Father
Professional
- Messages
- 2,602
- Reaction score
- 795
- Points
- 113
Recently, we had an interesting story that we want to share on Geektimes, since we have an official blog here. This can be an illustrative case for the leaders of small companies who work on the Internet and, accordingly, face the problems traditional for online businesses. Should you be led by scammers, even if they threaten that they will “spoil your reputation” and that you will “no longer have clients”? Do you even need to think about what kind of goods your customers are sending (if you are a mail forwarder) and how your customers are paying you?
Today we will talk about the fraudulent use of someone else's credit cards and what happens when a company brings a fraudster to clean water.
It should be noted right away that we consider the security of payments to be a very important aspect of our work. We consider the prevention of fraudulent activities on the site as our area of responsibility. The department that deals with these issues in Qwintry has been working for several years and even runs a separate project Anticarder.com (which is used by many large Russian mail forwarders). But the conversation is not about him now.
So, a few weeks ago, Qwintry discovered suspicious activity in one of the accounts. Initial review revealed that the client's actions did indeed look atypical. Therefore, we continued our investigation. In the course of it, it turned out that the client trades in stealing other people's credit cards. And he has been doing this for a long time, on an ongoing basis.
Apparently, assuming that the law enforcement agencies did not care about him, he was not particularly hiding, which allowed us to collect a substantial evidence base, on the basis of which we came to the conclusion that we were dealing with a fraudster and that it was he who was hiding behind the nicknames on the forums. Please note that all third-party data published in our mini-investigation is taken from open sources.
Who is he - our “hero”? His name is Konstanin Gennadievich Bezprozvannykh, born on August 7, 1993 (23 years old), lives in Yekaterinburg. To warn of the concern of the guardians for the safety of personal data, we emphasize that he did not even think about hiding and several times published posts in our Vkontakte group directly from his account.
Let's start with the email. Konstantin has it quite noticeable - jiks1993@gmail.com, another of his mail is on Yandex and begins with the same letters - jiks13@yandex.ru, well, and the third box is here - jiks@bk.ru. As you can see, they all match with his Vkontakte address - vk.com/jiks13
As we said above, either from a feeling of complete impunity, or due to the peculiarities of his mentality, Konstantin left on the network, using precisely this data.
Therefore, our first step was to establish a fundamental connection between the “client” and fraudulent schemes. As you can easily see, this can be done quickly and easily. And on different sites.
Here he is on the well-known international forum of Internet scammers, where he has his own account, thanks for the description of another fraudulent scheme and promises to try it out:
leakforums.net/thread-672489&page=4
And this is another Carder forum where the hero of our story participates in discussions on cashing stolen bank cards by replenishing the balance of SIM cards.
www.dublikat.co/threads/zavliv-sim.15010
Pay attention to the dates of the discussions. It is quite obvious from them that for our “hero” this is not some random episode of his biography, but a long-standing and constant activity.
Move on. After we found out that Konstantin Bezprozvannykh, to put it mildly, is not a highly moral person, it is interesting to look at his activity on the Qwintry website. Here, as it turns out, our “client” did not bother too much and made the classic mistake of a presumptuous carder. They call it "driving the carton (or cardboard) into the middle." Which in normal language means that Konstantin decided to use stolen credit cards right on the Qwintry website. And at once by enumerating many cards. It is worth emphasizing the word "credit". As you probably know, there are different types of cards: credit, debit, and prepaid. And if it is not difficult to obtain a debit or prepaid foreign card, then for a credit card you need to be a resident of the country where the card was issued, or, at least, have lived in the country for quite a long time, have local legal status, earn income and pay local taxes. This is what allows you to rely on a loan from a local financial institution. And, as a rule, not immediately, but only after a few years.
