Carding
Professional
- Messages
- 2,871
- Reaction score
- 2,308
- Points
- 113
Lecturer: MAXWELL
Everyone in their life has come across such a moment that there is a product, but there are no customers, in the US it is accepted that even an old grandmother of about 50 years old does not post advertisements on the usual bulletin board, but goes and promotes her product, for example, through Facebook.
For us, this gives a big plus so that all the screws in this “fun” system, so to speak, are not tightened.
Now it’s no secret that every schoolchild whose height allows him to reach the keyboard pours on Facebook.
The situation is of course moving and changing very dynamically. Old approaches are dying out, new ones are emerging.
This is neither good nor bad, it has always been this way.
The first thing a carder should learn is basic information when working with this platform in the context of our shadow activities.
In our context, PP (Affiliate Program, also known as PP) - it will pay us money if we don’t pour money for ourselves (stiller, hvnts and others), but for an offer.
You can find a bunch of affiliate programs just by kindly typing into Google “affiliate traffic arbitrage”
What does the affiliate program give us?
The opportunity to earn money on deposits, registrations, subscriptions and a bunch of other tinsel.
OR if we don’t want to work with our uncle and want to work for ourselves, then we can use stealer or other malware, traffic with the right choice of target audience (TA) is simply excellent.
Mini-deposits - not a large amount that FaceBook sends, most often up to $2, to make sure that we are the owner of the card.
CH – card owner.
CR – conversion. Example: 1k10 downloads the app, 1k20 makes a deposit, and so on.
Lead – Roughly speaking, this is the client for whom we will be paid. It is stated in the offer itself
Creo is aka creative. A picture, GIF or video that a person will see when scrolling through their feed, viewing a story on Instagram, etc.
DeepLink - roughly speaking, this is our referral link that is embedded in the sidebar or at the stage of adding advertising through which the software can track that the traffic came from us.
Naming is a relatively new feature when traffic is tracked not by a deep link, but by the name of our campaign and ad. Set by the software itself.
Also, in naming and deep linking you can write “tails”, for example “account1”, the second tail is the name of the source, for example, and so on. All this data is arbitrary and does not in any way affect the ebb
Our AntiDetect settings are the most standard https://prnt.sc/s6x2tc
When choosing socks, pay attention to their type. FB is more loyal to mobile IPs than to residential ones.
FB fits absolutely any socks from the country the account owner belongs to, but by using socks that are closer you add trust to you and your actions.
Now let's go through the account itself
Let's go to Google and google our FaceBook. We do this process in order for FaceBook to see that we are not following a direct link, but through a search engine, the so-called ref transition.
You can also find a site where there is an entrance via Fb and log in that way. Considered a more trustworthy entry
We look at the account registration date and asset. https://prnt.sc/s70dhf
I recommend taking accounts no younger than 2018-2019, since if you take younger accounts, additional checks may fail, which will interfere with us and slow down our work with you.
In the example, an account from 2009 with a good asset
Next, go to settings and turn off all notifications. This is necessary in order to protect yourself from changing your password and losing our valuable time.
First step https://prnt.sc/s70ebe
Second https://prnt.sc/s70esb
Warming up.
I would like to draw your attention to the fact that FB reacts very positively to how we send reports for rule violations
This has a very positive effect on trust
We heat for 1-2 hours no more as it is less effective. I absolutely do not recommend using
scripts and other automation tools!
The next day we will create a Business Manager. He's BM
You can also run ads on behalf of your account, but the downside is that all notifications from the post will go directly to your account.
To solve this problem, there are paid scripts that delete comments under your post.
Proper creation of BM.
After 30-50 minutes of warming up, we proceed to creating a BMA. Copy and paste into the address bar
business.facebook.com and click the blue button to create an account, nothing complicated
fill out the data, I advise you to enter the company name as the name of the account owner since the owner
account may assume that FB itself created a BM for him, or it will be possible to write thematic names like Lucky Coin, Lucky Spin, and so on, put coins on the avatar, etc.
We take all other data except the soap box (where we will receive a letter that we would like to confirm) from here
https://www.fakeaddressgenerator.com/usa_address_generator in my example, the owner lives in the USA, you take it under your country.
