Misuse of Stolen Credit & Debit Cards on the Dark Web: What You Need to Know"
"Misuse of Stolen Credit & Debit Cards on the Dark Web: What You Need to Know"
### Description:
Explore the alarming issue of stolen credit and debit cards being misused on the Dark Web. This in-depth video sheds light on how cybercriminals exploit these financial details, the risks involved, and the devastating impact on victims. Learn about the tactics used by criminals, how to protect your financial information, and steps to take if your card details are compromised. Stay informed and safeguard your finances by watching this essential guide.
Transcript
00:00In today's date, you will definitely have a credit card or debit card.
00:03But if I tell you that any random person can make an online transaction from your card,
00:09that too without your permission.
00:10And to do this, he doesn't need to know how to hack or go to the dark web.
00:14Any normal person can do all this through a browser.
00:18Simply through a website visit.
00:20Yes, there are a lot of cards listed on these websites,
00:22which any person can buy in just one click.
00:25And all the money in that card can be spent.
00:28Just like you order a product from Amazon,
00:30this is an illegal credit card marketplace where cards can be ordered.
00:35And there are very high chances that a lot of people's cards are listed here.
00:39But how did the data of these cards reach here?
00:41And how are all these cards being misused?
00:44To find out all this, we analyzed the shady business of carding for many days.
00:48We also joined their groups and communities secretly.
00:51And here we saw how the data of cards of thousands of users is being misused here.
00:54And all the people doing this activity are Indians.
00:57And the scariest thing is that they don't have any identity.
01:01But we spent a lot of time here and tried to find out as much information as possible.
01:05Which, according to me, is very important for you to know,
01:08so that you can remain secure.
01:10So, first of all, let's understand what this means.
01:13When an online transaction is made with a credit or debit card of any user,
01:17that too without his permission.
01:18This is called carding.
01:20That is, a third party can make a transaction with your card without your knowledge.
01:24I know you must have heard about this term before.
01:27But it is not even 1% of the actual thing.
01:30How big this market is, can be estimated from this report.
01:33In 2021, the biggest credit card marketplace on the internet, Unicc, was banned.
01:38Unicc was a website where millions of stolen debit and credit cards data were available.
01:43And almost $358 million transactions were made here.
01:46The FBI shut down this website.
01:48But even today, many of its mirror websites are available on the internet.
01:52On which this scam is running on a very large scale.
01:55According to a report by Nelson in December 2022,
01:57the number of card fraud losses in the next 10 years will be $165 billion.
02:02Because these card scams are increasing very rapidly day by day.
02:05So, in such a time, protecting your business and keeping your customer data safe
02:10is the most important thing.
02:11The best tool for this is Odoo's CRM app.
02:14Odoo is an all-in-one business management platform.
02:17On which you get an app for free forever.
02:19Like through Odoo's CRM app, you can collect your website, offline store,
02:23and social media leads at one place.
02:26In addition, all the information of the client can be managed at a single place.
02:30With their simple drag and drop, you can streamline your lead stages.
02:34This makes communication with the client very easy.
02:37Without changing the tab, all the communication can be done at a single place.
02:42So that no point is missed.
02:43Even you can streamline your daily activities through automation.
02:47This will increase your efficiency in your daily tasks.
02:50Along with CRM, Odoo will provide you with many other things to manage your business.
02:55Like accounting, website builders, and sales.
02:58Plus, you get an app for free for a lifetime.
03:01So, you can get started for free.
03:03You can find its link in my description.
03:05So, don't forget to check out Odoo.
03:06Now, back to the video.
03:07We observed the same thing when we joined their groups and communities.
03:11Adidas Blue Shoes.
03:13Imported from UK.
03:15MRP 9900.
03:17Discounted price 5000.
03:19No, I am not trying to sell them.
03:20I am just showing how they are reselling through carding in India.
03:24Along with shoes, there is Onlyfans account.
03:27Adobe accounts.
03:28And also Netflix accounts.
03:31And there are so many things.
