Notes

A Closer Look at Credit Card Dumps
Over the past few months, I've spent quite a bit of time trolling a variety of underground shops that sell "dumps." That's fraudster jargon for stolen credit card data that buyers use to counterfeit new cards and then shop in big box stores for high-dollar merchandise they can resell for cash. It's a bizarro world that caters to professional thieves, high-volume buyers and even organized crime gangs.

To get a closer look at how these card fraudsters work, I've been spending quite a bit of time trolling - and occasionally buying - goods on a popular online dumps marketplace called McDumpals (right). The site is a virtual storefront for one of the most exclusive and professional groups in this twisted world: professional carders.

A typical dumps shop's home page features the latest updates of its wares for sale, including lists of fresh batches of stolen credit cards that have just been added to the catalog, along with price reductions on older batches that are no longer as valuable as they once were. As is common practice, the McDumpals website requires potential customers to pay a deposit via Bitcoin before they can view its goods for sale.

Cvv Shop The site's wares are indexed by bank identification numbers, or BINs. BINs are unique six-digit identifiers that identify the financial institution that issued a particular credit or debit card. They are the primary method by which card shops index their wares for sale, and most professional carders have a favorite set of BINs they use when purchasing from a particular shop.

In addition to BINs, carders buy "dumps" and other raw credit and debit card information. The raw card data, which is sometimes also referred to as "fullz," can include the credit or debit card number, date of birth and the expiration date, as well as the cardholder's name and address, phone numbers, email addresses, social security numbers and other personal information. Card data may be obtained by physically skimming a victim's credit or debit card, collecting it via malware-infected point of sale systems or hacking into a retailer's internal network.

Dumps retail for around $20 apiece on one of the underground markets, and they are used to fabricate physical clones of the original credit or debit card to be used for fraudulent transactions at brick-and-mortar stores or online. They are often paired with CVVs, which are the three digits on the back of the card that identify its owner and are used for transactions at online retailers.

Fullz, on the other hand, are more comprehensive credentials that contain much of a victim's personal information and are more lucrative for hackers. Depending on the victim, Fullz can contain the credit or debit card number, full name and address, phone numbers, email addresses and other personal information, as well as a rolling code that is generated each time a user uses their card for a transaction. This is why some criminals seek to avoid selling Fullz for fear of exposure and legal repercussions.
Website: https://dumpstrack1.com/