Maybe, you say, that was how it was, and Konstantin somehow managed to get an American credit card? Perhaps. Moreover, many of Qwintry's clients use cards issued in the USA without any problems. For example, our “hero” could have relatives abroad. But how to explain that Konstantin Bezprozvannykh simultaneously owns credit cards of Germany, Belgium, Australia, France, South Africa, as well as cards of Ireland and Italy? Moreover, maps of some countries are presented in more than one copy. For example, only credit cards from Germany were used by Konstantin on the Qwintry website 4 pieces, Australia - 2 pieces.
Here you can see some of the payments made by our “hero”. We look at the status of payments. Blocked means that the payment has been recognized as fraudulent by the processing center. These payments are called chargebacks. Processing minuses them from the business account and, as a rule, a fine of $ 15-35 is added to each such chargeback.
And here you can view the details of a separate blocked payment. These are just two examples out of many. We will not provide screenshots of each payment, but you can pay attention to the fact that the cards are credit cards.
Naturally, having received such a number of suspicious payments from Konstantin, we contacted our processing center, and after a while they confirmed that all payments were recognized as fraudulent and the cardholders stated that they were not aware of these transactions.
After we made sure that all the funds with which Konstantin tried to replenish his balance were returned to their rightful owners, we blocked his account and informed him that two parcels that had come to our warehouse by that time should be returned to the sellers. that we terminate any cooperation and in the future the account will be closed forever.
Unfortunately, instead of calmly returning the parcels to the sellers and then resolving issues with them separately, Konstantin decided to pass black as white and published a post that Qwintry took his parcels. Moreover, he initiated spam attacks on our official communities on Vkontakte, Facebook, and YouTube. It should be emphasized that these were not attempts to really clarify the situation, these were precisely the attacks of hundreds of spammers and bots with obscene language and insults against both our company and individual employees.
Konstantin's behavior is somewhat different from the typical behavior of a carder after a ban. He appeals to the public, publishes several posts on the Internet that Qwintry is "scammers", where he shows screenshots of how he used some unnamed referral to get money for which goods were purchased, as proof of the legitimacy of his activities (like screenshots of iPhones on some website ads explain something - let's leave the reader to think).
That is, he does not sit "quietly", even knowing that Qwintry, and potentially the law enforcement agencies of the Russian Federation, have his data, and even triumphs, thinking that the only information against him is his suspicious registration in a strange "referral system" ... Konstantin's confidence in his abilities can be explained by several factors: firstly, judging by the activity on the Internet, in addition to caring, he is trying to engage in spam and doorway pages, and secondly, he did not know that all the unsuccessful attempts to "drive" stolen credit cards into of our processing center are also visible, or maybe he thinks that this is not a criminal activity.
And here you can observe an interesting phenomenon: the "public" believes him, because if you do not read the posts of Constantine, the position of an ordinary person-buyer (even with a slightly muddy history), going against a large and "presumptuous" company - this is understandable and close to the heart of a simple Russian person, and Qwintry at this moment turns out to be rather stingy with comments and is in no hurry to upload a bunch of screenshots. All doubters and asking questions under the posts of Constantine are mercilessly driven into the minus and banned, apparently - not without the help of bots.
It is obvious that spam attacks on all fronts (vk, youtube, instagram, facebook) harm any company operating on the Internet, and most likely many smaller companies would have already “rained down” and accepted the terms of a fraudster - who now needs negative “noise "? Unfortunately, we have already seen this on the mail forwarder market, however, for the company it usually ends sadly.
We are rightfully proud of our reputation and value it, and we are not going to negotiate with obvious fraudsters, which is what we wish for our colleagues from other companies.
One can only guess why Konstantin Bezprozvannykh does not want to send parcels back to the store. For us, the fact that he tried to pay for Qwintry services with stolen credit cards is enough. In this connection, he was blacklisted, and not only with us, but also with other mail forwarders.
It is worth emphasizing separately: we provide law enforcement agencies with all the necessary information about each such case, but, nevertheless, we are convinced that it is the responsibility of the company to prevent all kinds of fraudsters from using its services. This is a responsibility both to clients and to the law. Because otherwise, the law, represented by the US law enforcement agencies, will come to us as accomplices in the crime, and then not only our company will suffer, but also tens of thousands of customers whose purchases are in our warehouses every day.
