What does a card dump consist of?

[chushpan]

A card dump is data read from the magnetic strip of a bank card. This data contains information needed to conduct transactions through POS terminals or ATMs. Dumps are used by carders to clone cards and commit fraudulent transactions. Let's look at the structure and components of a dump.

1. Main components of the dump​

The data on the magnetic stripe of the card is stored in two tracks (Track 1 and Track 2). Each track contains certain elements:

a. Track 1 (First track)​

This track contains alphanumeric data. The data structure is as follows:

%B<Primary Account Number (PAN)>^<Cardholder Name>^<Expiration Date><Service Code><Discretionary Data>?

• %B: Start character indicating Track 1 format.
• Primary Account Number (PAN): Card number (up to 19 digits).
• Cardholder Name: The name of the cardholder (e.g. "JOHN DOE").
• Expiration Date: Card expiration date (MMYY format).
• Service Code: A three-digit code that identifies the card type and its capabilities:
  • First character: categories of use (e.g. international or domestic card).
  • Second symbol: restrictions on use (e.g. only for purchases or cash withdrawals).
  • Third symbol: security technologies (e.g. chip or PIN support).
• Discretionary Data: Additional data that may include CVV1 (Card Verification Value) or other parameters.
• ?: End character indicating the end of the record.

b. Track 2 (Second track)​

This track contains only digital data. The data structure looks like this:

;<Primary Account Number (PAN)>=<Expiration Date><Service Code><Discretionary Data>?

• ;: Start character indicating Track 2 format.
• Primary Account Number (PAN): Card number (up to 19 digits).
• Expiration Date: Card expiration date (MMYY format).
• Service Code: Similar to Track 1.
• Discretionary Data: Additional data that may include CVV1 or other parameters.
• ?: End character indicating the end of the record.

2. Example of a card dump​

Example Track 1​

%B1234567890123456^DOE/JOHN^250110100000000000000000000000000000?

• 1234567890123456: Card number.
• DOE/JOHN: Cardholder's name.
• 2501: Expiry date (January 2025).
• 101: Service Code.
• The rest of the data are additional parameters.

Example Track 2​

;1234567890123456=25011010000000000000?

• 1234567890123456: Card number.
• 2501: Expiry date (January 2025).
• 101: Service Code.
• The rest of the data are additional parameters.

3. What data can be extracted from the dump?​

1. Card number (PAN):
   • Unique card identifier used to perform transactions.
2. Card validity period:
   • Necessary to verify the validity of the card.
3. Service Code:
   • Determines the capabilities of the card (for example, the ability to withdraw cash or use it abroad).
4. CVV1:
   • Card verification code stored on the magnetic strip (not to be confused with CVV2/CVC, which is printed on the back of the card).
5. Cardholder name (Track 1 only):
   • Used to identify the card owner.
6. Additional options:
   • Various flags and technical data depending on the card issuer.

4. How are dumps created?​

1. Skimming devices:
   • Devices installed on ATMs or POS terminals read data from the card's magnetic strip.
2. Terminal compromise:
   • Attackers hack POS terminals or ATMs to gain access to card data.
3. Data Leaks:
   • Hackers gain access to the databases of processing centers or merchants.

5. How are dumps used?​

1. Cloning cards:
   • Data is written onto blank plastic using an MSR encoder.
2. Conducting transactions:
   • The cloned card is used to withdraw cash or pay for goods.
3. Black market sales:
   • Dumps are sold on the darknet to other attackers.

6. Anti-dump measures​

To protect yourself from the use of dumps, it is important to take the following measures:

1. Using EMV chips:
   • Modern cards are equipped with chips that encrypt data and make it difficult to read.
2. Tokenization:
   • Sensitive data is replaced with tokens that have no value to attackers.
3. Terminal protection:
   • Installation of anti-skimming devices on ATMs and POS terminals.
4. Transaction Monitoring:
   • Banks and payment systems must monitor suspicious transactions.
5. User training:
   • Inform customers about the risks of using cards in unverified places.

7. Conclusion​

A card dump is information read from the magnetic strip, which includes the card number, expiration date, cardholder name, and other parameters. This data can be used to clone cards and commit fraudulent transactions (a method of cashing out a card in carding). To protect against such attacks, it is important to use modern technologies such as EMV chips and two-factor authentication, as well as to comply with security rules.

If you have additional questions about the dump structure or protection methods, please clarify them!