Next, go back to the main FaceBook to the Advertising on FaceBook tab
after the transition, click Create an Ad and create a group, fill it out, put a photo, invite a couple of friends, turn off notifications in the group itself in the settings > notification section
There is no need to create a group if your account already has one.
We give it lightly from 12 hours to a day.
The next day comes the most interesting part. The process of linking and choosing an offer for the flood
We warm up the account for 1-2 hours after going to http://business.facebook.com/adsmanager/manage
Go to Ad Accounts
Look at Ad Account Setup
We put NO everywhere so as not to fill out VAT and not pay % to the state. Sometimes a notification may come out that you still have business goals.
We put a dot in the first paragraph of Advertising Purpose, after which we will be asked to enter the address. We still turn to the site fakeaddressgenerator.com
Let's move on to the binding. I will knit SS. https://prnt.sc/s70gu3 click here
Before binding, it is worth remembering a couple of points that there is pre payment - when we pay before the fill and post payment
Also, don’t forget to turn off notifications in billing
I recommend working with CC as you may not have time to drain from the same BA account
If you still want to try to merge with BA, then it’s worth considering that FB loves non-frozen banks, for example regional Pennsylvania, FCU, CU and the like
The trick of working with them is to unscrew a large amount and drain the maximum in the shortest possible time.
There are 3 outcomes when linking a card
First: https://prnt.sc/s70h87 The card was simply spat out
Second: https://prnt.sc/s70hjz Spit out due to the fact that she was tied many times 3-4+
Text may vary. If we see a familiar word Bank, we call it.
Sometimes there are moments when FB themselves don’t know why they blocked your account (they caught fraud) and calmly remove the block, or simply after the first contact with support with the words “Hello, what’s the problem?”
Example response from support https://prnt.sc/s70hx2
Third outcome: https://prnt.sc/s70i8y Beauty. Success
Before the start of the strait, I advise you to spend no more than $1-5 on promoting a post in our group. As practice shows, this results in fewer checks of various kinds, ejections from the account, etc.
Go ahead. We gave the rk ID (look at the address bar. Example: ?act=XXXXXXXXXXXX&) to our PP, we were given a shelf and we want to send traffic to it.
We go to http://business.facebook.com/adsmanager/manage and select the place where we will pour. We configure it and make sure to register deeplink.
We definitely upload video 1080x1080 or 600x600, you can get carried away and do it for each format (PC, tablet, phone, tape, post, etc.), but this is a universal option.
After checking our advertisement, after a while we receive a mini-deposit.
https://prnt.sc/s70isb, and with it the deactivation of the account until confirmation
Sometimes a non-standard mini-deposit arrives, as in the example above. We are not afraid and enter the first 4 characters.
Features
We check for mini-deposits without ringing or enroll. Go here purchasealerts.visa.com
We shove our card there, if it lets us in we can look at the mini-deposits.
How do we know if our card will fit through?
Before purchasing, we take 5-6 symbols of the card we want to buy (we need 9 to check). and add random 3-4 numbers.
If the card works, we can watch mini-deposits on it
Also an update for this service. They have opened many countries besides the US and now you can test new geos
This happens if we haven’t warmed up enough, the maximum amount we can spend daily (aka daily budget) is $50, and then if everything is really bad then $20-25. Don’t despair and go to the panel itself where we have a spill ( Ad Sets)
Click on the budget (pencil) and edit it a little.
Let’s say it was $20, we bet $40-70 and so on, using this method I was able to increase the daily budget to a maximum of $700, but this is not the limit.
Carry out these frauds only after 1-2 spans!
You can also buy ready-made bms with daily 250/350/unlimited, after linking the card it is better to give such accounts one day, since it will not always be able to show the real limit from the very beginning
There is also no need to make frequent spreads for small amounts, this is a gross mistake and the bank does not like it
It is best to carry out spreads up to the maximum amount. Example: your daily deal is $50, you make a $40-45 spread to prevent FB from debiting the money itself. From the bank’s side, transactions should not be more frequent than 3-6 hours
Mini-deposits should also not be sent on the same day from all accounts. This also counts
If you write off manually, it’s more trustworthy than just letting FB write it off automatically
Let's see why our advertising was turned off
Open your Ads Manager
https://www.facebook.com/adsmanager/manage, right-click
select View code https://prnt.sc/s70k8b
We search for the phrase accesstoken or access_token and find token: https://prnt.sc/s70klj
Go here http://maskfb.ru/ and insert our token.
