News for hackers. Stuff that matters.
Re:Criminals can guess Visa number and security code in six ... by ryanlol on Sunday December 04, 2016 @10:50AM (#13100302)
The data you'd gain from this is practically useless to anyone looking to commit fraud... so laugh at the article I guess?

Maybe you could abuse this to create a lot of netflix accounts, but you aren't really going to be able to buy anything with just the PAN/cvv/expiry.

Re:Criminals can guess Visa number and security code in six ... by TheDong on Sunday December 04, 2016 @08:25PM (#13102782)
https://purse.io/ is a website for committing fraud with stolen credit cards.

It's a website that specializes in letting criminals convert credit card details (PAN/cvv/expiry) into bitcoin while exposing them to minimal risk.

There are very real ways to commit such fraud.

Re:Criminals can guess Visa number and security code in six ... by ryanlol on Tuesday December 06, 2016 @10:20AM (#13115179)
Yeah, it's really not that easy.

I'm sure it may seem so for someone who's really never dealt with fraud, but it's definitely not as easy as just signing up to amazon and making an order.

If you tried to use UK cards gained from doing this, I assure you, not a single one of your orders would ever ship.

You'd just be wasting your time getting all your drop addresses (or purse customer addresses) blacklisted.

Re:Criminals can guess Visa number and security code in six ... by pablovidal85 on Monday December 05, 2016 @08:32AM (#13105174)
Not really, purse.io does not facilitate fraud more than Amazon itself does. Purse.io just connects people who are willing to buy bitcoin using Amazon gift cards for a premium, and those that would like to purchase products on Amazon using bitcoin.
Re:Criminals can guess Visa number and security code in six ... by phpnode on Monday December 05, 2016 @09:48AM (#13105620)
It's an out and out money laundering service. It exists for no other reason, there are no legitimate circumstances where someone would want or need to sell amazon gift cards at less than their face value. It is straight up money laundering and it's frankly incredible that it's lasted as long as it has.
Re:Criminals can guess Visa number and security code in six ... by ctrl-j on Monday December 05, 2016 @10:55AM (#13106205)
> no legitimate circumstances where someone would want or need to sell amazon gift cards at less than their face value.

Absolute statements like this are so hard to back up.

For instance, if you live in Cuba, Iran, Syria, North Korea, or Syria, Amazon.com gift cards are worthless.

I know I received some AmericanEagle gift cards as a promotion recently, and unloaded them for less than face value just because I had absolutely no need/want to use them.

Re:Criminals can guess Visa number and security code in six ... by cthalupa on Tuesday December 06, 2016 @03:14AM (#13113025)
> there are no legitimate circumstances where someone would want or need to sell amazon gift cards at less than their face value

Many credit card rewards programs offer Amazon gift cards as a redemption option. The points:value ratio on these is generally significantly better than the ratio on cash rebates, even when you consider the hit taken on sites like purse.

e.g. 10,000 points might be redeemable for $100 in Amazon GC, but only $50 in cash, so even if you get the GC and sell them for $85, you still do better than if you had straight redeemed it for USD.

Re:Criminals can guess Visa number and security code in six ... by imaginenore on Sunday December 04, 2016 @11:10AM (#13100378)
You can buy all kinds of valuables online, which you then resell. Gift cards are quite common.
Re:Criminals can guess Visa number and security code in six ... by nine_k on Sunday December 04, 2016 @11:15AM (#13100401)
You can potentially issue an old-style mag-stripe credit card knock-off, and pay with it in an offline store. IDK if it's worth the effort: the card should look reasonable physically, too.
Re:Criminals can guess Visa number and security code in six ... by closeparen on Sunday December 04, 2016 @02:56PM (#13101471)
No, there's an analogue of the CVV2, the CVV1, which is only present on the magnetic stripe. The information you'd get from an online transaction is not enough to print a working magstripe.
Re:Criminals can guess Visa number and security code in six ... by contingencies on Sunday December 04, 2016 @03:49PM (#13101701)
There are still offline processors that don't read magstripe and just take a copy of the card and a signature.
Re:Criminals can guess Visa number and security code in six ... by seanp2k2 on Monday December 05, 2016 @02:55AM (#13104011)
Yep, ever have a merchant enter your CC number on the keypad IRL? That's what's happening. The fees for these types of transactions are typically higher as your processor is assuming more risk, so they prefer to only do them when they need to. See https://www.mastercard.us/content/dam/mccom/en-us/documents/... if you're really curious about how this stuff works in the MasterCard case. Visa is similar AFAIK.
Re:Criminals can guess Visa number and security code in six ... by ryanlol on Tuesday December 06, 2016 @10:21AM (#13115192)
Not a repeatable form of fraud. You won't be able to make money abusing offline processing.

Why not just buy magnetic stripe dumps for a couple of $ each online? Significantly better risk/reward ratio.

Re:Criminals can guess Visa number and security code in six ... by Cyph0n on Sunday December 04, 2016 @11:40AM (#13100510)
Game gifts on online stores, such as Steam, are a common target.
Re:Criminals can guess Visa number and security code in six ... by seanp2k2 on Monday December 05, 2016 @02:55AM (#13104016)
Apple Store gift cards are another which are popular with scammers and fraudsters for whatever reason. I'm curious now what that reason is.
Re:Criminals can guess Visa number and security code in six ... by ryanlol on Tuesday December 06, 2016 @10:14AM (#13115142)
Yes, and you won't be able to use this data on such sites.

You'd be stopped by the very first line of defence, AVS checks.