How to choose the right email and phone number for carding

Tomcat

Professional
Messages
2,656
Reputation
10
Reaction score
647
Points
113
Hi all. Carder is with you.
For some reason, beginners who came to hacking, carding, affiliate fraud, casinos, bookmakers or scams do not want to pay attention to such parameters as mail and phone number, but at the same time they are incredibly sensitive to browser fingerprints and IP changes.

They are obsessed with the fact that browser and IP fingerprints need to be changed, but they forget about their email and phone number. People buy some course on the same carding from an incomprehensible funny dude on a darknet forum, but he doesn't even talk about it there.

I want to start my post with the phrase: “It's not the parts of the system that work, but the system of parts.”

Remember this phrase once and for all. In the antifraud system, this saying is incredibly true. Agree, whoever is a motorist, for example, you cannot monitor only one spare part in your car and forget about the rest. Your car won't run on just one spare part. Therefore, when we try to bend the systems of large corporations, where they invest billions of dollars, from our home computers, we must use our advantage and be smarter than them. Having money is not always a sign of intelligence.

When a novice carder walks into a store and tries to drive something in, he feels something like this:
c2cacb8e3407ad577b539.png


The fact is that any antifraud system is divided into two parts:
  • FROND END (What the user sees).
  • BACK END (What the user does not see).
When we register the same account for driving in any of the stores, we only see Frond End. We can use a utility like Burp Suite, which is available in Kali Linux, and see what requests the store makes, such and such, so we can assume that it uses such and such a user ID. We'll see it. But what lies next is hidden from us in the Back End, namely logic, we will not see it. We can learn this logic only in one way - through experience.

Now let's discuss mail and mobile numbers.

Let me give you an example. A man from an Arab country writes to me and says: “I read your posts about fingerprints, but I didn't understand anything, and I'm not even interested in that. I found some small store in Europe, I'm sitting in my Arab country and driving in sex toys from stolen credit cards, and then I resell them. I go there from any VPN and, in principle, everything suits me. " At the same time, another person says: “I reviewed everything. I'm now trying to set up the system for driving, but I still have some difficulties.” But this is precisely when the Back End of different antifraud systems is different. One antifraud system has its own logic, and the other has its own Here's a simple example:
e96b3ba7f6350c5280987.png


Under the first anti-fraud system we will have, for example, a sex shop. The creators of the sex shop know that in some Arab countries their site is blocked due to the moral side of Islam. Accordingly, you will use some kind of proxy. And in principle, the antifraud system knows that the site is blocked somewhere, it knows that you are from an Arab country, despite the VPN, but it wants money, everyone wants money. And therefore it can reduce its requirements for the user. At the same time, anti-fraud system number two is an anti-fraud system, for example, payments for Covid; many countries used to issue them. A year ago, Alex and I siphoned off a decent amount of money from this topic using the leaked documents of the Ugandans. I'll tell you how it was. Uganda paid money to its citizens. For example, you are a citizen of Uganda, you went and registered on the site, and then received money in your wallet. But the security staff of this site know that scammers from other countries really want to get “help” from Uganda, that they will try in every possible way to enter this site and get this money for themselves. Therefore, in this case, the anti-fraud system on this site was strengthened; this was done to save money from scammers.

In the first case, the antifraud system wants to increase this money and says: “Whoever wants to come in, we will let you in.” At the same time, the second anti-fraud system of the Ugandan Covid assistance says: “No. We won't let you in, we will only let in those who are 100% Ugandan. The rest, everyone, go through the forest.” This is where the logic lies. I can give a huge number of such examples. The fact is that working with the anti-fraud system of the same sex shop may not work with the Uganda payment service. It seems that everything is in the same anti-fraud system, but when using different services, different levels of verification are activated. And somewhere these levels of verification are higher, somewhere these levels of verification are lower. You will not drive at the same speed in a car on the autobahn and through a plowed field. It is always necessary to adapt to the situation, this is what I am actually trying to lead you to.

The most basic anti-detect is in your head. No super program that costs a ton of money will allow you to bypass antifraud systems normally if you don't even understand how to use it.

If you have a lot of money, even if you buy yourself some Ferrari, it does not mean that you will win the race. Therefore, you need to gain experience gradually.

Let's move on to parsing mail.​

We decided to deceive some antifraud system. I'll take typing on Amazon as an example. We want to buy a product for ourselves. To do this, we need to create a new identity for the holder of the stolen credit card.

When novice carders register mail, they put only one thing into this mail - acceptance of the letter. In fact, they don't worry about anything anymore: “Well, I have mail, they'll ask for it from me when registering at the store. Send me letters.” But if you go a little deeper, mail is actually not such a simple identifier. It is not a trash bin where messages are dumped on you. At the moment, there are tens of billions of mailboxes registered in the world, while the number of real living email users barely exceeds four billion. And this number is growing every day, and it is growing much faster than the number of users of these mailboxes. A mailbox is not just a basket for letters that you don't need to read and forget about. A mailbox is like a passport:

6a47dcc0c2a324c94aa8c.png


Anyone who travels to different countries, like me, knows that a blank passport may not even include a visa. Try getting a US or UK visa with an empty passport. You will most likely be refused. Your passport is empty, you haven't traveled anywhere, so go somewhere else. Exactly the same situation and exactly the same analogy can be drawn with our mailbox. The fact is that our mailbox is also essentially our passport on the Internet.

