Obtaining Credit Card Numbers

[romboy]

Hey, I was just wondering if this would work and how easily you would be found out. I figured you could beigebox a movie theatre and then actually provide real help to them and offer to charge the tickets over the phone for them because the tickets are running out soon (It's a popular movie, etc.) then you actually charge the tickets for them online via a wifi hotspot, or one of those broadband cards from the cell phone company. Now the people will think nothing is wrong as they go to pick up the tickets in the theatre and see thier movie. Now you have all their credit card info to use for whatever you want and the victims will have never suspected it. I just wanted to know how risky it is and how likely you will get caught? Thanks!

[rogueclown]

my $0.02...

it's clever, but it would probably be pretty easy for the victim to figure out something was fishy if they actually scrutinized their credit card statement.  instead of being charged directly to the movie theatre location, as it likely would be if some real person from the theatre had run the transaction, it would read as being from whatever online movie ticket vendor you used to buy the tickets, and there may be an extra convenience charge for buying online instead of through the actual cinema. 

as far as you getting caught as the culprit...if you did it to only a few people, or beiged different movie theatres to get your numbers, i doubt you'd get busted as long as you made sure to not get caught beiging, and not leave any traces behind.  [this goes, of course, to the normal risks of beige boxing.]   if you stole enough numbers from one theatre that they got a lot of complaints about people getting funny credit billing sources or convenience charges on phone orders, it would, of course, be more likely to trip an investigation.  an investigation would be bad news, as i think there's probably a way to trace the transaction back to where it was completed.  so, you'd probably be fucked if you were using your own cellular internet account, or your own wireless hotspot account.  you'd either have to be on a stray unsecured wireless network, or have a hotspot or cellular internet account that you couldn't be traced back to.

[ApprenticePhreak]

You ever wonder sometimes if it's a pseudocop coming into the forums any time someone with a single and only post comes in asking if their shrewd plan would work? I think that a lot. Some times I also want to see the people fail.

But for the sake of conversation; if you're in the same area able to beige the line for a theater and do any of that then you can get an eeepc or some other little thing and tap into one of their lines through a free AOL account and do all that information. You could probably do the wifi thing, yeah, but that isn't half as spy worthy as a bunch of wires in your lap for no reason.

Unless they sold those wifi-cards like those pay as you go cell phones.

[Lestan Gregor]

You ever wonder sometimes if it's a pseudocop coming into the forums any time someone with a single and only post comes in asking if their shrewd plan would work? I think that a lot. Some times I also want to see the people fail.

I doubt a nerdy 19 y/o is fed...but you never know

[romboy]

Yeah this nerdy 19yr old is no psuedocop, just an idea I came up with after being linked to your site. I found the movie theatre pranks absolutely hilarious and i decided to put my spin on it. Your right though there is a convience charge but you could always tell that to them over the phone by saying something like "oh yeah thats a great movie, tickets are selling fast, but we could reserve your tickets over the phone for an extra dollar (or whatever it is) so that way you won't get here and have them be all sold out" so the convience charge shouldnt be a problem, as far as the other website you could say that you are going to "charge them over the phone using our parter (insert name of website here)" I do like the idea of using thier own phone lines for a dialup connection and to further hide yourself you could use one of those free dialup websites so you never have to enter your information, although it wouldn't be very hard to social engineer someone else's AOL account and password. Just my ideas, let me know what you think

[Tachyon]

Tits or GTFO?

[Lestan Gregor]

No, no tachyon. A for effort though

[rbcp]

Better yet, just beige the lines of a place that takes credit cards over the phone and record their calls to get credit card transactions.  Like maybe a florist.  Then you wouldn't have to bother pretending.

Credit card fraud is always a horrible idea, though.  It might work for awhile but you will always get caught in the end.  The getting caught part cannot be avoided.

[romboy]

Only thing with that is you may not be able to get all the info you would need/want. For example, a florist might only give you the customers name, phone number, cc# and exp. date. But if it's you that is taking the order you can ask for it all (name/address/phone numbers/cc#/exp date/CCV2 code/whatever else you want) if you are good enough at social engineering. Now I took some time to think about this, really the only place where you can take the orders and still deliver the product so the customer won't suspect something is up is a movie theatre. To pick up the tickets you usually take it to an ATM-like machine and swipe the credit card, simple and easy and the best thing is you don't have to tell someone you placed to order over the phone, cause then management might get suspecious.

Oh yeah credit card fraud now-a-days will get you boned easily but for those of us that want to do it, there's a method that could work. And I mean sure there are a LIMITED amount of things you can do with stolen credit card numbers (most profitable, and the lowest risk would be to sell them, maybe on IRC or something bonus because it's worth more because you have every vital piece of information, you don't need to social engineer anything) I suppose you could make your own card out of an old hotel key with thier info if you had a magnetic card writer and knew the proper formats for it to get gas at a station with no cameras. (No cameras is important because if they dont see your face, they will sure as hell see your license plate). Once again, just more ideas, I havent tried this stuff myself so I don't know how well they will work, I'm just trying to come up with a real good method to use.

