Unauthorized copying of all information contained in the magnetic stripe of an active credit card in order to illegally create a fake credit card that can be used by cybercriminals to make purchases. Credit card delivery is used by fraudsters to collect valuable card information such as card number and expiration date. "Credit card delivery" is another term originally used underground that has found its way into widespread public awareness due to the growing prevalence of credit card counterfeiting, identity theft, and other forms of cybercrime.
BREAKING DOWN "Dump Dump"
Change of credit cards can be obtained in several ways. A popular technique used by criminals is “skimming,” which uses an illegal card reader to copy data from a credit card. Other methods include hacking into a retailer's network or using a point of sale infected with malware.
In many cases, the consumer may not be aware that his or her credit card information has been dumped. Cybercriminals try their best to dump credit cards undetected, as cardholders can simply cancel their cards if they suspect that the card's security has been compromised. In fact, the first indication that data dumping has occurred frequently occurs either when a consumer detects an unauthorized purchase on his or her credit card, or when a consumer receives a notification from a merchant that credit card information might be stolen due to a hacker attack.
A credit card dump that contains data for a US card can be traded in the underground economy for between $ 20 and $ 80. The value of this information is to motivate hackers to try to infiltrate the networks of established retailers. Once they succeed, it will be possible for them to get a dump for thousands of credit cards. The pursuit of hacker attacks in recent years in a number of high-profile retailers suggests that this problem remains here.
Attention! Everything described in this article is illegal and falls under the jurisdiction of the Criminal Code of the Russian Federation.
The editors strongly discourage the use of the methods given here,
providing information for general development.
At the numerous requests of the soldiers of our invisible front, I am finally giving out a small review about real plastic. I hope that this will slightly reduce the number of questions, sometimes just boring. Therefore, I will try everything on my fingers and in simple words.
This case does not pretend to be complete coverage of everything in the world in terms of real plasticity, but simply provides some directions for reflection. And again - no ready-made recipes - you will have to chew, swallow, and find the information yourself. The word
"credit" in this article means only VISA, MasterCard, JCB, Diners Club, Discover or AmEx, while debit cards and SMART-cards require a separate approach to the projectile.
First, some terms, to make it clearer for those who did not deal with this at all, and then I will spread my thoughts along the tree:
Let's go from the beginning - you got a dozen dumps from somewhere, and you dug up a dozen clean CR-80s from somewhere. What's
next? Let's go from simple to complex:
I'm tired of pressing the keyboard, so I wrap up. I apologize to everyone who is aware of the topics covered for the fact that I have presented all this in a somewhat simplified form - the article is not aimed at bison, but at those who are new to this business. Of course, the topic is endless, with many pitfalls at each stage. If someone gets hurt and wants to take on - the directions are clear, look for information on each of the issues, study materiel, Read The Fucking Manuals, banking systems, countries, languages, communication psychology, security systems - the space for a fight is simply huge. Well, if someone from all this chewed didn’t understand anything, and it’s good, then it’s not for you. It's okay too - Garik Kasparov is playing chess, although he could have done carding. Feels good financially... Take up chess. Or checkers. Or keep practicing the usual virtual cardinog.
And the last note - if suddenly you once again see somewhere that someone is selling dumps with PINs - do not believe your eyes. If you have carefully read this case from top to bottom, then, I hope, it is clear that dumps with PINs are like cash in your pocket. And no one has yet sold something for $ 100 for $ 20. If the $ 100 is printed in Washington, of course, and not in Grozny or Tehran.
PS. Do not forget that video recording equipment is installed in almost all ATMs.
And video recordings are stored indefinitely - depending on the degree of chaos in the bank, which owns a particular
ATM.
What is the risk of responding to such a proposal? Will an attempt to earn extra money on someone else's bank card turn into a criminal case, where you are not a victim at all?
Profit or Deception?
The scheme of "work" is quite simple: you receive a bank card by mail, the PIN code will be in the instructions that will be attached to the card. The "employer" claims that he orders bank plastic from abroad, purchases a dump (information about the card in electronic form) from banks and writes it down on plastic. "These are foreign - you have nothing to fear" - the craftsmen assure in their ads.
It's frighteningly simple. Get two cards with 30 thousand rubles. on each you can at the post office, or they will be brought by a courier. You pay only for delivery - 1000 - 2000 rubles. Then you withdraw and transfer to the account of the "employer" part of the amount, the remaining tens of thousands of rubles are yours, you take the percentage right away ...
Most often, such offers come to schoolchildren and students. They are also replicated on their pages in social networks by young people, sometimes underage children, not understanding what such "cooperation" can turn into.
Sad consequences
Banks are constantly faced with the use of counterfeit cards. This type of “earnings” is a fraud, and those who sell cards and those who are going to buy and use them turn out to be fraudsters, ”says Vladimir Bakulin, head of the electronic business monitoring department of a large bank.
According to the expert, the cards get to the attackers in different ways. Most often, data is simply bought on the Internet. Thus, there is a high probability that the sellers were immediately going to deceive the buyers and the cards are most likely invalid.
Although it happens that organized fraudsters are really looking for people to cash out counterfeits (the so-called "drops"). Remember: participation in such schemes is fraught with criminal liability under the article “Fraud” with all the ensuing consequences, ”recalls V. Bakunin. - Credit institutions are taking a variety of measures to combat fraud. From monitoring operations to helping law enforcement agencies arrest intruders. But residents of Nizhny Novgorod should be vigilant - not to help cyber fraudsters.
With the development of cashless payments and the plastic card market, the number of various types of fraud in this segment is also growing . The above scheme is designed for financially illiterate citizens who are hungry for a crazy income. Remember: money can't come out of nowhere! It cannot be ruled out that the authors of the "super-profitable" scheme, having collected money for "delivery", will soon disappear from the horizon, - says Alexander Yudin, financial advisor, director of a branch of a large financial company in Nizhny Novgorod.
Be careful!
What tricks do attackers use today to take possession of other people's money. They counterfeit bank cards, create fake websites for payments over the Internet. Waiters and cashiers can discreetly withdraw your money from the card you gave to pay.