Important! Do not insert the token if you have NOT been disconnected or are being opened, since the token is used to log in from the bot, as a result of which the account may fly off
We look at other people's creative ideas. Let's look at the text.
Go to https://adheart.ru/ and create an account there https://prnt.sc/s70kxr
we choose what interests us. you can simply ask for a direct link from support and paste it here and look at the text, creo specifically from this software from our competitors
Further, if there is a desire to expand on a large scale, it will be possible to verify the BM to further expand the number of RCs to 30-80 pieces!
We can start advertising initially using a personal advertising account, and the rk bma that we created
after several spans, the number of advertising offices will increase to 5 BMs, which we create gradually and as needed
Let's start verification and go to https://business.facebook.com/settings/security.
We check whether the verification button is active.
Most likely not, and we need to activate it. To do this, we carry out the following steps.
Let's start registering, select Developer and then also select Developer. We enter arbitrary values; we will not use the application itself, it is only needed to activate the verification button.
https://develope.facebook.com/apps, where we select Audience Network as a monetization source, we begin. We choose our BM. E-mail is arbitrary, any country, the main thing is that there are docks.
Next we write a random name. After creating the monetization object, we return to https://business.facebook.com/settings/security and see that the button has become active! Let's start confirmation.
Screenshots: https://prnt.sc/s70lra > https://prnt.sc/s70mb5 > https://prnt.sc/s70mmg > https://prnt.sc/s70mwb > https://prnt.sc/ s70nik
https://prnt.sc/s70nwf > https://prnt.sc/s70o5t > https://prnt.sc/s70ohq > https://prnt.sc/s70p2w > https://prnt.sc/s70pd6 > https://prnt.sc/s70pny
There is also a second way to verify directly without documents via corporate mail
We take corporate email, take the domain and go to it.
The email domain corresponds, look at the information on the site, look for the address, phone number.
take it and go to Google Maps and check there for information on the campaign
We take the data and enter it into Facebook. We write the campaign from the domain, click continue.
it doesn’t matter what the address is, the main thing is that the domain matches then the code comes
enter this code into FB and everything is verified
We do not forcibly activate the verification button. She will be active after the $110-170 spread
Script for transferring an account to a prepaid type to replenish the balance of the FB itself.
Paste it into the console and reload the page
Questions?
vitoscanelli 19:41
what is the point of draining traffic, how to get money out of there?)
MAXWELL 19:42
Anywhere, depends on your imagination. You can shed light on malware, phishing, and affiliate programs.
Wherever you go, traffic always comes in handy
ya8no 19:43
hi) thanks for the info!)
Is there a topic for mini-deposits numbers for non-visa? and will this topic work for mini-deposits not from FB, for example from some shop?
can you expand on the topic a little if we have stealak/snif/etc. how do further actions happen after setting up FB traffic?) it’s terribly interesting ahaha
MAXWELL 19:44
Specifically, VPA only works with a visa. Yes, it will work. Setting up traffic depends on the target, what idea you come up with, for what, etc. There are general points that can be used, but in general everything is individual
GorilaDuster 19:45
Do I understand correctly, traffic is very necessary for phishing?
MAXWELL 19:45
Yes, in all its forms
ya8no 19:46
Will it be possible to write to you in a personal message about general points for a recommendation, I’ll clarify there a little?)
MAXWELL 19:47
Yes
GorilaDuster 19:53
As I understand it, traffic is necessary so that, relatively speaking, in the state, when pizza is typed into Google, our site will be the first. and here’s a question about Google traffic: how to pour it on it and, as far as I know, you can use CC there to pay for traffic, will there be a lecture on this topic? in my opinion not a bad direction
MAXWELL 19:54
Yes, just an example was with Google, we have Facebook.
GorilaDuster 19:55
Are there any threads on the forum that describe this in detail?
MAXWELL 19:56
Specifically with Google. I think you can find it on the Internet and on the forum. There are general points that are worth relying on. With Google, everything can change due to updates, each time you need to change the approach as it burns a template approach to work
If there are no questions thank you for your attention.
Everyone in their life has come across such a moment that there is a product, but there are no customers, in the US it is accepted that even an old grandmother of about 50 years old does not post advertisements on the usual bulletin board, but goes and promotes her product, for example, through Facebook.
