How to setup computer for safe online carding?

[zaccha6]

Hello everyone,
Disclaimer: DO NOT TAKE WHAT I AM SAYING AS ADVICE. I AM A BEGINNER AND PROBABLY HAVE NO IDEA WHAT IM TALKING ABOUT!!!

I recently started becoming more educated on carding and have been reading the various guides, asking questions etc before starting any of it to ensure I use the correct measures. However, I'm wondering if someone could explain (in steps so beginners can be guided along, if possible) the steps of setting up a computer for carding and why these measures are taken.

I have read over various guides explaining this, some go into detail on browsers to use like Firefox, while others lean heavily on other aspects, such as security via Socks-5, proxies, vpns etc. Below is a guide of how I'd set up my computer and I am wondering if this is the correct way to do it.
I will also explain my reasoning so you can critique or update my knowledge. I will primarily be doing online carding. Eventually, I'd like to explore physical variations. I will be buying fullz and purchasing gift cards then converting to crypto. I wrote my method as I understand various methods require various security measures.

1: OS doesn't play a big part in online carding (I think, please correct me if I'm wrong)
2: Utilise firefox, more customisable for things you share/don't share with the firefox servers.
3: Use Perfect privacy (VPN) and lightningproxies.net
4: ensure laptop is dedicated to carding ONLY, and has no personal information attached. Socials, YOUR bank accounts etc.

Please let me know if I'm missing any additional measures, thank you for reading.

 

[chushpan]

Setting up a system for carding 2024

In order to masquerade well as a US or European citizen, you need to work smartly. Without completing the following points, the chances of your driving success are rapidly approaching zero.

Initial setup:

1. Virtual machine - for emulating computer hardware. Allow you to easily create/copy/delete systems directly on your PC. For these purposes, you can use a separate laptop/PC, but under no circumstances should you use your main OS.

2. English Windows OS (windows 10/windows 11) - any will do.

3. English language layout (others are undesirable).

4. DNS servers - very often they burn your real location, bypassing all your efforts to hide it. More details:

DNS Settings

Network and Sharing Center --> right-click on your network connection --> then in properties for the IPv4 protocol.

Take any line from the list of public DNS servers:

OpenDNS 208.67.222.222 208.67.220.220
Level 31 209.244.0.3 209.244.0.4
Google 8.8.8.8 8.8.4.4
Securly 3 184.169.143.224 184.169.161.155
Comodo 8.26.56.26 8.20.247.20
DNS Advantage 156.154.70.1 156.154.71.1
Norton DNS 198.153.192.1 198.153.194.1
ScrubIT4 67.138.54.120 207.225.209.77
OpenNIC5 74.207.247.4 64.0.55.201
Public-Root6 199.5.157.131 208.71.35.137
SmartViper 208.76.50.50 208.76.51.51

Click OK.
Now go to whoer.net and check. May not show USA.
5. Browser with English localization - for example, a great option: Firefox

Before each carding:

IP for the shipping address - using your SOCKS5, SSH tunnels or RDPs. Typically, the closer the IP is to the address you specify when entering, the less suspicious the order is considered.

2. Time for the state - you can google “current time in %city%”, the sock you are using. Or just check the list:

States and time zones
Al - Alabama (-6gmt)
ak - alaska (-9gmt)
ar - arkansas (-6gmt)
az - arizona (-7gmt - in winter) (-8gmt - in summer)
ca - california (-8gmt)
co - colorado (-7gmt)
ct - connecticut (-5gmt)
dc - district of columbia (-5gmt)
de - delaware (-5gmt)
fl - florida (-5gmt)
ga - georgia (-5gmt)
hi - hawaii (-10gmt - in winter) (-11gmt - in summer)
id - idaho (-7gmt)
ia - iowa (-6gmt)
il - illinois (-6gmt)
in - indiana (-5gmt - in winter) (-6gmt - in summer))
ks - kansas (-6gmt)/(-7gmt)
ky - kentucky (-5gmt)
la - louisiana (-6gmt)
ma - massachusetts (-5gmt)
md - maryland (-5gmt)
me - maine (-5gmt)
mi - michigan (-5gmt)
mo - missouri (-6gmt)
mn - minnesota (-6gmt)
ms - mississippi (-6gmt)
mt - montana (-7gmt)
nc - north carolina (-5gmt)
nd - north dakota (-6gmt)/(-7gmt)
ne - nebraska (-6gmt)/(-7gmt)
nh - new hampshire (-5gmt)
nj - new jersey (-5gmt)
nm - new mexico (-7gmt)
ny - new york (-5gmt)
nv - nevada (-8gmt)
oh - ohio (-5gmt)
ok - oklahoma (-6gmt)
or - oregon (-8gmt)
pa - pennsylvania (-5gmt)
pr - puerto rico
ri - rhode island (-5gmt)
sc - south carolina (-5gmt)
sd - south dakota (-6gmt)/(-7gmt)
tn - Tennessee (-6gmt)
tx - texas (-6gmt)
ut - utah (-7gmt)
va - virginia (-5gmt)
vt - vermont (-5gmt)
WA - Washington (-8gmt)
wi - wisconsin (-6gmt)
wv - west virginia (-5gmt)
wy - wyoming (-7gmt)

