The Sanctuary
Carnality => Bad Ideas => Topic started by: SBTlauien on September 27, 2014, 06:47:24 am
-
Hypothetically, do you think someone could pull this off on a large scale?...
Basically if a person just carefully cut out the gray scratch-it sticker so that it covered the PIN...
(http://i5.photobucket.com/albums/y156/SBTlauien/Cards/NetTen1_zps1d9bff28.jpg)
and then he/she stuck it over the PIN and rubbed it over well...
(http://i5.photobucket.com/albums/y156/SBTlauien/Cards/NetTen2_zps2ed10ed8.jpg)
Also, when a MSR is used to read the data on one of these prepaid cards, it reads it just fine...
(http://i5.photobucket.com/albums/y156/SBTlauien/Cards/NetTen3_zps5f162d4a.png)
...but when the data is erased from the card, and then it's attempted to write it back onto the card, an error appears...
(http://i5.photobucket.com/albums/y156/SBTlauien/Cards/NetTen4_zpseed4c7e9.png)
Is it possible to write to these cards? The prepaid Master Cards give the same error. My friend just a MSR, he is new to this.
-
I think the prepaid cards are extra thin, maybe that's a problem for the MSR?
You should be able to use the info on the front and back of the card to make purchases too online.
-
Lucky Buggers
All UK cards have to be activated at the till
-
I think the prepaid cards are extra thin, maybe that's a problem for the MSR?
I don't think that's the issue. I can read the info from the card as well as delete the info from the card. I tried two of these cards. They are thinner than the plastic cards, but if I can read and delete info on the cards, shouldn't I be able to write info to it as well?
All UK cards have to be activated at the till
These cards would need to be activated at the till as well. A person would need to actually shoplift the card, then peel off the scratch-off sticker to see the PIN, then place a new scratch-off sticker over the PIN, then return the card to the store(reverse shoplift), then wait until someone buys the card so that they could use the card. The PIN would be needed to use the card. This is only a $50 card and really wasn't the best example.
Alternatively, I think a person could just lift gift cards, make copies of the cards using a MSR, return the gift cards to the store, wait until the cards are activated, and then use the cards at the store. I think this would work. I've actually noticed similarities on the back of cards, not even under the scratch-off, and the digits on Track1 and Track2. I have a nice write up I'm doing on this. I may post it here.
-
I think the prepaid cards are extra thin, maybe that's a problem for the MSR?
I don't think that's the issue. I can read the info from the card as well as delete the info from the card. I tried two of these cards. They are thinner than the plastic cards, but if I can read and delete info on the cards, shouldn't I be able to write info to it as well?
All UK cards have to be activated at the till
These cards would need to be activated at the till as well. A person would need to actually shoplift the card, then peel off the scratch-off sticker to see the PIN, then place a new scratch-off sticker over the PIN, then return the card to the store(reverse shoplift), then wait until someone buys the card so that they could use the card. The PIN would be needed to use the card. This is only a $50 card and really wasn't the best example.
Alternatively, I think a person could just lift gift cards, make copies of the cards using a MSR, return the gift cards to the store, wait until the cards are activated, and then use the cards at the store. I think this would work. I've actually noticed similarities on the back of cards, not even under the scratch-off, and the digits on Track1 and Track2. I have a nice write up I'm doing on this. I may post it here.
That's a pretty stupid idea because after you open it or even return it, most likely they get tossed away. Let's say they don't it would be a very long wait. Time to move on to another idea. Get fast money.
-
That's a pretty stupid idea because after you open it or even return it, most likely they get tossed away. Let's say they don't it would be a very long wait.
I'm referring to the gift cards that aren't sealed, and it wouldn't be a long wait if someone did this with a lot of gift cards at a lot of stores. The person may also be able to set up an automated system that checks which cards have been activated and alerts them once one is activated.
-
That's a pretty stupid idea because after you open it or even return it, most likely they get tossed away. Let's say they don't it would be a very long wait.
I'm referring to the gift cards that aren't sealed, and it wouldn't be a long wait if someone did this with a lot of gift cards at a lot of stores. The person may also be able to set up an automated system that checks which cards have been activated and alerts them once one is activated.
Yeah, this works. I've seen it elsewhere. You basically steal the unactivated cards, copy them, then return them to the store and wait for someone to actually buy them and activate them. Well, i don't know about the prepaid phone cards, but stuff like prepaid Visa's and shit.
-
Yeah, this works. I've seen it elsewhere. You basically steal the unactivated cards, copy them, then return them to the store and wait for someone to actually buy them and activate them. Well, i don't know about the prepaid phone cards, but stuff like prepaid Visa's and shit.
