The Art of Carding Module [Basic Background and Credit Report Concepts]

Mutt

Professional
Messages
1,459
Reaction score
1,096
Points
113
Gentlemen, hello. I have an intention to launch the module "The Art of Carding", which will teach how to understand and exploit the architecture of the American banking system. I will try to maintain consistency in the structure of the presentation, the material will be released gradually, and its content will be filled with a deep understanding of the topic with a demonstration of practical cases.

Let me begin with a brief lyrical introduction.
In the US (United States of America), the paradigm of registry transparency has historically developed; in the 21st century, information about records dating back to the 19th century is still accessible (including court cases, land transactions, family trees, etc.).
The state apparatus of America, free (from international obligations and human principles), and capitalist, is the main beneficiary; it has legitimized the processing of highly sensitive personal data for the most significant corporations.
These corporations learned to effectively collect, structure, analyze, and combine data from various sources, then, following all the canons of B2B, began actively selling ready-made digital portraits of citizens to anyone with money.
You're probably wondering what data a digital portrait includes? Literally everything is known about most citizens: current and previous residential addresses, phone numbers, email addresses, list of relatives and social connections, various licenses, convictions, bankruptcies, cars owned, past and present employers, educational information and believe me, the list does not end there...
Add trackers from tech giants like Google, Amazon, Meta, Cloudflare and the phrase about the color of the cardholder's underwear will no longer be perceived as a joke.
As you may have already understood, the state's statements about the protection and inviolability of privacy are just a cheap veneer, behind which lies an entire infrastructure of proxy tools like Experian, Equifax, Transunion, LexisNexis, Innovis, Endato, PeopleConnect and others.
Honestly, somewhere in his grave, one Orwell is turning over.

With the introduction out of the way, let's move on to the practical exploitation of institutional vulnerability in a country with an abundance of free air and alcohol in red cups.

There are several starting points for conducting a search; in practice, you will always know where to begin. In my example, I will use First Name + Last Name + City & State. Familytreenow is a completely free tool necessary for obtaining general information about a person (in Karzha terminology, a background checker, or BG in common parlance).

FUrJUKc.png


One entry was found. If the search query had been devoid of the city, the results would have displayed dozens or hundreds of name-takers. To view the BG report, simply click the "View Details" button.

32adUeB.png


Below are screenshots from the background report, I suggest you take a look at them.

DQn39LS.png


nqcVzwF.png


u3H1bIp.png


wWEgDcg.png


OtuA4Ib.png


7VICT5j.png


In the vast majority of cases, you won't need to keep a list of all addresses and numbers. I'll summarize the information I've collected in a universal full-file format. (Full, fullz, full info - a general term for a complete set of personal identifiers.)

Name: James Bruce Haugen (Jim B Haugen)
Address: 3104 S Birch St, Perryton, TX, 79070 (Jan 2022 - Jul 2025)
DOB: Jul 1946
SSN: N/A
CS: N/A
Employer: N/A
Occupation: N/A
Phone: (806) 930-1026 (Possible Primary)
Email: N/A

With the basic information collected, it's time to turn to an alternative BG checker with an expanded dataset – Truthfinder. I recommend carefully reviewing all the screenshots:

7K9e9LP.png


CNLp6e4.png


zK2RQ2V.png


jVRR1oz.png


FKwQces.png


Truth often displays the state in which the SSN was issued.

tQiFG1P.png


Don't be afraid to use the button to load additional information; it's saved my nerves more than once while taking the KBA (Knowledge-Based Authentication, more on that near the end of the article).

qZMpWvI.png


AaEuNhG.png


HusNyxH.png


e2W2LjX.png


0eqQxtq.png


AHGXWMc.png


D46Sm1c.png


By4Qu7p.png


IqVr6FM.png


D6kO6fb.png


ePjBcns.png


BGk6l9g.png


EseCWF1.png


kOWHJva.png


mPmIsEn.png


An impressive amount of information, isn't it? Just by examining James's BG reports, we discovered residential addresses, contact information, bankruptcy records, YMCA affiliations, professional licenses, cars owned, and much more. While the depth of the reports varies from one full report to another, the data is often sufficient for effective work. It's no coincidence that I placed the email screenshots at the very end; not many people know that after a certain period of inactivity, email addresses become available for registration again. The same principle applies to private domains; when corporate email addresses appear in the BG, you can check the domains for availability and, if they're available, use them to your advantage.