It’s most convenient to enter during business hours in the state you are masquerading as: to ensure your order is processed as quickly as possible, do not enter on Friday evenings or weekends. Better in the morning on weekdays.

3. Clean browser cookies, and clean them using: CCleaner

 

[zaccha6]

Setting up a system for carding 2024

In order to masquerade well as a US or European citizen, you need to work smartly. Without completing the following points, the chances of your driving success are rapidly approaching zero.

Initial setup:

1. Virtual machine - for emulating computer hardware. Allow you to easily create/copy/delete systems directly on your PC. For these purposes, you can use a separate laptop/PC, but under no circumstances should you use your main OS.

2. English Windows OS (windows 10/windows 11) - any will do.

3. English language layout (others are undesirable).

4. DNS servers - very often they burn your real location, bypassing all your efforts to hide it. More details:

DNS Settings

Network and Sharing Center --> right-click on your network connection --> then in properties for the IPv4 protocol.

Take any line from the list of public DNS servers:

OpenDNS 208.67.222.222 208.67.220.220
Level 31 209.244.0.3 209.244.0.4
Google 8.8.8.8 8.8.4.4
Securly 3 184.169.143.224 184.169.161.155
Comodo 8.26.56.26 8.20.247.20
DNS Advantage 156.154.70.1 156.154.71.1
Norton DNS 198.153.192.1 198.153.194.1
ScrubIT4 67.138.54.120 207.225.209.77
OpenNIC5 74.207.247.4 64.0.55.201
Public-Root6 199.5.157.131 208.71.35.137
SmartViper 208.76.50.50 208.76.51.51

Click OK.
Now go to whoer.net and check. May not show USA.
5. Browser with English localization - for example, a great option: Firefox

Before each carding:

IP for the shipping address - using your SOCKS5, SSH tunnels or RDPs. Typically, the closer the IP is to the address you specify when entering, the less suspicious the order is considered.

2. Time for the state - you can google “current time in %city%”, the sock you are using. Or just check the list:

States and time zones
Al - Alabama (-6gmt)
ak - alaska (-9gmt)
ar - arkansas (-6gmt)
az - arizona (-7gmt - in winter) (-8gmt - in summer)
ca - california (-8gmt)
co - colorado (-7gmt)
ct - connecticut (-5gmt)
dc - district of columbia (-5gmt)
de - delaware (-5gmt)
fl - florida (-5gmt)
ga - georgia (-5gmt)
hi - hawaii (-10gmt - in winter) (-11gmt - in summer)
id - idaho (-7gmt)
ia - iowa (-6gmt)
il - illinois (-6gmt)
in - indiana (-5gmt - in winter) (-6gmt - in summer))
ks - kansas (-6gmt)/(-7gmt)
ky - kentucky (-5gmt)
la - louisiana (-6gmt)
ma - massachusetts (-5gmt)
md - maryland (-5gmt)
me - maine (-5gmt)
mi - michigan (-5gmt)
mo - missouri (-6gmt)
mn - minnesota (-6gmt)
ms - mississippi (-6gmt)
mt - montana (-7gmt)
nc - north carolina (-5gmt)
nd - north dakota (-6gmt)/(-7gmt)
ne - nebraska (-6gmt)/(-7gmt)
nh - new hampshire (-5gmt)
nj - new jersey (-5gmt)
nm - new mexico (-7gmt)
ny - new york (-5gmt)
nv - nevada (-8gmt)
oh - ohio (-5gmt)
ok - oklahoma (-6gmt)
or - oregon (-8gmt)
pa - pennsylvania (-5gmt)
pr - puerto rico
ri - rhode island (-5gmt)
sc - south carolina (-5gmt)
sd - south dakota (-6gmt)/(-7gmt)
tn - Tennessee (-6gmt)
tx - texas (-6gmt)
ut - utah (-7gmt)
va - virginia (-5gmt)
vt - vermont (-5gmt)
WA - Washington (-8gmt)
wi - wisconsin (-6gmt)
wv - west virginia (-5gmt)
wy - wyoming (-7gmt)