The most common type of fraud is skimming (illegal creation of duplicate cards using special electronic readers at ATMs). And it causes the greatest damage, - says Alexander Yudin. - Despite the measures taken by the state, supervisory financial authorities and banks, most often the weak point in protecting the money on the card is the negligence of the citizens themselves. They often lose cards, pass them into the wrong hands, write down the PIN code directly on the credit card, use someone else's computer when shopping on the Internet, etc.
When making payments on the Internet, it is better to use a separate card, which contains only the amount for a specific purchase. Do not store a lot of money on such a card! And when shopping on the Internet, use only trusted sites.
It makes more sense to make purchases only from your own computer. It is useful to connect to the service of sms-notifications of transactions carried out. Mobile banking is quite vulnerable, experts admit. It has a wide range of safety concerns. The first threat is associated with unauthorized access to data stored in the memory of your mobile phone. If you do not have antivirus software, it will not be difficult for fraudsters to get hold of the bank's customer profile data.
Turn off Bluetooth when not in use.
Install anti-virus software if you actively access the Internet from your mobile.
Another common threat is the loss of your phone, whether accidentally or due to theft. In this case, you need to contact your bank's support service as soon as possible in order to block the provision of the Mobile Bank service for your account and keep your personal savings. Be careful!
Officially
An offer to earn extra money using someone else's bank card should immediately raise doubts: why can't the other person cash out? - reported "AiF-NN" in the press service of the Main Directorate of the Ministry of Internal Affairs in the Nizhny Novgorod region. - Of course, each case needs to be analyzed separately. So far, the Nizhny Novgorod Criminal Investigation Department has not received complaints from Nizhny Novgorod residents about such schemes. If you receive such an offer, you should contact the police.
Cases of fraudulent use of bank cards in the region are common, according to the law enforcement officers. Often it is young people who become involved in such cases. The last sensational case: in the summer of 2013, three residents of Borchan were brought to trial, accused of stealing 7 million rubles. at 30 banks. According to the investigation, the attackers stole funds using fake bank payment cards. They used ATMs to withdraw large sums from the accounts of clients of foreign banks.
According to the defendants, they received the scheme of embezzlement from unknown persons on the Internet: they sent young people data about bank clients. The guys, using this information, made a duplicate of a plastic card and received cash from ATMs. The provider of information (whom the investigation also identified) received 70-80% of the withdrawn amount.
It's probably no secret to anyone that a credit card is not a reliable means of storing money. Credit cards are taken away and cashed online or in real stores. Today I would like to talk about the most sophisticated method of fraud with plastic cards - when they steal a dump (copy of a credit card) and a PIN code, and then withdraw money from ATMs. This is a multifaceted matter so that I will describe it in stages and at the same time support all this with photographs.
Fraudsters who work with plastic cards are called "carders", but carding is a fraud with plastic cards. What does a carder need to withdraw money from your plastic card through a ATM? Its full copy or the so-called dump (dupm) and your pin code (pin) is a four-digit number that the ATM asks every time to make sure that the card is yours.
A credit card dump can be obtained in different ways, but the difficulty is that information about your pin code is not stored in a plastic card, and if you only steal a dump, then it is useless to receive money from an ATM (credit cards without a pin are cashed in another way and this is the topic of another article ). This means that the fraudster needs to get a credit card dump along with a pin, which greatly complicates the task. Here it will not work to get a job as a waiter or a seller and copy credit cards, the client must dial the pin code, and the pin code must become known to the fraudster. You can, of course, stupidly take away a credit card and elicit a pin threatening with something dangerous, but firstly it is not subtle, and secondly it falls under the article "robbery" where the terms are much more abrupt. And where are the guarantees that the "client" will say the correct code? And even if the faithful one, the "client" needs to be isolated somehow, so that he does not accidentally realize, that you can call the bank and block the credit card, or, even worse for the criminal, dial 02 and catch the thief warm at the ATM. The risk is great, and there may be a very meager amount on the card, and work for Visa Platinum is expensive, usually such "clients" have security guards who can knock on the head.
But an inquisitive mind will always find a way out (and swindlers are savvy people). The only place where you can get a dump of a plastic card and a pin is an ATM. The conclusion suggests itself, you need to install special equipment so that it collects information that the fraudster could use in the future to enrich his pockets.
Skimmer (skimer) - a fraudster's device that reads and stores in memory (options: sends an SMS or radio signal) information from the magnetic tape of a payment card. So much for the dump. The skimmer is installed in front of the ATM card reader and is usually made for the design of a particular ATM so that the cardholder does not suspect anything. When a person who wants to withdraw money from the card sticks the card into an ATM, the skimmer reads the data from his card, which gets to the fraudster. Below are photos of skimmers, so that you would more accurately understand what it is:
This is the skimmer that scammers can use to get a dump of a plastic card. But as we have already found out before, one dump is not enough, you also need a pin code. That is why you need to install the skimmer on the ATM in order to find out the pin simultaneously with the dump. There are two ways to find out the PIN code of a particular card. The first one is the simplest, to install a camera next to the ATM, which will shoot the pin being dialed. You can hang a box with booklets on the ATM itself, where the hidden camera is mounted, or, for example, make a decorative canopy with a hidden camera above the ATM.
The second is to make a fake keyboard cover that looks like the real thing. This patch will save (send) the pin code.
If everything is done correctly and accurately, then the client will not even notice that a dump was taken from his card and his pin was written down, the card will crawl through the skimmer into the ATM card reader and the ATM will process it, and a high-quality overlay will push through and duplicate what was typed on a real ATM keyboard.
Now we have dumps and pins of credit cards, but the ATM has nothing to do with this information, it accepts cards. Next, we need a white, clean plastic, on which we will record this information. We look at the photo.
I heard somewhere that they had contrived at ATMs and now they "see" that the plastic is virgin white and they stupidly swallow it, the scammers began to apply a drawing on the white plastic with the help of ordinary stringers. By the way, I will say by the way that the magnetic tape on credit cards is rewritten, and nothing prevents a fraudster from typing real cards for a song for a pittance and writing information on them, and if by chance the PPP catches this business, then a real credit card is in the hands, and who what is written on it only God (and the swindler) knows. Recorders are sold quite legally, which is not surprising, since a lot of things are also written with the help of these devices, for example, bonus and discarded supermarket cards. We look at the photo:
By the way, usually the reader comes with a pair of white plastic cards for experiments. The case is small, write the dumps on white plastic and withdraw money from the ATM. Yes, I foresee the next question, there are cameras on ATMs. So what? Who forbids a swindler to put on a light make-up, wear a wig, wide sunglasses and a cap? And the sense in this case from the built-in camera, like a goat of milk.
