Lecture #19 - Air, hotels (carding training 2024)

Carding

Professional
Messages
2,871
Reaction score
2,308
Points
113
Lecturer: Bogd
Let's talk today about booking hotels and air tickets.
The lecture is quite lengthy, you need to read it carefully.
As usual, the lecture is divided into 2 parts, this is theory and question and answer.
In turn, the theory is divided into 3 parts, after each of which I give 5 minutes for you to rethink everything, write down questions, and ask me after the lecture.
To begin with, a little introductory. Always be aware that a cheap hotel is only a POSSIBLE discount, and relaxing in this way without having in your pocket an amount equal to the cash register of the hotel you made is a much more extreme activity than skydiving.
As I said above, we will have three areas of work, and they are very closely related to what we will discuss regarding aviation.
Now to the directions:
Hotels are made in 3 ways:
1) Direct entry into the hotel (via POS terminal with mail order/manual entry function). This is also an authorization form.
2) Miles. Among the people are rewards, roars, bonuses
3) Agents with their own processing, who authorize payments themselves, and accordingly take the burden of paying the hotel upon themselves
Let's start with the simplest - with direct driving
The screenshot above shows the authorization form. Agreement for payment from the hotel. Open it, look
The form of the Moscow hotel is given as an example, because it's in Russian
Never hit hotels in the Russian Federation and the CIS with direct hits, this is fraught.
Actually to the form.
The authorization form is an agreement to pay for hotel services.
You give “your” consent to the debiting of payment for accommodation and additional hotel services from “your” card
How to get this form?
We call the hotel and ask to connect us with the reservation department.
We make a hotel reservation and ask how to pay remotely.
You can say that you are paying for a friend, or introduce yourself as an agency or concierge service.
Dictate your email, you will receive a contract for it similar to the one I sent above.
order drawing of the card on both sides, a passport, and filling out this form.
Send everything you received from the renderer back to the hotel.
Please send slips about successful payment.
The check looks like this: When we received the check - everything is ok, you can go to the hotel.
Sometimes a hotel asks you to email them to submit a form.
Then the dialer records their mail.
You send her a letter with the following content (this is my template from 1919, you can create your own):
Hello, this is (Name of the person who called), please provide me the third party authorization form for booking - (reservation number) for my guest - (guest name). If it's possible of corse. Thank you.
A very good addition to this scheme would be your own website.
With the sale of vouchers.
And it would be cool if the site (domain name) was registered a long time ago.
You buy a domain that is several years old, order a website with tours for $50-100, write beautiful texts
and in the event of a gathering, if the police come to talk to the guests, this will greatly help
Never pay a form on behalf of a guest.
This seems to many to be the simplest option, but in this case you simply do not give your traveler a chance. Always say that you want to pay FOR SOMEONE.
Those. The bottom line is that the scheme looks like this: Call the hotel, ask to pay for your client, ask for a form, fill out the data, send the form and documents that the hotel asks for, send all this to the hotel’s accommodation department, and wait for payment receipts.
Sometimes the hotel stupidly forgets to send you a check, in this case you wait 2-4 hours and call them again. Don't go to the hotel before receipts.
also an important point in the form itself
Under no circumstances should you tick all expenses.
The hotel works like this:
The form has arrived.
the first transfer was written off the money for accommodation plus taxes.
And then they wrote off the minimum deposit for the minibar.
and when you or your guest starts wandering around the hotel, taking all the services at the spa, buying yourself a crystal for a couple of green pieces.
each of his actions, if you check the box, will be in the form of a card transaction.
That is, he went, ate, wrote down the number - the hotel wrote off the amount of what he ate went for a massage - the hotel wrote off.
And given that write-offs are made through a regular POS terminal (with a manual entry function, also known as a mail order), they may see an error there that says this is impossible.
And God forbid that there was an error - rejected by the issuing bank, call the bank.
and not an inscription with a squeaky sound accompaniment
"Card stolen, seize"
Therefore, if you need a deposit to pay for hotel services
Fill out another form.
Indicate in it a clear amount that needs to be debited from the card. And don't check all expenses.
Done with the hotel form.
Let's go to the form or directly enter it into Air tickets.
In general, everything is exactly the same as with hotels, we call, ask for the opportunity to pay by card, receive a form, pay
Some airlines have the opportunity not to even contact the form at all, but to dictate the card number, date, cvv code directly over the phone and write off the money.