The prepaid Visa cards that I've seen are in a package, but I have noticed a security flaw in some common ones.
-
I remember an epic thread on totse where a poster discovered the numbering convention on prepaid cards and he was able to just successively try one set of numbers after another in a series and buy things online with the activated cards he stumbled upon. Does anybody remember what I'm talking about?
-
That's a pretty stupid idea because after you open it or even return it, most likely they get tossed away. Let's say they don't it would be a very long wait.
I'm referring to the gift cards that aren't sealed, and it wouldn't be a long wait if someone did this with a lot of gift cards at a lot of stores. The person may also be able to set up an automated system that checks which cards have been activated and alerts them once one is activated.
I guess this is a pretty good idea. Maybe you have family or friends that work in stores. Ask them to grab you a hand full. You take it down then return it back to the store.
-
I'm not familiar with the contents of the data stream from the tracks, but wouldn't there be some sort of read only bit that would be set on that type of card?
-
I'm not familiar with the contents of the data stream from the tracks, but wouldn't there be some sort of read only bit that would be set on that type of card?
I'm new to this, but I was able to erase all of the data off of the card and then write it back on.
My friend went out today and lifted a bunch of gift cards and some of those packaged up prepaid VISAs. He was able to care fully cut open one of the prepaid VISAs, could copy the card and information on it, close it with glue, place in a book to dry, and then return it to a store. Then he could check to see if he can register it online, and when he can, he can just go out and use the copy of the card. He could also delete the data that's on the actual card that he returns(after copying it) so that the buyer can't use it. In addition, he could scratch off the numbers on the card that he returns, so that the buyer can't register it.
Sounds like something a tweaker would do though, lol.
-
Didn't seem to work. My friend tried to use the card that he made and it wouldn't even scan. He sledd it through, and the machine acted as if nothing happened. Then he pulled out the original, sledd it through and it registered it fine.
-
Update...
My friend tried again, except he put the data onto a different card(not one of the cards that came with his MSR, those cards had a taller stripe) and it worked perfectly. He was able to buy an item without using the original card he had bought.
So, if someone lifted these cards, made copies of the track data, made a copy of the barcode on the back of the card, made sure to know which data went with which barcode, and watched the cards at the store to see when they are bought, then they could use the gift cards that other buy.
:)
-
know what would be more fun? hacking gift cards and preloading them for free. but i dont know how to do that.
-
know what would be more fun? hacking gift cards and preloading them for free. but i dont know how to do that.
From what I know, you would have to actually hack into the database that activates the gift cards. I'm not sure if it's the stores database, or if there is another company that deals with it, but I believe I have read that there is another company that deals with it.
I have noticed that the numbers on the back of gift cards are all similar in a way, which leads me to believe that there is another company that activates and handles the gift cards for the stores.
-
know what would be more fun? hacking gift cards and preloading them for free. but i dont know how to do that.
Can't. The data for how much is on the card isn't on the card's data. It's in an account at the card issuer's site. The data included on the card is merely the card's number. Until it is activated with the issuer and a balance is put on it, they're completely worthless.
Now, since you can read and write, get a duplicate non-activated card and flash the activated card's information to it. Use it somewhere other than where you picked up the card. Preference for a first use would be at McDonald's to buy lunch. You can swipe the card yourself at the register and never show it to the cashier. If it doesn't work, simply pull out a different card or cash.
-
Here is a much better Idea: get a real credit card, pass me the info and I use it thousands of miles outside of the USA. Once you get the statement, you call it in as fraud. It gets written off as fraud and you are not liable for absolutely anything. We split the profit.
-
Now, since you can read and write, get a duplicate non-activated card and flash the activated card's information to it. Use it somewhere other than where you picked up the card. Preference for a first use would be at McDonald's to buy lunch. You can swipe the card yourself at the register and never show it to the cashier. If it doesn't work, simply pull out a different card or cash.
The problem with this, is that I can't seem to write to certain card without getting an error, Walmart cards specifically. However, I can write the data to other cards, and then use those cards. So it'll work, but a person has to use a self checkout because the barcode on the back of the Walmart cards has to be scanned when they are being used.
Other cards, I am not sure about the process when they are used, but I do know that sometimes I can't just slide the card myself, I have to actually give it to the cashier. So, I need to find out why some of these cards can't be written to. I could always just print them out myself though...
-
Worst case you can usually just cash them out at ATMs or IRL shops if online sites won't accept so you don't lose much money.