How to protect yourself from this? There is a new type of cards with an electronic chip, the protection there is an order of magnitude steeper and, as I know, they are not yet hacked, so ask the bank for a card with a chip and no other way, maybe it is more expensive, but as you know, a mean pays twice.
Well, and a universal way to fight any fraud, it is - ATTENTION. If you see that there is something sticking out at the ATM card reader, that the keyboard of the ATM is unnaturally raised, made "somehow wrong" or moves, booklets are hanging on the ATM (the banks themselves do not hang them on the ATM) or, something else suspicious, not be lazy, look for a more reliable ATM. Yes, and you need to use ATMs in crowded places, preferably in large shopping centers or supermarkets, since there are many cameras, and fraudsters usually choose the less risky path and naturally choose some kind of ATM located somewhere on the outskirts of the city, than they will risk installing equipment in a large shopping center full of surveillance cameras and security.
- What is a dump?
- Where did you get the dumps?
- And what to do?
- Which for example?[/B]
Of course.
- Which slip?
- Where did you get the Pins?
Wow! Tell me.
Full analysis of a bank card from a former carder.
An excerpt from the book "How I Stole a Million. Confessions of a Repentant Carder".
There is a widespread misconception among ordinary people that the balance is on a credit card, but this is not so - the money does not physically lie on it, the credit card is like a pass to the card account in the bank that issued it. In other words, it carries out the identification of the account holder - whether he can take money from the chest that is in the bank. The seller passes the card through the POS terminal (from the English Point of Sale - "point of sale") - a device that reads the information recorded on the magnetic stripe of the card, and communicates with the bank to conduct a transaction, which connects to the processing center and transfers the data from your card there. Further, the processing contacts the issuing bank that issued the card and receives a confirmation or refusal in the form of a code. Successful authorization code - 00 - APPROVED (approved). Otherwise, they get a ban on the deal, often played out in Hollywood films ("sorry, your account is frozen" and demonstratively cutting the card with scissors). A payment system like VISA connects all the links of this chain together, for which it takes up to 3.5% from each transaction.
What is a dump?
A dump is a collection of information recorded on the magnetic stripe of a credit card. Consists of three tracks (tracks). The first two are used directly for the operation of the card, and the third track is intended for recording various service information. The most important is the second track. The first track duplicates the basic data of the second - card number, expiration date, CVV - code, and also contains the name of the card holder.
Track1: B4 55990 75607 84214 ^ SMITH / JOHN ^ 110210 10000 00000 00000
Track2: 4559907560784214 = 11021010000052700000
Code 101 after the card expiration date indicates that the card is international. If instead of it there is, for example, 201 - this means that the card is local, that is, by default it works only in the “native” country. Having track2 in hand, you can easily generate track1, but on the contrary, it is quite difficult to do it. To receive cash from an ATM, only the second track is sufficient.
Where did you get the dumps?
There are three ways at the moment. Portable readers (eng. Cardreader) - tools for reading the magnetic stripe of a payment card are being manufactured or purchased. The smallest readers that I have come across were the size of a matchbox and were made in Ukraine by Boa Factory engineers. Then the devices are distributed to cashiers in boutiques and expensive stores, waiters in restaurants, foreign exchange prostitutes, and they pass the client card not only through a legal POS terminal, but also through their own reader. A large processing center of a bank or trade network is hacked, through which payments of physical (not virtual) stores, hotels, restaurants pass, and the base of their customers is obtained. They are simply bought from those who took possession of them in one of the above ways.
The dumps still need to be written down on the credit card itself ...
Of course. This requires a special device called an encoder. They are sold completely legally and cost $ 800-1000. The most widespread model in carders' circles is MSR 206. I connected it to a computer via a USB port, inserted a dump into a simple program, passed the card through the slot - and you are holding a magnetic copy of a card of some American Pinocchio.
Can I go to the store now?
No, it's too early to go to the store, since we have a duplicate of the real card, but it is on a piece of white "plastic" (usually of the CR-80 brand). The seller in the store will be very surprised if you offer him such a card.
And what to do?
You negotiate with the seller in some decent store, like: "Vasya, I have such garbage, I will come to you, take a laptop and plasma, then we will sell the loot in half." It works - the owners of restaurants, boutiques and casinos gave us 40-50% in cash of the amount that they “rolled”, and we told them that they need to answer their bank if problems arise.
Which for example?
Sooner or later, the real cardholder (card holder) will protest the payment. He complains to his bank, those in VISA, and now strong guys from the security service of the bank, who installed a POS terminal in this casino, came to our casino. They will come and say: "Why are you, you scoundrel, are you" rolling "fake cards?" Well, here our oligarch should widen his eyes and say: “I don't know anything. Now I will call the cashier who worked that evening." Calling Masha. Bankers to her:
Did you check the validity of the card?
Of course.
Was the cardholder's signature on the back?
And then. I even compared it with the signature in his passport. And he signed the slip in the same way.
Which slip?
The check that comes out after paying for the goods with a credit card is called a slip. All information about the purchase is printed on it: time, date, organization name, details of the place where the purchase was made. By the way, the data for the slip is taken from the first track. And if the dump does not care what name you indicate in the first track - the real owner of the card or the name that is indicated in your "left" passport, then the card number must still be written in the original, otherwise the payment (transaction) will not work. And that would, of course, not be bad: you stupidly acquire a "left" passport, you stupidly go with it anyway to which bank in any country and just as stupidly open an account with a debit card. As a result, you have a credit card with the name of Zhenya Sokolov with $ 5 on it and a passport in the same name with your photo. You erase all the data from the magnetic stripe on figs, you take a dump from those what do you have, change the name in the first track to Zhenya Sokolova, write this dump to the card and go - even to the bank, even to the store. You run out of money on this dump - you erase it, prepare it and write a new one. And so, until Zhenya Sokolova starts looking around the globe for all banks and all shops. Then you buy a new passport and go around again. Well, if they already start to recognize it in person, then only plastic surgery then.