For us, this gives a big plus so that all the screws in this “fun” system, so to speak, are not tightened.
Now it’s no secret that every schoolchild whose height allows him to reach the keyboard pours on Facebook.
The situation is of course moving and changing very dynamically. Old approaches are dying out, new ones are emerging.
This is neither good nor bad, it has always been this way.
The first thing a carder should learn is basic information when working with this platform in the context of our shadow activities.
In our context, PP (Affiliate Program, also known as PP) - it will pay us money if we don’t pour money for ourselves (stiller, hvnts and others), but for an offer.
You can find a bunch of affiliate programs just by kindly typing into Google “affiliate traffic arbitrage”
What does the affiliate program give us?
The opportunity to earn money on deposits, registrations, subscriptions and a bunch of other tinsel.
OR if we don’t want to work with our uncle and want to work for ourselves, then we can use stealer or other malware, traffic with the right choice of target audience (TA) is simply excellent.
Mini-deposits - not a large amount that FaceBook sends, most often up to $2, to make sure that we are the owner of the card.
CH – card owner.
CR – conversion. Example: 1k10 downloads the app, 1k20 makes a deposit, and so on.
Lead – Roughly speaking, this is the client for whom we will be paid. It is stated in the offer itself
Creo is aka creative. A picture, GIF or video that a person will see when scrolling through their feed, viewing a story on Instagram, etc.
DeepLink - roughly speaking, this is our referral link that is embedded in the sidebar or at the stage of adding advertising through which the software can track that the traffic came from us.
Naming is a relatively new feature when traffic is tracked not by a deep link, but by the name of our campaign and ad. Set by the software itself.
Also, in naming and deep linking you can write “tails”, for example “account1”, the second tail is the name of the source, for example, and so on. All this data is arbitrary and does not in any way affect the ebb
Our AntiDetect settings are the most standard https://prnt.sc/s6x2tc
When choosing socks, pay attention to their type. FB is more loyal to mobile IPs than to residential ones.
FB fits absolutely any socks from the country the account owner belongs to, but by using socks that are closer you add trust to you and your actions.
Now let's go through the account itself
Let's go to Google and google our FaceBook. We do this process in order for FaceBook to see that we are not following a direct link, but through a search engine, the so-called ref transition.
You can also find a site where there is an entrance via Fb and log in that way. Considered a more trustworthy entry
We look at the account registration date and asset. https://prnt.sc/s70dhf
I recommend taking accounts no younger than 2018-2019, since if you take younger accounts, additional checks may fail, which will interfere with us and slow down our work with you.
Next, go to settings and turn off all notifications. This is necessary in order to protect yourself from changing your password and losing our valuable time.
First step https://prnt.sc/s70ebe
Second https://prnt.sc/s70esb
Warming up.
I would like to draw your attention to the fact that FB reacts very positively to how we send reports for rule violations
This has a very positive effect on trust
We heat for 1-2 hours no more as it is less effective. I absolutely do not recommend using
scripts and other automation tools!
The next day we will create a Business Manager. He's BM
You can also run ads on behalf of your account, but the downside is that all notifications from the post will go directly to your account.
To solve this problem, there are paid scripts that delete comments under your post.
Proper creation of BM.
After 30-50 minutes of warming up, we proceed to creating a BMA. Copy and paste into the address bar
business.facebook.com and click the blue button to create an account, nothing complicated
fill out the data, I advise you to enter the company name as the name of the account owner since the owner
account may assume that FB itself created a BM for him, or it will be possible to write thematic names like Lucky Coin, Lucky Spin, and so on, put coins on the avatar, etc.
We take all other data except the soap box (where we will receive a letter that we would like to confirm) from here
https://www.fakeaddressgenerator.com/usa_address_generator in my example, the owner lives in the USA, you take it under your country.
Next, go back to the main FaceBook to the Advertising on FaceBook tab
after the transition, click Create an Ad and create a group, fill it out, put a photo, invite a couple of friends, turn off notifications in the group itself in the settings > notification section
There is no need to create a group if your account already has one.
We give it lightly from 12 hours to a day.