But there are important details. If we take (purely for the sake of an example) the Aeroflot company, we will understand that after a successful flight, after some time, with direct entry, fate may come to collect the cost of the ticket.
Somewhere on the forum there was a similar incident with one of the sellers, a couple of years ago.
But the fact remains that Aeroflot still allows you to pay by phone.
And most likely, the consequences will be exactly the same as I described above.
Also the second distinctive feature. A lot of airlines do not support 3Ds technology, hence the possibility of entering directly through the airline website, without asking for a VBV code. Which is also a direct drive.
Now I want to warn you that the biggest surprise is that
that some agents do not process payments themselves. And they are processed through airlines merchants.
Those. you are taken to a site, a third-party site, with air tickets
Enter your data there, enter your card details, everything seems to have been paid for.
But in reality it turns out that you paid directly to the airline that operated the flight.
Which is also a direct drive.
I strongly advise against flying with tickets made directly.
If everything goes much easier with hotels, then the Airlines are very fond of applying sanctions to such clients. Also, not the worst, but rather unpleasant option is a blacklist.
Let's summarize the direct drives.
As you can see, direct driving is simple, but has significant risks.
Which can be beaten in skillful hands.
A very good addition to this scheme would be your own website.
Same as in hotels.
Let's move on to the second method.
Method 2 - Bonuses, miles, rewards.
2.1 [Miles Hotels]
I think each of you has cards like Sberbank Aeroflot, Tinkoff Travel and so on. They are credited with miles, for which you can then buy a plane ticket or a hotel ticket.
There are a lot of such loyalty programs, they are all divided into 2 categories
1) bank bonuses are what Tinkof, Sberbank and all other banks give us
2) rewards for specific hotel chains, airlines, intermediary sites
We may come across the first ones in US material, specifically in enroll. It’s hard to work with them, just like with the second ones.
Examples of bonus programs for hotels: Hilton, Reddison.
Just look for either logs or brute accounts of these networks, log in using the data received, select one of the hotels in the network in your personal account, spend points from your balance, go to the hotel and live) This is specifically about Hilton and Reddison.
But it’s worth taking into account that not all companies with miles are so friendly. You can work according to the roars. And quite successfully if you deal with them specifically and very diligently.
Look for companies, order brute software for them, go in, test, see which company behaves.
The biggest problem with this scheme is that often you can book a room only for the owner of the account, this means that you need to go to the hotel and come up with a story that the one who booked will be there tomorrow, but in the meantime, we’ll check in (a couple of services do this on the forum).
There are also advantages to this work.
If you have access to mail (often everyone uses the same password everywhere, or you have a log where you already have a pass),
Then you can knock out its owner from the account in advance, change the phone number, password, email and leave the account to lie and wait in the wings.
Well, when we need it, we go live as if it were our own home and make a reservation)
As a rule, if they have been in bed for more than 2 weeks, nothing will happen to them).
I don't use roars in my work..
Simply because it is wildly routine work.
And you cannot predict in advance the behavior of a particular company.
When you work with banks, everything looks the same, plus or minus. When you know your bins, you understand how much it will give when the charge flies, and you hone it all to the maximum so that there are no problems
2.2 [Air miles]
So, airline miles are the same bonus programs as in hotels.
But here, by the way, there are many more of them. After all, every airline has them, all + are the same.
In 2020, there were a number of receptions at the check-in counters of those customers who bought tickets with miles at Lufthansa.
With them, too, not everything is so smooth, but it is much safer than driving directly, or flying with Lufthansa airline miles)
This is what cases like this tell us.
Therefore, I refused to use airlines miles in my work, and instead I use miles from banking companies.
Obviously, bank miles are found in banks. And more specifically, in enrols. For example, an already pressed umb bank.
He had his own daughter, Expedia, where you could buy tickets and hotels using miles, without any confirmation or anti-fraud
Actually, about a year and a half ago, when everyone and everyone started hammering on this topic.
Fraud was almost completely absent. People flocked to hotels, made tickets, everything was going great.
I can’t tell you how now, but considering that this topic began to circulate in thematic chats back then, I don’t think so
There are a lot of rolls, you can ask the sellers, I think they will be happy to sell you a roll with a balance of miles.
One more point, I think it’s obvious. Where there is a fairly large balance of points (in the roll) - CH has already accustomed AF to the fact that he often flies. This means that travel transactions are quite easy.