When we register in any service, we have our IP address. We can manage it, take a proxy and change it. Can the simplest man in the street from Europe or the USA operate it? Maybe, but he doesn't need it. That is, this IP identifier was actually imposed on him. We take browser fingerprints. Can an ordinary person control them? We can do this, but the average person cannot. Because these fingerprints were actually given to him by force, just like the IP address. He didn't choose these prints for himself. But mail is not forcibly given to the user, and the phone number was not forcibly given to the user. He can choose a phone number, he can choose an operator, he can choose a beautiful number. Also, mail, you must register it yourself. You choose an email service, login, password. And so, in fact, you receive your mailbox, and then this email is the same passport for you. And when you travel to all the hot spots, subscribe to some mailing lists of porn sites, it means you were in the same “country”. If, for example, you work with cryptocurrencies and exchanges, then you were in a different “country”. Or maybe you even combined the two. Maybe you're a crypto currency wanker... It could be both... There are a lot of options. But thanks to the analysis of your passport in the form of mail, it is possible to find very interesting things about you. Let us now get to know these things in a little more detail:

8a3534ce18214bcd94d82.png


I'll go to the email checker:
73c85f7452ffea7b30bb6.png

I want to immediately debunk one of the myths. On darknet forums, very often I see such a saying that accounts must rest, and anyone who has ever visited them has 100% heard this phrase: “The account must rest and after that everything will be fine with the account, you can work. “You need to let it rest, rested." Let's check whether this is true or not.

I found @gmail in my cloud, which I bought back in March last year. I once bought it for karzh and forgot about it. Accordingly, the email has a shelf life of not even a meat, but more than a year. Surely he has already become white, fluffy and everything is ok with him.

Insert this email into the checker:
b4a3fbb8d2cb6cbdbf14e.png


What can we see? Now I will decipher for you all the valuesthat the checker gave, and then I will draw a small conclusion about whether the account is good or whether the fact that it has been lying there for a whole year is an absolutely waste of time. Let's find out.

The first item we see is Email Analysis:
c673b9f19f1523d4a4979.png


In this case, it is checked whether the given email is valid or not. Valid, that is, existing. In this case, the checker tells us that such a mailbox exists.

The following parameter is Disposable:
550edf8b13f84f7d59c40.png


This parameter shows whether our mailbox belongs to temporary services. That is, to services such as 10minutemail and so on.

First Name:
f46dedfa4158c2e2e7233.png


Name. This parameter is quite important, especially in carding. Perhaps someone thought, what’s wrong with this name, but this parameter is found in anti-fraud systems. In this case, this parameter will store the digital signature of your mail account. It’s one thing when you just created an account, and another thing when you completely filled out your data. After all, mail is your virtual face. In this case, the checker did not find the name of this account because I did not fill it out.

Generic/Role Based Account:
e3c92a797cb87629a4909.png


This means whether this account belongs to any standard roles such as @admin, @webmaster @newsletter @sales @contact and many others. This item checks that the mail is not personal. In other words, this account can be used by a large number of people. The same @contact can be used by a bunch of people for technical support.

Common Email Provider:
1afee1282354be976ec8e.png


This item means whether the mail belongs to a well-known email provider like @gmail @yahoo and so on.

Deliverability:
67403514c11fae83069fa.png


This item checks with what frequency mail is delivered to a person.

Honeypot:
53120ef528d6dacb65e2f.png


This term comes from hacking. Literally translated as a pot of honey. Essentially it is a trap for scammers. In other words, it is also called bait, duck, set-up, panama and much more. Honeypot in the mail plan is used to identify ransomware and scammers.

Spam Trap Score:
b6a1989fa5ef835ed8afe.png


Determines how susceptible our mailbox is to spam mailings.

Frequent Complainer:
ded821a3b8a9b84538fef.png


Incredibly interesting parameter. Literally translated as “frequent complaints.” This parameter is very often used in anti-fraud systems. The larger this parameter, the better. That is, the more complaints from us, the better. Each of you has probably received various types of mailings in your mailbox from stores like Eldorado, from some online cinema, online courses, and so on. And as a matter of fact, you don’t want to receive this newsletter, you delete it and file a complaint. This value is only available for legitimate users. A user who has created a mailbox for himself and does not use it in real life, then the level will always be at the false level.

Recent Abuse:
1eccf3f4a9c0c69554290.png


Incredibly important point. Checks whether there are any complaints about this email. For example, some schoolboy registered for this mailbox and entered it into Amazon. As soon as an incident investigation begins, the mailbox immediately receives the value “True”, which means that there is a complaint against it.

Fraud Score:
9e7002f9cc73cdccdf0b2.png


From 0 to 100. 0 is the best value, 100 is the worst. I haven’t used this mailbox at all, but it already has a fraud rating of 80. According to the logic of antifraud systems, if no activity has been generated from the mail, then this is the default rating. And no amount of lying down will help you with this.

Suggested Domain:
b2f11129c28e9c254b80a.png


Checks whether your mailbox is similar to emails from well-known companies or services. If it is similar, then the antifraud system considers your mail to be fraudulent.

Sanitized Email:
6ff4b23c27a0b44e1f12b.png


This item allows you to determine camouflage. Surely some of you have come across when someone uses dots and symbols in their email nickname, masquerading as well-known brands, doing scam mailings.

