WINMX Assorted Textfiles/Ebooks.tar/Text - Tech - Hacking - How to Crack Credit Card Numbers.txt

Text File | 2003-06-21 | 25KB | 857 lines

  <-><-><-><-><-><-><-><-><-><-><-><->
  <->                              <->
  <->        David Lightman        <->
  <->                              <->
  <->             and              <->
  <->                              <->
  <->    -=The Administration=-    <->
  <->                              <->
  <->                              <->
  <->           Present:           <->
  <->                              <->
  <-><-><-><-><-><-><-><-><-><-><-><->
  <->                              <->
  <->        Credit Carding        <->
  <->            Part I            <->
  <->           The Card           <->
  <->                              <->
  <-><-><-><-><-><-><-><-><-><-><-><->
  <->                              <->
  <->   This article will reveal   <->
  <->   a few hidden facts about   <->
  <->   credit cards.  Parts I I   <->
  <->   and I I I will explain a   <->
  <->   few new techniques about   <->
  <->   getting and abusing some   <->
  <->   of your own found cards.   <->
  <->                              <->
  <-><-><-><-><-><-><-><-><-><-><-><->



     There are at least three types
of security devices on credit cards
that you aren't supposed to know
about.  These are the account number,
the signature panel, and the magnetic
strip.


  The Account Number
  ------------------

     A Social Security card has nine
digits.  So do two-part Zip codes.
A domestic phone number, including
area code, has ten digits.  Yet a
complete MasterCard number has twenty
digits.  Why so many?

     It is not mathematically necessary
for any credit-card account number to
have more than eight digits.  Each
cardholder must, of course, have a
unique number.  Visa and MasterCard
are estimated to have about sixty-five
million cardholders each.  Thus their
numbering system must have at least
sixty-five million available numbers.

     There are one hundred million
possible combinations of eight
digits --- 00000000, 00000001, 00000002,
00000003, all the way up to 99999999.
So eight digits would be enough.  To
allow for future growth, an issuer the
size of Visa or MasterCard could not
opt for nine digits-- enough for a
billion different numbers.

     In fact, a Visa card has
thirteen digits and sometimes more. An
American Express card has fifteen
digits.  Diners Club cards have
fourteen.  Carte Blanche has ten.
Obviously, the card issuers are
projecting that they billions and
billions of cardholders and need those
digits to ensure a different number
for each.  The extra digits are a
security device.

     Say you Visa number is 4211 503
417 268.  Each purchase must be
entered into a computer from a sales
slip.  The account number tags the
purchase to your account.  The persons
who enter account numbers into
computers get bored and sometimes
make mistakes.  They might enter
4211 503 471 268  or  4211 703 417 268
instead.

     The advantage of this thirteen-
digit numbering system is that it is
unlikely any Visa cardholder has 4211
503 471 268  or  4211 703 417 268 for
an account number.  There are 10
trillion possible thirteen-digit Visa
numbers (0000 000 000 000; 0000 000
000 001........9999 999 999 999).  Only
about sixty-five million of those
numbers are numbers of actual, active
accounts.  The odds that an incorrectly
entered number would correspond to a
real number are something like about
1  in  150,000.

     Other card-numbering systems are
even more secure.  Of the quadrillion
possible fifteen-digit American
Express card numbers, only about 11
million are assigned.  The chance of
a random number happening to correspond
to an existing account number is about
1 in 90,000,000.  Taking all twenty
digits on a MasterCard, there are one
hundred quintillion (100,000,000,000,
000,000,000) possible numbers for
sixty-five million cardholders.  The
chance of a random string of digits
matching a real MasterCard number is
about one in one and a half trillion.

     Among other things, this makes
possible those television ads inviting
holders of credit cards to phone to
order merchandise.  The operstators
who take the calls never see the
callers' credit cards nor their
signatures.  How can they be sure
the callers even have credit cards?

     They base their confidence on
the security of the credit card
numbering systems.  If someone calls
in and makes up a credit card number,
the number surely won't be an existing
credit card number.  The deception
can be spotted instantly by plugging
into the credit-card company's
computer.  For all practical purposes,
the only way to come up with a genuine
credit-card number is to read it off
a credit card.  The number, not a
piece of plastic is enough.


