Credit Card baits -- keep up the great work!

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sat Nov 22, 2014 12:25 am

Just a quick note to let all of you CC baiters know that your hard work is very, very much appreciated by our contacts at Visa International. We work primarily with a very high-ranking person: Head of Data Compromise Management (they share info with other CC companies).

Although they do not send feedback on any specific reports, they are very enthusiastic about the quality and quantity of the data we have been providing them, especially in recent weeks where we've had an incredible torrent of data. The volume of reports is really astonishing.

Last week I got an email after I sent a particularly massive number of cards:

Quote:

Keeping sending them and we will deal with all cards reported.

I am happy to have any and all information you can provide.

I am of the belief that we never know when one piece of info can be the crucial part of the puzzle.

Many thanks for your ongoing support!

They've made a similar point in the past. Even if a card has already been found out by a merchant or the cardholder, having these reports in bulk allows them to look for trends that can often help in determining the source of the stolen data. Cards don't need to be fresh and still active to be useful to them.

As a side note, if anyone here has access to any of the deep black hat websites where cards are bought and sold, the fraud division is very interested in tracking pricing trends:

Quote:

do you ever monitor the prices of cards being offered for sale on the various forums/carding sites?

It seems that with all the huge data breaches, such as Target, Home Depot, Staples, Kmart and many others, compromised credit cards are dropping in price on the illicit 'carder' sites where these are bought and sold. But it is extremely useful for them to have as much data as possible.

So if anyone does come across such information, please PM it to me to forward on.

Meanwhile, you can rest assured that your efforts are yielding fruit, both in helping banks track sources, and more importantly in preventing private individuals from having headaches dealing with fraudulent use of their cards. As anyone who has had a card compromised knows, it is a royal PITA to update all of the various companies where you have automatic payments tied to a CC account.

I am hyper-cautious about CC security myself, but I have still had to change my primary card 3 times in the past year due to fraud. Mad

So keep them coming!! Very Happy

Posted: Sat Nov 22, 2014 12:51 am

^^^ Thanks Juan. I've put links to John-BOI's thread as PPL were wondering if the cards were bogus or not.

Seems it doesn't matter..just that we send the info.

Keep the cards coming PPL!!!

Posted: Sat Nov 22, 2014 12:59 am

Boogie

Posted: Sat Nov 22, 2014 1:28 am

It wouldn't do much good for a lad to send bogus numbers, that's equivalent to baiting. They don't have time for that.

However our contact has confirmed that some scammers have worked out a system to not only generate a phony number that passes the basic tests (that's very easy), but also to generate ones with a CVV that will pass with the faked account number. That's definitely not easy and I'm not quite sure how they do that. Still it is true that some numbers are fake -- but for a merchant running them through their terminal, they would be accepted and the charge approved. Only later would they bounce. So even those numbers are very useful for the fraud department to study so they can create countermeasures.

But those are in the minority. There are so many valid cards in the hands of the bad guys that generating fakes that will pass isn't really worth the effort. With all the major data breaches there's an inexhaustible supply of compromised cards being sold. Even if the prices are going down, it still costs these lads some money whenever a card is reported. Thumbs up

Posted: Sat Nov 22, 2014 2:08 am

Thanks Juan!!!

Good info.

Posted: Sat Nov 22, 2014 2:56 am

I'd like to compliment everyone in Eater, the grunts in the front line, the Jackbooted mods, the rear echelon admin, for what Eater has evolved into over the years.

I doubt Shiver ever envisaged that what he started in 2004 would become the major go-to website for internet fraud, dealing with banks, credit agencies, law enforcement through out the world.

To everyone that does anything dealing with internet fraud, CC's, websites, fake banks, victims, my sincerest congratulations for making Eater what it is

Posted: Sat Nov 22, 2014 4:44 am

Sincere thanks, Irish. We do try.