The bankers will ask if the cashier checked the card number and surname on the check and the front surface of the card - the cashier will answer that, of course, yes, he will add that the card was not damaged and there were no signs of forgery, and this "interrogation" is over - with all suspicions the bank has no legal basis to block the payment. Of course, if sellers in Minsk stores checked whether the data on the slip matches the numbers on the card itself, it would be impossible to turn an already used card into a reusable one, but in Belarus, a country of unafraid idiots, cashiers everywhere “hammered” on the rules for safe service bank plastic cards and I often managed to make purchases from dumps recorded on original, but expired, or even on discount cards... Businessmen who owed money to crime bosses and who had no choice were often involved in working with white "plastic". Of course, we did not "milk" one point too often, otherwise the servicing bank could take away the terminal and we would be left without work at all.
Hope what a PIN is - do you know?
I know, four digits, without which you can't get cash at an ATM.
Right. But I will add. First, a PIN is often required when paying for purchases. And secondly, PIN (Personal Identification Number - "personal identification code") optionally consisting of four digits. Its length should be large enough to minimize the likelihood of its selection by trial and error, and on the other hand, small enough for the cardholder to remember it. Therefore, the length of the PIN varies from four to twelve digits. More often, of course, four.
Where did you get the Pins?
- "Pins" ... Ordinary cardholders are sure (and bankers are constantly telling them about this) that it is impossible to hack or steal a PIN-code, but I know ten ways to do it.
Wow! Tell me.
Maybe not today? This is a topic for a separate conversation ...
And what is the actual "method"?)
Stop stupidly copy-paste themes, or at least create them in the appropriate sections.
BREAKING DOWN "Dump Dump"
Change of credit cards can be obtained in several ways. A popular technique used by criminals is “skimming,” which uses an illegal card reader to copy data from a credit card. Other methods include hacking into a retailer's network or using a point of sale infected with malware.
In many cases, the consumer may not be aware that his or her credit card information has been dumped. Cybercriminals try their best to dump credit cards undetected, as cardholders can simply cancel their cards if they suspect that the card's security has been compromised. In fact, the first indication that data dumping has occurred frequently occurs either when a consumer detects an unauthorized purchase on his or her credit card, or when a consumer receives a notification from a merchant that credit card information might be stolen due to a hacker attack.
A credit card dump that contains data for a US card can be traded in the underground economy for between $ 20 and $ 80. The value of this information is to motivate hackers to try to infiltrate the networks of established retailers. Once they succeed, it will be possible for them to get a dump for thousands of credit cards. The pursuit of hacker attacks in recent years in a number of high-profile retailers suggests that this problem remains here.
Attention! Everything described in this article is illegal and falls under the jurisdiction of the Criminal Code of the Russian Federation.
The editors strongly discourage the use of the methods given here,
providing information for general development.
At the numerous requests of the soldiers of our invisible front, I am finally giving out a small review about real plastic. I hope that this will slightly reduce the number of questions, sometimes just boring. Therefore, I will try everything on my fingers and in simple words.
This case does not pretend to be complete coverage of everything in the world in terms of real plasticity, but simply provides some directions for reflection. And again - no ready-made recipes - you will have to chew, swallow, and find the information yourself. The word
"credit" in this article means only VISA, MasterCard, JCB, Diners Club, Discover or AmEx, while debit cards and SMART-cards require a separate approach to the projectile.
First, some terms, to make it clearer for those who did not deal with this at all, and then I will spread my thoughts along the tree:
- A dump is a collection of information that is recorded on the magnetic stripe of a credit card. The dump can consist of tracks 1, 2 and 3, or 1 and 2, or 2 and 3
- A track or track, a road is a text file with certain information that is recorded on the magnetic track of a credit card. The main functional load is carried by Track 2 or the second road. Having track 2, you can manually create Track 1, based on the data available in Track 2. Functionally, for some recording methods, only the second track is sufficient on the recording card. Usually, track 1 and track 2 are used. Track 3 is used by various financial institutions on credit cards to record some additional information - for example, if the card is issued by Citibank together with American Airlines, then the third track may contain information about the accumulated flight points to AA, and so on. The third road is not interesting for us.
- For the manufacture of credit cards, various types of plastic are used, but in 90% of cases - the so-called CR-80, on which all kinds of passes, certificates, membership cards in the casino and so on are made at the same time. That is, it is worldwide widespread
and is used not only for making credit cards. - POS terminal - a terminal for rolling credit cards when buying something there - seen in stores.
- Dove and Globe - each VISA or MasterCard currently has a hologram - on Visa a dove, on MC - hemispheres. We must pay tribute to the fact that there is no hologram on the AmEx yet (although there is a variant of the AmEx on the Optima card).
- The balance is not on the credit card !!! “Gee - lads, how to beat the 100 bucks of the balance for 10,000 on the credit? Gee? " - I didn’t come up with it, these are the questions that are asked. I explain that the balance is NOT on the credit card, that is, the money does not physically lie there. A credit card is, as it were, a pass to the account of this credit card in the bank that issued it. That is, the credit card simply identifies the account holder - whether he can take money from the chest that is in the bank.
- Where to get dumps? - four ways of getting dumps are currently taking place:
- They buy, make, get readers - portable, battery-powered (like PMR-202, PMR-102, MSR300, MSR500, Smart Mag-DC), or stationary like AMC C722, MSR206 - and depending on the country of stay, experience, circle acquaintances are distributed to agents: foreign exchange prostitutes, cashiers in decent stores, employees of cafes, hotels - wherever there are foreigners who pay with credits. The wages for this work range from $ 10 to $ 200 for each dump collected by your agent.
- A very large processing center of a bank, or a processing network, through which payments of physical, not virtual stores, and all other things pass, breaks down, and a database is torn out from there.
- Make an agreement at the bank with the banker who sits exactly on the issuance of cards, or on their embossing, so that at the end of each working day he will give you all the cards made on a floppy disk. The most unrealistic way, but sometimes it occurs, especially if the banker lacks a sense of self-preservation.