Data Leak:
3c8233d0152ba85d5ac1e.png


Checks this mailbox for leakage of the owner's personal data into the public domain. Made for safety. If the antifraud detects a leak, Google will ask you in a rude manner to change your data.

Well, some statistics:
986e1d8d317b61b1313f2.png


If you have ever seen such a saying on darknet forums that work from logs is better than from novoregs, then this is precisely the proof that an active mail account will always be better than a novoreg account. After all, a brand new account with zero activity already obviously has a fairly high fraud rating. And when you registered the same @gmail account, and then registered on some service, then this service will know about it even before you do anything there. Not only your IP address and browser fingerprints will be taken into account, but your mailbox will also be taken into account. In this case, your mailbox will be a static identifier that you created for yourself. It was not assigned to you, you made it yourself and your activity will determine the rating of this mailbox.

I want to show you something else. Let's go back to the checker and add another box there:
eef0c248836a592073712.png


No such box exists. You can check this by sending a letter to him. But what will our checker tell us? And he tells us that we have a valid email:
f6c4dabf89ce14933863d.png


First Name:
e448e338431f2b0cbf913.png


Fraud Score:
74a963f01fe33e5935465.png


The fact is that when you work with large email providers, be it for example @gmail, then these providers are always ready to enter into various types of cooperation with other large companies; they exchange information with each other. Accordingly, the same checker, like any other anti-fraud system, can check and obtain a lot of information about any popular account of a well-known mail service. But as soon as it comes to third-party mail, in this case mymail.report, the anti-fraud system does not have any tools or tentacles to check the user. Many of you have now said to yourself: “Awesome. In the furnace of @gmail. Why waste time on it if you can create great mailboxes with a zero fraud rating. Everything is great.” And so and not so... Let's remember the slide that I posted above:

85d3e08783514536803e3.png


One antifraud system can allow users with dirty IPs, while another will only allow users with clean ones. Exactly the same here. In this case, the Back End of the mailbox check is controlled only situationally by each anti-fraud system separately. For example, the same Amazon may have a bad attitude towards corporate accounts, but at the same time Ebay may say: “Hello, welcome, I want to work with corporations, please register, you have great mail, I want one for myself too , where are you Did they take her?"

And they will welcome you with pleasure. Therefore, regarding the choice of mailbox, I would like to tell you that here everyone needs to act situationally. In some cases, there is absolutely no need to bother with the same @gmail, you can simply buy yourself domains for $0.2 and stamp your own mail services. Some antifraud systems will accept them much better than the same @gmail. At the same time, from corporate accounts, another anti-fraud system will tell you: “Go to where you got this account . “Therefore, the most important antifraud is in your head. You must develop a strategy against the anti-fraud system you are working with.

I have highlighted the main key factors for you in a separate slide:
2fa35f775dd4a9ec76a91.png


We have already become acquainted with all these key factors and learned what factors are analyzed by antifraud systems. But what should we do with our mail if we basically need to use @gmail? To do this you need to pump it. I already know what you're thinking... You thought that you need to register a bunch of social network accounts with this email. In this case, you will be like this funny guy:

3cba17f348190d84652f4.png


Which will act exactly like you, so if you want to register all the social networks that exist in the world to your newly created email, then any anti-fraud system will immediately tell you: “Hindu detected. “Therefore, we need to move on to completely different methods. Forget about what social networks are.

Fraud rate. Suspicious activity rating.
Let's figure out how to increase the trust rating of a regular public email address in @gmail and other popular services. In this case, point number one is “Advertising”. Subscribe to various newsletters. The fact is that each mailbox is used not only to receive some letters, but it is also used for regular newsletters. Well, here is an ordinary person sitting, he is interested in receiving a newsletter about what innovations there are in Apple products. He's interested in it. He is also interested in receiving newsletters about what football matches his favorite team is playing. Or some discount promotions in some store. He wants to know. This is the most common pattern of behavior of an ordinary person in the street. Look at your main email what a huge number of mailings there are. Therefore, just by subscribing to several newsletters, you will add good potential to your mailbox. And then unsubscribe from half of these mailings, not all. They subscribed to ten newsletters, but unsubscribed from five within a couple of days.

Frequent Complainer. How often does a user unsubscribe from mailings?
In order for this item to take the value True and the anti-fraud system will think that you really keep your mailbox clean.

Applications. Use official email clients.
In fact, all mails are very passionate when they use their official applications. This will help the antifraud system understand that this user really has serious intentions of working with this mailbox, that he needs it. Because it's one thing when you just log in as a web page, and another thing when this application is already installed on your computer. That is, you didn't just do it like that.

News. Subscribe to the newsletter.
Subscribe to CNN or BBC news for example.

No social networks. No need to register on social networks.
There is no need to panic register on every social network you can imagine. On the contrary, it will play a cruel joke on you. This will be assessed as a fraudulent pattern.

Ads. Post your email publicly.
Create an ad anywhere. For example, on a dating site, about the sale of some kind of moped. Whatever comes into your head, post on some free bulletin board that you sell firewood for heating somewhere in Alaska or Arizona. And when your mailbox is checked, it will be clear that this mailbox is visible on the Internet and is active.