The next day comes the most interesting part. The process of linking and choosing an offer for the flood
We warm up the account for 1-2 hours after going to http://business.facebook.com/adsmanager/manage
Go to Ad Accounts
We put a dot in the first paragraph of Advertising Purpose, after which we will be asked to enter the address. We still turn to the site fakeaddressgenerator.com
Let's move on to the binding. I will knit SS. https://prnt.sc/s70gu3 click here
Before binding, it is worth remembering a couple of points that there is pre payment - when we pay before the fill and post payment
Also, don’t forget to turn off notifications in billing
I recommend working with CC as you may not have time to drain from the same BA account
If you still want to try to merge with BA, then it’s worth considering that FB loves non-frozen banks, for example regional Pennsylvania, FCU, CU and the like
The trick of working with them is to unscrew a large amount and drain the maximum in the shortest possible time.
There are 3 outcomes when linking a card
First: https://prnt.sc/s70h87 The card was simply spat out
Second: https://prnt.sc/s70hjz Spit out due to the fact that she was tied many times 3-4+
Text may vary. If we see a familiar word Bank, we call it.
Sometimes there are moments when FB themselves don’t know why they blocked your account (they caught fraud) and calmly remove the block, or simply after the first contact with support with the words “Hello, what’s the problem?”
Example response from support https://prnt.sc/s70hx2
Third outcome: https://prnt.sc/s70i8y Beauty. Success
Before the start of the strait, I advise you to spend no more than $1-5 on promoting a post in our group. As practice shows, this results in fewer checks of various kinds, ejections from the account, etc.
Go ahead. We gave the rk ID (look at the address bar. Example: ?act=XXXXXXXXXXXX&) to our PP, we were given a shelf and we want to send traffic to it.
We go to http://business.facebook.com/adsmanager/manage and select the place where we will pour. We configure it and make sure to register deeplink.
We definitely upload video 1080x1080 or 600x600, you can get carried away and do it for each format (PC, tablet, phone, tape, post, etc.), but this is a universal option.
After checking our advertisement, after a while we receive a mini-deposit.
https://prnt.sc/s70isb, and with it the deactivation of the account until confirmation
Sometimes a non-standard mini-deposit arrives, as in the example above. We are not afraid and enter the first 4 characters.
We check for mini-deposits without ringing or enroll. Go here purchasealerts.visa.com
We shove our card there, if it lets us in we can look at the mini-deposits.
How do we know if our card will fit through?
Before purchasing, we take 5-6 symbols of the card we want to buy (we need 9 to check). and add random 3-4 numbers.
If the card works, we can watch mini-deposits on it
Also an update for this service. They have opened many countries besides the US and now you can test new geos
This happens if we haven’t warmed up enough, the maximum amount we can spend daily (aka daily budget) is $50, and then if everything is really bad then $20-25. Don’t despair and go to the panel itself where we have a spill ( Ad Sets)
Let’s say it was $20, we bet $40-70 and so on, using this method I was able to increase the daily budget to a maximum of $700, but this is not the limit.
Carry out these frauds only after 1-2 spans!
You can also buy ready-made bms with daily 250/350/unlimited, after linking the card it is better to give such accounts one day, since it will not always be able to show the real limit from the very beginning
There is also no need to make frequent spreads for small amounts, this is a gross mistake and the bank does not like it
It is best to carry out spreads up to the maximum amount. Example: your daily deal is $50, you make a $40-45 spread to prevent FB from debiting the money itself. From the bank’s side, transactions should not be more frequent than 3-6 hours
Mini-deposits should also not be sent on the same day from all accounts. This also counts
If you write off manually, it’s more trustworthy than just letting FB write it off automatically
Let's see why our advertising was turned off
Open your Ads Manager
https://www.facebook.com/adsmanager/manage, right-click
select View code https://prnt.sc/s70k8b
We search for the phrase accesstoken or access_token and find token: https://prnt.sc/s70klj
Go here http://maskfb.ru/ and insert our token.
Important! Do not insert the token if you have NOT been disconnected or are being opened, since the token is used to log in from the bot, as a result of which the account may fly off
We look at other people's creative ideas. Let's look at the text.
Go to https://adheart.ru/ and create an account there https://prnt.sc/s70kxr
we choose what interests us. you can simply ask for a direct link from support and paste it here and look at the text, creo specifically from this software from our competitors
Further, if there is a desire to expand on a large scale, it will be possible to verify the BM to further expand the number of RCs to 30-80 pieces!