- Dumps are simply bought from those who took possession of them using one of the above methods.
Let's go from the beginning - you got a dozen dumps from somewhere, and you dug up a dozen clean CR-80s from somewhere. What's
next? Let's go from simple to complex:
- How do you shove these dumps onto this white plastic so that everything is the right way? Simple - for this there are writers, or in other words encoders (AMC C722, MSR206), by connecting it to the computer and understanding the program, you roll white clean plastic through the encoder, as a result of which at the output you have plastic with a magnetic stripe applied - a real dump credit cards. In other words, you have a magnetic copy in your hands. If suddenly your agent, who filmed this dump from the terpily, gave him a drink to such an extent that he shouted out his PIN in ecstasy (or where he found it in his notebook), you can safely go to the ATM and try to get money. With a high probability, if there was no suspicion when the owner was taking a dump, and he does not suspect that a copy was taken from his card, you will receive money - another thing is that it is not known what the limit is, and is there any money on it at all. But, as practice shows, PIN does not shout even in ecstasy. Thus, you have a duplicate on white plastic, with which, of course, you will not go to the store on the corner, or to the ATM, since there is no PIN. What can you do? Again - from simple to complex. First out of a series quickly finely
sleep ... uh, steal and get drunk beer: make an agreement with the seller in some decent store that accepts cards that, they say, Vasya, here I have such garbage, I will come to you, buy a laptop, then we will sell it , and the money in half. It goes away. For players of heavier weight - a suitcase of such plastic with recorded dumps is being assembled, an office is opened (probably, it is possible in the Soviet Union, we haven’t tried it), it starts working - it sells some kind of pups. A bank account, an agreement with a bank, a POS terminal is placed, and at one point all this suitcase of white plastic is driven through it. The money falls into the account. Take cash - and to the girls. Of course, everything is not so simple, when starting any such topic, you need to carefully study the country, the banking system, possible pitfalls, - Let's go further - to a more complex one. Initially, there is a clean CR-80 plastic and dumps. How would you print and make a credit card at most one to one? With such a credit, you can safely go to any store in any country, and something else, about which below. First you need to buy ready-made plastic with doves or a globe, or buy these holograms separately. Then you need to find a printing house, or buy your own equipment that will allow you to
print something beautiful on clean CR-80 plastic - and practice shows that it is absolutely all the same which bank is indicated there, and whether it corresponds to a real bank... The printing is, of course, double-sided. Pay special attention to the quality of the dove and the globe - if something is wrong with them, it is very alarming for sellers and bankers. Printed with grief in half. Now we need to make these indented credit card number, name, and so on. Again, you can negotiate with a banker who will emboss this business for you, or buy the equipment yourself. In addition to all this, it is necessary to stick a strip of special paper on the reverse side of the credit, on which the cardholder's signature is put. Less than six months have passed, and you already have a suitcase of duplicate credit cards, which no one will pick on. What are the options with a suitcase: if for clothes - buy a ticket to Singapore, for example, or to Pretoria, and buy up there tightly until the suitcase runs out. Then somehow, somewhere, you attach all this iron or silver-gold, sell, distribute. Option two - dump absolutely give a damn about what name you indicate on the first road - or the real owner, or, for example, the name that you have in the second left passport, for example, bought from BezNogi, or in an international license. You can manually change the name of the cardholder within the tracks (s). That is, in the slip-e that comes out of the POS terminal, the name that you yourself made in the dump will be stamped. I hope it is clear that in the same way no one bothers you to emboss all cards with the same name. Or, for example, to make John Smith on 20 cards, on 20 more Moisei Abramovich Petrov, and on 20 more Boris Berezovsky. Order passports for these three names with rights for reliability. And boldly go to the Main Coolest which you have in the second left passport, for example, bought from BezNogi, or in an international license. You can manually change the name of the cardholder within the tracks (s). That is, in the slip-e that comes out of the POS terminal, the name that you yourself made in the dump will be stamped. I hope it is clear that in the same way no one bothers you to emboss all cards with the same name. Or, for example, to make John Smith on 20 cards, on 20 more Moisei Abramovich Petrov, and on 20 more Boris Berezovsky. Order passports for these three names with rights for reliability. And boldly go to the Main Coolest which you have in the second left passport, for example, bought from BezNogi, or in an international license. You can manually change the name of the cardholder within the tracks (s). That is, in the slip-e that comes out of the POS terminal, the name that you yourself made in the dump will be stamped. I hope it is clear that in the same way no one bothers you to emboss all cards with the same name. Or, for example, to make John Smith on 20 cards, on 20 more Moisei Abramovich Petrov, and on 20 more Boris Berezovsky. Order passports for these three names with rights for reliability. And boldly go to the Main Coolest I hope it is clear that in the same way no one bothers you to emboss all cards with the same name. Or, for example, to make John Smith on 20 cards, on 20 more Moisei Abramovich Petrov, and on 20 more Boris Berezovsky. Order passports for these three names with rights for reliability. And boldly go to the Main Coolest I hope it is clear that in the same way no one bothers you to emboss all cards with the same name. Or, for example, to make John Smith on 20 cards, on 20 more Moisei Abramovich Petrov, and on 20 more Boris Berezovsky. Order passports for these three names with rights for reliability. And boldly go to the Main Coolest Commercial Bank Ivanovo in the same Ivanovo or there in the Union Bank of Switzerland in Zurich, and by presenting a passport and a credit card in the same name, withdraw money from it to the maximum. Cash. It is clear that you need to enter the country with a different passport, just in case. In general, think over everything. If you took it off in one bank, you go to another with another credit card in the same name, and so on. Change the country. And on a new one. With a different passport and other credit cards. - Shura Balaganov was very amazed when Ostap bought an ink set for the Horn and Hoof office. “Ostap Ibrahimovich, were you not ashamed to pay LIVE money for this ink set?” Shura was right. The third option is simple and classic. Stupidly acquire a left-hand passport. Stupidly go with him anyway to which bank and in which country, and just as stupidly open an account with a credit card. As a result, you have on hand a credit card with the name of Zhenya Sokolov with 5 dollars on it, there is a passport in the name of Zhenya Sokolov with your photograph. Erase all data from the magnetic stripe in FIG. Prepare a dump from those that you have - no matter whose and which country. Change the name in it on the tracks to Zhenya Sokolova. Write this dump to this credit card. And forward - even to the bank, even to the store - everything is there. You ran out of money on this dump - you erase it again, cook and write a new one. So, until Zhenya Sokolova starts looking for all the banks and shops all over the world. Then you buy a new passport - and around again. Well, if they begin to recognize by sight, then only plastic surgery then.
