View attachment 50076
Carding Guide: Dick's Sporting Goods
Time to hit the biggest sporting goods retailer in America.
Dick's Sporting Goods isnt just another retail chain - its the
shit of high-value athletic gear waiting to be exploited. But before you get too excited lets dive deep into what were dealing with.
Why Dick's?
Yeah yeah laugh it up about the name - weve all made the jokes. But while youre giggling like a 12-year-old let me tell you why this particular retailer deserves your attention.
Dick's is a
premium athletic gear paradise -
Nike Under Armour and
Adidas products that dominate the resale market. These arent clearance rack items - theyre
high-demand products that practically flip themselves. Their
same-day delivery options mean quick turnaround and multiple shipping methods let you stay unpredictable.
The
success rate here is solid if you know what youre doing. While
Dick's isnt running
amateur security theyre not bringing the same heat as electronics retailers. That means less competition from other carders who are too busy chasing PS5s and GPUs. The athletic gear market stays
hot year-round - sneakerheads and fitness freaks dont take seasons off.
And while their loss prevention team wastes time filtering through childish dick jokes you could be running a
sophisticated operations right under their noses.
Recon
Fired up
Burp Suite and what do we find?
Dick's is running their own custom e-commerce platform with some serious muscle behind it. Theyve implemented
Riskified for
fraud prevention and these fuckers arent playing around - theyre collecting signals like theyre trying to contact alien life.
View attachment 50090
Every
mouse movement every
keystroke every time you
switch tabs -
Riskified is watching and logging it all. This is crucial information because it means we cant just blast through the checkout process like we do with other sites. Ive seen so many sites and
Dick's probably near the top when it comes to the amount of data they collect.
Heres something thatll fuck up most laptop carders:
Alt-tabbing while entering card details. Think about it - whens the last time you saw a legit customer frantically switching windows while typing their card number? Never because normal people either have their card physically in front of them or theyve memorized it.
But carders on laptops working with limited screen real estate constantly
alt-tab between their card list and checkout page.
Dick's logs EVERY SINGLE instance of alt-tabbing during card entry. Want to know why your shits getting declined? This could be why. Either memorize those digits or paste them in your URL bar beforehand. Stop making it obvious youre juggling windows like a circus clown.
For payment processing theyre using both
Braintree and
Adyen depending on your location and cart value. This dual-gateway setup means we need to be extra careful with our approach and your cards cannot be burnt on PayPal for Braintree and other Adyen stores for Adyen. And before you ask - no specific BINs wont magically guarantee success here. Ive seen the same BIN fail and succeed within hours. Its all about how you play the game.
Requirements
- Fresh cards
- Clean residential proxies matching billing region
- Solid antidetect browser setup
- US drops (clean residential preferred with 0 fraud history with Braintree/Adyen and Riskified)
- High-trust email accounts
- iPhone + data connection (if possible)
Heres why mobile setup works better:
Dick's sees less sophisticated fraud attempts from mobile especially
iOS. If youre using
iPhone + data pick a card with a billing zip near your actual location. This creates a more coherent profile for
Riskified. Just make sure you clear cookies (or hard reset if youre using their APP) between sessions. For deeper understanding read through my iPhone guide.
Process
Heres how to do it right:
1. Organic Entry:
- Start with a Google search for your target item (e.g. "Nike Air Force 1 Dick's Sporting Goods")
- Click through the search results paid ads are even better
- This creates a legitimate referrer chain in your cookies
- Your session now looks like a real customer who found the product through search
- Riskified sees this natural entry point and assigns lower risk scores
- Pro tip: Search variations like "best price Nike Air Force 1" or "Nike AF1 near me" to seem even more organic
View attachment 50091Think about it - what looks more suspicious to fraud detection: directly typing in dicks.com and beelining to expensive items or arriving through a product search like a normal fucking customer would? This simple step puts you miles ahead of lazy carders who cant be bothered to build proper session legitimacy.
2. Session Building:
- Start with a clean browser profile
- Let those cookies age for at least 30-45 minutes
- Browse like a real customer would
3. Cart Building:
- Mix high and low-value items
- Keep initial orders under $800
- Add/remove items naturally
- Check different categories
4. Checkout:
- Use guest checkout if you're not using logs.
- Enter details manually - no copy-paste
- Take your time with card entry
- If on desktop DONT alt-tab while entering card details - Riskified logs this and its a massive red flag
Advanced Tactics
Lets address some bullshit myths floating around:
"Whats the BIN for Dick's?"
*** Hidden text: cannot be quoted. ***
While guest checkout works having an
aged account adds another layer of legitimacy to your transactions.
The beauty of aged accounts is they help bypass certain risk thresholds in
Riskifieds scoring system. A 6-month-old account with previous orders looks way less suspicious than a fresh guest checkout trying to cop $600 worth of gear.
Also if you want to test your chances before risking your cards and drops check out my guide on
Penetrating and Poisoning AI Antifraud Systems. It shows you how to probe and analyze
Riskifieds decision engine without burning resources. Smart fraudsters validate their methods before going in hot.
Closing Thoughts
Dick's isnt the hardest target out there but their implementation of
Riskified means you cant just brute force your way through. Success here is about patience and precision. Get your setup right take your time and dont get greedy.
Remember: clean cards and proper OPSEC are essential but your behavior during the session matters just as much. One
sloppy move and youll blow the whole operation.
Now get out there and turn those sporting goods into cold hard cash.
Class dismissed. d0ctrine out.