These are the six main factors that will allow you to reduce your scam rating from 80 to 0 in a matter of days. In fact, this may seem a little tedious, but in fact, all these subscriptions can be found just once, saved in a text document, and you no longer need to look for anything on new mailboxes, but subscribe immediately.

With checking mailboxes, I think everything is clear to you now. Let's move on to checking mobile numbers, I'll show you how to do it.​


In principle, the analogy is exactly the same. We go to the mobile number checker:
5b5431dfb8c9bdfed04f6.png


Let's enter some phone number for verification. I'll go to Google and enter a query to search for an English-language virtual service of mobile numbers for rent:
d70fa548dd9faa1aa363d.png


I'll open the first service I come across:
c23b47e32aedf10dbc47c.png


Here we have rooms for rent:
4b72668af048ccc1829ac.png


I'll copy the very first number +12175825245:
68488787642efa846a4c9.png


I'll put it in the checker:
956f9ac4d1fc0164b9567.png


Let's see what the checker tells us about this number.

Formatted:
a785f744edf5e6578bc93.png


Local Format:
31c781624e10089425487.png


Phone Analysis:
77c564518ea1f5bf44ac9.png


308bec77cd5b47a7d4320.png


Fraud Score:
9b33462d4c017bce33216.png


Recent Abuse:
b1283c8eaaa135a04e534.png


Prepaid :
1897c1ab90ffcc4e7b99f.png


8474ac4fbde3088d3826c.png


Line Type:
6fad109d33ac82ee9aaa5.png


Next we have the country, region, zip code and phone code:
374b47a91a313810337ae.png


What can we say about this phone number after verification?
It is not the parts of the system that work, but the system of parts.

And when some hacker, carder, abuser of affiliate programs, casinos, bookmakers or scammers, with a perfectly chosen IP address, with a perfectly configured operating system, with even perfect email, wants to go to some store, website or service, register there and indicate such a bad number for receiving SMS, then you yourself understand...

You know that in the Russian-speaking segment of the Internet there are a huge number of services where you pay $0.2 and receive SMS from Telegram, for example. I'll tell you this, I haven't found a single Russian-language service with good numbers. Sometimes a couple of numbers slip through, but everything else is complete slag. Surely many of you have encountered such situations that you simply do not receive SMS messages to such a number. That is, everything seems to be fine, you bought yourself a number to receive SMS, but you don't even receive SMS from some services. They don't come precisely because it shouldn't come to this number with such a fraud rating, despite the fact that this number is an IP telephony number.

I hope my post today was useful to you.
 
Last edited:

KPH

Carder
Messages
69
Reputation
1
Reaction score
105
Points
33
Hi all. Carder is with you.

They are obsessed with the fact that browser and IP fingerprints need to be changed, but they forget about their email and phone number. People buy some course on the same carding from an incomprehensible funny dude on a darknet forum, but he doesn't even talk about it there.


Remember this phrase once and for all. In the antifraud system, this saying is incredibly true. Agree, whoever is a motorist, for example, you cannot monitor only one spare part in your car and forget about the rest. Your car won't run on just one spare part. Therefore, when we try to bend the systems of large corporations, where they invest billions of dollars, from our home computers, we must use our advantage and be smarter than them. Having money is not always a sign of intelligence.

When a novice carder walks into a store and tries to drive something in, he feels something like this:
c2cacb8e3407ad577b539.png


The fact is that any antifraud system is divided into two parts:
  • FROND END (What the user sees).
  • BACK END (What the user does not see).
When we register the same account for driving in any of the stores, we only see Frond End. We can use a utility like Burp Suite, which is available in Kali Linux, and see what requests the store makes, such and such, so we can assume that it uses such and such a user ID. We'll see it. But what lies next is hidden from us in the Back End, namely logic, we will not see it. We can learn this logic only in one way - through experience.

Now let's discuss mail and mobile numbers.

Let me give you an example. A man from an Arab country writes to me and says: “I read your posts about fingerprints, but I didn't understand anything, and I'm not even interested in that. I found some small store in Europe, I'm sitting in my Arab country and driving in sex toys from stolen credit cards, and then I resell them. I go there from any VPN and, in principle, everything suits me. " At the same time, another person says: “I reviewed everything. I'm now trying to set up the system for driving, but I still have some difficulties.” But this is precisely when the Back End of different antifraud systems is different. One antifraud system has its own logic, and the other has its own Here's a simple example:
e96b3ba7f6350c5280987.png


Under the first anti-fraud system we will have, for example, a sex shop. The creators of the sex shop know that in some Arab countries their site is blocked due to the moral side of Islam. Accordingly, you will use some kind of proxy. And in principle, the antifraud system knows that the site is blocked somewhere, it knows that you are from an Arab country, despite the VPN, but it wants money, everyone wants money. And therefore it can reduce its requirements for the user. At the same time, anti-fraud system number two is an anti-fraud system, for example, payments for Covid; many countries used to issue them. A year ago, Alex and I siphoned off a decent amount of money from this topic using the leaked documents of the Ugandans. I'll tell you how it was. Uganda paid money to its citizens. For example, you are a citizen of Uganda, you went and registered on the site, and then received money in your wallet. But the security staff of this site know that scammers from other countries really want to get “help” from Uganda, that they will try in every possible way to enter this site and get this money for themselves. Therefore, in this case, the anti-fraud system on this site was strengthened; this was done to save money from scammers.

