lol wtf??? he asking for a fckin opsec guide... it all depends on what you will be using.. windows, mac, linux etc...
rdp is still the best opsec for carding, but with an residential ip not gcp, azure, aws or company static ip rdp.
i still prefer using mobile devices and sim swapping. had more success on mobile devices then any rdp, or etc.
so dont believe all these dumbass talking about bypassing otp or verification. basically just think of it as your using your own cc to card and etc, common sense, dont try to follow steps because its all bs, just card like if it was you carding with your own personal cc or whatever your going to be doing...