- Joined
- 26.12.23
- Messages
- 245
- Reaction score
- 8,625
- Points
- 93



If youve read my residential drops guide elsewhere you'd know that if theres one item at the top of the list of what these residential drops buy, it's fucking Dyson. And for good reason. These premium vacuum and hair tool beasts move serious hardware with high price tags.
Most amateur carders waste time on garbage targets while these $400-900 appliances maintain 70-80% of retail when flipped. Their Airwrap alone sells for $600 retail and flips for $450+ all day long.
Dyson
Dyson is extremely liquid - like the fucking Apple of home appliances. Everyone wants this shit, and they'll pay top dollar to get it. Card a $600 Airwrap or $700 vacuum and flip it same-day for $450-550 cash. No specialized knowledge needed no seasonal demand drops - just high-value tech that moves fast year-round.
And the best part is that the site itself has no 3DS. While you are struggling with listing all your NONVBV bins, people who card Dyson slide through checkout smooth as butter.
Security Analysis
After digging through their checkout process with Burp Suite heres what we're dealing with:
Dyson runs Adyen as their payment processor, but most of the antifraud heavy lifting is handled by Riskified. This isnt some homegrown bullshit cobbled together by their IT department. Their system focuses on device fingerprinting behavior patterns, and velocity checks. If you look sketchy to Riskified you're toast.


The beautiful fucking part is that theres noo 3D Secure at all Which is weird if you think about it running Adyen. My entire house is filled with Dyson appliances - vacuums, hair dryers air purifiers - you name it. Not once have I ever gotten a 3DS prompt with any BIN I've used. But I dont know about you, you might use the dirtiest fucking proxy with the nastiest 1$ card so don't be surprised if you get all sorts of verification shit thrown your way.

One thing to note is that using Riskified means they operate on a tiered risk system. Highly suspicious transactions get cancelled outright - game over. But medium-risk orders is where Dyson's fraud team starts making outbound verification calls. They'll ring up the number on file to "confirm details" before processing. This is why having a real voice on the other end matters - not some VOIP bullshit or some random phone number. Answer that call confidently, and you might salvage what would otherwise be a dead transaction.
Riskified Cookies
Riskified tracks more than your IP and payment details—they monitor your digital footprints through their cookie network. As covered in my guide on cookies and referrer Strategic Carding: Cookies and Referrers these arent just trackers—they're your digital alibi when fraud prevention systems are watching.

The trick to bypass them:
Essential Tools
To successfully hit Dyson, gather this shit first:
Card Requirements:
- Clean cards matching your setup location (they dont need to be NONVBV since Dyson US doesn't use 3DS in my experience)
- Cards with bins with high limits
- Cards with the cardholders email - this is crucial for our Riskified trick
- Fresh iPhone with clean browser (or Linken if you want to do the warming route)
- Residential proxies matching your card's billing state EXACTLY
- Voice-capable non-VOIP number for verification calls
- Clean drops with no history of fraud
Execution Strategy
The money moves at checkout:
- Warm your Riskified profile on related sites first (this is entirely optional as covered above)
- Create a fresh Dyson account using the cardholders actual email address - Dyson doesn't verify it - and if they have history with Riskified, which most US people not living under a rock will youll get a trust boost and guarantees your item ships.
- Select your product
- Add your drop's address
- Enter your a number where you can receive calls - expect potential verification calls
"Payment Authorization Issues"
The most common roadblock youll hit is the dreaded "payment authorization issue" email. This is Dyson's way of saying "We think youre full of shit but we're too polite to say it directly."
When this happens, you have two options:
Option 1: Call In
Contact their customer service and play the confused slightly irritated legitimate customer. "I dont understand why my order was canceled. I use this card all the time!" Their fraud team might ask basic verification questions about your card and billing details. Answer confidently but don't volunteer extra information. After this, your next order will go through just fine.
Option 2: Restrategize
If your setup is burned (unusual device fingerprints or suspicious proxies) dump it and start fresh. Trying repeatedly with the same setup is a waste of cards.
Reality Check
Dyson is a solid target—premium products with strong resale value, decent security thats beatable and easy flipping. Their main defense is Riskified's fingerprinting, so you need to use the cards email to get your transactions through without a hitch.
The biggest challenge isn't getting past 3DS (since they dont use it in the US) but rather creating a setup that passes Riskified's risk scoring. If your device, behavior and details look legitimate, you've won most of the battle.
Now stop wasting time on low-value bullshit and grab some premium appliances before they patch these holes. d0ctrine out.
Last edited: