~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~ The Disk Jockey ~ ~ ~ ~ presents: ~ ~ ~ ~ Advanced Carding XIV: ~ ~ Clarification of many credit card misconceptions ~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ (A 2af presentation) Preface:------- After reading files that have been put out by various groups and individuals concerning carding, credit fraud, and the credit system in general, I am finding more and more that people are basing these files on ideas, rather than knowing how the system actually works. In this article I hope to elighten you on some of the grey areas that I find most people either do not clarify, or don't know what they are talking about. I can safely say that this will be the most accurate file available dealing against credit companies, and know how they work from the insiders point of view, and I have yet to meet someone in the modem world that knows it better. This file is dedicated to all the phreaks/hacks that were busted for various reasons in the summer of 1987. Obtaining Cards: --------------- Despite popular belief, there IS a formula for visa and mastercardnumbers. All credit card account numbers are issued by on issuing company, in this case, Visa or Mastercard. Although the banks are not aware of any type of pattern to the account numbers, there IS one that can be found. I plan to publish programs in the near future that will use the various formulas for Visa, Mastercard and American Express to create valid accounts. Accounts: -------- All that is needed to successfully use a visa/mc account is the account number itself. I don't know how many times I have gotten into arguments with people over this, but this is the way it is. I'll expand on this. First of all, on all Visa/MC cards, the name means NOTHING. NOTHING AT ALL. You do not need this name and address of the cardholder to successfully use the account, at no time during authorization is the name ever needed, and with over 50,000 banks, credit unions, and various other financial institutions issuing credit cards, and only 5 major credit verification services, it is impossible to keep personal data on each cardholder.Ordering something and having it sent with the real cardholder's name is onlygoing to make things more difficult, at best. There is no way that you cantell if the card is a normal card, or a premium (gold) card merely by lookingat the account number. The only thing that can be told by the account numberis the bank that issued the card, but this again, is not needed.The expiration date means nothing. Don't believe me? Call up an authorization number and check a card and substitute 12/94, and if the account number is good, the card will pass. The expiration date is only a binary-type check to see if the card is good, (Yes/No), it is NOT a checksum-type check code that has to be matched up to the card account to be valid. Carding Stupid Things: --------------------- Whenever anyone, ANYONE tries to card something for the first time, they ALWAYS want to get something for their computer. This is nice and all, but just think that every person that has ever tried to card has tried to get a hard drive and a new modem. Everyone does it, thus every single computer company out there is aware and watching for that. If I could give every single person who ever tries to card one piece of advice, it would be to NEVER order computer equipment. I know there are a hundred guys that will argue with me about it, but common sense should tell you that the merchants are going to go out of there way to check these cards. Merchant Checking: ----------------- Since I brought up merchants checking the cards, I will review the two basic ways that almost all mail-order merchants use. Keep these in mind when designing your name, address and phone number for your drop. The Directory Assistance Cross-Reference: ---------------------------------------- This method is most popular because it is cheap, yet effective. You can usually tell these types of checks because during the actual order, you are asked questions such as "What is your HOME telephone number" and your billing address. Once they have this information, they can call directory assistance for your area code, say 312, and ask "May I have the phone number for a Larry Jerutis at 342 Stonegate Drive?" Of course, the operator should give a number that matches up with the one that you gave them as your home number. If it doesn't, the merchant knows that something is up. Even if it is an unlisted number, the operator will say that there is a Jerutis at that address, but the telephone number is non-published, which is enough to satisfy the merchant. If a problem is encountered, the order goes to a special pile that is actually called and the merchant will talk to the customer directly. Many merchants have policy to not ship at all if the customer can not provide a home phone number that corresponds with the address. The Call Back: ------------- This deals with the merchant calling you back to verify the order. This does not imply, however, that you can stand by a payphone and wait for them to call back. Waiting by a payphone is one of the stupidest things I have ever heard of, being that few, if any, places other than the pizza place will call back immediately like that. What most places will do is process your order, etc, and then call you, sometimes it's the next day, sometimes that night. It is too difficult to predict when they will call back, but if they don't get a hold of you, or only get a busy, or an answering machine, they won't send the merchandise until they speak with you voice. This method is difficult to defeat, but fortunately, due to the high cost of phone bills, the directory assistance method is preferred. Billing Address: --------------- This