  Signature Panel
  ---------------

     You're not supposed to erase the
signature panel if you steal a card!
You might be thinking that you could
just write the cardholder's name on
the panel. You're thinking that this
would be great if you were going to
withdraw some cash from the bank, for
they make you sign a slip and it must
match up to the signature on the card.
If you or anyone else does this, you
will soon find the card completely
worthless (at least it can not be
shown).

     Some credit cards have background
design that rubs off if anyone tries
to erase the signature.  There's the
"fingerprint" design on the American
Express panel, repeated Visa or
MasterCard logos on some bank cards,
and the "Safesig" design on others.
The principle is the same as with the
security paper, the wavy-line pattern
erases, leaving a white area.  This
makes it obvious that the signature
has been altered.

     There is a more elaborate gimmick
in credit-card panels.  It is said
that if you erase the panel, a secret
word, "VOID", appears to prevent use
of the card.  The Administration has
taken 15 common credit cards and
sacrificed them to test this theory.

     The odinary pen eraser will erase
credit-card signature panels, if
slowly.  The panels are removed pretty
easy with a cloth and Energine.  This
method disolves the panels cleanly.
Of the 15 cards tested, 6 had
nothing under the panel (other than
a contiuation of the cards back design
where there was one).  Nine cards had
the words "VOID" under the panel.  In
all cases, the VOID's were printed
small and repeated many times under the
panel.

<-><-><-><-><-><-><-><-><-><-><-><-><->
<-><->  This is How They Ranked  <-><->
<-><-><-><-><-><-><-><-><-><-><-><-><->


       Cards with VOID Devices
       -----------------------

          Bloomingdale's
          Bonwit Teller
          Bullock's
          Chase Convenience Banking
               Card
          First Interstate Bank Card
          I. Magnin
          Joseph Magnin
          Montgomer Ward
          Visa  (Chase Manhattan)



      Cards without VOID Devices
      --------------------------

          American Express Gold Card
          Broadway
          MasterCard (Citibank)
          Neiman-Marcus
          Robinson's
          Saks Fifth Avenue



     When held to a strong light, the
VOIDs were visible through the
Bloomingdale's even without removing
the panel.

  The Way Around this Security!
  -----------------------------

     There is but one way we could
think of getting around this feature...
painting over the panel!  This would
work only if the card didn't have a
design on the panel.  Cards that have
a difficult color to match would
be near immpossible also (Saks' panel
is greenish-tan khaki color).


  The Magnetic Strip
  ------------------

     One of the last security devices
is on the back, the brown magnetic
strip.  You probably think that there
are sun-dry personal details about the
cardholder stored in the strip.  The
strip is really no more information
capacity than a similar snippet of
recording tape.  For their part, banks
are reticent about the strip.

     The strip need not contain any
information other than the account
number or similer identification.  Any
further information needed to complete
and automatic-teller transaction --such
as the current account balances-- can
be called up from bank computers and
need not be encoded in the strip.

     Evidently, the card expiration
date is in the strip.  Expirated cards
can be "eaten" by automatic-teller
machines even when the expired card
has the same account number and name
as its valid replacement card.  Credit
limit, address, phone number, employer,
ect., must not be indicated in the
strip, for banks do not issue new cards
just because this information changes.

     It is not clear if the personal
indentification number is in the strip
or called up from the bank computer.
Many automatic teller machines have a
secret limit of three attempts for
providing the correct personal
identification number.  After three
wrong attempts, the "customer" is
assumed to be a crook with a stolen
credit card and the card is "eaten".

     It is possible to scramble the
information in the strip by rubbing a
magnet over it.  Worker's in hospitols
or research facilities with large
electromagnets sometimes find their
cards no longer work in automatic-
teller machines.


  The Bloomingdale's Color Code
  -----------------------------

     Only in a few cases does the color
of the credit card mean anything.
There are the American Express, Visa,
and MasterCard gold cards for preferred
customers.  The Air Travel Card comes
in red and green, of which green is
better.  The most elaborate color
scheme, and a source of some confusion
to status-consious queues, is that of
Bloomingdale's credit cards.  The five
colors of Bloomingdale's cards do not
signify credit limits per se, but they
do tip off the sales staff as to what
type of customer you are.  According
to Bloomingdale's credit deptpartment,
here is how it works: Low color in
pecking order is blue, issued to
Bloomingdale's employees as a perk
in their compensation packages.  The
basic Bloomie's card is yellow.  Like
most department store cards, it can
be used to spread payments over several
months with the payment of a finance
charge.  The red card gives holders
three months' free interest and is
issued to customers who regularly
make large purchases.  The silver card
is good for unlimited, but as with a
travel and entertainment card, all
charges must be paid within thirty
days.  The gold card offers the same
payment options as the yellow card, but
is reserved for the store's biggest
customers.