It’s most convenient to enter during business hours in the state you are masquerading as: to ensure your order is processed as quickly as possible, do not enter on Friday evenings or weekends. Better in the morning on weekdays.

3. Clean browser cookies, and clean them using: CCleaner

Thank you for this detailed guide. I have a question regarding setting up my socks-5 proxy. I have a specific IP address I want to go through, I use ADSPOWERGLOBAL paired with lightningproxies as my antidetect browser. I am not certain if Lightningproxies allows to customise the IP address, I'm thinking of going with OXYLABS as I've heard good things about it through this and other forums.
Sometimes when attempting to card i need to complete a capta as google thinks I'm a robot and detected "suspicious" traffic. I assume this isn't great in the eyes of antifruad systems put in place on websites. How can i fix this?
I need the 6 digit host number to be able too input a specific IP into it, which I don't have and can't find. FInally, I use MAC OS with everything and use WintoUSB to convert my os to windows 8.1, should I add a virtual machine to increase anonimity or does it not matter if I'm running it from a usb? Thank you again for your in depth reply it really helped me learn to setup my system! I hope someone can offer me some further guidance.

 

[noooob]

Hello everyone,
Disclaimer: DO NOT TAKE WHAT I AM SAYING AS ADVICE. I AM A BEGINNER AND PROBABLY HAVE NO IDEA WHAT IM TALKING ABOUT!!!

I recently started becoming more educated on carding and have been reading the various guides, asking questions etc before starting any of it to ensure I use the correct measures. However, I'm wondering if someone could explain (in steps so beginners can be guided along, if possible) the steps of setting up a computer for carding and why these measures are taken.

I have read over various guides explaining this, some go into detail on browsers to use like Firefox, while others lean heavily on other aspects, such as security via Socks-5, proxies, vpns etc. Below is a guide of how I'd set up my computer and I am wondering if this is the correct way to do it.
I will also explain my reasoning so you can critique or update my knowledge. I will primarily be doing online carding. Eventually, I'd like to explore physical variations. I will be buying fullz and purchasing gift cards then converting to crypto. I wrote my method as I understand various methods require various security measures.

1: OS doesn't play a big part in online carding (I think, please correct me if I'm wrong)
2: Utilise firefox, more customisable for things you share/don't share with the firefox servers.
3: Use Perfect privacy (VPN) and lightningproxies.net
4: ensure laptop is dedicated to carding ONLY, and has no personal information attached. Socials, YOUR bank accounts etc.

Please let me know if I'm missing any additional measures, thank you for reading.

Thank you for this excellent tutorial! The information is very useful for beginners like me.
However, I encountered an issue while attempting to configure the socks-5 proxy. On lightningproxies.net, there are various plans to choose from, which one is more preferable for carding: residential or static ISP?

 

[zaccha6]

Residential Proxies
Pros:

• Real User IPs: Residential proxies use IP addresses assigned to actual residential locations, making them very effective for simulating genuine user locations.
• High Anonymity: These proxies offer higher anonymity because they look like real users, reducing the risk of detection and blocking.
• Geographic Flexibility: They often provide a wide range of geographic locations, which is useful if you need to simulate being in different cities or countries.

Cons:

• Cost: Generally more expensive than static ISP proxies due to their higher quality and anonymity.
• Variable Performance: Speeds can vary depending on the network conditions of the residential users whose IPs you are using.

Static ISP Proxies​

Pros:

• Consistent IPs: Static ISP proxies offer stable and consistent IP addresses, which can be beneficial for tasks requiring a fixed IP.
• Reliability and Speed: Typically provide better speed and reliability compared to residential proxies.
• Cost-Effective: Usually cheaper than residential proxies, making them a budget-friendly option.