Accordingly, you can try to get a ticket through an agent, and as practice shows, it goes quite successfully.
That is, such a roller can be wrung out twice. The first time was for miles, the second time was for the balance itself.
Let's summarize the points scored
Points, miles, especially bank miles are often a very safe way to book, but you need to make an effort to find the material.
Let's move on to the fun part - agents!
Stralixxx - re-uploaded to another hosting, check it should open
Screenshots
3.1 [Agent Hotels]
The agent is a gasket office, usually a search aggregator like expedia, which takes on the burden of settling accounts with the hotel/carrier.
It seems to me that it’s easier for these guys to pay 2-3 thousand to the hotel than to lose their reputation.
Admitting that they have weak protection against fraud.
Therefore, often the agent does not send a chargeback, but pays the hotel out of his own pocket.
Agents are divided into 2 types:
Some do not have their own payment gateway and send your card to the hotel.
Others process your payments themselves.
We, of course, need the latter.
The question arises: how to understand which agent processes the money himself, and which one sends the card further?
I take the CC with the correct number. Let's say the card number was 5555 5555 5555 5555 expiration date: 05/25 cvv 555 and I change the date to the wrong one.
It turns out 5555 5555 5555 5555 and set the card expiration date to 06/26. CVV 555
We are simply looking for agents. Let's go to Google and Google, figuratively hotel Berlin
And first it will give you aggregator sites.
We go to those sites that we googled and begin to indicate a card with an erroneous date where we catch a Decline, the agent processes itself where the booking voucher is issued - the agent sends your card details to the hotel.
Accordingly, the first ones are written out, the second ones are thrown away.
Of course, we are looking for agents abroad. Look for different countries.
A year ago, some inconspicuous no-name agent from Germany was handing out reservations for 4-10k without tickets and from any cards.
We googled it with the help of a translator.
Having figuratively entered Hotel Berlin there, translated it into German and from the DE session we went to Google
Very often you will come across expedia and its daughters, you can still work with them.
Expedia is good because its merch does not require VBV. That's why she gets beaten all the time. But the absence of VBV is accompanied by the wildest antifraud.
Not everyone can find the key to antifraud, and it (this key) changes so often that many find it easier to look for others
The most important thing in working with such large aggregators is to imitate the behavior of a real user. I never go to book the hotel I need directly. I scroll through different search pages, look at photos of the hotel, open reviews
After you have collected agents who process payments themselves, create another file. There you write out all the agents who request the VBV.
Those that VBV does not ask for - we put in a separate file. We will work with both) How to work - I will tell you a little later.
In the meantime, let's move on to Air Agents
3.3 [Air Agents]
Here, as we have already found out, there are those agents who process payments directly through the airline. Of course, they are not suitable for us for agent driving
You can check them using the method described with hotels, or the 2nd method: from a roller. There, the transaction history will display where and how the payment was made. If we see an airline there, the agent is not suitable for us. If the agent's name is what you need
Also, there are agents with VBV, and others without.
From personal experience, agents without VBV have anti-fraud based on the principle of post-order processing, and can fly some time after booking. Of course, it depends on the office, but 3D agents are much less likely to fail.
As for the rest: searching, warming up and driving in - everything is the same as with hotels.
Summarize. Driving through an agent is the safest, but you need to look for the giving agents through tests.
I’ll also add: We don’t do bookings on the day of check-in, 80% of cases the meeting arrives in the first 24 hours
We do not buy cards from the following countries: India, Turkey, Thailand, Malaysia, Argentina - They give well, but they allow very large amounts. But they fly off very quickly.
VBV merchants can be beaten with USA with a VBV reset. Or eu with autovbv. It is much easier to hit with an EU mat - it climbs very well, there is less fraud
We are looking for eu cards with autovbv using tests. We are looking for merch from VBV, where you need to perform the least number of actions and there is an amount of up to 100 bucks for payment. So that there are no hemorrhoids with registration and so on.
We again create a file in which we will record all our tests and results. We write down all the banks, bins and CC levels that we bought into it.
We go to the site and poke our cards. Those where the VBV requested are marked with a minus.
Those where the VBV did not ask and the payment went through - we put them in a separate file, these bins will go further
Why do you need to test up to 100 bucks?
