Stages of carding

[chushpan]

Carding is a complex process that includes several stages, from obtaining bank card data to using or selling them. Each stage requires certain skills, tools, and strategies. Let's look at the main stages of carding to understand how this illegal activity is organized.

1. Obtaining bank card data​

1.1. Skimming​

• Installing skimmers on ATMs or terminals:
  • Skimmers read data from the magnetic strip of the card.
  • Additional cameras record PIN codes.

1.2. Phishing​

• Creation of phishing sites or mailings:
  • Users enter their data on fake pages.
  • Using social engineering to deceive.

1.3. Malware​

• Distribution of stealer programs:
  • Programs steal card data from infected devices.
  • Using Trojans to access victims' computers.

1.4. Data Leaks​

• Using databases stolen during hacking of companies:
  • Buying data on the darknet.
  • Search for vulnerabilities in company systems.

2. Data verification and analysis​

2.1. Checking the validity of cards​

• Using special tools:
  • Checking the cards for functionality.
  • Balance analysis through automated systems.

2.2. Determining the card type​

• Division of cards into categories:
  • Debit or credit.
  • Limits and possibilities of use.

2.3. Data classification​

• Organizing data for further use:
  • Group by country, bank or card type.
  • Preparing data for sale or use.

3. Using these maps​

3.1. Online shopping​

• Use of data for online shopping:
  • Ordering goods to fictitious addresses.
  • Using money mules to obtain goods.

3.2. Creating clones of maps​

• Writing data to empty cards:
  • Using special devices for recording.
  • Cash withdrawal from ATMs.

3.3. Money Transfers​

• Transferring funds to other accounts:
  • Using cryptocurrencies for money laundering.
  • Transfers via online services.

4. Selling data​

4.1. Darknet Markets​

• Selling data through forums and marketplaces on the darknet:
  • BriansClub and other platforms.
  • Setting prices based on data quality.

4.2. Wholesale sales​

• Wholesale sales of large databases:
  • The buyers are other carders or groups.
  • Using cryptocurrencies for anonymous transactions.

4.3. Collaboration with other scammers​

• Joint operations with hackers, "mullahs" and other participants:
  • Assigning roles to maximize profits.
  • Minimizing the risks of exposure.

5. Money laundering​

5.1 Using Cryptocurrencies​

• Converting stolen funds into Bitcoin or other cryptocurrencies:
  • Using mixing services (mixers).
  • Withdrawal of funds through exchangers.

5.2. Legal businesses​

• Money laundering through legitimate companies:
  • Creation of fictitious companies.
  • Inclusion of stolen funds in financial flows.

5.3. Translations via "mullovs"​

• Using proxies to transfer money:
  • The "mullahs" transfer funds into their accounts and then withdraw them.
  • Minimizing direct connections with carders.

6. Protection and anonymity​

6.1. Anonymous technologies​

• Using Tor, VPN and other tools to hide activity:
  • Hiding IP addresses.
  • Protection from law enforcement surveillance.

6.2. Data encryption​

• Protecting data from interception:
  • Using encryption to store and transmit data.
  • Work only with trusted partners.

6.3. Frequent change of identity​

• Creating new accounts and characters:
  • Avoid prolonged activity under one profile.
  • Minimizing the risks of exposure.

7. Consequences and risks​

7.1. Legal consequences​

• Arrests and criminal liability:
  • Prison terms.
  • Fines and confiscation of property.

7.2. Moral conflicts​

• Internal torment due to illegal activity:
  • Feeling guilty for your actions.
  • The desire to become legal.

7.3. Risk of betrayal​

• Betrayal by partners:
  • Fraud among carders.
  • Informants working with law enforcement.

Conclusion​

Carding is a multi-step process that requires technical skills, strategic thinking, and caution. However, each step of the activity is associated with high risks, including legal consequences and moral conflicts.

The main takeaway: The best way to use your skills is to apply them for legitimate purposes, such as cybersecurity. Protecting data and combating fraud will not only benefit society, but also help avoid serious problems.