Cons:

• Lower Anonymity: Since the IP addresses are fixed and less dynamic, they can be more easily detected if used for extended periods.
• Risk of Blocking: Static IPs are more likely to be blocked if they are overused for activities like web scraping or frequent location changes.

Recommendation​

• For Simulating Someone Else's Location:
  • Choose Residential Proxies: They provide real, dynamically assigned residential IPs, offering higher anonymity and reducing the likelihood of being detected. This makes them ideal for activities that require simulating different locations as they appear more natural to the websites and services you access.
  • Geographic Coverage: Ensure the service provider offers a wide range of geographic locations to match your specific needs.

Please take what I say with a grain of salt, I am still learning and you should always cross-check information. I also have a question regarding proxies. When buying Fullz they often have IP addresses attached to them, I assume it is the person's IP address whose card details we have. Can we config our proxy to display that IP address to websites? If so how does one do that through adspowerglobal.

 

[chushpan]

If Google includes captcha, then your IP address is suspicious. You need to change the proxy, you can also try an ssh tunnel or RDP.
Each carder himself chooses to work using a Virtual Machine or an anti-detect browser. A good antifraud can detect VM. You can run the VM from USB, just don’t forget to configure the OS for the cardholder card.

For a proxy, it is best to choose a residential provider.

When purchasing a card, the package may include the IP address of the cardholder from which he made the payment. It is difficult to find the same IP address, but we can find one similar in mask; for this we use a proxy search in the proxy provider’s personal account.

 

[zaccha6]

Thank you for this reply, much appreciated chushpan. How do i make my IP address "cleaner" then, it passed antidetect tests and other IPlocator tests. am i missing something?

 

[chushpan]

Thank you for this reply, much appreciated chushpan. How do i make my IP address "cleaner" then, it passed antidetect tests and other IPlocator tests. am i missing something?

Type “mobile proxies” in a search engine - they are considered the highest quality and your IP address will be clean.

 

[noooob]

If Google includes captcha, then your IP address is suspicious. You need to change the proxy, you can also try an ssh tunnel or RDP.
Each carder himself chooses to work using a Virtual Machine or an anti-detect browser. A good antifraud can detect VM. You can run the VM from USB, just don’t forget to configure the OS for the cardholder card.

For a proxy, it is best to choose a residential provider.

When purchasing a card, the package may include the IP address of the cardholder from which he made the payment. It is difficult to find the same IP address, but we can find one similar in mask; for this we use a proxy search in the proxy provider’s personal account.

Thanks for the advice! Got another question regarding this problem, most residential providers I found provide only rotating proxies, which means the IP address would change after a period of time. Would this affect the carding session?

 

[chushpan]

Thanks for the advice! Got another question regarding this problem, most residential providers I found provide only rotating proxies, which means the IP address would change after a period of time. Would this affect the carding session?

Check with your proxy provider for the following:
If only the IP address mask changes, that is, it becomes different, but its first digits are the same, this will not affect carding.
If the entire IP address changes, that is, all the numbers, then this may affect the card and payment by card will be rejected.
Much depends on the settings of the antifraud system installed on the website, that is, each protection reacts differently to frequent changes of IP address.
If the IP address changes, but the provider remains the same and does not change to another, then there will be no problems.

 

[noooob]

Check with your proxy provider for the following:
If only the IP address mask changes, that is, it becomes different, but its first digits are the same, this will not affect carding.
If the entire IP address changes, that is, all the numbers, then this may affect the card and payment by card will be rejected.
Much depends on the settings of the antifraud system installed on the website, that is, each protection reacts differently to frequent changes of IP address.
If the IP address changes, but the provider remains the same and does not change to another, then there will be no problems.

Thanks for the reply! The information is really useful as I've been trying to figure this out for days.
I've tried several proxy providers and it seems that the entire IP address would change into another random address from the IP pool when rotating, the location of the IP addresses would of course stay in the same city but everything else might change. So I guess it's not preferable to use these? I've tried static residential proxies also, but the static ones does not provide city/state targeting, so I wasn't able to get the proxy with IP address in the same city as the card holder's. Is there anyway to solve this problem?
Thanks again for answering! You've really helped me a lot

 

[Tomcat]

You can find out how the antifraud system detects and sees IP addresses in this manual:

https://carder.market/threads/how-to-choose-an-ip-address-for-carding.149263/