Also, if we are talking specifically about the damage to the business, then when receiving payment with stolen credit cards, it also incurs direct financial losses, because each fraudulent transaction is also penalties that processing centers apply to businesses. And if such cases are repeated regularly, then it is the business that loses its license and, in general, the ability to accept payments using credit cards.
Therefore, as you can imagine, in addition to the moral aspect (which is very important and lies in the concept that stealing is not good, and a thief should be in prison), there are also quite prosaic reasons why any responsible business should do everything possible to provide protection yourself and your honest clients from the actions of fraudsters.
Over the past few days, we have been asked the same question more than once and in different forms: “Does Qwintry have the right to call someone a swindler? Isn't it the business of Qwintry just to send parcels, not wondering how legitimate this or that purchase is? "
These and other similar questions can be answered with a quote from Jerzy Lec: “It is ugly to suspect if you are quite sure”. In this case, we are completely sure that Konstantin Bezprozvannykh is a swindler. He can argue with that by suing us. There we will be happy to provide all the available facts on paper. True, there is a suspicion that Konstantin will not go to any court. Well, or it will go for a completely different reason and in a different capacity. In the meantime, we are waiting for the summons and will continue to close the accounts of fraudsters, send their purchases back to the stores and do everything in our power to ensure the safety of honest customers of Qwintry.
All parcels by Konstantin Bezprozvannykh were sent back to the sellers.
You can check the tracking of these packages here:
tools.usps.com/go/TrackConfirmAction?tLabels=9405510200828099042918
tools.usps.com/go/TrackConfirmAction?qtc_tLabels1=9405510200829098966861
UPD about blocking in the VK group
With regard to the numerous comments about the fact that Qwintry has banned adequate people in the VKontakte group, we explain. We were undergoing a spam attack, which affected not only the communities on social networks, but also the online support chat, as well as the personal accounts of our employees. Most of the comments were in this style:
All such posts were deleted, and the commentators were automatically banned. We provided a detailed explanation of our position on the VKontakte group wall, in the comments to which a quite adequate discussion developed, and many questions asked in a calm tone received clear answers:
Comments and questions duplicating the discussion were also deleted.
Today we will talk about the fraudulent use of someone else's credit cards and what happens when a company brings a fraudster to clean water.
It should be noted right away that we consider the security of payments to be a very important aspect of our work. We consider the prevention of fraudulent activities on the site as our area of responsibility. The department that deals with these issues in Qwintry has been working for several years and even runs a separate project Anticarder.com (which is used by many large Russian mail forwarders). But the conversation is not about him now.
So, a few weeks ago, Qwintry discovered suspicious activity in one of the accounts. Initial review revealed that the client's actions did indeed look atypical. Therefore, we continued our investigation. In the course of it, it turned out that the client trades in stealing other people's credit cards. And he has been doing this for a long time, on an ongoing basis.
Apparently, assuming that the law enforcement agencies did not care about him, he was not particularly hiding, which allowed us to collect a substantial evidence base, on the basis of which we came to the conclusion that we were dealing with a fraudster and that it was he who was hiding behind the nicknames on the forums. Please note that all third-party data published in our mini-investigation is taken from open sources.
Who is he - our “hero”? His name is Konstanin Gennadievich Bezprozvannykh, born on August 7, 1993 (23 years old), lives in Yekaterinburg. To warn of the concern of the guardians for the safety of personal data, we emphasize that he did not even think about hiding and several times published posts in our Vkontakte group directly from his account.
Let's start with the email. Konstantin has it quite noticeable - jiks1993@gmail.com, another of his mail is on Yandex and begins with the same letters - jiks13@yandex.ru, well, and the third box is here - jiks@bk.ru. As you can see, they all match with his Vkontakte address - vk.com/jiks13
As we said above, either from a feeling of complete impunity, or due to the peculiarities of his mentality, Konstantin left on the network, using precisely this data.
