▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑CARDING WHAT DO I NEED AND WHERE DO I GET IT ?
instagram.com/UndercodeTesting

1) Credit Cards: Yes, CCZ.

"do you have any ccz"
"where can I hack CCZ"
"where can I get a list of valid CCZ?"

2) You need money to make money. Plain and simple. Which means that the only way your gonna be able to get ccs if you have ABSOLUTELY NO MONEY is if you successfully rip a noobie with 100 cards (but what noobie has 100 cards?), if you have any background in database hacking, if you trade for your ****, or if you know someone that's willing to give you ccz all day.

3) I know thats a discouraging statement to all of you, but we have to keep **** realistic. The easiest way to get ccz is to purchase them.

"but I cant get a job/I dont wanna work!"

4) Having a regular 9 to 5 job is not a bad idea in the carding scene. Not only will you have some sort of alliby to why you have all this expensive **** in your house, but you can also use the money (who cant nowadays) to pay bills. You cant card forever, and you cant sustain yourself by carding alone.

5) If you are REALLY strapped for cash, you have to go through the alternative: trade for your resources. you have to be resourceful in carding, meaning you have to use what you got. Got a psybnc admin account? Offer psybnc user for a cc or two. Got shells? roots? Can you make verification phone calls? just ask yourself "what do I have that might be valuable to someone else?" and work with that. It dosnt have to be big, it just has to get you a few cc's in your palms.

6) Once you've run your first successful cc scam, DONT SPEND ALL YOUR EARNINGS. Save $200 and re-invest back into the carding community. head to SC and get better cards. If you have level 2 cards, I suggest carding C2it/Paypal and using that $$ to buy ccs. (successful C2it/PP scamming techniques will not be discussed in this tut, sorry)

7) To other minor pointers on rippers and legit sellers, please scroll down to "SELLERS, TRADERS, AND RIPPERS, OH MY!"

8) "where can I check my CCZ?"

Knowing wether your cc is valid or not is really important for saving some time and energy. if you want the lame pr0n site check, you can check them under hxxp://www.sinfulcherries.com/?aid=525390.

9) The idea way for checking ccz is through an online merchant (authorize.net, linkpintcentral.) These merchants can verify cc amounts without charging your ccs. Good luck finding one. People on IRC want a ridiculous trade for These merchants (cvv lists, cash). So if you run accrosss a legit merc, dont give it out! even to your best buds! online mercs are gold in the world of carding.

10) Other methods for verifying cc amounts include registering your cc on an online bank. (You will need at least a level 2 card, level 3 for ATM cards). alot of online banks can give you limit, billing addy, ect ect but they require at least a level 2 cc

> NEXT TUT
written by undercoder
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑CREDIT CARD FRAUD: INFORMATION IS KEY.
Youtube.com/Undercode

🦑here we want to make something clear right now. The secret to carding is not the number of cards you own, its what you can do with the cards. What do I mean by that? Simple.

Hypotherical situation: My name is Johnny and I have 3 ccs with SSN, DOB, CVV NUMBER, MMN, NAME, STREET ADDRESS, CITY, ZIP, AND BILLING TELEPHONE NUMBER. I have a friend named Billy. Billy has 300 CCCZ with CVV, MMN, NAME, STREET ADDRESS, CITY, ZIP, AND BILLING TEL. NUMBER. Whos more likely to successfully card something?

Simply put, I (Johnny) am. Why? Because I have more information that can prove that I am the person who owns this CC than Billy does with his 300 CCVZ. Does that mean Billy's not gonna card anything? No, that just means Billy's gonna have a hard time carding anything without verification.

So to sum up this lesson, you have to get information on your mark (the person that youre impersonating.) #1 rule in carding is: the more information you have on a person, the better chances you have for a successful transaction. Here is the information you're looking for(note: the levels of a card is not a tehcnical carding term, I' just used L1 L2 L3 to simplify **** throughout the tutorial.) :

NAME:
ADDRESS:
CITY:
STATE:
ZIP CODE:
TEL. BILLING NUMBER:
CARD NUMBER:
CARD EXP DATE:
CVV CODE:

(LEVEL 1: REGULAR CVV. If you have this much info, youve got yourself a regular cc. Nowadays you need this much info for carding ANYTHING worth mentioning. If you have any less than this information, youre **** outta luck. :\)

Social Security Number (SSN):
Date Of Birth (DOB):
******s Maiden Name (MMN):

(LEVEL 2: (PARTIAL FULL-INFO) If you have this much info, your ccz are on another level. With this info, you should be able to card PayPal, C2IT, and other sites without too much of a h***le.)