[MelloKira]

Credit card fraud is always a horrible idea, though.  It might work for awhile but you will always get caught in the end.  The getting caught part cannot be avoided.

Yes, but, during your little credit-card 'adventures' when you got caught didn't you only get fined like $250? Or was that for something else... calls, maybe? Huh, I've read your "travels" page 8 freakin times and I still can't remember anything. Anyway, if somebody does get caught and gets sentenced to a couple weeks in prison and is fined a few hundred dollars--after making a few thousand dollars off of other people's cards--doesn't that seem worth it? Thoughts, please. 

But if it's you that is taking the order you can ask for it all (name/address/phone numbers/cc#/exp date/CCV2 code/whatever else you want) if you are good enough at social engineering. Now I took some time to think about this, really the only place where you can take the orders and still deliver the product so the customer won't suspect something is up is a movie theatre.

To answer your question, I think it's a "good" idea in the sense that it would work. Is it a wise idea? Not sure, read the paragraph above this one . But yeah, I do this to motels and stuff all the time. All you have to do is pretend to be the front desk guys (kudos for the trick, PLA) and say there's been a problem with their card. I've gotten a few numbers this way-- even though most people want to come down to the front desk and work it out in person--but knowing this silly trick works, I would think that actually beige boxing into a movie theater, etc. would be even more successful. Just my opinion, though.

[Tachyon]

Better yet, just beige the lines of a place that takes credit cards over the phone and record their calls to get credit card transactions.  Like maybe a florist.  Then you wouldn't have to bother pretending.

Credit card fraud is always a horrible idea, though.  It might work for awhile but you will always get caught in the end.  The getting caught part cannot be avoided.

No offence but it sounds from your story that the reasons you got caught were because you so epically raped the system with gusto, as opposed to the safer method of creeping in silently at night and doing the deed quiety without fuss.

I don't see how you could be caught if you got a prepaid phone registered it online with fake info (buy from stores with no cameras), then social engineer the numbers from people (do this from a location far from your house if you're paranoid about triangulation (maybe they don't really do that in real life for something this insignificant but it's important to remember that GPS can be shut off but they always know your local cell). Then sell them on IRC with a PDA or laptop connecting wirelessly at some public wifi hotspot. Have the proceeds sent to a paypal account registered to a dedicated email account and hooked up to a prepaid credit card.

If I was to do this I'd proabably just do it on the side (a prudent course of action for any habitual criminal I think) in addition to semi-regular normal work rather than being a full time scammer, since all those guys get busted. This means that as long as I'm smart about things I don't pay taxes but my legit job lets the government know that I simply don't make enough money to pay them.

I think the problem with scammers in general is that the ones with the balls to do things like this are always predisposed towards excess and indulgence with their newfound wealth. People who could manage to keep things low-key and undetectable usually lack the required testicular fortitude to break the walls of societal conventions, preferring safety over freedom.

[MelloKira]

Better yet, just beige the lines of a place that takes credit cards over the phone and record their calls to get credit card transactions.  Like maybe a florist.  Then you wouldn't have to bother pretending.

Credit card fraud is always a horrible idea, though.  It might work for awhile but you will always get caught in the end.  The getting caught part cannot be avoided.

No offence but it sounds from your story that the reasons you got caught were because you so epically raped the system with gusto, as opposed to the safer method of creeping in silently at night and doing the deed quiety without fuss.

I don't see how you could be caught if you got a prepaid phone registered it online with fake info (buy from stores with no cameras), then social engineer the numbers from people (do this from a location far from your house if you're paranoid about triangulation (maybe they don't really do that in real life for something this insignificant but it's important to remember that GPS can be shut off but they always know your local cell). Then sell them on IRC with a PDA or laptop connecting wirelessly at some public wifi hotspot. Have the proceeds sent to a paypal account registered to a dedicated email account and hooked up to a prepaid credit card.

If I was to do this I'd proabably just do it on the side (a prudent course of action for any habitual criminal I think) in addition to semi-regular normal work rather than being a full time scammer, since all those guys get busted. This means that as long as I'm smart about things I don't pay taxes but my legit job lets the government know that I simply don't make enough money to pay them.

I think the problem with scammers in general is that the ones with the balls to do things like this are always predisposed towards excess and indulgence with their newfound wealth. People who could manage to keep things low-key and undetectable usually lack the required testicular fortitude to break the walls of societal conventions, preferring safety over freedom.

*Applauds snazzy speech*

[MattGSX]

You know, I was really hoping this thread would just die, but then MelloKira had to bump it.

Seriously, this is a fucking stupid idea. I'm amazed that we're still discussing it. Wait. We're not still discussing it. If you want to talk about how you can pull this off in a more seamless way, repost it in the Scams forum. This forum is to discuss the legality and possible ramifications of committing a crime, NOT how to commit crime more effectively.

*rumble rumble* fucking ingrates *grumble grumble*