In the first case, the antifraud system wants to increase this money and says: “Whoever wants to come in, we will let you in.” At the same time, the second anti-fraud system of the Ugandan Covid assistance says: “No. We won't let you in, we will only let in those who are 100% Ugandan. The rest, everyone, go through the forest.” This is where the logic lies. I can give a huge number of such examples. The fact is that working with the anti-fraud system of the same sex shop may not work with the Uganda payment service. It seems that everything is in the same anti-fraud system, but when using different services, different levels of verification are activated. And somewhere these levels of verification are higher, somewhere these levels of verification are lower. You will not drive at the same speed in a car on the autobahn and through a plowed field. It is always necessary to adapt to the situation, this is what I am actually trying to lead you to.


If you have a lot of money, even if you buy yourself some Ferrari, it does not mean that you will win the race. Therefore, you need to gain experience gradually.

Let's move on to parsing mail.​

We decided to deceive some antifraud system. I'll take typing on Amazon as an example. We want to buy a product for ourselves. To do this, we need to create a new identity for the holder of the stolen credit card.

When novice carders register mail, they put only one thing into this mail - acceptance of the letter. In fact, they don't worry about anything anymore: “Well, I have mail, they'll ask for it from me when registering at the store. Send me letters.” But if you go a little deeper, mail is actually not such a simple identifier. It is not a trash bin where messages are dumped on you. At the moment, there are tens of billions of mailboxes registered in the world, while the number of real living email users barely exceeds four billion. And this number is growing every day, and it is growing much faster than the number of users of these mailboxes. A mailbox is not just a basket for letters that you don't need to read and forget about. A mailbox is like a passport:

6a47dcc0c2a324c94aa8c.png

Anyone who travels to different countries, like me, knows that a blank passport may not even include a visa. Try getting a US or UK visa with an empty passport. You will most likely be refused. Your passport is empty, you haven't traveled anywhere, so go somewhere else. Exactly the same situation and exactly the same analogy can be drawn with our mailbox. The fact is that our mailbox is also essentially our passport on the Internet.

When we register in any service, we have our IP address. We can manage it, take a proxy and change it. Can the simplest man in the street from Europe or the USA operate it? Maybe, but he doesn't need it. That is, this IP identifier was actually imposed on him. We take browser fingerprints. Can an ordinary person control them? We can do this, but the average person cannot. Because these fingerprints were actually given to him by force, just like the IP address. He didn't choose these prints for himself. But mail is not forcibly given to the user, and the phone number was not forcibly given to the user. He can choose a phone number, he can choose an operator, he can choose a beautiful number. Also, mail, you must register it yourself. You choose an email service, login, password. And so, in fact, you receive your mailbox, and then this email is the same passport for you. And when you travel to all the hot spots, subscribe to some mailing lists of porn sites, it means you were in the same “country”. If, for example, you work with cryptocurrencies and exchanges, then you were in a different “country”. Or maybe you even combined the two. Maybe you're a crypto currency wanker... It could be both... There are a lot of options. But thanks to the analysis of your passport in the form of mail, it is possible to find very interesting things about you. Let us now get to know these things in a little more detail:

8a3534ce18214bcd94d82.png

I'll go to the email checker:

73c85f7452ffea7b30bb6.png

I want to immediately debunk one of the myths. On darknet forums, very often I see such a saying that accounts must rest, and anyone who has ever visited them has 100% heard this phrase: “The account must rest and after that everything will be fine with the account, you can work. “You need to let it rest, rested ." Let's check whether this is true or not.

I found @gmail in my cloud, which I bought back in March last year. I once bought it for karzh and forgot about it. Accordingly, the email has a shelf life of not even a meat, but more than a year. Surely he has already become white, fluffy and everything is ok with him.

Insert this email into the checker:
b4a3fbb8d2cb6cbdbf14e.png


What can we see? Now I will decipher for you all the valuesthat the checker gave, and then I will draw a small conclusion about whether the account is good or whether the fact that it has been lying there for a whole year is an absolutely waste of time. Let's find out.


c673b9f19f1523d4a4979.png


In this case, it is checked whether the given email is valid or not. Valid, that is, existing. In this case, the checker tells us that such a mailbox exists.


550edf8b13f84f7d59c40.png


This parameter shows whether our mailbox belongs to temporary services. That is, to services such as 10minutemail and so on.


f46dedfa4158c2e2e7233.png


Name. This parameter is quite important, especially in carding. Perhaps someone thought, what’s wrong with this name, but this parameter is found in anti-fraud systems. In this case, this parameter will store the digital signature of your mail account. It’s one thing when you just created an account, and another thing when you completely filled out your data. After all, mail is your virtual face. In this case, the checker did not find the name of this account because I did not fill it out.


e3c92a797cb87629a4909.png


This means whether this account belongs to any standard roles such as @admin, @webmaster @newsletter @sales @contact and many others. This item checks that the mail is not personal. In other words, this account can be used by a large number of people. The same @contact can be used by a bunch of people for technical support.

Common Email Provider:
1afee1282354be976ec8e.png


This item means whether the mail belongs to a well-known email provider like @gmail @yahoo and so on.


67403514c11fae83069fa.png


This item checks with what frequency mail is delivered to a person.


