4 ms·

The data you'd gain from this is practically useless to anyone looking to commit fraud... so laugh at the article I guess? Maybe you could abuse this to create

by ryanlol 10y ago

The data you'd gain from this is practically useless to anyone looking to commit fraud... so laugh at the article I guess? Maybe you could abuse this to create a lot of netflix accounts, but you aren't really going to be able to buy anything with just the PAN/cvv/expiry.

imaginenore 10y ago
You can buy all kinds of valuables online, which you then resell. Gift cards are quite common.
nine_k 10y ago
You can potentially issue an old-style mag-stripe credit card knock-off, and pay with it in an offline store. IDK if it's worth the effort: the card should look reasonable physically, too.
- closeparen 10y ago
  No, there's an analogue of the CVV2, the CVV1, which is only present on the magnetic stripe. The information you'd get from an online transaction is not enough to print a working magstripe.
  - contingencies 10y ago
    There are still offline processors that don't read magstripe and just take a copy of the card and a signature.
    - seanp2k2 10y ago
      Yep, ever have a merchant enter your CC number on the keypad IRL? That's what's happening. The fees for these types of transactions are typically higher as your processor is assuming more risk, so they prefer to only do them when they need to. See https://www.mastercard.us/content/dam/mccom/en-us/documents/rules/mastercard-rules-july-7-2016.pdf https://www.mastercard.us/content/dam/mccom/en-us/documents/... if you're really curious about how this stuff works in the MasterCard case. Visa is similar AFAIK.
    - ryanlol 10y ago
      Not a repeatable form of fraud. You won't be able to make money abusing offline processing. Why not just buy magnetic stripe dumps for a couple of $ each online? Significantly better risk/reward ratio.
Cyph0n 10y ago
Game gifts on online stores, such as Steam, are a common target.
- seanp2k2 10y ago
  Apple Store gift cards are another which are popular with scammers and fraudsters for whatever reason. I'm curious now what that reason is.
- ryanlol 10y ago
  Yes, and you won't be able to use this data on such sites. You'd be stopped by the very first line of defence, AVS checks.
TheDong 10y ago
https://purse.io/ https://purse.io/ is a website for committing fraud with stolen credit cards. It's a website that specializes in letting criminals convert credit card details (PAN/cvv/expiry) into bitcoin while exposing them to minimal risk. There are very real ways to commit such fraud.
- pablovidal85 10y ago
  Not really, purse.io does not facilitate fraud more than Amazon itself does. Purse.io just connects people who are willing to buy bitcoin using Amazon gift cards for a premium, and those that would like to purchase products on Amazon using bitcoin.
  - phpnode 10y ago
    It's an out and out money laundering service. It exists for no other reason, there are no legitimate circumstances where someone would want or need to sell amazon gift cards at less than their face value. It is straight up money laundering and it's frankly incredible that it's lasted as long as it has.
    - ctrl-j 10y ago
      > no legitimate circumstances where someone would want or need to sell amazon gift cards at less than their face value. Absolute statements like this are so hard to back up. For instance, if you live in Cuba, Iran, Syria, North Korea, or Syria, Amazon.com gift cards are worthless. I know I received some AmericanEagle gift cards as a promotion recently, and unloaded them for less than face value just because I had absolutely no need/want to use them.
    - cthalupa 10y ago
      > there are no legitimate circumstances where someone would want or need to sell amazon gift cards at less than their face value Many credit card rewards programs offer Amazon gift cards as a redemption option. The points:value ratio on these is generally significantly better than the ratio on cash rebates, even when you consider the hit taken on sites like purse. e.g. 10,000 points might be redeemable for $100 in Amazon GC, but only $50 in cash, so even if you get the GC and sell them for $85, you still do better than if you had straight redeemed it for USD.

by ryanlol 10y ago

imaginenore 10y ago

You can buy all kinds of valuables online, which you then resell. Gift cards are quite common.

nine_k 10y ago

You can potentially issue an old-style mag-stripe credit card knock-off, and pay with it in an offline store. IDK if it's worth the effort: the card should look reasonable physically, too.

closeparen 10y ago
No, there's an analogue of the CVV2, the CVV1, which is only present on the magnetic stripe. The information you'd get from an online transaction is not enough to print a working magstripe.
- contingencies 10y ago
  There are still offline processors that don't read magstripe and just take a copy of the card and a signature.
  - seanp2k2 10y ago
    Yep, ever have a merchant enter your CC number on the keypad IRL? That's what's happening. The fees for these types of transactions are typically higher as your processor is assuming more risk, so they prefer to only do them when they need to. See https://www.mastercard.us/content/dam/mccom/en-us/documents/rules/mastercard-rules-july-7-2016.pdf https://www.mastercard.us/content/dam/mccom/en-us/documents/... if you're really curious about how this stuff works in the MasterCard case. Visa is similar AFAIK.
  - ryanlol 10y ago
    Not a repeatable form of fraud. You won't be able to make money abusing offline processing. Why not just buy magnetic stripe dumps for a couple of $ each online? Significantly better risk/reward ratio.

Cyph0n 10y ago

Game gifts on online stores, such as Steam, are a common target.

seanp2k2 10y ago
Apple Store gift cards are another which are popular with scammers and fraudsters for whatever reason. I'm curious now what that reason is.
ryanlol 10y ago
Yes, and you won't be able to use this data on such sites. You'd be stopped by the very first line of defence, AVS checks.

TheDong 10y ago

https://purse.io/ https://purse.io/ is a website for committing fraud with stolen credit cards. It's a website that specializes in letting criminals convert credit card details (PAN/cvv/expiry) into bitcoin while exposing them to minimal risk. There are very real ways to commit such fraud.

pablovidal85 10y ago
Not really, purse.io does not facilitate fraud more than Amazon itself does. Purse.io just connects people who are willing to buy bitcoin using Amazon gift cards for a premium, and those that would like to purchase products on Amazon using bitcoin.
- phpnode 10y ago
  It's an out and out money laundering service. It exists for no other reason, there are no legitimate circumstances where someone would want or need to sell amazon gift cards at less than their face value. It is straight up money laundering and it's frankly incredible that it's lasted as long as it has.
  - ctrl-j 10y ago
    > no legitimate circumstances where someone would want or need to sell amazon gift cards at less than their face value. Absolute statements like this are so hard to back up. For instance, if you live in Cuba, Iran, Syria, North Korea, or Syria, Amazon.com gift cards are worthless. I know I received some AmericanEagle gift cards as a promotion recently, and unloaded them for less than face value just because I had absolutely no need/want to use them.
  - cthalupa 10y ago
    > there are no legitimate circumstances where someone would want or need to sell amazon gift cards at less than their face value Many credit card rewards programs offer Amazon gift cards as a redemption option. The points:value ratio on these is generally significantly better than the ratio on cash rebates, even when you consider the hit taken on sites like purse. e.g. 10,000 points might be redeemable for $100 in Amazon GC, but only $50 in cash, so even if you get the GC and sell them for $85, you still do better than if you had straight redeemed it for USD.