Complete Carding Glossary 2026: Fullz, CVVs, Dumps, and Cashout Tools

[AntiCarder]

Carding’s a maze, but fullz, CVVs, dumps, and the right tools can turn you into a cashout machine. Forget the hassle of physical goods — shipping flags, address mismatches, or tracked deliveries. With the right data and setup, you can pull in as many cash as you will ever need. This guide unpacks every key carding term, their uses, and pro-level tips to dominate in 2026.

Fullz: The Master Key to Cashouts
Fullz are a carder’s goldmine — a full data package with name, address, Social Security Number (SSN), Date of Birth (DOB), driver’s license number, credit reports, credit scores, background checks, and sometimes MMN (Mother’s Maiden Name). They’re used for:

• Bank Drops: Opening accounts to stash dirty funds.
• Payment Processors
• ATOs (Account Take-Overs): Hijacking bank accounts or opening credit lines.
• Identity Theft: Filing tax returns or loans under victims’ names.

Why They Matter: Fullz are essential for bank drops — 95% of successful setups need SSN, DOB, and credit reports. A fullz can unlock huge cashouts.

Pro Tip: Use truepeoplesearch and TLO bot to find fresh unused fullz.

CVVs: Your Carding Workhorse
CVVs are full credit or debit card details — card number, expiration date, CVV code, and billing address. They power:

• Online Carding: Buying goods online (e.g., electronics, gift cards).

Dumps: Cloning the Card
CVV dumps are unauthorized copies of a credit card’s magnetic strip data (Track 1 and Track 2), used to craft fake physical cards. Sourced via:

• Skimming: Illegal card readers on ATMs/POS (80% of ATM fraud).
• Hacking: Breaching retailer networks or malware-infected POS systems.

Service Codes Decoded:

• 1xx: Worldwide, no chip, no PIN (e.g., 101 — carder’s go-to, 70% success).
• 2xx: Worldwide, chip-required, PIN optional (e.g., 201).
• 5xx/6xx: National, region-locked, chip/PIN may apply.
• 7xx: Bank-specific restrictions.
• x0x: Normal authorization. x2x/x4x: Contact bank.
• xx0: PIN required. xx1: No PIN. xx2: Goods/services, no cash. xx3: ATM only, PIN required. xx4: Cash only, no PIN.

Example Dump: 4256746500930321=1402101700102054 (101 service code, post-expiration).

Why They Matter: Dumps enable physical carding 80% success when using embossers/MSRs.
Track 1 & Track 2 Data: The Heart of Dumps

Track 1: Holds cardholder name, card number, expiration, service code, and discretionary data (e.g., %B5424181234567890^SMITH/JOHN^2605101101000000?).

• Key Fields: Card number, name, service code (101/201), CVV.
• Use: Online/in-store, supports alphabetic data.

Track 2: Leaner, with card number, expiration, service code, CVV (e.g., 5424181234567890=2605101101000000?).

• Use: ATMs, POS, online transactions.

Format Breakdown:

• Start Sentinel: % (Track 1), ; (Track 2).
• Primary Account Number (PAN): Card number (e.g., 5424181234567890).
• Separator: ^ (Track 1), = (Track 2).
• Expiration: YYMM (e.g., 2605 = May 2026).
• Service Code: 101, 201, etc.
• Discretionary Data: PIN verification, CVV2, etc.
• End Sentinel: ?.
• LRC: Longitude Redundancy Check.

Why They Matter: Tracks 1+2 drive 80% of physical carding; Track 2 alone works for online.

Skimmers, Embossers, and MSRs

• Skimmers: Devices on ATMs/POS that steal card data (80% of ATM fraud). Advanced models send data via text.
• Embossers: Stamp card numbers/names onto blank cards.
• Tippers: Add gold/silver accents to embossed cards.
• MSRs (Magnetic Stripe Readers/Writers): Write dumps onto blank/gift cards.

POS Systems
POS (Point-of-Sale) systems are where retail transactions happen — calculating totals, generating invoices, and processing payments.

• Use: Card dumps via MSRs or NFC (e.g., Apple Pay) for in-store buys.

ACH: Siphoning Funds
ACH (Automated Clearing House) is an electronic network for batch financial transactions in the US (e.g., direct deposits, vendor payments).

• Use: Move funds from phished/stolen accounts to bank drops.
• Why They Matter: ACH transfers $10,000+ in 3-5 days with 95% yield.