53120ef528d6dacb65e2f.png


This term comes from hacking. Literally translated as a pot of honey. Essentially it is a trap for scammers. In other words, it is also called bait, duck, set-up, panama and much more. Honeypot in the mail plan is used to identify ransomware and scammers.


b6a1989fa5ef835ed8afe.png


Determines how susceptible our mailbox is to spam mailings.


ded821a3b8a9b84538fef.png


Incredibly interesting parameter. Literally translated as “frequent complaints.” This parameter is very often used in anti-fraud systems. The larger this parameter, the better. That is, the more complaints from us, the better. Each of you has probably received various types of mailings in your mailbox from stores like Eldorado, from some online cinema, online courses, and so on. And as a matter of fact, you don’t want to receive this newsletter, you delete it and file a complaint. This value is only available for legitimate users. A user who has created a mailbox for himself and does not use it in real life, then the level will always be at the false level.


1eccf3f4a9c0c69554290.png


Incredibly important point. Checks whether there are any complaints about this email. For example, some schoolboy registered for this mailbox and entered it into Amazon. As soon as an incident investigation begins, the mailbox immediately receives the value “True”, which means that there is a complaint against it.


9e7002f9cc73cdccdf0b2.png


From 0 to 100. 0 is the best value, 100 is the worst. I haven’t used this mailbox at all, but it already has a fraud rating of 80. According to the logic of antifraud systems, if no activity has been generated from the mail, then this is the default rating. And no amount of lying down will help you with this.


b2f11129c28e9c254b80a.png


Checks whether your mailbox is similar to emails from well-known companies or services. If it is similar, then the antifraud system considers your mail to be fraudulent.

Sanitized Email:
6ff4b23c27a0b44e1f12b.png


This item allows you to determine camouflage. Surely some of you have come across when someone uses dots and symbols in their email nickname, masquerading as well-known brands, doing scam mailings.

Data Leak:
3c8233d0152ba85d5ac1e.png


Checks this mailbox for leakage of the owner's personal data into the public domain. Made for safety. If the antifraud detects a leak, Google will ask you in a rude manner to change your data.


986e1d8d317b61b1313f2.png


If you have ever seen such a saying on darknet forums that work from logs is better than from novoregs, then this is precisely the proof that an active mail account will always be better than a novoreg account. After all, a brand new account with zero activity already obviously has a fairly high fraud rating. And when you registered the same @gmail account, and then registered on some service, then this service will know about it even before you do anything there. Not only your IP address and browser fingerprints will be taken into account, but your mailbox will also be taken into account. In this case, your mailbox will be a static identifier that you created for yourself. It was not assigned to you, you made it yourself and your activity will determine the rating of this mailbox.


eef0c248836a592073712.png


No such box exists. You can check this by sending a letter to him. But what will our checker tell us? And he tells us that we have a valid email:
f6c4dabf89ce14933863d.png



e448e338431f2b0cbf913.png



74a963f01fe33e5935465.png


The fact is that when you work with large email providers, be it for example @gmail, then these providers are always ready to enter into various types of cooperation with other large companies; they exchange information with each other. Accordingly, the same checker, like any other anti-fraud system, can check and obtain a lot of information about any popular account of a well-known mail service. But as soon as it comes to third-party mail, in this case mymail.report, the anti-fraud system does not have any tools or tentacles to check the user. Many of you have now said to yourself: “Awesome. In the furnace of @gmail. Why waste time on it if you can create great mailboxes with a zero fraud rating. Everything is great.” And so and not so... Let's remember the slide that I posted above:

85d3e08783514536803e3.png


One antifraud system can allow users with dirty IPs, while another will only allow users with clean ones. Exactly the same here. In this case, the Back End of the mailbox check is controlled only situationally by each anti-fraud system separately. For example, the same Amazon may have a bad attitude towards corporate accounts, but at the same time Ebay may say: “Hello, welcome, I want to work with corporations, please register, you have great mail, I want one for myself too , where are you Did they take her?"

And they will welcome you with pleasure. Therefore, regarding the choice of mailbox, I would like to tell you that here everyone needs to act situationally. In some cases, there is absolutely no need to bother with the same @gmail, you can simply buy yourself domains for $0.2 and stamp your own mail services. Some antifraud systems will accept them much better than the same @gmail. At the same time, from corporate accounts, another anti-fraud system will tell you: “Go to where you got this account . “Therefore, the most important antifraud is in your head. You must develop a strategy against the anti-fraud system you are working with.

I have highlighted the main key factors for you in a separate slide:
2fa35f775dd4a9ec76a91.png


We have already become acquainted with all these key factors and learned what factors are analyzed by antifraud systems. But what should we do with our mail if we basically need to use @gmail? To do this you need to pump it. I already know what you're thinking... You thought that you need to register a bunch of social network accounts with this email. In this case, you will be like this funny guy:

3cba17f348190d84652f4.png


Which will act exactly like you, so if you want to register all the social networks that exist in the world to your newly created email, then any anti-fraud system will immediately tell you: “Hindu detected. “Therefore, we need to move on to completely different methods. Forget about what social networks are.