Thumbs up

05/29/15

Thanks for reaching out to the Membership and letting us know about this kind of stuff, Juan Smile

Though I can speak only for myself, I find it encouraging to learn that our efforts really mean something to someone!

Posted: Sun Nov 23, 2014 11:56 am

Juan.

Appreciate the update.

Anyone know how long a CC # is out of circulation before it gets put back into use. 16 numbers can only be used before they run out of options, ok the 3 didgit Cvv gives them a few more digits to play with.

But with millions of cards in legit and unlegit hands the # stack must get thin at times.

Elite Baiter Joined: 21 Jan 2010 Posts: 1474

If they use all 16 numbers then its 10 to the power 16 or 1 followed by 16 zeros - it's a big number. Ten thousand million million? I don't know the name for it but a lot. (Edit - I looked it up - 10 quadrillion apparently).

Number of people on earth - just over 7 billion - 7 followed by 9 zeros so enough card numbers available for every person on Earth to have over a million cards each.

Posted: Sun Nov 23, 2014 5:48 pm

^^^Dear mentee, I'm no mathemagician, but your math is off...

ETA: http://www.cybersource.com/developers/getting_started/test_and_manage/best_practices/card_type_id/

Elite Baiter Joined: 21 Jan 2010 Posts: 1474

Oops - why?

Posted: Sun Nov 23, 2014 5:49 pm

Post edited...

Elite Baiter Joined: 21 Jan 2010 Posts: 1474

Ah ok - they're cheating. If they used all the numbers my maths stands. In theory 10 quadrillion but in practice not that many. I call it a draw.

Posted: Sun Nov 23, 2014 5:56 pm

In practice, for a 16 digit card number, there's 9 digits available for the actual account.

For starters, as bware's link shows,the first digit identifies the industry and only 3, 4, 5 & 6 are currently assigned to the banking industry. Then, the first 6 digits identify the issuer and the final digit is a check digit. So that leaves 9 digits for the actual account number part
.

Posted: Sun Nov 23, 2014 6:42 pm

Having gotten an F in math in college I won't comment on the calculations made in this thread. However if they are based on the number of possible permutations of 16 digits, that will automatically be inaccurate. Credit card numbers adhere to the Luhn algorithm which severely limits the number of possible combinations that will pass that basic test.

Plus, as mentioned, the first digit is limited to only a few possibilities, each designating a specific issuer (3=Amex, 4=Visa, 5=Mastercard etc.).

Posted: Sun Nov 23, 2014 10:56 pm

It's always great to hear that the baiting we do here actually makes a difference. I don't do credit card lads, but admire the people who do. Behind all the silliness we do, we are in fact saving victims from potential loss of money all the while help CC companies analyze the data to protect their customers not being victims. AWESOME!!!

I am a victim of identity theft, I found out 10 years ago after it had been going on for a couple of years. I didn't find out until I went to buy something on credit and was denied because of a poor FICO score. I was bewildered until I saw my credit reports and let me to you, I am STILL having to deal with it!

I don't buy anything online unless it's with a Visa/MasterCard/AMEX gift card. I pay cash for all of my purchases in stores. I don't have a "regular" credit card, I pay cash for everything. For emergencies, I have an emergency saving account, not an emergency credit card. The only time I use my debit card is to get cash out of the bank, never in stores for my purchases. Once your identity is stolen, it's hell to get it back. Sadly, identity theft keeps rising every year. People don't think it can happen to them (I surely did not!) until it's too late. I recommend everyone check their credit reports several times a year. I have an alert on mine.

Master of Master Baiters Joined: 18 Oct 2012 Posts: 611

I'd like to get into CC baiting. I suppose there's a snazzy tutorial around here to show me the basics?

Posted: Mon Nov 24, 2014 10:05 am

Someone did write one Smile

https://forum.419eater.com/forum/viewtopic.php?t=249435

Master of Master Baiters Joined: 18 Oct 2012 Posts: 611

Awesome! Thanks B8ter!

Credit Card baits -- keep up the great work!	View next topic View previous topic