<-><-><-><-><-><-><-=> David Lightman

Downloaded from..

   The Lost City of Atlantis
  .     _ . __ |\  _  .
.   .__ =| |[] |# |# ._  .
  ...##.=|.|[].|#:|#.|=|...
- -- --- ------------ --- -  -
       703 - xxx - xxxx







  <-><-><-><-><-><-><-><-><-><-><-><->
  <->                              <->
  <->        David Lightman        <->
  <->                              <->
  <->             and              <->
  <->                              <->
  <->    -=The Administration=-    <->
  <->                              <->
  <->                              <->
  <->                              <->
  <->           Present:           <->
  <->                              <->
  <-><-><-><-><-><-><-><-><-><-><-><->
  <->                              <->
  <->           Part I I           <->
  <->       Getting the Cards      <->
  <->                              <->
  <-><-><-><-David Lightman-><-><-><->
  <->    -=The Administration=-    <->
  <-><-><-><-><-><-><-><-><-><-><-><->
  <->                              <->
  <->   In this article, we will   <->
  <-> show you some new techniques <->
  <-> in getting the cards alone.  <->
  <-> We will also mention how to  <->
  <-> check if the cards you have  <->
  <-> gotten are valid or not.     <->
  <->                              <->
  <-><-><-><-><-><-><-><-><-><-><-><->



     First, I should  mention TRW.  If
you are interested in that method, then
I would really suggest that you get
Major Havock's & Britash Bloke's file
on TRW.  If you cannot locate this
file, leave mail to me or try finding
The Administration's Bulliton Board
System.  I will try to tell you as much
as I think I can here in this file
though.

  TRW
  ---

     Your modem should be set at:

             Half-Duplex
             7 Bits
             1 Stop Bit
             Even Parity

     Dial-up: 214-980-2524

     Once you are online, wait for TRW
promt and press Control-G, wait for a
beep. There, type the state's four
character ID that the person you want
credit information is living in, and
press RETURN.  After the RETURN, type
in the information on the person that
you want the information on in the
format below:

RTS ID/PASSWORD LASTNAME FIRSTNAME ...,
STREET # FIRST CHARACTER OF STREETNAME
ZIP

     Of course, all of this should be
entered on one line.  After you have
typed this, press RETURN, "H-Y",
RETURN, and Control-S.

     For another person in the same
state, you can just type in the format
again containing that person's
information.


  Making Counterfeit Cards
  ------------------------

     For an investment of about a
thousand dollars, an orginized criminal
operation can get the pressing
machines needed to make credit cards.
Counterfeiting credit cards is
relativly simple.  There are no fancy
scrolls and filigree work (see the file
on "Counterfeiting", another article
by The Administration), just blocky
logos in primary colors.  From our
stand point, the main advantage here is
that it allows us cash advances.  For
maximum plundering of a line of credit,
we must know the credit limit as well
as the account number.


  Getting Credit Limit and Account #
  ----------------------------------

     Here is the dialog that you should
use (over the phone) to get this kind
of information...


   You:  Hello, this is Bank of
        America.  We're calling to
        tell you that the credit limit
        on your Visa card has been
        raised to $1,200.00.

Victim:  But my credit limit has always
        been $10,000.00.

   You:  There must be a problem with
        the computers, do you have
        you're card handy?  Could you
        read off the embossed numbers?

Victim:  Ok, it's 9834 864 874 9857.

   You:  Thank you.  I will check into
        this error myself, right away.


     Another way to get these credit
cards is to go to a major department
store.  Look for the ones that do not
have thier own credit cards.  You
should then go trashing for ribbons
sometime in the dumpster or just inside
the store sometimes.


