Setup for Online Carding & Bank Fraud Guide
INTRODUCTION
Carding is a genuine art form, and it's definitely not easy to master. These days, payment systems are fairly well protected, making it tough for most of us to use cards that don't belong to us. However, with enough determination, some insider knowledge, a bit of creativity, and some upfront cash, you can impersonate the Card Holder (CH) well enough to bypass the fraud detection systems built into payment processors that comply with the Payment Card Industry Data Security Standard (PCI DSS).
The PCI DSS has a number of factors that checks every time someone attempts a credit card transaction. These are the data points they evaluate to determine whether a transaction might be suspicious, and they generate what I like to call a "Fraud Score."
With that in mind, we can see that every payment processor is designed to approve legitimate transactions. So, if you can imitate the CH closely enough across those key factors, you can get almost any transaction to go through.
Threat Matrix
Check out the periodic table of threats to payment legitimacy and digital identity assessment here:
⚠️ https://risk.lexisnexis.com/digital-identity-periodic-table ⚠️
Avoiding VBV/MSC
To find a site to card, you first need to understand the PCI DSS requirements of the payment system you'll be using. One good option could be Authorize.Net , since it doesn't require VBV/MSC authentication. The key is to avoid the decline triggers we'll discuss later.
Finding Cardable Sites
If you're looking to card somewhere, you need to find a payment processor that doesn't use VBV/MSC—like Authorize.Net , which has over 400,000 merchants on its platform. To find online stores that use Authorize.Net, just hop on Google and use some handy search operators.
Try something like this:
"authorize.net merchant" -site:authorize.net "your desired product or category"
You can also swap out "authorize.net" for other processors, like:
"stripe merchant" -site:stripe.com "product"
or
"braintree merchant" -site:braintreepayments.com "product"
The key is putting your search term in double quotes to look for an exact match, using the site: operator to show only results from that site, and using the -site: operator to exclude a particular site and its results.
Declination Triggers
Major payment processors like Braintree , Authorize.Net , and Stripe all have their own standard PCI checks. These can give you a good idea of what they're looking for when flagging a transaction as potentially fraudulent. The device, browser, and connection data they collect to verify transactions can get pretty extensive, especially with big names like Amazon , PayPal , and Skrill .
The process of figuring out these PCI triggers is basically trial and error. Some of the device fingerprints they look for include:
✦ Device Fingerprints
✦ System Clock
✦ Time Zone
✦ Operating System
✦ Operating System Username
✦ Browser Fingerprints
✦ Cookies
✦ Caches
✦ IP Address
✦ Use of a Proxy
✦ Unusual or Large Transactions
✦ Location
✦ User-Agent
✦ HTTP Headers
✦ Browser Plugins
✦ Screen Size and Zoom
✦ System Fonts (eg, Times New Roman, Tahoma)
✦ Name / DOB / SSN / Address
✦ Copy & Paste Credentials
✦ Residential / Data Center / Spam RDP / SOCKS
✦ Card Tagging
✦ Connection Speed (Due to Proxies)
✦ Email Domain Authenticity and Age (.edu is best)
✦ Shipping Address / Billing Address
Risk Level
Fingerprint Category
Critical
IP, Proxy, Address, SSN, Credentials
Moderate
OS, Time, Fonts, Plugins, Screen
Informational
Cookies, Cache, User-Agent, Headers
OPSEC and Staying Anonymous for Carding and Bank Fraud
What You Should Know Before You Begin:
✦ Remmina is an RDP (Remote Desktop Protocol) Client .
✦ VPN is a Virtual Private Network that hides your IP.
✦ Tor facilitates an anonymous connection and is used as our own gateway.
✦ VMware is a virtual machine that hosts the operating system we'll be using (Ubuntu).
✦ SOCKS Proxy Checker is a proxy client that will connect to a remote SOCKS5 Proxy .
SOCKS5 Proxy Server is the server located near the victim's geographic area.
Step-by-Step Setup:
Download, install, and start VMware Workstation .
Download Ubuntu and run it with VMware.
In Ubuntu, download, install, and start the Tor Browser .
Download and install Mullvad VPN on Ubuntu, and pay with clean XMR!
Start Mullvad VPN .
Your connection should now look like this:
Your OS -> VMware -> Ubuntu -> VPN + Tor
Buy yourself an RDP server. Pay with clean XMR!
Install the Remmina RDP client on the virtual machine.
Use Remmina to open a Remote Desktop connection to your RDP server.
Your connection should now look like this:
Your OS -> VMware -> Ubuntu -> VPN + Tor -> RDP Server
Download SOCKS Proxy Checker and Firefox to the RDP server, then install the plugin.
Buy a SOCKS5 proxy server from Premsocks.com or an alternative provider.
Connect to the SOCKS5 server using SOCKS Proxy Checker .
Note: Always check your location using an IP-to-location service.
Your connection should now look like this:
Your OS -> VMware -> Ubuntu -> VPN + Tor -> RDP Server -> SOCKS5 Proxy (victim's location)
IMPORTANT: When doing carding or bank fraud, NEVER use your personal Wi-Fi (your home network or your phone's hotspot). Ideally, you should crack other people's Wi-Fi networks and use their internet connection instead.
If you can't crack Wi-Fi for XYZ reason, then use free open networks, like the ones at coffee shops or restaurants.
Another option, if you travel a lot to other cities or countries, is to buy an anonymous SIM card (always pay with cash) and use a portable Wi-Fi hotspot, like this one here: https://www.gl-inet.com/en-de/products/gl-e750?variant=45305435259063
When we talk about anonymous SIM cards, we mean ones you buy with only cash and without showing any ID—no DL, passport, or any other form of identification. Treat these SIM cards like disposable cups—always use a fresh one for each operation.
for questions contact on telegram @SwiftTextHQ
INTRODUCTION
Carding is a genuine art form, and it's definitely not easy to master. These days, payment systems are fairly well protected, making it tough for most of us to use cards that don't belong to us. However, with enough determination, some insider knowledge, a bit of creativity, and some upfront cash, you can impersonate the Card Holder (CH) well enough to bypass the fraud detection systems built into payment processors that comply with the Payment Card Industry Data Security Standard (PCI DSS).
