Carding 💳 Carding Guide: Dick's Sporting Goods 💳



d0ctrine

d0ctrine

Fraud Daddy
Elite
Supreme
Joined
26.12.23
Messages
223
Reaction score
3,552
Points
93
1733121376276.png
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

dick (1).png​
Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

burpdick.png

Also if Burp is too confusing for you just use Ghostery for any major site and you can see which trackers they have on their site easily. LINK
Click to expand...

dick ghostery (1) (1).png


3e04a2067539d1b21c737d24f1b0a056.png
​
Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.

sensor.png​

Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.

1733153745327.png
​

Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:

1733152669611.png​


1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
dickgoogle.pngThink about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

To view the content, you need to Sign In or Register.


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
 
K

Kartiermoney1

Active Carder
Joined
04.07.24
Messages
36
Reaction score
3
Points
8
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
Thanks
 
H

hastaluego2

Active Carder
Joined
24.06.24
Messages
50
Reaction score
5
Points
8
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
Best writer in here.
 
A

actipunch

Carding Novice
Joined
29.11.24
Messages
1
Reaction score
0
Points
1
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
W
 
beer

beer

Carding Novice
Joined
28.10.24
Messages
6
Reaction score
3
Points
3
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
 
S

Scammanx7

Carding Novice
Joined
27.11.24
Messages
2
Reaction score
0
Points
1
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
Gotta give it a try with a card close to my zip
 
A

aztechnik

Carding Novice
Joined
05.01.24
Messages
20
Reaction score
6
Points
3
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
Nice! thanks for the advice
 
B

boble

Active Carder
Joined
26.06.24
Messages
32
Reaction score
6
Points
8
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
let seeeee!!!!!!
 
H

hanvuong

Active Carder
Joined
27.06.24
Messages
34
Reaction score
1
Points
8
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

Để xử lý thanh toán, họ sử dụng cả Braintree và Adyen tùy thuộc vào vị trí và giá trị giỏ hàng của bạn. Thiết lập cổng kép này có nghĩa là chúng ta cần phải cực kỳ cẩn thận với cách tiếp cận của mình và thẻ của bạn không thể bị đốt cháy trên PayPal cho Braintree và các cửa hàng Adyen khác cho Adyen. Và trước khi bạn hỏi - không có BIN cụ thể nào không đảm bảo thành công một cách kỳ diệu ở đây. Tôi đã thấy cùng một BIN thất bại và thành công trong vòng vài giờ. Tất cả phụ thuộc vào cách bạn chơi trò chơi.


Yêu cầu
  • Thẻ mới
  • Proxy dân cư sạch sẽ phù hợp với khu vực thanh toán
  • Thiết lập trình duyệt chống phát hiện chắc chắn
  • Giảm giá tại Hoa Kỳ (ưu tiên nhà ở sạch sẽ không có lịch sử gian lận với Braintree/Adyen và Riskified)
  • Tài khoản email có độ tin cậy cao
  • iPhone + kết nối dữ liệu (nếu có thể)

Đây là lý do tại sao thiết lập di động hoạt động tốt hơn: Dick's thấy các nỗ lực gian lận ít tinh vi hơn từ thiết bị di động, đặc biệt là iOS . Nếu bạn đang sử dụng iPhone + dữ liệu, hãy chọn thẻ có mã bưu chính thanh toán gần vị trí thực tế của bạn. Điều này tạo ra hồ sơ nhất quán hơn cho Riskified . Chỉ cần đảm bảo bạn xóa cookie (hoặc đặt lại cứng nếu bạn đang sử dụng APP của họ) giữa các phiên. Để hiểu sâu hơn, hãy đọc hướng dẫn về iPhone của tôi.

Quá trình

Sau đây là cách thực hiện đúng:



1. Mục nhập hữu cơ:
  • Bắt đầu bằng cách tìm kiếm trên Google về mặt hàng mục tiêu của bạn (ví dụ: "Nike Air Force 1 Dick's Sporting Goods")
  • Nhấp vào kết quả tìm kiếm quảng cáo trả tiền thậm chí còn tốt hơn
  • Điều này tạo ra một chuỗi giới thiệu hợp pháp trong cookie của bạn
  • Phiên của bạn bây giờ trông giống như một khách hàng thực sự đã tìm thấy sản phẩm thông qua tìm kiếm
  • Riskified nhìn thấy điểm vào tự nhiên này và chỉ định điểm rủi ro thấp hơn
  • Mẹo chuyên nghiệp: Tìm kiếm các biến thể như "giá tốt nhất cho Nike Air Force 1" hoặc "Nike AF1 gần tôi" để có vẻ tự nhiên hơn
View attachment 50091Hãy nghĩ về điều này - điều gì trông đáng ngờ hơn đối với việc phát hiện gian lận: nhập trực tiếp vào dicks.com và đi thẳng đến các mặt hàng đắt tiền hay đến thông qua tìm kiếm sản phẩm như một khách hàng bình thường? Bước đơn giản này giúp bạn vượt xa những người lười biếng không thèm xây dựng tính hợp pháp của phiên làm việc.