03:32It took us 3-4 days and we got accepted in many groups.
03:36And after seeing some groups, it feels like we have won a lottery.
03:40Like Bumble Premium Subscription at half price.
03:44We have the option to buy Prime Video at just Rs. 79.
03:48But, there is no need to be too happy.
03:52Because all this will be purchased from our card and will be resold to us.
03:56To go further, I needed access to those websites of carding.
04:00Through which they were purchasing cards and transacting in Telegram groups.
04:04So, to get access, I put a request on the group.
04:06And I got a call from the group.
04:08Which website is used for carding on the internet?
04:12Bro, many sites have been used here.
04:15Many people are using different websites.
04:18But, as I had put in the message.
04:20Mainly, we use 2-3 websites.
04:23And the rest...
04:28We mainly use these 3 sites.
04:30Out of which, I give you...
04:33I mean, you need an account.
04:35So, finally, after struggling a bit.
04:38We also got our account.
04:40In the beginning, we found this website quite confusing.
04:42But, gradually, we understood.
04:44More than 150 countries' credit and debit cards are listed here.
04:47Another common thing which we got to know after some research.
04:50Was the BIN number of the card.
04:52BIN number means the first 6 digits of any card.
04:54These digits define which company your card belongs to.
04:58If your card starts with 5, then it is a MasterCard.
05:01And if it starts with 4, then it is a Visa.
05:03Similarly, every card issuer has a different number.
05:05And you can check this right now.
05:08And even, you get a filter option here.
05:10With which, you can choose which specific card you want.
05:14Like, country, state, zip code, card type.
05:17And even, there is an option to set a price range.
05:19From $0 to $100.
05:21I mean, this thing is so creepy.
05:23That, to reach here, you just need a Google search.
05:26Very easily, it can be accessed without VPN or proxy.
05:29And now, we are quite far from the main part.
05:31The most creepy and disturbing thing is that
05:33Along with the cards, all the personal details of the card holder.
05:37Like, name, address, zip code, their house number, email ID.
05:41And in some cases, the password of the email ID is also available.
05:44And all this, you can buy by paying some money.
05:47The price will depend on the type of card.
05:49If it is a little premium card, then its price is a little high.
05:52And the basic cards, you will see them in the range of $10.
05:55But after buying these cards, where do you use them?
05:58I mean, what is their marketplace?
06:00We came to know about this on Telegram.
06:02Purchasing these cards online is the first step.
06:05Now, they use the balance of the card to buy online services.
06:08It can be hotel booking, a product, or an account of a streaming website.
06:13And many more things are available here.
06:16Either they sell all these services at a low price to earn their profit.
06:20Or many people avail these services for their personal benefit.
06:24After spending some time here, we also got stock of Samsung and OnePlus phones.
06:28These phones were also ordered through carding.
06:31Some other websites on which people were doing carding on a regular basis were
06:35Amazon, Swiggy, Myntra, Big Basket, Somato.
06:38And streaming, epic games, and even jewelry sites like Bluestone
06:42were also doing carding at a very high level.
06:44But now the question is, how did so much data come here?
06:47And why haven't the people who did this been caught yet?
06:50And why aren't there any bans on such websites?
06:53And who are the people behind all this who run this whole operation?
06:56So first of all, even if these websites were banned from the surface web,
07:00they would still have a store-onion link.
07:03Which means they will be able to operate from the dark web.
07:05And now the card information that gets leaked,
07:08is done by the user himself somewhere.
07:10By sharing the details of their cards on non-trusted payment gateways.
07:14The most likely chance of details getting leaked is on adult websites.
07:17When someone fills their card data there,
07:19those details don't remain private.
07:21And no one other than you knows about it.
07:23Look, all the small websites don't have a secure payment gateway.
07:26And whenever we share the details of our cards there,
07:29it easily gets caught by a hacker.
07:32Or it gets caught by someone who shares it later.
07:35So by doing all this, a database of cards gets collected.
07:38And it is sold to those people who are sellers in the marketplace.