I'm tired of pressing the keyboard, so I wrap up. I apologize to everyone who is aware of the topics covered for the fact that I have presented all this in a somewhat simplified form - the article is not aimed at bison, but at those who are new to this business. Of course, the topic is endless, with many pitfalls at each stage. If someone gets hurt and wants to take on - the directions are clear, look for information on each of the issues, study materiel, Read The Fucking Manuals, banking systems, countries, languages, communication psychology, security systems - the space for a fight is simply huge. Well, if someone from all this chewed didn’t understand anything, and it’s good, then it’s not for you. It's okay too - Garik Kasparov is playing chess, although he could have done carding. Feels good financially... Take up chess. Or checkers. Or keep practicing the usual virtual cardinog.
And the last note - if suddenly you once again see somewhere that someone is selling dumps with PINs - do not believe your eyes. If you have carefully read this case from top to bottom, then, I hope, it is clear that dumps with PINs are like cash in your pocket. And no one has yet sold something for $ 100 for $ 20. If the $ 100 is printed in Washington, of course, and not in Grozny or Tehran.
PS. Do not forget that video recording equipment is installed in almost all ATMs.
And video recordings are stored indefinitely - depending on the degree of chaos in the bank, which owns a particular
ATM.
What is the risk of responding to such a proposal? Will an attempt to earn extra money on someone else's bank card turn into a criminal case, where you are not a victim at all?
Profit or Deception?
The scheme of "work" is quite simple: you receive a bank card by mail, the PIN code will be in the instructions that will be attached to the card. The "employer" claims that he orders bank plastic from abroad, purchases a dump (information about the card in electronic form) from banks and writes it down on plastic. "These are foreign - you have nothing to fear" - the craftsmen assure in their ads.
It's frighteningly simple. Get two cards with 30 thousand rubles. on each you can at the post office, or they will be brought by a courier. You pay only for delivery - 1000 - 2000 rubles. Then you withdraw and transfer to the account of the "employer" part of the amount, the remaining tens of thousands of rubles are yours, you take the percentage right away ...
Most often, such offers come to schoolchildren and students. They are also replicated on their pages in social networks by young people, sometimes underage children, not understanding what such "cooperation" can turn into.
Sad consequences
Banks are constantly faced with the use of counterfeit cards. This type of “earnings” is a fraud, and those who sell cards and those who are going to buy and use them turn out to be fraudsters, ”says Vladimir Bakulin, head of the electronic business monitoring department of a large bank.
According to the expert, the cards get to the attackers in different ways. Most often, data is simply bought on the Internet. Thus, there is a high probability that the sellers were immediately going to deceive the buyers and the cards are most likely invalid.
Although it happens that organized fraudsters are really looking for people to cash out counterfeits (the so-called "drops"). Remember: participation in such schemes is fraught with criminal liability under the article “Fraud” with all the ensuing consequences, ”recalls V. Bakunin. - Credit institutions are taking a variety of measures to combat fraud. From monitoring operations to helping law enforcement agencies arrest intruders. But residents of Nizhny Novgorod should be vigilant - not to help cyber fraudsters.
With the development of cashless payments and the plastic card market, the number of various types of fraud in this segment is also growing . The above scheme is designed for financially illiterate citizens who are hungry for a crazy income. Remember: money can't come out of nowhere! It cannot be ruled out that the authors of the "super-profitable" scheme, having collected money for "delivery", will soon disappear from the horizon, - says Alexander Yudin, financial advisor, director of a branch of a large financial company in Nizhny Novgorod.
Be careful!
What tricks do attackers use today to take possession of other people's money. They counterfeit bank cards, create fake websites for payments over the Internet. Waiters and cashiers can discreetly withdraw your money from the card you gave to pay.
The most common type of fraud is skimming (illegal creation of duplicate cards using special electronic readers at ATMs). And it causes the greatest damage, - says Alexander Yudin. - Despite the measures taken by the state, supervisory financial authorities and banks, most often the weak point in protecting the money on the card is the negligence of the citizens themselves. They often lose cards, pass them into the wrong hands, write down the PIN code directly on the credit card, use someone else's computer when shopping on the Internet, etc.
When making payments on the Internet, it is better to use a separate card, which contains only the amount for a specific purchase. Do not store a lot of money on such a card! And when shopping on the Internet, use only trusted sites.
It makes more sense to make purchases only from your own computer. It is useful to connect to the service of sms-notifications of transactions carried out. Mobile banking is quite vulnerable, experts admit. It has a wide range of safety concerns. The first threat is associated with unauthorized access to data stored in the memory of your mobile phone. If you do not have antivirus software, it will not be difficult for fraudsters to get hold of the bank's customer profile data.
Turn off Bluetooth when not in use.
Install anti-virus software if you actively access the Internet from your mobile.
Another common threat is the loss of your phone, whether accidentally or due to theft. In this case, you need to contact your bank's support service as soon as possible in order to block the provision of the Mobile Bank service for your account and keep your personal savings. Be careful!
Officially
An offer to earn extra money using someone else's bank card should immediately raise doubts: why can't the other person cash out? - reported "AiF-NN" in the press service of the Main Directorate of the Ministry of Internal Affairs in the Nizhny Novgorod region. - Of course, each case needs to be analyzed separately. So far, the Nizhny Novgorod Criminal Investigation Department has not received complaints from Nizhny Novgorod residents about such schemes. If you receive such an offer, you should contact the police.
Cases of fraudulent use of bank cards in the region are common, according to the law enforcement officers. Often it is young people who become involved in such cases. The last sensational case: in the summer of 2013, three residents of Borchan were brought to trial, accused of stealing 7 million rubles. at 30 banks. According to the investigation, the attackers stole funds using fake bank payment cards. They used ATMs to withdraw large sums from the accounts of clients of foreign banks.