The PCI DSS has a number of factors that checks every time someone attempts a credit card transaction. These are the data points they evaluate to determine whether a transaction might be suspicious, and they generate what I like to call a "Fraud Score."
With that in mind, we can see that every payment processor is designed to approve legitimate transactions. So, if you can imitate the CH closely enough across those key factors, you can get almost any transaction to go through.
Threat Matrix
Check out the periodic table of threats to payment legitimacy and digital identity assessment here:
⚠️ https://risk.lexisnexis.com/digital-identity-periodic-table ⚠️
Avoiding VBV/MSC
To find a site to card, you first need to understand the PCI DSS requirements of the payment system you'll be using. One good option could be Authorize.Net , since it doesn't require VBV/MSC authentication. The key is to avoid the decline triggers we'll discuss later.
Finding Cardable Sites
If you're looking to card somewhere, you need to find a payment processor that doesn't use VBV/MSC—like Authorize.Net , which has over 400,000 merchants on its platform. To find online stores that use Authorize.Net, just hop on Google and use some handy search operators.
Try something like this:
"authorize.net merchant" -site:authorize.net "your desired product or category"
You can also swap out "authorize.net" for other processors, like:
"stripe merchant" -site:stripe.com "product"
or
"braintree merchant" -site:braintreepayments.com "product"
The key is putting your search term in double quotes to look for an exact match, using the site: operator to show only results from that site, and using the -site: operator to exclude a particular site and its results.
Declination Triggers
Major payment processors like Braintree , Authorize.Net , and Stripe all have their own standard PCI checks. These can give you a good idea of what they're looking for when flagging a transaction as potentially fraudulent. The device, browser, and connection data they collect to verify transactions can get pretty extensive, especially with big names like Amazon , PayPal , and Skrill .
The process of figuring out these PCI triggers is basically trial and error. Some of the device fingerprints they look for include:
✦ Device Fingerprints
✦ System Clock
✦ Time Zone
✦ Operating System
✦ Operating System Username
✦ Browser Fingerprints
✦ Cookies
✦ Caches
✦ IP Address
✦ Use of a Proxy
✦ Unusual or Large Transactions
✦ Location
✦ User-Agent
✦ HTTP Headers
✦ Browser Plugins
✦ Screen Size and Zoom
✦ System Fonts (eg, Times New Roman, Tahoma)
✦ Name / DOB / SSN / Address
✦ Copy & Paste Credentials
✦ Residential / Data Center / Spam RDP / SOCKS
✦ Card Tagging
✦ Connection Speed (Due to Proxies)
✦ Email Domain Authenticity and Age (.edu is best)
✦ Shipping Address / Billing Address
Risk Level
Fingerprint Category
Critical
IP, Proxy, Address, SSN, Credentials
Moderate
OS, Time, Fonts, Plugins, Screen
Informational
Cookies, Cache, User-Agent, Headers
OPSEC and Staying Anonymous for Carding and Bank Fraud
What You Should Know Before You Begin:
✦ Remmina is an RDP (Remote Desktop Protocol) Client .
✦ VPN is a Virtual Private Network that hides your IP.
✦ Tor facilitates an anonymous connection and is used as our own gateway.
✦ VMware is a virtual machine that hosts the operating system we'll be using (Ubuntu).
✦ SOCKS Proxy Checker is a proxy client that will connect to a remote SOCKS5 Proxy .
SOCKS5 Proxy Server is the server located near the victim's geographic area.
Step-by-Step Setup:
Download, install, and start VMware Workstation .
Download Ubuntu and run it with VMware.
In Ubuntu, download, install, and start the Tor Browser .
Download and install Mullvad VPN on Ubuntu, and pay with clean XMR!
Start Mullvad VPN .
Your connection should now look like this:
Your OS -> VMware -> Ubuntu -> VPN + Tor
Buy yourself an RDP server. Pay with clean XMR!
Install the Remmina RDP client on the virtual machine.
Use Remmina to open a Remote Desktop connection to your RDP server.
Your connection should now look like this:
Your OS -> VMware -> Ubuntu -> VPN + Tor -> RDP Server
Download SOCKS Proxy Checker and Firefox to the RDP server, then install the plugin.
Buy a SOCKS5 proxy server from Premsocks.com or an alternative provider.
Connect to the SOCKS5 server using SOCKS Proxy Checker .
Note: Always check your location using an IP-to-location service.
Your connection should now look like this:
Your OS -> VMware -> Ubuntu -> VPN + Tor -> RDP Server -> SOCKS5 Proxy (victim's location)
IMPORTANT: When doing carding or bank fraud, NEVER use your personal Wi-Fi (your home network or your phone's hotspot). Ideally, you should crack other people's Wi-Fi networks and use their internet connection instead.
If you can't crack Wi-Fi for XYZ reason, then use free open networks, like the ones at coffee shops or restaurants.
Another option, if you travel a lot to other cities or countries, is to buy an anonymous SIM card (always pay with cash) and use a portable Wi-Fi hotspot, like this one here: https://www.gl-inet.com/en-de/products/gl-e750?variant=45305435259063
When we talk about anonymous SIM cards, we mean ones you buy with only cash and without showing any ID—no DL, passport, or any other form of identification. Treat these SIM cards like disposable cups—always use a fresh one for each operation.
for questions contact on telegram @SwiftTextHQ