BANK ACCOUNT NUMBER:
ROUTING NUMBER:
BANK NAME:
BANK NUMBER:
DRIVERS LICENSE NUMBER:
PIN NUMBER (For CC or ATM card)

(LEVEL 3: (true full-info) If you have this info, youre cc is ready to card anything your heart desires)

Now if all you have is a regular cc, dont discourage. Just do some research and build your cards as much as possible:

First, go to whitepages.com and try to lookup your marks street address and phone number. Make sure it matches the info you have on your cc..

Last, but not least, take a quick look in ancestry.com. Ancestry.com is a bit of a *****, but you can lookup DOB and MMN (ie, if your marks name is anthony hawkins, his father is david hawkins and his ******s name is bella donna, Donna is the MMN)

So size up your cards and move on to the next undercode tutorial

written by undercoder
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 why to create a carding channel when we can send in 1
> USE FOR LEARN ONLY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑CARDING ATTAINING HIGHER LEVELS OF ANONYMITY:
t.me/UndercodeTesting

1) Safety is key. No one wants to give the federalles the satisfaction of busting us and shutting down production, so we gotta stay as anonymous as possible.

2) First let me start off by saying theres no 100% safe way to card. Dont let people fool you into thinking that. You can be behind all the proxies, wingates, socks, and whatever else in the world, but you leave "digital fingerprints" wherever you go. For my personal benefits, I use a carded ISP combined with an anonymizer account ( www.anonymizer.com) and a level 1 proxy. But I dont reccomend that for everyone.

3) www.anonymizer.com: offers excellent services for those that want to remain anonymous. The setback is that its a service, and like any other service provided, you have to pay for usage and they will restict your account due to fraudulent usage. Just card another one rite? If youre planning to use anonymizer, just concentrate on keeping your IP secret from their services instead of the site youre carding. The only set-back to the service is that they have some issues with sites using Java Applets, meaning you might have to skip out on some major sites that require JAVA.

4) proxies and such: I use a private hidden proxies, and dont really **** with any other proxies, so I cant comment too much on this topic (maybe someone will paste a seperate proxy faq?) As far as I'm told (thx red and hit), proxies differ from level 1 to level 3, 1 being the most anonymous, 3 being the least. You can also get free proxies from www.anonymitycheker.com/page1.htm this is a descent site which ranks their proxies from "transparent" (leaks your ip) to "highly anonymous." they also do real-time proxy tests and other ****.

5) Stealther: Theres a prob out there that will actually link your proxies together for maximum anonymity. This program is called Stealther. Stealther can be registered via key (so you can go to #serialz on efnet and get a key) and is a descent anonymous program.

6) EvidenceEliminator: If you're really serious about carding, this is a program you NEED to have installed on your HD at ALL TIMES! Federal agents have several programs that allow them to extract information from your PC, such as the pages you have visited, the files you have deleted, and the emails you have written. Everytime your PC restarts, EE kicks in, providing you with the safety of erasing any tell-tale logs and history files. You always want to be prepared for the worse.

7) JAVA: Reguardless of what stealth method you are using, always be sure to disable JAVA on your browser.

8) CARDED ISP: I dunno if carding an ISP is safe or not. I've heard mixed feedbacks about this idea. However, I can testify that I've had expirience with such a matter and I havent had a problem as of yet. Some popular ISPs to card are Earthlink Pre-paid (you can pre-pay it up to a year, look for the link on their confusing website) and America Online (better used for a quickie card, just get out one of their 849308490383904 free 10000000 hour cds and input a few ccs into that *****)

9) These arent the only stealth methods out there: these are just the popular ones ATM. If you feel you have an anonymity method that works, by all means try it out. You never know what works and what dosent until you experiment.

10) If you need to know how anonymous you really are, there are some simple ways of testing this.

www.whatismyip.com: the first (and most basic) test you should take. whatismyip.com is a simple method of knowing what your ip is on the web. This does not run though JAVA so you cant really tell if your anonymous or not from this site alone.

> hxxp://www.sinfulcherries.com/?aid=525390: This is actually a pr0n site protected by ibill. When you try to sign-up, there is a java applet that tells you "your current IP of blahblahblah is being recorded. Any fraudulent blahblahblah will be reported." If its not your real IP, you p***ed the second test. (you can also check your ccs @undercodeTesting)

> hxxp://www.multiproxy.org/env_check.htm: this is a basic check of your anonymity level. Must have JAVA enabled -- the true purpose of the site is to promote their software (multiproxy) which works in similar fashion to stealther.

written by undercoder
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 ANONYMITY CARDING

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑carding DROPS AND VERIFICATION TECHNIQUES:
T.ME/uNDERCODEtESTING

1) The right drop is essential to your scamming needs. Finding legitamite drops inside and outside of the US is hard. Many people keep your **** and dont send, or some people dont pick up the package at all! (theres nothing worse than watching your hard-earned laptop going back to the store because it was refused by the recepient)

2) If you live inside (or even outside) the USA, youre better off scoping a drop out on your own. A drop is basically an empty home that looks to be inhabited. This is the shipping address you use for your carding needs. Your items should only picked up at night.