According to the defendants, they received the scheme of embezzlement from unknown persons on the Internet: they sent young people data about bank clients. The guys, using this information, made a duplicate of a plastic card and received cash from ATMs. The provider of information (whom the investigation also identified) received 70-80% of the withdrawn amount.
It's probably no secret to anyone that a credit card is not a reliable means of storing money. Credit cards are taken away and cashed online or in real stores. Today I would like to talk about the most sophisticated method of fraud with plastic cards - when they steal a dump (copy of a credit card) and a PIN code, and then withdraw money from ATMs. This is a multifaceted matter so that I will describe it in stages and at the same time support all this with photographs.
Fraudsters who work with plastic cards are called "carders", but carding is a fraud with plastic cards. What does a carder need to withdraw money from your plastic card through a ATM? Its full copy or the so-called dump (dupm) and your pin code (pin) is a four-digit number that the ATM asks every time to make sure that the card is yours.
A credit card dump can be obtained in different ways, but the difficulty is that information about your pin code is not stored in a plastic card, and if you only steal a dump, then it is useless to receive money from an ATM (credit cards without a pin are cashed in another way and this is the topic of another article ). This means that the fraudster needs to get a credit card dump along with a pin, which greatly complicates the task. Here it will not work to get a job as a waiter or a seller and copy credit cards, the client must dial the pin code, and the pin code must become known to the fraudster. You can, of course, stupidly take away a credit card and elicit a pin threatening with something dangerous, but firstly it is not subtle, and secondly it falls under the article "robbery" where the terms are much more abrupt. And where are the guarantees that the "client" will say the correct code? And even if the faithful one, the "client" needs to be isolated somehow, so that he does not accidentally realize, that you can call the bank and block the credit card, or, even worse for the criminal, dial 02 and catch the thief warm at the ATM. The risk is great, and there may be a very meager amount on the card, and work for Visa Platinum is expensive, usually such "clients" have security guards who can knock on the head.
But an inquisitive mind will always find a way out (and swindlers are savvy people). The only place where you can get a dump of a plastic card and a pin is an ATM. The conclusion suggests itself, you need to install special equipment so that it collects information that the fraudster could use in the future to enrich his pockets.
Skimmer (skimer) - a fraudster's device that reads and stores in memory (options: sends an SMS or radio signal) information from the magnetic tape of a payment card. So much for the dump. The skimmer is installed in front of the ATM card reader and is usually made for the design of a particular ATM so that the cardholder does not suspect anything. When a person who wants to withdraw money from the card sticks the card into an ATM, the skimmer reads the data from his card, which gets to the fraudster. Below are photos of skimmers, so that you would more accurately understand what it is:
This is the skimmer that scammers can use to get a dump of a plastic card. But as we have already found out before, one dump is not enough, you also need a pin code. That is why you need to install the skimmer on the ATM in order to find out the pin simultaneously with the dump. There are two ways to find out the PIN code of a particular card. The first one is the simplest, to install a camera next to the ATM, which will shoot the pin being dialed. You can hang a box with booklets on the ATM itself, where the hidden camera is mounted, or, for example, make a decorative canopy with a hidden camera above the ATM.
The second is to make a fake keyboard cover that looks like the real thing. This patch will save (send) the pin code.
If everything is done correctly and accurately, then the client will not even notice that a dump was taken from his card and his pin was written down, the card will crawl through the skimmer into the ATM card reader and the ATM will process it, and a high-quality overlay will push through and duplicate what was typed on a real ATM keyboard.
Now we have dumps and pins of credit cards, but the ATM has nothing to do with this information, it accepts cards. Next, we need a white, clean plastic, on which we will record this information. We look at the photo.
I heard somewhere that they had contrived at ATMs and now they "see" that the plastic is virgin white and they stupidly swallow it, the scammers began to apply a drawing on the white plastic with the help of ordinary stringers. By the way, I will say by the way that the magnetic tape on credit cards is rewritten, and nothing prevents a fraudster from typing real cards for a song for a pittance and writing information on them, and if by chance the PPP catches this business, then a real credit card is in the hands, and who what is written on it only God (and the swindler) knows. Recorders are sold quite legally, which is not surprising, since a lot of things are also written with the help of these devices, for example, bonus and discarded supermarket cards. We look at the photo:
By the way, usually the reader comes with a pair of white plastic cards for experiments. The case is small, write the dumps on white plastic and withdraw money from the ATM. Yes, I foresee the next question, there are cameras on ATMs. So what? Who forbids a swindler to put on a light make-up, wear a wig, wide sunglasses and a cap? And the sense in this case from the built-in camera, like a goat of milk.
How to protect yourself from this? There is a new type of cards with an electronic chip, the protection there is an order of magnitude steeper and, as I know, they are not yet hacked, so ask the bank for a card with a chip and no other way, maybe it is more expensive, but as you know, a mean pays twice.
Well, and a universal way to fight any fraud, it is - ATTENTION. If you see that there is something sticking out at the ATM card reader, that the keyboard of the ATM is unnaturally raised, made "somehow wrong" or moves, booklets are hanging on the ATM (the banks themselves do not hang them on the ATM) or, something else suspicious, not be lazy, look for a more reliable ATM. Yes, and you need to use ATMs in crowded places, preferably in large shopping centers or supermarkets, since there are many cameras, and fraudsters usually choose the less risky path and naturally choose some kind of ATM located somewhere on the outskirts of the city, than they will risk installing equipment in a large shopping center full of surveillance cameras and security.
- What is a dump?
- Where did you get the dumps?
- And what to do?
- Which for example?[/B]
Of course.
- Which slip?
- Where did you get the Pins?
Wow! Tell me.
Full analysis of a bank card from a former carder.
An excerpt from the book "How I Stole a Million. Confessions of a Repentant Carder".