Therefore, our first step was to establish a fundamental connection between the “client” and fraudulent schemes. As you can easily see, this can be done quickly and easily. And on different sites.
Here he is on the well-known international forum of Internet scammers, where he has his own account, thanks for the description of another fraudulent scheme and promises to try it out:
leakforums.net/thread-672489&page=4
And this is another Carder forum where the hero of our story participates in discussions on cashing stolen bank cards by replenishing the balance of SIM cards.
www.dublikat.co/threads/zavliv-sim.15010
Pay attention to the dates of the discussions. It is quite obvious from them that for our “hero” this is not some random episode of his biography, but a long-standing and constant activity.
Move on. After we found out that Konstantin Bezprozvannykh, to put it mildly, is not a highly moral person, it is interesting to look at his activity on the Qwintry website. Here, as it turns out, our “client” did not bother too much and made the classic mistake of a presumptuous carder. They call it "driving the carton (or cardboard) into the middle." Which in normal language means that Konstantin decided to use stolen credit cards right on the Qwintry website. And at once by enumerating many cards. It is worth emphasizing the word "credit". As you probably know, there are different types of cards: credit, debit, and prepaid. And if it is not difficult to obtain a debit or prepaid foreign card, then for a credit card you need to be a resident of the country where the card was issued, or, at least, have lived in the country for quite a long time, have local legal status, earn income and pay local taxes. This is what allows you to rely on a loan from a local financial institution. And, as a rule, not immediately, but only after a few years.
Maybe, you say, that was how it was, and Konstantin somehow managed to get an American credit card? Perhaps. Moreover, many of Qwintry's clients use cards issued in the USA without any problems. For example, our “hero” could have relatives abroad. But how to explain that Konstantin Bezprozvannykh simultaneously owns credit cards of Germany, Belgium, Australia, France, South Africa, as well as cards of Ireland and Italy? Moreover, maps of some countries are presented in more than one copy. For example, only credit cards from Germany were used by Konstantin on the Qwintry website 4 pieces, Australia - 2 pieces.
Here you can see some of the payments made by our “hero”. We look at the status of payments. Blocked means that the payment has been recognized as fraudulent by the processing center. These payments are called chargebacks. Processing minuses them from the business account and, as a rule, a fine of $ 15-35 is added to each such chargeback.
And here you can view the details of a separate blocked payment. These are just two examples out of many. We will not provide screenshots of each payment, but you can pay attention to the fact that the cards are credit cards.
Naturally, having received such a number of suspicious payments from Konstantin, we contacted our processing center, and after a while they confirmed that all payments were recognized as fraudulent and the cardholders stated that they were not aware of these transactions.
After we made sure that all the funds with which Konstantin tried to replenish his balance were returned to their rightful owners, we blocked his account and informed him that two parcels that had come to our warehouse by that time should be returned to the sellers. that we terminate any cooperation and in the future the account will be closed forever.
Unfortunately, instead of calmly returning the parcels to the sellers and then resolving issues with them separately, Konstantin decided to pass black as white and published a post that Qwintry took his parcels. Moreover, he initiated spam attacks on our official communities on Vkontakte, Facebook, and YouTube. It should be emphasized that these were not attempts to really clarify the situation, these were precisely the attacks of hundreds of spammers and bots with obscene language and insults against both our company and individual employees.
Konstantin's behavior is somewhat different from the typical behavior of a carder after a ban. He appeals to the public, publishes several posts on the Internet that Qwintry is "scammers", where he shows screenshots of how he used some unnamed referral to get money for which goods were purchased, as proof of the legitimacy of his activities (like screenshots of iPhones on some website ads explain something - let's leave the reader to think).
That is, he does not sit "quietly", even knowing that Qwintry, and potentially the law enforcement agencies of the Russian Federation, have his data, and even triumphs, thinking that the only information against him is his suspicious registration in a strange "referral system" ... Konstantin's confidence in his abilities can be explained by several factors: firstly, judging by the activity on the Internet, in addition to caring, he is trying to engage in spam and doorway pages, and secondly, he did not know that all the unsuccessful attempts to "drive" stolen credit cards into of our processing center are also visible, or maybe he thinks that this is not a criminal activity.