2. Xây dựng phiên:
  • Bắt đầu với một hồ sơ trình duyệt sạch
  • Để những chiếc bánh quy đó ủ trong ít nhất 30-45 phút
  • Duyệt như một khách hàng thực sự sẽ làm
3. Xây dựng giỏ hàng:
  • Trộn các mặt hàng có giá trị cao và thấp
  • Giữ đơn hàng ban đầu dưới 800 đô la
  • Thêm/xóa các mục một cách tự nhiên
  • Kiểm tra các danh mục khác nhau
4. Thanh toán:
  • Sử dụng chức năng thanh toán của khách nếu bạn không sử dụng nhật ký.
  • Nhập thông tin thủ công - không sao chép-dán
  • Hãy dành thời gian nhập thẻ
  • Nếu trên máy tính để bàn, KHÔNG nhấn alt-tab khi nhập thông tin thẻ - Riskified sẽ ghi lại điều này và đây là một lá cờ đỏ lớn

Chiến thuật nâng cao
Hãy cùng giải quyết một số lời đồn nhảm nhí đang lan truyền:

"BIN của Dick là gì?"

*** Văn bản ẩn: không thể trích dẫn. ***


Trong khi tính năng thanh toán của khách hoạt động, việc có một tài khoản cũ sẽ tăng thêm tính hợp pháp cho các giao dịch của bạn.

Điểm hấp dẫn của các tài khoản cũ là chúng giúp vượt qua một số ngưỡng rủi ro trong hệ thống tính điểm Riskifieds . Một tài khoản 6 tháng tuổi với các đơn hàng trước đó trông ít đáng ngờ hơn nhiều so với một khách mới thanh toán cố gắng mua đồ dùng trị giá 600 đô la.

Ngoài ra, nếu bạn muốn thử vận may trước khi mạo hiểm với thẻ và tiền của mình, hãy xem hướng dẫn của tôi về Hệ thống chống gian lận AI thâm nhập và đầu độc . Hướng dẫn này chỉ cho bạn cách thăm dò và phân tích công cụ quyết định của Riskifieds mà không cần đốt tài nguyên. Những kẻ gian lận thông minh sẽ xác thực phương pháp của chúng trước khi tham gia.

Suy nghĩ kết thúc

Dick không phải là mục tiêu khó khăn nhất nhưng việc triển khai Riskified của họ có nghĩa là bạn không thể chỉ dùng vũ lực để vượt qua. Thành công ở đây là về sự kiên nhẫn và chính xác. Hãy thiết lập đúng, dành thời gian và đừng tham lam.

Hãy nhớ: thẻ sạch và OPSEC phù hợp là điều cần thiết nhưng hành vi của bạn trong suốt phiên cũng quan trọng không kém. Một động thái cẩu thả và bạn sẽ phá hỏng toàn bộ hoạt động.

Bây giờ hãy ra ngoài và biến những đồ dùng thể thao đó thành tiền mặt.

Lớp học kết thúc. d0ctrine ra.n
Click to expand...
 
H

hanvuong

Active Carder
Joined
27.06.24
Messages
34
Reaction score
1
Points
8
d0ctrine said:
View attachment 50076
💳Hướng dẫn đánh bài: Dick's Sporting Goods💳

Đã đến lúc tấn công nhà bán lẻ đồ thể thao lớn nhất nước Mỹ. Dick's Sporting Goods không chỉ là một chuỗi bán lẻ khác - mà là một đống đồ thể thao giá trị cao đang chờ được khai thác. Nhưng trước khi bạn quá phấn khích, hãy cùng tìm hiểu sâu hơn về những gì chúng ta đang giải quyết.

Tại sao lại là Dick?

Yeah yeah hãy cười lên về cái tên - chúng ta đều đã nói đùa. Nhưng trong khi bạn đang cười khúc khích như một đứa trẻ 12 tuổi, hãy để tôi cho bạn biết lý do tại sao nhà bán lẻ đặc biệt này xứng đáng được bạn chú ý.

Dick's là thiên đường đồ dùng thể thao cao cấp - các sản phẩm Nike Under Armour và Adidas thống trị thị trường bán lại. Đây không phải là những mặt hàng thanh lý - chúng là những sản phẩm có nhu cầu cao , thực tế là chúng tự lật ngược. Các tùy chọn giao hàng trong ngày của họ có nghĩa là thời gian xử lý nhanh chóng và nhiều phương thức vận chuyển giúp bạn không bị dự đoán.

Tỷ lệ thành công ở đây là vững chắc nếu bạn biết mình đang làm gì. Mặc dù Dick's không chạy bảo mật nghiệp dư nhưng họ không tạo ra sức nóng như các nhà bán lẻ đồ điện tử. Điều đó có nghĩa là ít cạnh tranh hơn từ những người bán thẻ khác đang quá bận rộn theo đuổi PS5 và GPU. Thị trường đồ dùng thể thao luôn sôi động quanh năm - những người mê giày thể thao và những người cuồng thể dục không nghỉ ngơi theo mùa.

Trong khi nhóm phòng ngừa mất mát của họ tốn thời gian lọc qua những câu chuyện cười trẻ con, bạn có thể đang điều hành một hoạt động tinh vi ngay dưới mũi họ.😏

Trinh sát

Đã khởi động Burp Suite và chúng ta tìm thấy gì? Dick's đang điều hành nền tảng thương mại điện tử tùy chỉnh của riêng họ với một số sức mạnh đáng gờm đằng sau. Họ đã triển khai Riskified để phòng chống gian lận và những kẻ khốn nạn này không đùa giỡn - chúng đang thu thập tín hiệu như thể chúng đang cố gắng liên lạc với sự sống ngoài hành tinh.

View attachment 50090



Mỗi chuyển động của chuột, mỗi lần nhấn phím , mỗi lần bạn chuyển tab - Riskified đều theo dõi và ghi lại tất cả. Đây là thông tin quan trọng vì nó có nghĩa là chúng tôi không thể chỉ lướt qua quy trình thanh toán như chúng tôi làm với các trang web khác. Tôi đã thấy rất nhiều trang web và Dick có lẽ gần đứng đầu khi nói đến lượng dữ liệu họ thu thập.


Đây là một điều sẽ làm hỏng hầu hết những người đánh bài bằng máy tính xách tay: Alt-tabbing trong khi nhập thông tin thẻ. Hãy nghĩ về điều đó - lần cuối cùng bạn thấy một khách hàng hợp pháp điên cuồng chuyển đổi cửa sổ trong khi nhập số thẻ của họ là khi nào? Không bao giờ vì những người bình thường hoặc là có thẻ của họ ở trước mặt họ hoặc họ đã ghi nhớ nó.

Nhưng những người đánh bài trên máy tính xách tay làm việc với không gian màn hình hạn chế liên tục nhấn alt-tab giữa danh sách thẻ và trang thanh toán. Nhật ký của Dick ghi lại MỌI lần nhấn alt-tab trong khi nhập thẻ. Bạn có muốn biết tại sao thẻ của mình bị từ chối không? Đây có thể là lý do. Hãy ghi nhớ những chữ số đó hoặc dán chúng vào thanh URL của bạn trước. Đừng để lộ ra là bạn đang tung hứng các cửa sổ như một chú hề xiếc.

Để xử lý thanh toán, họ sử dụng cả Braintree và Adyen tùy thuộc vào vị trí và giá trị giỏ hàng của bạn. Thiết lập cổng kép này có nghĩa là chúng ta cần phải cực kỳ cẩn thận với cách tiếp cận của mình và thẻ của bạn không thể bị đốt cháy trên PayPal cho Braintree và các cửa hàng Adyen khác cho Adyen. Và trước khi bạn hỏi - không có BIN cụ thể nào không đảm bảo thành công một cách kỳ diệu ở đây. Tôi đã thấy cùng một BIN thất bại và thành công trong vòng vài giờ. Tất cả phụ thuộc vào cách bạn chơi trò chơi.