But because on some banks the VBV fires only after a certain amount. let's say from $150
In order not to miss such bins, we need a smaller amount
Next, we go to check the bean for larger amounts, everything that gives over $200 will give with a 90% probability of up to $999
Anything above 999 usually allows you to write off your entire balance.
There is a third option, CC with VBV, but finding such a checkmate is almost impossible now.
Regarding the USA. Try to avoid banks like Chase, Capital, BofA. The less popular the bank, the more likely you are to push USA into an agent.
At the lectures on enrols, you were told how to roll cards, take a ftsush card, punch the dc and ext and calmly bypass the dc, changing the phone number or reset the db. If necessary, you can call the bank with a request to skip the payment
If you decide not to roll CC, but to buy, then go to any enroll service. There you will see that some of the names of banks that have been obscured are hidden and written “non-public enroll”
And some names write
These are the ones they write - we don’t need them for the hotel business for nothing
Now some TIPS:
There is no need to configure the system at all. I work from sphere or octo, the configs do a very good job of masquerading as a holder system.
Look towards mobile applications
The PC generation is becoming obsolete, everyone is switching to smartphones. When we work with web versions, we immediately score ourselves a couple of antifraud points. For now, this is quite tolerable, but in 2-3 years, everything will change a lot. Always think like the majority of people on the planet think. Personally, for my purposes, I have been doing everything from my mobile phone for a long time. So are cardholders.
Look towards Android emulators, or even better - buy a real mobile phone on Android, play around with the distribution of the Internet with a built-in sox (this is not for me, there are manuals on the Internet, I have a special router for this matter) and configure the phone for the country from which want to hit. Cross-country ability will be much higher. I think that very soon the product that I use will also appear on the market, and playing with mobile phones will be even more fun.
Don't see each other for PR. All the services that write that they are reliable, without crashes, and so on, do everything exactly as I told you today. And some don’t even do that, and everything is much worse).
And most importantly, STATISTICS! Write down everything you do
You just don’t yet imagine how much money, time and nerves this will save in the future.
Write down all the names of banks, bins, where there is a bank account, where it is not, how much the card gave and how much it did not give
This is all an invaluable experience that will not leave you hungry in the future.
With this, our lecture is over. Now let's move on to your questions, please "+" in the chat, we start in 5 minutes
ya8no 20:55
If you change the target in your account when working with roars, then to whom? Is it safe, they can check and say fraud.
After reading the lectures, I got the impression that it was not the safest activity; I saw many offers on the forum with low percentages up to 28. Can these people be trusted, what is your opinion?
Well, just a question on the topic: do you travel a lot this way? Have there been any cases of conversation with the police?
Bogd 20:59
As a rule, when working with roars, nothing is allowed to change. The account has already been created and linked to something the User or his card. For this reason, I wrote above that I have to say that the main guest is delayed and will come later.
My opinion was stated in the first sentence - you shouldn’t buy it for free, you should always be aware that this is a cheap hotel. And you need to have with you an amount that is a multiple of the hotel or ticket amount so that you can pay in cash at the meeting.
I'm on a journey like this right now. And I live in a hotel. In general, I’ve never had any problems with the police; being smart and having a cache saves you in any situation.
Stralixxx 20:59
When registering a hotel for personal needs, is it worth making the left documents on yourself?
Screenshots never open
Bogd 21:00
Depends on the method, if it is a form, or hotel roars, then it would be good to have a fake doc for presentation. Although in general you can do without it. most often, if after check-out the charge arrives at the hotel, no one will look for you
I re-uploaded the screenshots from print to imgur, check . Maybe it’s worth manually inserting a string into the address?
GorilaDuster 21:02
What Android phone do you recommend for work? someone says the top one should be taken and someone says Samsung
Bogd 21:04
the one that is easiest to flash on root. As far as I know, 4pda recommends Samsung with Android 7, unfortunately my phone is a Chinese noname, but it came already with a built-in root. and in general it’s good for work, watch the lecture on Android. I think it explains the models that are better to root
Stralixxx 21:12
Do all hotels ask for photos of CC on both sides?
kk*
Bogd 21:14
if the form is via email and you send a card, then yes - they usually ask from both sides. They will enter it into the terminal by manual input. If you call, you can do without a photo.
However, when checking into a hotel using the form, it is always better to have a drawing of your passport CH, and CC
Stralixxx 21:15
Do agents ask too?
Bogd 21:16
No agents do not ask. An agent is like an expedition, you just check in using your passport.
 
Top