  Recognizing What Cards You Get
  ------------------------------

           American Express


      /--------------------------
      =                          =
      =    American Express      =
      =                          =
      =                          =
      =  37XN NXXXXX XXXXX       =
      =                          =
      =  MM/Y1 THRU MM/Y2    Y1  =
      =   David Lightman       AX=
      =                          =
      \--------------------------/


     The first two digits are allways
thirty-seven.  If the N's are between
80 to 89, then the card is a gold
card.  If the N's equal 37, then it
is a platnium.

     The first date is the date this
David Lightman recieve this particular
card.  The second date is the
expiration date.  The other Y1 doesn't
mean a thing.



              MasterCard


      /--------------------------
      =                          =
      =   MasterCard   (citibank)=
      =                          =
      =                          =
      = 5XXX XXXX XXXX XXXX      =
      = XXXX AAA DD-MM-YY MM/YY  =
      = David Lightman           =
      =                          =
      \--------------------------/


     I think you can pretty well under-
stand this card.  One thing you should
know, the first digits is allways 5.



                 Visa


      /--------------------------
      =                          =
      =    VISA                  =
      =       Chase Manhatten    =
      =                          =
      = 4XXX XXX(X) XXX(X) XXX(X)=
      = MM/YY    MM/YY*VISA      =
      = David Lightman           =
      =                          =
      \--------------------------/


     This card is very easy to detect.
It's name is embossed on the card
(means will show up on carbon).  There
is something pretty good to know about
the first four digits, it is allways
4333 or 4444.



             Wells Fargo


      /--------------------------
      =                          =
      =                          =
      =                          =
      =  David Lightman          =
      =  MM/YY - MM/YY           =
      =  4024 0071 XXX(X) XXX(X) =
      =  L _/                    =
      =                          =
      \--------------------------/


     This is one of the fun ones.  If
it begins 4024 0071, then you know you
have one.  Also, if the '-' is
between the dates is '*', that
indicates a gold card.  If the 'L'
followed by the check '_/' is a 'C',
then you have a clasic card.  If the
'L' is a 'P', then you have a premier
card.



  Testing Credit Cards
  --------------------

     To determine if the cards are any
good or not is pretty easy.  You go
into the store you ripped these things
off from and look by their phone.  You
should see a number and almost allways
a merchant number.  Another way to
find these numbers is to wait untill
they dial the numbers.  Try to remeber
the numbers that they dial.  This
method is a little better for sometimes
written numbers in the stores are
forgotten about and might have been
changed since the last time they had
changed the written copy.  Yes, some
Target workers are smart enough to
memorize a number, and mabye even a
merchant number.

     When you call this number, and
you get passed all the "red tape", then
ask if the credit card number is clear
for the amount you want to spend.  Ask
the operator to cancel the auto
withdrawal and hope she will, not many
operators are that dumb.

<-><-><-><-><-><-><-=>David Lightman

Downloaded from..

   The Lost City of Atlantis
  .     _ . __ |\  _  .
.   .__ =| |[] |# |# ._  .
  ...##.=|.|[].|#:|#.|=|...
- -- --- ------------ --- -  -
       703 - xxx - xxxx








  <-><-><-><-><-><-><-><-><-><-><-><->
  <->                              <->
  <->        David Lightman        <->
  <->                              <->
  <->             and              <->
  <->                              <->
  <->    -=The Administration=-    <->
  <->                              <->
  <->                              <->
  <->                              <->
  <->                              <->
  <->           Presents:          <->
  <->                              <->
  <-><-><-><-><-><-><-><-><-><-><-><->
  <->                              <->
  <-> The end of the 3-part series <->
  <->                              <->
  <-><-><-><-><-><-><-><-><-><-><-><->
  <->                              <->
  <->          Part I I I          <->
  <->         The Dropsite         <->
  <->                              <->
  <-><-><-><-David Lightman-><-><-><->
  <->    -=The Administration=-    <->
  <-><-><-><-><-><-><-><-><-><-><-><->


REVISED: 07/11/86


  The Dropsite
  ------------

      You must find a place for all
of these "goodies" to go.  If you
really wanted to get in deep, you might
have them sent to your house.  You
may also have a crude enemy in mind.
Stop and think of the benifits from
this suggestion.

