download the archive in it Sentry MBA, ComboToEmailCombo, WorkwithText, email, pass, socks, PayPal.

Unzip the archive, Open the WorkwithText program, mark the Login + Pass (Joiner) line, click on the mails window, specify the file with the mailboxes, then click on pass, specify the pass file, click on the arrow, your file will appear in the folder from which WorkwithText was launched, i.e. in the pp folder hackdays / WorkwithText / Result /

Now we launch the Sentry MBA program at the first start, you will get a pop-up window, click yes, then go to the Lists tab, then click on the Proxylist tab, now click on the icon on the right in the form of a folder and click Load Proxy File, select a file from the archive called socks, you will load proxies.

Now we click on the Wordlist tab and again on the icon with the folder select the Result file that was made in the WorkwithText program.

Now click on the Settings tab and click on General and click on the load Settings Snap Shot tab select the PayPal.

We all click on the Start button and click on the Start the Bruteforcer Engine tab!

Drag the slider in the Bots tab about 50-60.

You will see all valid accounts at the bottom of the program in the Hits tab with a green background.

Now what to do if you accidentally closed the program how to find valid accounts go to the folder with the program in it if you had valid accounts you will see the Sources folder go into it there you will have valid accounts in two txt and html formats.

Software download

kak_zarabotat_v_internete1.jpg


kak_zarabotat_v_internete2.jpg


kak_zarabotat_v_internete3.jpg


kak_zarabotat_v_internete4.jpg


kak_zarabotat_v_internete5.jpg


kak_zarabotat_v_internete6.jpg


kak_zarabotat_v_internete7.jpg


kak_zarabotat_v_internete8.jpg


kak_zarabotat_v_internete9.jpg


kak_zarabotat_v_internete10.jpg


kak_zarabotat_v_internete11.jpg


kak_zarabotat_v_internete12.jpg


kak_zarabotat_v_internete13.jpg


By the way, I forgot the archive with configs for other sites

kak_zarabotat_v_internete14.jpg


Next, how to run another config, if you have already taken the stick, then you need to delete the folder with the program, unzip it again and go through this step

Now click on the Settings tab and click on General and click on the load Settings Snap Shot tab and select the config.
 
Top