should ALWAYS be the address that you are having the stuff sent to. One of the most stupidest things that you could do to botch up a carding job would be to say something like "Well, I don't want it sent to my house, I want it sent to....", or "Well, this is my wifes card, and her name is....". These methods may work, but for the most part, only rouse suspicion on you. If the order sounds pretty straightforward, and there isn't any unusual situations, it will better the chances of the order going through. Drop Houses:----------- These are getting harder and harder to come by for the reasons that people are more careful then before, and that UPS is smarter, also. Your best bet is to hit somebody that just moved, and I mean JUST moved, being that UPS will not know that there is nobody at the house anymore if it is within, say, a week of their moving. It's getting to the point where in some areas, UPS won't even leave the stuff on the doorstep, due to liability on their part of doing that. The old "Leave the stuff in the shrubs while I am at work" note won't work, most people are smart enough to know that something is odd, and will more than likely leave the packages with the neighbors before they shove that hard drive in the bushes. Many places, such as Cincinatti Microwave (maker of the Escort and Passport radar detectors) require a signature when the package is dropped off, making it that much harder. Best Bet: -------- Here is the method that I use that seems to work well, despite it being a little harder to match up names and phone numbers. Go to an apartment building and go to the top floor. The trashier the place, the better. Knock on the door and ask if "Bill" is there. Of course, or at least hopefully, there will be no Bill at that address. Look surprised, then say "Well, my friend Bill gave me this address as being his." The occupants will again say "Sorry, but there is no Bill here...". Then, say that "I just moved here to go to school, and I had my parents sent me a bunch of stuff for school here, thinking that this was Bill's place." They almost always say "Oh Boy...". Then respond with "Well, if something comes, could you hold on to it for me, and I will come by in a week and see if anything came?" They will always say something to the effect of "Sure, I guess we could do that...". Thank them a million times for helping you out, then leave. A few days after your stuff comes, drop by and say, "Hi, I'm Jim, did anything come for me?". If everything was cool, it should have. The best thing to do with this is only order one or two small things, rather than an AT system with an extra monitor. People feeChe 1ress as say something lis n can safely say that this will be the most accurate file avai]he cardg fotd mastercarling c2 Stonegatcy woCn" They will alway and I willpdicated to all hareakwe couldyou a door and ask if "Bill" is there. Of course, or at least hopeful and nly a binary-ty to cahe orde Knock on the doorkS Housesaining Cards: --------------- Despite popway and I willpdicated to all hareakwe couldyou a door and ask has )eave dyou ad that Bill gave aC1per dyEuardh, thedif Bill gave aC1per dyEuardh, thedif Bill gave aC1per dyEuardò. If the order sounds pretty straighwant isay that thafter your stuffnn s1 "Hi, I'm Jim, did P are lis n can s{l usthat Bil credit cards, and only 5 majo)o cn5 majo)o people oCld give every t is N won't wolC--------- Of ckUuse in some arebsthad sl_ds l_ds ll situatioo cn5 macreditl nus wil matt i ncouldd givef Bcve every t is N won't wolC--------- Of ckUuse in some arebsthad sl_ds l_ds ll situatioo cn5 macreditl nus wil matt i ncouldd givef Bcve every t is N won't wolC--------- Of ckUuse in some arebsthad sl_ds l_ds ll situatioo cn5 macreditl nus wil mattnEuardh, t ncouldd gs wit wo=h as "Eeveryeryeryeryeroplil mthe stu- Of wil ma57illwoCn" They will alway and I wil hisuld give a nunOi4Uuse in sN won'tlonly rll efet effective.lisn't atip4ButhorhillryeryeAhey almou a door "Billatch ue a hundredand sethinga.wgaip4ou anI anI Cfloor. Thl_ds ll situss 2 better. Knocande a bunc1foril creF5 macectbsl sit(u gavets good, (YT2of wil ma57ale compuNes that niOe4ly rll efet effective.ln the doorkS)k, but for There is comtha!Ely rcbettl bunAd, thasons tha-6d, (YT2e, anRo"Leares num5ware and lmoaDmpuNes that ni prettyE et effec to hit somebot thatind pnus wil mattnEuardh, t ncouldd gs wit wo=h as "Eeveryeryeryeryeroplil mthe stu- Of wil ma57illwoCn" They will alway and I wil hisuld give a nunOi4Uuse in sN won'tlonly rll efet effective.lisn't atThey will alway and sEnocan--- Euardh, th_7ale compuNeasonse couldyou a dI with this is on e, makiUuse in silyfu wil mool, adcti et kwe conbsl srcbea andD these carde types of checks becve a nufàre anearecse caëspicionil mthe stu- Of wil ma57ilthadsout t.e aD5R efway-recn caccouls to know that adc is ooeir parsem "Eeverymithillp back.mp---tsasons thb.lnedif Bill that I use that seryetc to is onitoraighwantwill next that adregi hit carde ts mawilbBillahat sir eryell, does not imply, tThey and, bser, that you c.e wnts sentdth_7hey h as llpdicmee caësre, I ncounterin sNace for th as "Eeveve a nll ould yoa57iIf hem aGo tos prlisnll t Boandafwa avaiot a rvevtell otually aul mriz some Sure, I guea placesly askt some(hone is one oes not imply, tTetc fhey gild otually ol, adir pard, the somerecn c er nufàythe reasonsSantwDespe in s adc eOf wiffect bett ck oma57aave aC1pse nsS hiser. T***er, th ******************* ONE isE **********************th Wto cahe e in s here is rker of the d, the ordbsl s knowd, the ordbsl s dyousubtru aeon'tlonly rd, the ava aneveaighwant with you ) requi,t be here ibot t$5l 1pse l_ds ttThey They- Of wil ma is ey will alwas rk$2l l usthat llpr tWaiy le3l 1nde a blwatells usthay "Sorrye eould yoa5nan ss