And here you can observe an interesting phenomenon: the "public" believes him, because if you do not read the posts of Constantine, the position of an ordinary person-buyer (even with a slightly muddy history), going against a large and "presumptuous" company - this is understandable and close to the heart of a simple Russian person, and Qwintry at this moment turns out to be rather stingy with comments and is in no hurry to upload a bunch of screenshots. All doubters and asking questions under the posts of Constantine are mercilessly driven into the minus and banned, apparently - not without the help of bots.
It is obvious that spam attacks on all fronts (vk, youtube, instagram, facebook) harm any company operating on the Internet, and most likely many smaller companies would have already “rained down” and accepted the terms of a fraudster - who now needs negative “noise "? Unfortunately, we have already seen this on the mail forwarder market, however, for the company it usually ends sadly.
We are rightfully proud of our reputation and value it, and we are not going to negotiate with obvious fraudsters, which is what we wish for our colleagues from other companies.
One can only guess why Konstantin Bezprozvannykh does not want to send parcels back to the store. For us, the fact that he tried to pay for Qwintry services with stolen credit cards is enough. In this connection, he was blacklisted, and not only with us, but also with other mail forwarders.
It is worth emphasizing separately: we provide law enforcement agencies with all the necessary information about each such case, but, nevertheless, we are convinced that it is the responsibility of the company to prevent all kinds of fraudsters from using its services. This is a responsibility both to clients and to the law. Because otherwise, the law, represented by the US law enforcement agencies, will come to us as accomplices in the crime, and then not only our company will suffer, but also tens of thousands of customers whose purchases are in our warehouses every day.
Also, if we are talking specifically about the damage to the business, then when receiving payment with stolen credit cards, it also incurs direct financial losses, because each fraudulent transaction is also penalties that processing centers apply to businesses. And if such cases are repeated regularly, then it is the business that loses its license and, in general, the ability to accept payments using credit cards.
Therefore, as you can imagine, in addition to the moral aspect (which is very important and lies in the concept that stealing is not good, and a thief should be in prison), there are also quite prosaic reasons why any responsible business should do everything possible to provide protection yourself and your honest clients from the actions of fraudsters.
Over the past few days, we have been asked the same question more than once and in different forms: “Does Qwintry have the right to call someone a swindler? Isn't it the business of Qwintry just to send parcels, not wondering how legitimate this or that purchase is? "
These and other similar questions can be answered with a quote from Jerzy Lec: “It is ugly to suspect if you are quite sure”. In this case, we are completely sure that Konstantin Bezprozvannykh is a swindler. He can argue with that by suing us. There we will be happy to provide all the available facts on paper. True, there is a suspicion that Konstantin will not go to any court. Well, or it will go for a completely different reason and in a different capacity. In the meantime, we are waiting for the summons and will continue to close the accounts of fraudsters, send their purchases back to the stores and do everything in our power to ensure the safety of honest customers of Qwintry.
All parcels by Konstantin Bezprozvannykh were sent back to the sellers.
You can check the tracking of these packages here:
tools.usps.com/go/TrackConfirmAction?tLabels=9405510200828099042918
tools.usps.com/go/TrackConfirmAction?qtc_tLabels1=9405510200829098966861
UPD about blocking in the VK group
With regard to the numerous comments about the fact that Qwintry has banned adequate people in the VKontakte group, we explain. We were undergoing a spam attack, which affected not only the communities on social networks, but also the online support chat, as well as the personal accounts of our employees. Most of the comments were in this style:
All such posts were deleted, and the commentators were automatically banned. We provided a detailed explanation of our position on the VKontakte group wall, in the comments to which a quite adequate discussion developed, and many questions asked in a calm tone received clear answers:
Comments and questions duplicating the discussion were also deleted.