Let's figure out how to increase the trust rating of a regular public email address in @gmail and other popular services. In this case, point number one is “Advertising”. Subscribe to various newsletters. The fact is that each mailbox is used not only to receive some letters, but it is also used for regular newsletters. Well, here is an ordinary person sitting, he is interested in receiving a newsletter about what innovations there are in Apple products. He's interested in it. He is also interested in receiving newsletters about what football matches his favorite team is playing. Or some discount promotions in some store. He wants to know. This is the most common pattern of behavior of an ordinary person in the street. Look at your main email what a huge number of mailings there are. Therefore, just by subscribing to several newsletters, you will add good potential to your mailbox. And then unsubscribe from half of these mailings, not all. They subscribed to ten newsletters, but unsubscribed from five within a couple of days.


In order for this item to take the value True and the anti-fraud system will think that you really keep your mailbox clean.


In fact, all mails are very passionate when they use their official applications. This will help the antifraud system understand that this user really has serious intentions of working with this mailbox, that he needs it. Because it's one thing when you just log in as a web page, and another thing when this application is already installed on your computer. That is, you didn't just do it like that.


Subscribe to CNN or BBC news for example.


There is no need to panic register on every social network you can imagine. On the contrary, it will play a cruel joke on you. This will be assessed as a fraudulent pattern.


Create an ad anywhere. For example, on a dating site, about the sale of some kind of moped. Whatever comes into your head, post on some free bulletin board that you sell firewood for heating somewhere in Alaska or Arizona. And when your mailbox is checked, it will be clear that this mailbox is visible on the Internet and is active.

These are the six main factors that will allow you to reduce your scam rating from 80 to 0 in a matter of days. In fact, this may seem a little tedious, but in fact, all these subscriptions can be found just once, saved in a text document, and you no longer need to look for anything on new mailboxes, but subscribe immediately.

With checking mailboxes, I think everything is clear to you now. Let's move on to checking mobile numbers, I'll show you how to do it.​


In principle, the analogy is exactly the same. We go to the mobile number checker:
5b5431dfb8c9bdfed04f6.png


Let's enter some phone number for verification. I'll go to Google and enter a query to search for an English-language virtual service of mobile numbers for rent:
d70fa548dd9faa1aa363d.png


I'll open the first service I come across:
c23b47e32aedf10dbc47c.png


Here we have rooms for rent:
4b72668af048ccc1829ac.png


I'll copy the very first number +12175825245:
68488787642efa846a4c9.png


I'll put it in the checker:
956f9ac4d1fc0164b9567.png


Let's see what the checker tells us about this number.


a785f744edf5e6578bc93.png



31c781624e10089425487.png



77c564518ea1f5bf44ac9.png



308bec77cd5b47a7d4320.png



9b33462d4c017bce33216.png



b1283c8eaaa135a04e534.png



1897c1ab90ffcc4e7b99f.png



8474ac4fbde3088d3826c.png



6fad109d33ac82ee9aaa5.png



374b47a91a313810337ae.png


What can we say about this phone number after verification?
It is not the parts of the system that work, but the system of parts.


You know that in the Russian-speaking segment of the Internet there are a huge number of services where you pay $0.2 and receive SMS from Telegram, for example. I'll tell you this, I haven't found a single Russian-language service with good numbers. Sometimes a couple of numbers slip through, but everything else is complete slag. Surely many of you have encountered such situations that you simply do not receive SMS messages to such a number. That is, everything seems to be fine, you bought yourself a number to receive SMS, but you don't even receive SMS from some services. They don't come precisely because it shouldn't come to this number with such a fraud rating, despite the fact that this number is an IP telephony number.

I hope my post today was useful to you.
I understood the email part however just a question in regards to the mobile number

A)the mobile number am I correct in understanding that it must also be registered in the state/country of the CC


B)by using the SMS receive for free or virtual numbers how would we find clean ones that don't arouse suspicion (low fraud rating)
 

chushpan

Professional
Messages
209
Reputation
1
Reaction score
210
Points
43
A) the mobile number am I correct in understanding that it must also be registered in the state/country of the CC
When registering accounts in online stores, we can indicate the phone number that comes with the CC data.
Also, in online stores we can make a purchase without registering an account and indicate the cardholder’s valid phone number.
Many carders do this, and after paying with a card, they order a flood of the cardholder’s phone number so that the store employee cannot get through.
If the store asks you to call him back to clarify the details of the order, carders order the service from trusted call services that call with a spoofed number. The cost of the service is $5-10.
If you took the drop address from a buyer or drop service, then they call the store for free and confirm the order. To order, you must provide all the details of the CC with which you paid and the order details.
If we need to receive an SMS to confirm account registration, we can specify a temporary virtual number.
In any case, the phone number must be registered in the cardholder's state or country. For the USA and Europe there are enough such telephone services, the prices for services are low.
In any case, if you provide a virtual phone number, this will add fraud points in the anti-fraud system.

B) by using the SMS receive for free or virtual numbers how would we find clean ones that don't arouse suspicion (low fraud rating)
To reduce fraud scores in the anti-fraud system, there are services that receive calls and SMS on their real SIM cards, and not on virtual telephony.
If you work with a buyer of goods, perhaps he will be able to give you a phone number that should be indicated when paying with a card in online stores.
The security system also gives few fraud points if we specify Google Voice. You can register GV yourself or buy an account from trusted services.
 