We can start advertising initially using a personal advertising account, and the rk bma that we created
after several spans, the number of advertising offices will increase to 5 BMs, which we create gradually and as needed
Let's start verification and go to https://business.facebook.com/settings/security.
We check whether the verification button is active.
Most likely not, and we need to activate it. To do this, we carry out the following steps.
Let's start registering, select Developer and then also select Developer. We enter arbitrary values; we will not use the application itself, it is only needed to activate the verification button.
https://develope.facebook.com/apps, where we select Audience Network as a monetization source, we begin. We choose our BM. E-mail is arbitrary, any country, the main thing is that there are docks.
Next we write a random name. After creating the monetization object, we return to https://business.facebook.com/settings/security and see that the button has become active! Let's start confirmation.
Screenshots: https://prnt.sc/s70lra > https://prnt.sc/s70mb5 > https://prnt.sc/s70mmg > https://prnt.sc/s70mwb > https://prnt.sc/ s70nik
https://prnt.sc/s70nwf > https://prnt.sc/s70o5t > https://prnt.sc/s70ohq > https://prnt.sc/s70p2w > https://prnt.sc/s70pd6 > https://prnt.sc/s70pny
There is also a second way to verify directly without documents via corporate mail
We take corporate email, take the domain and go to it.
The email domain corresponds, look at the information on the site, look for the address, phone number.
take it and go to Google Maps and check there for information on the campaign
We take the data and enter it into Facebook. We write the campaign from the domain, click continue.
it doesn’t matter what the address is, the main thing is that the domain matches then the code comes
enter this code into FB and everything is verified
We do not forcibly activate the verification button. She will be active after the $110-170 spread
Code:
var accountId = require("BusinessUnifiedNavigationContext").adAccountID;
var fb_dtsg = require('DTSGInitialData').token;
var __user = require('CurrentUserInitialData').USER_ID;
fetch("https://business.facebook.com/api/graphql", {
"headers": {
"content-type": "application/x-www-form-urlencoded",
},
"body": `__a=1&dpr=1&fb_dtsg=${fb_dtsg}&variables={"input":{"billable_account_payment_legacy_account_id":"${accountId}","logging_data":{"logging_counter":22,"logging_id":" 3418624251"},"recurring_enabled":false,"actor_id":"${__user}","client_mutation_id":"3"}}&doc_id=4886770528075857`,
"method": "POST",
"mode": "cors",
"credentials": "include"
}).then(e => {
console.log("Done Changed to Prepaid");
location.reload()
})Paste it into the console and reload the page
Questions?
vitoscanelli 19:41
what is the point of draining traffic, how to get money out of there?)
MAXWELL 19:42
Anywhere, depends on your imagination. You can shed light on malware, phishing, and affiliate programs.
Wherever you go, traffic always comes in handy
ya8no 19:43
hi) thanks for the info!)
Is there a topic for mini-deposits numbers for non-visa? and will this topic work for mini-deposits not from FB, for example from some shop?
can you expand on the topic a little if we have stealak/snif/etc. how do further actions happen after setting up FB traffic?) it’s terribly interesting ahaha
MAXWELL 19:44
Specifically, VPA only works with a visa. Yes, it will work. Setting up traffic depends on the target, what idea you come up with, for what, etc. There are general points that can be used, but in general everything is individual
GorilaDuster 19:45
Do I understand correctly, traffic is very necessary for phishing?
MAXWELL 19:45
Yes, in all its forms
ya8no 19:46
Will it be possible to write to you in a personal message about general points for a recommendation, I’ll clarify there a little?)
MAXWELL 19:47
Yes
GorilaDuster 19:53
As I understand it, traffic is necessary so that, relatively speaking, in the state, when pizza is typed into Google, our site will be the first. and here’s a question about Google traffic: how to pour it on it and, as far as I know, you can use CC there to pay for traffic, will there be a lecture on this topic? in my opinion not a bad direction
MAXWELL 19:54
Yes, just an example was with Google, we have Facebook.
GorilaDuster 19:55
Are there any threads on the forum that describe this in detail?
MAXWELL 19:56
Specifically with Google. I think you can find it on the Internet and on the forum. There are general points that are worth relying on. With Google, everything can change due to updates, each time you need to change the approach as it burns a template approach to work
If there are no questions thank you for your attention.
