Fun with identity theft

[MattTheSkywalker]

Hi! I just wanted to ask you EF sillies a few questions. This is for entertainment purposes only, of course.

Let's say you were angry with someone over something. They owed you some money, or stole from you, or did something bad. the reason for the anger doesn't matter all that much. You're pissed.

As luck would have it, you stumbled across their address, date of birth and social security number. Assuming you were bent on revenge, and were willing to take the risk of criminal prosecution. How would you use these tools to even things out? Some good ones I have heard:

Apply for credit cards and buy yourself some stuff. An oldie but a goodie. Shipping can be an issue, but usually there is a grace period between ordering and billing, so you'll be OK.

Put the credit card in your address (or a MailBoxes Etc. box) and you're good to go.

After obtaining a credit card, you could sign up for a bunch of Internet porn and give the password to 1000 people. Cancelling those deals is a pain in the ass for teh leigtimate cardholder.

Open an online store (www.theskywalker.com, for example). Sell legitiamte goods. Have someone use the bogus credit card tobuy $50K worth of stuff. You get paid anyway. This will only work once and you'll probably lose your agreement with the credit card company.

I have read about people buying cars, getting mortgages, etc. What else can you do with this info? let's see some creativity.

 

[jnuts]

Well.... just release said CC into the great wide internet. Let the masses of insanity do the work for you. IRC would probably be a good start.

But you'd really need to cover your tracks.

 

[c-sharp minor]

Kindly PM me said number and I'll be off.

Thank you for your patronage.

Please come again.

 

[Irie]

How about acting proper and not doing anything? Now that's not only creative but the right thing to do Matthew. Do you really need that satisfaction? What will it do for you? Karma!

 

[MattTheSkywalker]

How about acting proper and not doing anything? Now that's not only creative but the right thing to do Matthew. Do you really need that satisfaction? What will it do for you? Karma!

Sir...you missed the part about entertainment purposes only.

The rest of you: you agree that a bogus credit card is the way to go. What else?

 

[Irie]

Sir...you missed the part about entertainment purposes only.

You are correct, guess that slipped my mind.

 

[WODIN]

Sell the info to one of those people who setup illegals with new identities.

 

[CipherLock]

Just write it all down inside a blank envelope and mail it to them.

 

[NoDaddyNo]

Just write it all down inside a blank envelope and mail it to them.

I very much like this one the best.

Don't get fingerprints on it and ideally send it from something far away from you - if you travel for business, then send it from a different city.

That way they are just more freaked out because they are waiting for the other shoe to drop.

You could add in a note that says "you lose" - but that could be taken as some sort of threat or something.

Or keep the info and just keep setting them up for new credit cards with their own address so that they see them in the mail and get pissy about it.

 

[plornive]

It depends on many factors.

Does she use online banking? If so, is it possible to make instant transfers (sometimes up to about 9k)? I may have already put a keylogger on her computer. How often does she log in? Every 15 days? That gives us an average of 7 days, a 9k transfer from each account every day. That might make her a bit upset? Of course, this depends on where we are. In the US it is a bit difficult to set up a bogus bank account.

How many credit cards does she have? She needs more. She also needs to change her address to a mail forwarding service centre that looks like residential address. She likes to use c2it... she likes it very much. Does she have a paypal account? Those could be useful for converting credit to cash.

She loves buying expensive persian rugs. Nevermind the fact they are resold to the owner.

Nothing more... nothing to connect these activities to me. No unnecessary risks... no bringing other people in that might be linked to me.

 

[Y_lifter]

It's a good thing curling is MIA...

Personally, I'd be an adult and sue them for the money or shrug off the thing they did to piss you off..

 

[plornive]

It's a good thing curling is MIA...

Personally, I'd be an adult and sue them for the money or shrug off the thing they did to piss you off..

Me too. But we are talking about identity theft. I guess you missed that part.

 

[plornive]

Sell the info to one of those people who setup illegals with new identities.

I like this one a lot! Fucking hilarious!

 

[MattTheSkywalker]

plornive,

that was great. Kee them coming. For entertainment purposes only!!

 

[Y_lifter]

Me too. But we are talking about identity theft. I guess you missed that part.

You mean I missed this ?
Let's say you were angry with someone over something. They owed you some money, or stole from you, or did something bad. the reason for the anger doesn't matter all that much. You're pissed.

 

[plornive]

You mean I missed this ?
Let's say you were angry with someone over something. They owed you some money, or stole from you, or did something bad. the reason for the anger doesn't matter all that much. You're pissed.

"As luck would have it, you stumbled across their address, date of birth and social security number. Assuming you were bent on revenge, and were willing to take the risk of criminal prosecution. How would you use these tools to even things out?"

 

[Y_lifter]

My answer still stands as valid holmes..

 

[Heahy Minister]

Put the credit card in your address (or a MailBoxes Etc. box) and you're good to go.

The last thing you want to do is put anything in your address no?

 

[plornive]

Most of the good ones I can think of are circumstantial. Blackmail would be fun. That wouldn't really utilize his/her identity.

It would be good, either way, to make he/she feel out of control. Suddenly seeing assets and credit disappear, followed by debt, would be a true loss of control of some aspects of his/her life.