3) As awlays, be sure to have a cover-story in case someone asks why youre snooping around an empty home. "I'm picking up a package for the person that used to live here" is a legit excuse.

4) Or even "my father is the real-estate agent." is good. Just keep in mind that if you order anything over $500, it will USUALLY need to be signed for, (this statement is based upon FEDEX/UPS policies. I've gotten feedback from people that state they have gotten their local UPS employee to drop merchandise worth 1k at thir doorstop using a note, but these are uncomfirmed rumours.) Wether youre willing to sit and wait all day on the doorsteps of your drop, or you rather leave the postman a note that says you'll pick it up at the nearest postal station, its up to you. (Dont panic if you have to pick up a package at the station. When you walk in, you need to be calm so it dosent arise suspicion. If the clerk asks you to wait more than 3 minutes, PLEASE dont stand there waiting to get busted, tell him/her you have a prior engagement and quickly exit stage left. )

5) If you live outside the USA, youre just gonna have to trust someone. The easiest way to get a legit drop in the USA is to ask around for people that have had successful experiences with a drop. Most drops hold a 50/50 or "you card something you card me sommething" policy. If youre talking so someone thats trying to cut themselves in to the deal "Ie yes, I know someone but you have to card me something too" just move on, they're wasting your time.

6) Just a quick note, if youre carding something like a plasma television, youll have better luck using a drop from the same state, changing the billing addy (you can change a billing addy with a level 2 card, youll need a L2 card for carding a plasma tv neways) and acting like you just moved. (have that mindset when you call in: I am (name of cardholder) and I just moved from (city a) to (city b)) Once you have the item in your possession, you SHOULD GUESS THAT YOUR DROP HAS BEEN FLAGGED. What does this mean? YOU SHOULD NOT - I REPEAT SHOULD NOT RETURN TO A DROP ONCE YOUVE CARDED EXPENSIVE **** TO IT. Reguardless of wether your drop is flagged or not, do you really want to take the chances?

7) The cellular phone: The anonymous cell phone is the carders sword. With it, you will make several calls to several companies using several names. You should keep this cellular phone for carding ONLY. (just in case you become confused and forget who youre talking to.) If you have a phone phreaking connection, youre a lucky SOB. For the rest of us, we gotta go out and get a pre-paid cellular phone. (a phone which dosent require much info to purchase and use.)

written by undercoder
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑THE SITES: WHATS CARDABLE AND WHATS NOT?
youtube.com/Undercode

1) Ok, so you got your ccs, your drop and youre as anonymous as you can make yourself. Now what sites are cardable? This is the easiest question I have to answer on this FAQ.

-ANY AND ALL SITES ARE CARDABLE- (THX CIA AND `Q_)

2) Why do I say that? because it's true. Like I said in chapter two of this little tutorial, its not about how many cards you have, its what you can do with them. Alot of this has to do with your mindset as well.

3) If you have a card from Johnny Knoxville from Texas, you must be Johnny Knoxville from texas. Depending on the information that you have acquired from Johnny Knoxvile, you must convince merchants and I-stores that you A R E Johnny Knoxville.

4) When approaching these I-stores, you want to scope things out first. Ask yourself a few questions:

-whats their policy on different shipping address than billing addess?

If they have a "must call" policy, make sure to give them an anonymous number where you can be reached (have your anon cell phone ready for this.)

-do they accept other payments besides credit?

5) If they accept other payment methods, sometimes its easier to card with a different payment method. (Ive had more luck on Dell.com with online checks that I have with credit cards.)

6) Whatever you card, make sure that you have all your info prepped before carding it. If youre carding something over 1k, get on your anonymous celly and call up the banking institution of the person's card youre holding. Make sure to let them know that youre making a purchase of a large limit, so they dont deny your card.

written by undercoder
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑CARDING TERMS- A quick overview of what online carding is
t.me/UndercodeTesting


1) - SOCKS and why we use them
- Finding a cardable site and what cardable means
- Carding "non cardable websites" with fake CC scans and other fake documents

2) Carding while on the job
- Getting CC, CVV, CVV2 through use of mobiles
- Skimming whilst on the job
- Using carbonless receipts to get details (pretty outdated method)

3) Trashing
- Trashing for receipts and credit reports (pretty outdated although still works)

Phishing over the phone
- Phishing over the phone for details

Keylogging for CVV2s
- Hardware keylogging

4) Carding Instore
- What instore carding is (very brief)
- How it's done
- How to act and present yourself instore

5) Carding over the phone
- Carding over the phone

6) IRC
- Services provided in IRC
- Advantages to using IRC for info
- Disadvantages
- How to find carding channels (Will not go too much into this as there are secrets between fellow carders which we like people interested enough to find out for themselves)
- Vendors and how to approach them
- How to rip in IRC (EVERY vendor, reliable or not has ripped some n00b

7) who acted like they knew what they were doing)
::::WU BUG BULLSHIT and how to rip n00bs and gain more::::

8) Phishing for Change of billing
- What COB is and why it's useful
- Use through phishing pages
- Use through keylogging

9) Drops and what you need to know about them
- Drops and what you need to know about them

written by undercoder
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 The new carding is summed up quickly is the act of obtaining someone's credit card information, from the CC#, CVV, CVV2, CVN, and the billing address, along with the expiry date and name of the person the card belongs to along with a signature.
t.me/UndercodeTesting

1) Online Carding
Online carding is the purchasing of goods done over the internet with the CVV2.

2) Now for you n00bies you're probably wondering what a CVV2 is, it's simply just the database of basic info for the card such as the card type (e.g. Mastercard) First and last name, address and post code, phone number of the card owner, the expiry date (and start date if it's a debit card or prepaid CC), the actual CC number and the CVC (card verification code, which is the 3 digits on the back of the card).

3) This is the format you usually get them in when you buy off IRC:
:::MC ::: Mr Nigerian Mugu ::: 1234567890123456 ::: 09|11 ::: 01/15 ::: 123 ::: 123 fake street, fakeville, ::: Fake City ::: DE24 TRH ::: 01234-567890 :::

4) SOCKS and why we use them
Now with ANY fraud at all you have to take precautions so you don't make it easy for anyone to catch you in your wrong doings. As usual I swear against TOR for carding/scammin because most nodes are blacklisted by websites and because TOR cycles through various different proxies; and even if you configure it to go straight through an exit node of your choice it's still not worth it. You can use JAP but make sure you're using some constant sock proxies from the same city, town or area that the card is from; also go wardriving and use a VPN (don't trust anyone off IRC with these, you'll have to do some searching around yourself for a highly trusted one and one which won't comply with LE).

5) You can get good SOCKS from anyproxy.net (people are selling accounts for the site in IRC all the time), that's the best place but even I ended up losing the account eventually (unknowingly I was sharing it with some Nigerian dude who became selfish).

6) So we use SOCKS because they stay constant. But don't let that get your guard down, you want FRESH proxies everytime you card.

7) Finding a cardable site and what cardable means
Basically a cardable site holds these characteristics and what you should be looking for to determine an easily "cardable" website:

- The top one you need to look for on the site's TOS is that they send to any address and not just the one registered on the card (although you can easily get around this if they don't, with a COB, photoshopped verification (will go into detail later) or some social engineering over the phone).

- The next important to look for is if they have a visa verification code or mastercard secure code (most of the time if you ask your vendor they'll include them in your CVV2 details textfile), if they do have one of these you have to put in and you don't have them then don't waste your time

- If they ship internationally (for obvious reasons, but you can just stick to local websites and order to your local drop)

- If they leave packages at the door when no one's in, or around the back in a safe area (I know of one site in the UK that has all these qualities including this one, it is perfect for carding clothes)

- Also you can't forget to see what other security checks they need to do (if they need to call you up to verify or want a utility bill, passport or a scan of the actual CC)

written by undercoder
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 CARDING Keylogging for CVV2s


1) Hardware keylogging
First of all it's best if you use hardware keyloggers here that you put into the keyboard of a computer belonging to an area where a lot of people are going online a lot and logging into e-mails, ebays, paypals etc, pretty much giving you enough info for you to go searching through if you get in their e-mails, or maybe you're lucky enough to get someone who is buying something online anyway. Get the keyloggers

2) And come back within 2 days time or so and collect the keylogger after doing some browsing yourself (as to not look suspicious just coming in and then leaving a few seconds later).

3) Or of course you could set one up in a business and do the classic call in and do some social engineering from the credit card company or secret service and have them go to the bank online and have them log in to verify, or maybe even have them log in to a fake bank online made by yourself that will collect anyone's info who logs in on it.

4) Carding Instore
Instore carding is the act of skimming a credit card and writing the dumps and track1+2 to a CR-80 piece of plastic and then either cashing out at the ATM or shopping for goods instore, as long as you have the PIN as well through whatever method you choose to use.

5) How it's done is through the use of thejerm software or any other magstripe utility software (thejerm is the best to use). And you do it like this:


1. Load up thejerms software

2. hit settings tab

3. hit "Defaults" in Leading Zeros box

4. hit "75 bpi" in Set Track 2 density box

5. go bak to actions

6. hit LoCo or HiCo in Coercivity box, depending on which you want to do

7. input your tracks 1 & 2 (without the % ; or ? symbols because the program already does it for you)

8. hit Write Card and swipe your card. (i usually do a read card afterwards to make sure everything went ok)

9. GO SHOPPING!!!

written by undercoder
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