07:42And these are the same sellers who run their business through these websites.
07:46So after seeing all this, you must be wondering how secure we are.
07:49And the most important thing is how to avoid this.
07:52So for that, you have to understand how the security of credit card and debit card works.
07:56So after hearing about online transactions,
07:58the first thing that comes to mind is that
08:00if I ever do an online transaction with my credit card or debit card,
08:04then I am asked about the OTP.
08:06So even if my card goes to someone,
08:08how will he do the transaction without OTP?
08:10This is not possible without OTP.
08:12To a large extent, it is right and wrong.
08:14Let's understand this thing in full.
08:16Mainly, the payments through cards use 3 types of authentications.
08:202D, 3D and AVS.
08:22Whenever you make a payment from any site,
08:24your transaction is processed through a payment gateway.
08:27Now it depends on your bank and credit card issuer
08:30which authentication he will use out of 2D, 3D or AVS.
08:34In 2D, the basic details of your card,
08:36like card number, CVV, expiry,
08:38can be added and the transaction can be completed without OTP.
08:42Many international websites also use this type of gateway,
08:45like Amazon.com, AliExpress, Google Play Store, Apple App Store
08:48and some gaming sites like Steam.
08:50It is very easy for anyone's card to be misused on these sites
08:53because they do not ask for OTP before the transaction.
08:55This AVS also works in the same way
08:57where you have to add the basic details of the card
09:00along with the billing details of the cardholder
09:02and the transaction is possible here without OTP.
09:04But according to the RBI guidelines of India,
09:06every bank in India has to do OTP verification.
09:09After seeing this, we also wondered
09:11how is carding possible in India
09:13when the transaction cannot be done without OTP.
09:15But the Telegram groups that we joined
09:17were telling a different story.
09:19After analyzing for some time, we came to know
09:21that these people use international stolen cards on Indian sites.
09:24Instead of paying in INR,
09:26these people first select another currency
09:28and then pay in that.
09:30Because big banks like JPMorgan Chase and Bank of America
09:33still issue a lot of 2D authentication cards.
09:37If your card's international transaction is on,
09:40no matter how secure your card is,
09:42anyone can use it on any international site without your consent.
09:47Even if they buy expensive Air Jordans from that card
09:49or book 5-star hotels.
09:52And if this happens to anyone in the future,
09:54what can they do?
09:56You will have to do your own security.
09:58First of all, keep your international transactions off.
10:01And don't fill the details of your credit card or debit card
10:03while checking out on any Erigere website.
10:06It is very important that you fill the details
10:08of your credit card or debit card on a secured gateway.
10:11Many people go and give their card details
10:13on websites like Naughty Ghaziabad
10:15and then it gets stuck in the hands of data brokers.
10:17Now let's come to the main thing.
10:19Whatever we did in this video till now,
10:21don't ever try to replicate those actions.
10:24We did all this so that people can be aware
10:26and can secure themselves.
10:28Because who knows, someone's bank may have lifetime savings.
10:31And when someone loses their hard-earned money,
10:33they feel very bad.
10:35So that's why if someone does this,
10:37they should think a thousand times before doing this.
10:39And as for those people who are added to these groups
10:41and are doing this work day and night,
10:43there is no certainty here
10:45that when these people will get stuck and how long they will survive.
10:47Because when big dark web owners are caught,
10:49what is this?
10:51They are running their business on just one app.
10:53So in the end, there is no way to make easy money.
10:56And you also need to be very careful online.
10:59If you share your personal details very carelessly and recklessly,
11:03then don't think that it will stay with you.
11:05It will definitely go to someone else
11:07and it will definitely misuse it.
11:09And in the end, let me remind you once again
11:11to fill the details of your cards very carefully
11:13and keep your international transactions off.
11:16I hope you must have learned a lot from this video.
11:18We will continue to bring many such videos in the future.
11:20So go and check out our live channel and vlog channel.
11:23And you will also find the link of my social media handles in the description.
11:26If you like it, then follow it.
11:27See you in the next video. Bye.