Payment Processors and Gateways

• Payment Processors (e.g., Stripe, Square, PayPal): Verify and settle card transactions in 2–3 seconds, connecting to card associations (Visa, Mastercard).
• Payment Gateways: Encrypt data between websites and processors (e.g., SSL, XML to ISO 8583).

How They Work:

1. Customer submits order (website or phone).
2. Gateway encrypts data, bypassing merchant systems for PCI compliance.
3. Processor forwards to card association/issuing bank.
4. Bank verifies funds, sends approval/denial (2–3 seconds).
5. Gateway relays response to merchant.

Virtual vs. Physical Carding

• Virtual Carding: Using CVVs online for digital/physical goods.
• Physical Carding: Using dumps on blank cards or NFC for in-store buys.

Cardholder, Billing, and Shipping Addresses

• Cardholder: Owner of the CVV used for fraud.
• Billing Address: Tied to the card, where bank sends statements.
• Shipping/Mailing Address: Where goods are sent (e.g., mail drop).

Why They Matter: Mismatched billing/shipping addresses flag 90% of transactions due to AVS.

AVS and Non-AVS

• AVS (Address Verification System): Checks billing address numbers (e.g., 101 Main St, 92346). Used in US/UK/Canada.
• Non-AVS: Countries like EU, SA or AU with no AVS, easier for carding (80% success).

Why They Matter: AVS flags 90% of mismatched addresses; Non-AVS cards are goldmines.

VBV, MCSC, and Amex SafeKey

• VBV (Verified by Visa): Adds password/OTP for online buys (70% of Visa cards). Non-VBV bins (414720) skip this.
• MCSC (Mastercard SecureCode): Similar to VBV, less common.
• Amex SafeKey: Rare, not in US.

NFC (Near-Field Communication)
NFC enables contactless payments via smartphones (e.g., Apple Pay).

SSN, MMN, and DOB

• SSN: 9-digit US identifier for accounts, loans, and tax fraud.
• MMN: Mother’s maiden name, key for bypassing bank security questions.
• DOB: Critical for ATOs and finding SSNs with name/hometown.

Why They Matter: SSN/DOB/MMN enable 90% of ATOs and bank drops.

Mail Drops
Mail drops are locations for receiving carded goods or drugs, avoiding your real address.

• Why They Matter: Drops reduce traceability by 200%.

BIN (Bank Identification Number)
BINs are the first 6 digits of a card, identifying the issuing bank, card type, and country.

• Use: Verify card validity, match billing geo.

Pro Tip: Check BINs on binx.cc; target Non-VBV.

Proxies, VPNs, and SOCKS5

• Proxy Servers: Mask your IP to match billing geo, dodging 80% of fraud flags.
• VPNs: Encrypt traffic, hide location.
• SOCKS5: Location-specific proxies for 90% success.
• Proxy Score: Aim for <25 (ipqs.com).

Pro Tip: Use SOCKS5 with clean proxy score for easy transactions.

Bank Drops
Bank drops are accounts opened with fullz to store illicit funds.

• Setup: Use SSN, DOB, credit reports, driving records ($100–$200).

Fraud and Risk Scores

• Fraud Score: 0–999, assessing transaction risk. >300 triggers manual review; >500 auto-declines.
  • Factors: Spending patterns, location, amount, merchant risk.
  • Example: $15 Walmart buy (low score) vs. $2,000 Newegg buy (high score).
• Risk Score: 0–100%, based on IP, email, device, proxy (MaxMind). >1% flags 70% of transactions.

MAC Address
MAC (Media Access Control) addresses are unique hardware IDs for network adapters.

• Risk: Law enforcement can trace MAC with ISP data.
• Why They Matter: Exposes your device’s location if unmasked.

RDPs and Virtual Machines

• RDPs (Remote Desktop Protocol): Connect to real PCs for legit IPs/browsers (hacked residential RDPs, $10–$50).
• Virtual Machines: Emulate systems (e.g., VirtualBox). Less secure due to host OS leaks.

OPSEC Musts for 2026

• VPN/SOCKS5: Match billing geo, proxy score <25 (ipqs.com).
• Burner Accounts: ProtonMail ($0) for emails, delete after 5–10 uses.
• RDPs

Conclusion
This might seem like a lot to take in, but don’t sweat it. The more you dive into guides like this, the clearer the carding world becomes. Keep reading, practice OPSEC, and it’ll all click — stack those profits safely.