What I mentioned above could definitely be orchestrated if one planned well. The keylogger could not be accessed from one's home base. One could also not access the source of that keylogger software from his/her home base, if he wanted to be air tight. Use prepaid mobile from a park with a linux laptop.

Fake passports would need to be aquired. Legitimate looking addresses created (mail forwarding). Address changes of credit cards. It's really not that hard to get some phone bankers to reveal information. Pretty easy in my experience.

Paypal, c2it accounts, multiple credit cards with a small amount of history created.

Access patterns for access to online banking would need to be studied.

Transfer limits, withdrawal limits, risky situations, traceable elements... all must be accounted for. Some cash machines may record serial numbers of bills. Maybe it is a good idea to withdraw from some cash machines in other countries.

It's all possible if one plans well enough. It might be good to keep many layers. Different addresses with different credit cards. For later. Maybe utilize some Euro online payment system that time for another hit.

 

[Frackal]

Use it to take 499$ out of their account and send it to me bor w00_+

 

[bwood]

hey matt...

do you have any stationary with this person's fingerprints on it???

 

[Frackal]

I have love letters with bwoods fingerprints

 

[MattTheSkywalker]

There are no fingerprints.

This is for entertainment purposes only. I don't have anything. If I did I would be doing and not talking.

 

[manny78]

Apply for credit cards and buy yourself some stuff. An oldie but a goodie. Shipping can be an issue, but usually there is a grace period between ordering and billing, so you'll be OK.

Unfortunately for you, SSN and his name/address wont be enough. This old trick used to work before but doesnt anymore. They now usually ask for a "physical" signature, employers letter/references.

After obtaining a credit card, you could sign up for a bunch of Internet porn and give the password to 1000 people. Cancelling those deals is a pain in the ass for teh leigtimate cardholder.

Then comes the ISP issue. Ig fraud was done, they could retrace you through the ISP. If things were done through a proxy server and the proxy server isn't located in the US, LE will be suspicious. As for the CC holder, it would be easy for him to clear his name since even if he was using a proxy server, the data go through his local ISP before reaching the proxy.

What else can you do with this info? let's see some creativity.

Have someone from outside the country do this shit, assuming his CC limit is high enough. Or just hire a "hit squad"...

 

[beefybull]

If you are looking for revenge ideas Matt, do a Google Search for a site called "Chip's Parazite". Once you find one of the many mirrors of the site, click on the "files" section. This is full of TONS of files about a variety of topics and has an entire section dedicated to carding (CC fraud), as well as many other topics.

Also, you could check out the files at http://www.TOTSE.com/

 

[Cuthbert]

With that limited information you wouldnt be able to do anything worthwhile.

 

[FreakMonster]

Then comes the ISP issue. Ig fraud was done, they could retrace you through the ISP. If things were done through a proxy server and the proxy server isn't located in the US, LE will be suspicious. As for the CC holder, it would be easy for him to clear his name since even if he was using a proxy server, the data go through his local ISP before reaching the proxy.

If you have a wireless router hooked up to your computer they couldn;'t track your ISP

 

[AAP]

Get the card and use it to purchase stuff for THEM!!! Have it mailed to them. If it is a chic, buy shit like socket wrenches, ladders, etc.. big bulky shit that is a pain in the ass to reship back.

If it is a guy, use the card to purchase things like flowers and send it to his girl at work. Though put another females name on it. Then when the girl gets them with another name, and sees the charge on his card... viola.. .instant cat fight between the two. (you can nail the chic afterwards yourself.)

 

[manny78]

If you have a wireless router hooked up to your computer they couldn;'t track your ISP

Your wireless router has to sent data to your provider, which then gives you access to the net. You'd be screwed anyway. In order to mask your IP, you need something between your ISP and the server/site. What's between you and your provider is irrelevant.

 

[plornive]

prepaid mobile, using a laptop with linux, in a public park

 

[FreakMonster]

Your wireless router has to sent data to your provider, which then gives you access to the net. You'd be screwed anyway. In order to mask your IP, you need something between your ISP and the server/site. What's between you and your provider is irrelevant.

That's what a wireless router does. It's masks your IP address.

 

[manny78]

That's what a wireless router does. It's masks your IP address.

Sorry but it doesnt work this way. A wireless router will just mask your computer's IP (network address which is something like 198.xxx.xxx.xxx). The website will still be able to see your ISP or the proxy IP.

So it goes this way: computer - router - your ISP - proxy (if using one) - website.

A router doesnt act like a provider.

 

[manny78]

prepaid mobile, using a laptop with linux, in a public park

Makes sense, as long as you suscribed to this prepaid deal with a fake identity.

 

[NoDaddyNo]

The benefit of a wireless router would be that if you left it wide open with no encryption.
Then pretty much anyone can sniff by and latch on and use that connection.
If that is the case - then you could claim that while the action did indeed come from your ISP and from your alloted bandwidth through that ISP - you were a bit daft in your setup of the wireless connection and someone else must have come in and done it, not you.

Also, multiple nested proxies would be good. There are anon proxies and you could connect through a chain of them.
Depending on what country they are in, they really don't bother at all with logs since they get a lot of traffic.