KPH

Carder
Messages
69
Reputation
1
Reaction score
105
Points
33
When registering accounts in online stores, we can indicate the phone number that comes with the CC data.
Also, in online stores we can make a purchase without registering an account and indicate the cardholder’s valid phone number.
Many carders do this, and after paying with a card, they order a flood of the cardholder’s phone number so that the store employee cannot get through.
If the store asks you to call him back to clarify the details of the order, carders order the service from trusted call services that call with a spoofed number. The cost of the service is $5-10.
If you took the drop address from a buyer or drop service, then they call the store for free and confirm the order. To order, you must provide all the details of the CC with which you paid and the order details.
If we need to receive an SMS to confirm account registration, we can specify a temporary virtual number.
In any case, the phone number must be registered in the cardholder's state or country. For the USA and Europe there are enough such telephone services, the prices for services are low.
In any case, if you provide a virtual phone number, this will add fraud points in the anti-fraud system.


To reduce fraud scores in the anti-fraud system, there are services that receive calls and SMS on their real SIM cards, and not on virtual telephony.
If you work with a buyer of goods, perhaps he will be able to give you a phone number that should be indicated when paying with a card in online stores.
The security system also gives few fraud points if we specify Google Voice. You can register GV yourself or buy an account from trusted services.
I will be primary focusing on CC to BTC as this is the endeavour I have decided to pursue any articles that are helpful would be much appreciated

The primary focus will be receiving an SMS so I will need to find a telephpone service that will pass on sms codes but the numbers must be clean and if checked don't show up on the fraud or spam list as the checker above states

This will surely be beneficial for when I want to Increase my skill and knowledge and being carding online stores as this has answered questions that would arise when I begin to expand my knowledge
 

zaccha6

Carder
Messages
47
Reputation
1
Reaction score
47
Points
18
I understood the email part however just a question in regards to the mobile number

A)the mobile number am I correct in understanding that it must also be registered in the state/country of the CC


B)by using the SMS receive for free or virtual numbers how would we find clean ones that don't arouse suspicion (low fraud rating)
You can get around requiring a number for email addresses if you sign up on an android phone that has been reset in the Gmail app, ensure the password you create is also complex and not a basic one.
 

Tomcat

Professional
Messages
2,656
Reputation
10
Reaction score
647
Points
113
Buy some old 2nd level domain at an auction, set up a simple website page for a fictitious company using the domain name. You can place your files on free or cheap hosting. You can take their web archive. Register mail in the names of cardholders and get to work.
The anti-fraud system will think that the e-mail belongs to an employee of the company and will not add risk points because it will think that this is a corporate mail, thereby bypassing the site’s protection.
This measure is needed for popular and large sites; if you want to work on small sites with weak security, you can register an e-mail in the name of the cardholder with large mail providers, according to the country of the cardholder.
 

polkadot

Carder
Messages
44
Reputation
0
Reaction score
25
Points
8
Initially I am starting in small places to gain confidence and get to know the approximate balance of the bins, then I want to go through wallmart bestbuy and similar sites, thanks for the information
 

zaccha6

Carder
Messages
47
Reputation
1
Reaction score
47
Points
18
This was a really great read and was very informative. Thank you.
What website do you use to test the email for fraudulent activity?
 

darkmoon12

Carder
Messages
43
Reputation
0
Reaction score
19
Points
8
Buy some old 2nd level domain at an auction, set up a simple website page for a fictitious company using the domain name. You can place your files on free or cheap hosting. You can take their web archive. Register mail in the names of cardholders and get to work.
The anti-fraud system will think that the e-mail belongs to an employee of the company and will not add risk points because it will think that this is a corporate mail, thereby bypassing the site’s protection.
This measure is needed for popular and large sites; if you want to work on small sites with weak security, you can register an e-mail in the name of the cardholder with large mail providers, according to the country of the cardholder.
Just found this thread, nice! I have a question for you Tom. Would websites like this work? https://www.dreamhost.com/hosting/ $20 USD for a domain + unlimited emails. I was thinking I make the email in the CC's name, would this pass the fraud check you think? Also as the others mentioned above if you could share the email checker that'd be great. Thank you!
 

Tomcat

Professional
Messages
2,656
Reputation
10
Reaction score
647
Points
113
Try to buy a cheap domain and hosting for it, so you can create a trust corporate e-mail. This will be better than specifying an e-mail registered with popular and free email services.

To find free email checking services, type in a search engine: “email checker”

9 E-mail Checker Tools:
  • Finder.io
  • ZeroBounce
  • QuickEmailVerification
  • VerifyBee
  • Email List Verify
  • Email Verifier
  • DataValidation
  • Mailgun
  • NeverBounce

For example, you have prepared a card issued by a Spanish bank, which means we are looking for the free Spanish postal service and there we register an e-mail under the name of the cardholder.
 

darkmoon12

Carder
Messages
43
Reputation
0
Reaction score
19
Points
8
Thank you! I bought a few old emails (from 2015) from one of the sites that you mentioned in another thread. Are they completely trash compared to trust corporate emails? I'm guessing It's Corporate > Aged > Fresh ?
 

Tomcat

Professional
Messages
2,656
Reputation
10
Reaction score
647
Points
113
Antifraud systems operating on websites use different filters and security settings.
Some of them will like corporate mail, and some will prefer old e-mail. The most important thing in our work is not to score risk points on this point.
Knowing which emails are suitable for a particular or another site comes with practical experience.
 
Top