PBSn61k.png


Of course, it is more profitable to check traditional email services like Gmail, Yahoo, AOL and Hotmail first.

MuxRZ5n.png


4kwG9mk.png


To proceed further, you need to check SSNDOB. (There are hundreds of services on the market offering this service.)

FMTPWJx.png


It's time to update the entry in the card index:
Name: James Bruce Haugen (Jim B Haugen)
Address: 3104 S Birch St, Perryton, TX, 79070 (Jan 2022 - Jul 2025)
DOB: 07/23/1946
SSN: 451-72-2990
CS: N/A
Employer: Ymca Of Moore County Inc (Jan 1, 1995 - Apr 1, 2025)
Occupation: CEO
Phone: (806) 930-1026 (Possible Primary)
Email: jimhauen@yahoo.com
Click to expand...

The next step is to get your credit report (CR, or credit report, as it's commonly known). To obtain it, we'll use information from BG + SSNDOB. Annualcreditreport allows you to request your credit report from any of the big three bureaus — Equifax, Experian, and TransUnion — once a week for free. In my example, I'll use TransUnion.

bwrlCt9.png


GISa0dz.png


8zW71gk.png


dvQ6ufc.png


7NGZte6.png


If you provide a phone number from the BG in your application, it will almost certainly already be in the TU records. In this case, a one-time code received via SMS or phone call will serve as the identification method. If you provide a phone number that isn't in the Transunion records, identification will be performed using the KBA I mentioned above. Given that access to the holder's number is unavailable, using a random phone number is the correct solution. (You can replace the last four digits of any number from the BG.)

U9VwjDL.png


Sometimes questions and answer options are pre-set false; this is one of the defenses used in the KBA. The first question was one of these; in this case, I had already seen records about the bankruptcy and the house's value, so I selected "None of the Above." The second question returns the current address record: 3104 S Birch St, Perryton, TX, 79070 (January 2022 - July 2025). Indexing in the BG is sometimes delayed, given that January 2022 is listed, it's almost certain the holder has lived there since late 2021.

A little useful off-topic:

To answer the third question, note the phone number (402) 654-2103 (HOOPER TELEPHONE COMPANY). As a result, the KBA was successfully passed.

kl06Vih.png


A credit report from TransUnion looks like this:

c7wvoeL.png


QMW6A3Y.png


wQeKabZ.png


fCLLWeE.png


wIqFSI4.png


kRYcR0t.png


You can also check your credit score (CS). I'll use Credit Karma as an example, but there are many similar services (Upgrade, CreditWise, MyFico, Credit Sesame, and others).

g9MsqUW.png


dSHbApg.png


tuynsCz.png


JOlVOp2.png


NDHLSQg.png


Credit Karma uses a similar principle to TransUnion regarding phone numbers. Since I use a disposable number that's not associated with the cardholder, the KBA process is activated, and I use the data obtained from BG and CR to complete it.

EmMr9iv.png


Efc0T2t.png


It's time to update the full post again:
Name: James Bruce Haugen (Jim B Haugen)
Address: 3104 S Birch St, Perryton, TX, 79070 (Jan 2022 - Jul 2025)
DOB: 07/23/1946
SSN: 451-72-2990
CS: 710
Current Employer: RETIRED
Previous Employer: Ymca (Jan 1, 1995 - Apr 1, 2025)
Occupation: CEO
Phone: (806) 930-1026 (Possible Primary)
Email: jimhauen@yahoo.com

I know some of you don't fully understand the information contained in your credit report. This is a topic for a separate article, but I'll go into more detail in the future. The purpose of the first article in this module was to demonstrate the imperfections of the open-source identification system. Basic security mechanisms in the financial sector are built on the need to confirm information that underwriters already know. Given that critical personal data is available to literally anyone for a few cents (sometimes even for free), all we can do is effectively disguise ourselves as the next John Doe, creating money out of thin air and throwing it away. Until then, gentlemen, and good luck to everyone!
 
Top