Yêu cầu
  • Thẻ mới
  • Proxy dân cư sạch sẽ phù hợp với khu vực thanh toán
  • Thiết lập trình duyệt chống phát hiện chắc chắn
  • Giảm giá tại Hoa Kỳ (ưu tiên nhà ở sạch sẽ không có lịch sử gian lận với Braintree/Adyen và Riskified)
  • Tài khoản email có độ tin cậy cao
  • iPhone + kết nối dữ liệu (nếu có thể)

Đây là lý do tại sao thiết lập di động hoạt động tốt hơn: Dick's thấy các nỗ lực gian lận ít tinh vi hơn từ thiết bị di động, đặc biệt là iOS . Nếu bạn đang sử dụng iPhone + dữ liệu, hãy chọn thẻ có mã bưu chính thanh toán gần vị trí thực tế của bạn. Điều này tạo ra hồ sơ nhất quán hơn cho Riskified . Chỉ cần đảm bảo bạn xóa cookie (hoặc đặt lại cứng nếu bạn đang sử dụng APP của họ) giữa các phiên. Để hiểu sâu hơn, hãy đọc hướng dẫn về iPhone của tôi.

Quá trình

Sau đây là cách thực hiện đúng:



1. Mục nhập hữu cơ:
  • Bắt đầu bằng cách tìm kiếm trên Google về mặt hàng mục tiêu của bạn (ví dụ: "Nike Air Force 1 Dick's Sporting Goods")
  • Nhấp vào kết quả tìm kiếm quảng cáo trả tiền thậm chí còn tốt hơn
  • Điều này tạo ra một chuỗi giới thiệu hợp pháp trong cookie của bạn
  • Phiên của bạn bây giờ trông giống như một khách hàng thực sự đã tìm thấy sản phẩm thông qua tìm kiếm
  • Riskified nhìn thấy điểm vào tự nhiên này và chỉ định điểm rủi ro thấp hơn
  • Mẹo chuyên nghiệp: Tìm kiếm các biến thể như "giá tốt nhất cho Nike Air Force 1" hoặc "Nike AF1 gần tôi" để có vẻ tự nhiên hơn
View attachment 50091Hãy nghĩ về điều này - điều gì trông đáng ngờ hơn đối với việc phát hiện gian lận: nhập trực tiếp vào dicks.com và đi thẳng đến các mặt hàng đắt tiền hay đến thông qua tìm kiếm sản phẩm như một khách hàng bình thường? Bước đơn giản này giúp bạn vượt xa những người lười biếng không thèm xây dựng tính hợp pháp của phiên làm việc.

2. Xây dựng phiên:
  • Bắt đầu với một hồ sơ trình duyệt sạch
  • Để những chiếc bánh quy đó ủ trong ít nhất 30-45 phút
  • Duyệt như một khách hàng thực sự sẽ làm
3. Xây dựng giỏ hàng:
  • Trộn các mặt hàng có giá trị cao và thấp
  • Giữ đơn hàng ban đầu dưới 800 đô la
  • Thêm/xóa các mục một cách tự nhiên
  • Kiểm tra các danh mục khác nhau
4. Thanh toán:
  • Sử dụng chức năng thanh toán của khách nếu bạn không sử dụng nhật ký.
  • Nhập thông tin thủ công - không sao chép-dán
  • Hãy dành thời gian nhập thẻ
  • Nếu trên máy tính để bàn, KHÔNG nhấn alt-tab khi nhập thông tin thẻ - Riskified sẽ ghi lại điều này và đây là một lá cờ đỏ lớn

Chiến thuật nâng cao
Hãy cùng giải quyết một số lời đồn nhảm nhí đang lan truyền:

"BIN của Dick là gì?"

*** Văn bản ẩn: không thể trích dẫn. ***


Trong khi tính năng thanh toán của khách hoạt động, việc có một tài khoản cũ sẽ tăng thêm tính hợp pháp cho các giao dịch của bạn.

Điểm hấp dẫn của các tài khoản cũ là chúng giúp vượt qua một số ngưỡng rủi ro trong hệ thống tính điểm Riskifieds . Một tài khoản 6 tháng tuổi với các đơn hàng trước đó trông ít đáng ngờ hơn nhiều so với một khách mới thanh toán cố gắng mua đồ dùng trị giá 600 đô la.

Ngoài ra, nếu bạn muốn thử vận may trước khi mạo hiểm với thẻ và tiền của mình, hãy xem hướng dẫn của tôi về Hệ thống chống gian lận AI thâm nhập và đầu độc . Hướng dẫn này chỉ cho bạn cách thăm dò và phân tích công cụ quyết định của Riskifieds mà không cần đốt tài nguyên. Những kẻ gian lận thông minh sẽ xác thực phương pháp của chúng trước khi tham gia.

