A dark web actor recently unveiled a trove of more than 15,500 debit and credit cards allegedly linked to Mexican citizens. The advertisement for these illicit Mexican citizens credit cards appeared on an underground forum under the post titled “15,500 PCS CARDS HIGH VALID%,” with an initial bid set at $47,000.
The individual behind the stolen Mexican citizens credit cards sale, known as “powerup”, made their pitch, inviting potential buyers with the assurance of a “fresh database” originating from Mexico.
Despite the lack of specifics regarding the issuing companies of the cards, the seller was open to inquiries via private message, promising to address any concerns or queries potential buyers might have.
The Syndicate of Mexican Citizens Credit Cards Fraud
This allegedly Mexican Citizen credit card sale is not a new case and is part of a global credit and debit card skimming campaign.
Operating within the concealed recesses of the internet, dark web marketplaces for credit and debit cards serve as conduits for the illicit trade of stolen payment information.
These platforms cater to a diverse array of cybercriminals, fostering a specialized ecosystem where stolen card data finds buyers for various personal purposes.
Traditionally, criminals engaged in card fraud would either capture card data themselves or purchase it for personal use. However, the methodology has evolved over the years, with distinct roles emerging.
Credit and Debit Card Skimming Continues Despite New Technologies
Some specialize in capturing card data through methods like skimming, while others, known as carders, exploit stolen information to conduct fraudulent transactions.
The evolution of skimming techniques reflects this shift, with modern methods transcending traditional physical card skimmers to encompass sophisticated digital attacks such as Magecart, which targets e-commerce websites, and large-scale cyber breaches like the infamous Target and Sonic incidents.
Mastercard’s recent report sheds light on a case involving the illicit card testing service Try2Check, described as the “gold standard” of unauthorized credit card verification platforms.
The service, now under scrutiny from the U.S. Department of Justice, offered a range of testing transactions, conducting millions of preauthorization attempts on stolen cards to ascertain their validity discreetly.
Despite law enforcement efforts, the nefarious activities persist. Even with the indictment of key players like Try2Check’s alleged mastermind, who faces charges of access device fraud and money laundering, the underground economy surrounding debit and credit card fraud still exists.
Criminals continually adapt their techniques to circumvent security measures, ensuring that testing transactions remain an important component of the illicit payment card ecosystem.
Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.