      To get a sufficient drop, you
have to find a deserted house.  It
must look like it is lived in though,
grass mowed, drapes, ect.  When you
are ready to order this stuff, have it
sent overnight UPS and leave a note
on the door saying that you work
acquard hours and to leave it on the
back porch.  This is really the best
way to do it, but I will tell you
about a few others.

      U-Haul has what is called "Rent
a Spot".  Anything sent to this "spot",
U-Haul has to sign for.  You and only
you can get anything sent there.  You
might be able to send the "goodies"
there and then cancell the "spot"
after they arrive.  This is very
tricky and I would not recomend it, but
then again, there may not be a vacant
house where you live.

      This drop is just a house
with people in it you do not know and
who would not recognize you if seen
again.  Just have the packages sent
there.  Phone and tell them that you
ordered a package and it was sent to
the wrong house.  Tell them that you
will pick it up when sometime after
it arrives if they don't mind.  I
strongly disencourage this method.

      Another drop could be any video
or computer retail store.  Here is a
little dialog that might explain this
a little better:

You:  Hi, this is David Lightman.  I
am interested in your new Sanyo
computer system.  I would like to talk
to someone about this.

Worker:  Sure.  Let me tell you all
about it.

(For the text on Sanyo, please write
them.  I am too lazy)

(Continued)

You:  Well, it sounds like just what I
have been looking for.  Could I buy it
now with my Visa and have my nephew
pick it up later?  I am sick and can't
get out.

Worker:  Sure.  I guess so.

ect. ect. ect...

   You just pick up the package later
by telling the guy your name and what
you need to get.  Free shit.  Already
paid for.


  Ordering Mechandise
  -------------------

     Don't try this if you have a high
voice!  One exception to this though,
you might want to fake it like a lady.

     Some of the best places to get
stuff from is advertizements in
magazines.  When you do this, try to
schedual it at the begining of the
month, after the bills have been
sent.  This will provide you for more
time for unexpected misshaps that
might occur.  You must be sure that
this is going to work, or just pull
out imediately!  When you call the
merchant, try to make it at night or
late in the day.  Most operators are
very tired then and not really
thinking of what they are doing.  Make
sure you know exactly it is you want
and everything about card by memory if
asked.

     When you finally get your
packages, completely forget where the
drop was, for you will NEVER want to
use the same one again.


     One more thing, the insurance
companies pay for all stolen goods
gotten by credit cards.


          A word of caution:

  Many a hacker have died this way...


<-><-><-><-Acknowledgements:-><-><-><->

     (1)   Britash Bloke
     (2)   Major Havock
     (3)   Team Hackers
     (4)   All Administration Members
     (5)   Adolf Hitler
     (6)   William Poundstone
     (7)   Shoshio Kinkski

<-><-><-><-><-><-><-><-><-><-><-><-><->
<->                                 <->
<->   This article was written for  <->
<-> informational purposes only.    <->
<-> All of it's content can not     <->
<-> be held directly or indirectly  <->
<-> if a violation of the law       <->
<-> occurs.  I, nor any member of   <->
<-> The Administration can be held  <->
<-> responsible if a violation of   <->
<-> the law occurs.  We do not in   <->
<-> any way promote the use of      <->
<-> stolen credit cards.            <->
<->                                 <->
<->             David Lightman,     <->
<->             The Administration, <->
<->             and Team Hackers    <->
<->                                 <->
<-><-><-><-><-><-><-><-><-><-><-><-><->
<->                                 <->
<-><-><-><-><-David Lightman-><-><-><->
<->       -=The Administration=-    <->
<-><-><-><-><-><-><-><-><-><-><-><-><->
<->                                 <->
<->  The Administration Officers    <->
<->                                 <->
<-> David Lightman  -=- Leader      <->
<-> Britash Bloke   -=- Co-Leader   <->
<-> Major Havock    -=- Team Hacker <->
<->                                 <->
<-><-><-><-><-><-><-><-><-><-><-><-><->
<->                                 <->
<->     -=The Administration=-      <->
<->                                 <->
<-><-><-><-><-><-><-><-><-><-><-><-><->

Downloaded from..

   The Lost City of Atlantis
  .     _ . __ |\  _  .
.   .__ =| |[] |# |# ._  .
  ...##.=|.|[].|#:|#.|=|...
- -- --- ------------ --- -  -
       703 - xxx - xxxx