Suy nghĩ kết thúc

Dick không phải là mục tiêu khó khăn nhất nhưng việc triển khai Riskified của họ có nghĩa là bạn không thể chỉ dùng vũ lực để vượt qua. Thành công ở đây là về sự kiên nhẫn và chính xác. Hãy thiết lập đúng, dành thời gian và đừng tham lam.

Hãy nhớ: thẻ sạch và OPSEC phù hợp là điều cần thiết nhưng hành vi của bạn trong suốt phiên cũng quan trọng không kém. Một động thái cẩu thả và bạn sẽ phá hỏng toàn bộ hoạt động.

Bây giờ hãy ra ngoài và biến những đồ dùng thể thao đó thành tiền mặt.

Lớp học kết thúc. d0ctrine ra.
Click to expand...
Hi
 
W

watermark55s

Active Carder
Joined
02.12.24
Messages
29
Reaction score
0
Points
1
Thx
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
 
S

slaveoflife

Active Carder
Joined
08.09.24
Messages
31
Reaction score
4
Points
8
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
🙏🏻
 
M

Maacswiper

Basic
Joined
25.12.21
Messages
69
Reaction score
22
Points
8
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
Yo
 
B

Bake

Active Carder
Joined
27.10.24
Messages
26
Reaction score
4
Points
3
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
Nice
 
A

alanshore12

Carding Novice
Joined
09.02.24
Messages
8
Reaction score
1
Points
3
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
Nice writeup
 
F

fentanylluver

Active Carder
Joined
02.09.24
Messages
30
Reaction score
9
Points
8
d0ctrine said:
View attachment 50076
💳 Carding Guide: Dick's Sporting Goods 💳

Time to hit the biggest sporting goods retailer in America. Dick's Sporting Goods isnt just another retail chain - its the shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.

Why Dick's?

Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.

Dick's is a premium athletic gear paradise - Nike Under Armour and Adidas products that dominate the resale market. These arent clearance rack items - theyre high-demand products that practically flip themselves. Their same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.

The success rate here is solid if you know what youre doing. While Dick's isnt running amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays hot year-round - sneakerheads and fitness freaks dont take seasons off.

And while their loss prevention team wastes time filtering through childish dick jokes you could be running a sophisticated operations right under their noses. 😏

Recon

Fired up Burp Suite and what do we find? Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented Riskified for fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.

View attachment 50090



Every mouse movement every keystroke every time you switch tabs - Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and Dick's probably near the top when it comes to the amount of data they collect.


Heres something thatll fuck up most laptop carders: Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.

But carders on laptops working with limited screen real estate constantly alt-tab between their card list and checkout page. Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.

For payment processing theyre using both Braintree and Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.


Requirements
  • Fresh cards
  • Clean residential proxies matching billing region
  • Solid antidetect browser setup
  • US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
  • High-trust email accounts
  • iPhone + data connection (if possible)

Heres why mobile setup works better: Dick's sees less sophisticated fraud attempts from mobile especially iOS. If youre using iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.

Process

Heres how to do it right:



1. Organic Entry:
  • Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
  • Click through the search results paid ads are even better
  • This creates a legitimate referrer chain in your cookies
  • Your session now looks like a real customer who found the product through search
  • Riskified sees this natural entry point and assigns lower risk scores
  • Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.

2. Session Building:
  • Start with a clean browser profile
  • Let those cookies age for at least 30-45 minutes
  • Browse like a real customer would
3. Cart Building:
  • Mix high and low-value items
  • Keep initial orders under $800
  • Add/remove items naturally
  • Check different categories
4. Checkout:
  • Use guest checkout if you're not using logs.
  • Enter details manually - no copy-paste
  • Take your time with card entry
  • If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag

Advanced Tactics
Lets address some bullshit myths floating around:

"Whats the BIN for Dick's?"

*** Hidden text: cannot be quoted. ***


While guest checkout works having an aged account adds another layer of legitimacy to your transactions.

The beauty of aged accounts is they help bypass certain risk thresholds in Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.

Also if you want to test your chances before risking your cards and drops check out my guide on Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.

Closing Thoughts

Dick's isnt the hardest target out there but their implementation of Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.

Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One sloppy move and youll blow the whole operation.

Now get out there and turn those sporting goods into cold hard cash.

Class dismissed. d0ctrine out.
Click to expand...
Fw it
 
You must log in or register to reply here.
Top Bottom