There is a widespread misconception among ordinary people that the balance is on a credit card, but this is not so - the money does not physically lie on it, the credit card is like a pass to the card account in the bank that issued it. In other words, it carries out the identification of the account holder - whether he can take money from the chest that is in the bank. The seller passes the card through the POS terminal (from the English Point of Sale - "point of sale") - a device that reads the information recorded on the magnetic stripe of the card, and communicates with the bank to conduct a transaction, which connects to the processing center and transfers the data from your card there. Further, the processing contacts the issuing bank that issued the card and receives a confirmation or refusal in the form of a code. Successful authorization code - 00 - APPROVED (approved). Otherwise, they get a ban on the deal, often played out in Hollywood films ("sorry, your account is frozen" and demonstratively cutting the card with scissors). A payment system like VISA connects all the links of this chain together, for which it takes up to 3.5% from each transaction.
What is a dump?
A dump is a collection of information recorded on the magnetic stripe of a credit card. Consists of three tracks (tracks). The first two are used directly for the operation of the card, and the third track is intended for recording various service information. The most important is the second track. The first track duplicates the basic data of the second - card number, expiration date, CVV - code, and also contains the name of the card holder.
Track1: B4 55990 75607 84214 ^ SMITH / JOHN ^ 110210 10000 00000 00000
Track2: 4559907560784214 = 11021010000052700000
Code 101 after the card expiration date indicates that the card is international. If instead of it there is, for example, 201 - this means that the card is local, that is, by default it works only in the “native” country. Having track2 in hand, you can easily generate track1, but on the contrary, it is quite difficult to do it. To receive cash from an ATM, only the second track is sufficient.
Where did you get the dumps?
There are three ways at the moment. Portable readers (eng. Cardreader) - tools for reading the magnetic stripe of a payment card are being manufactured or purchased. The smallest readers that I have come across were the size of a matchbox and were made in Ukraine by Boa Factory engineers. Then the devices are distributed to cashiers in boutiques and expensive stores, waiters in restaurants, foreign exchange prostitutes, and they pass the client card not only through a legal POS terminal, but also through their own reader. A large processing center of a bank or trade network is hacked, through which payments of physical (not virtual) stores, hotels, restaurants pass, and the base of their customers is obtained. They are simply bought from those who took possession of them in one of the above ways.
The dumps still need to be written down on the credit card itself ...
Of course. This requires a special device called an encoder. They are sold completely legally and cost $ 800-1000. The most widespread model in carders' circles is MSR 206. I connected it to a computer via a USB port, inserted a dump into a simple program, passed the card through the slot - and you are holding a magnetic copy of a card of some American Pinocchio.
Can I go to the store now?
No, it's too early to go to the store, since we have a duplicate of the real card, but it is on a piece of white "plastic" (usually of the CR-80 brand). The seller in the store will be very surprised if you offer him such a card.
And what to do?
You negotiate with the seller in some decent store, like: "Vasya, I have such garbage, I will come to you, take a laptop and plasma, then we will sell the loot in half." It works - the owners of restaurants, boutiques and casinos gave us 40-50% in cash of the amount that they “rolled”, and we told them that they need to answer their bank if problems arise.
Which for example?
Sooner or later, the real cardholder (card holder) will protest the payment. He complains to his bank, those in VISA, and now strong guys from the security service of the bank, who installed a POS terminal in this casino, came to our casino. They will come and say: "Why are you, you scoundrel, are you" rolling "fake cards?" Well, here our oligarch should widen his eyes and say: “I don't know anything. Now I will call the cashier who worked that evening." Calling Masha. Bankers to her:
Did you check the validity of the card?
Of course.
Was the cardholder's signature on the back?
And then. I even compared it with the signature in his passport. And he signed the slip in the same way.
Which slip?
The check that comes out after paying for the goods with a credit card is called a slip. All information about the purchase is printed on it: time, date, organization name, details of the place where the purchase was made. By the way, the data for the slip is taken from the first track. And if the dump does not care what name you indicate in the first track - the real owner of the card or the name that is indicated in your "left" passport, then the card number must still be written in the original, otherwise the payment (transaction) will not work. And that would, of course, not be bad: you stupidly acquire a "left" passport, you stupidly go with it anyway to which bank in any country and just as stupidly open an account with a debit card. As a result, you have a credit card with the name of Zhenya Sokolov with $ 5 on it and a passport in the same name with your photo. You erase all the data from the magnetic stripe on figs, you take a dump from those what do you have, change the name in the first track to Zhenya Sokolova, write this dump to the card and go - even to the bank, even to the store. You run out of money on this dump - you erase it, prepare it and write a new one. And so, until Zhenya Sokolova starts looking around the globe for all banks and all shops. Then you buy a new passport and go around again. Well, if they already start to recognize it in person, then only plastic surgery then.
The bankers will ask if the cashier checked the card number and surname on the check and the front surface of the card - the cashier will answer that, of course, yes, he will add that the card was not damaged and there were no signs of forgery, and this "interrogation" is over - with all suspicions the bank has no legal basis to block the payment. Of course, if sellers in Minsk stores checked whether the data on the slip matches the numbers on the card itself, it would be impossible to turn an already used card into a reusable one, but in Belarus, a country of unafraid idiots, cashiers everywhere “hammered” on the rules for safe service bank plastic cards and I often managed to make purchases from dumps recorded on original, but expired, or even on discount cards... Businessmen who owed money to crime bosses and who had no choice were often involved in working with white "plastic". Of course, we did not "milk" one point too often, otherwise the servicing bank could take away the terminal and we would be left without work at all.
Hope what a PIN is - do you know?
I know, four digits, without which you can't get cash at an ATM.
Right. But I will add. First, a PIN is often required when paying for purchases. And secondly, PIN (Personal Identification Number - "personal identification code") optionally consisting of four digits. Its length should be large enough to minimize the likelihood of its selection by trial and error, and on the other hand, small enough for the cardholder to remember it. Therefore, the length of the PIN varies from four to twelve digits. More often, of course, four.
Where did you get the Pins?
- "Pins" ... Ordinary cardholders are sure (and bankers are constantly telling them about this) that it is impossible to hack or steal a PIN-code, but I know ten ways to do it.
Wow! Tell me.
Maybe not today? This is a topic for a separate conversation ...
And what is the actual "method"?)
Stop stupidly copy-paste themes, or at least create them in the appropriate sections.
