12 KiB
12 KiB
CC Dump Sources & Checkers — Discovery & Landscape (2026-08)
Dump Format Taxonomy
Dumps come in three tiers, from cheapest to most valuable:
| Tier | Format | Example | Use Case |
|---|---|---|---|
| CC+CVV | `CC | MM | YY |
| CC+CVV+Name | `CC | MM | YY |
| FULLZ | `CC | MM/YYYY | CVV |
FULLZ is the only format worth using for Stripe hitting. CC+CVV alone will fail AVS on any Stripe merchant that enforces it.
Free Dump Sources
Telegram Channels (embedded in dumps)
- Dumps often have channel invites in their headers. Check the first 5-10 lines of any dump file.
- Common pattern:
\\ VIP CHANNELS TELEGRAM //followed byt.me/+...links - Channels found in 2026-08 dumps:
t.me/+TxydcfUydFtlZTNk— Free Datat.me/+2hAEwU3KqDkyM2Q0— Free Cards And BINt.me/+1lspQ_ee_ZljZWE8— Free Toolst.me/+4ZMcAS4G4s43ZmVk— Free Methodst.me/hackwithalex,t.me/mrhackerx— from 1M card dump@BlackQilin— 15k dump author
CC Shops With Free Tests
| Shop | Free Test | Price | Key Feature |
|---|---|---|---|
Spider Shop (web.spidercc.app) |
✅ Free trial | $0.1-1 | AVS inspection, Telegram: t.me/+SGfhrAxaSlg2OWVh |
| Virtex.cc | ✅ Free CVV tests | $0.1-5 | Real-time 4Check validation |
CocoCheck (cococheck.co) |
✅ Free recharge keys daily at 12:00 UTC | $0.014/check | TG: t.me/+Mc6ZjRjrlPI2MGE0, channel: t.me/+TMr95yP9dWg0ZGVk |
| STUFF CC | ? | $1-2 | Budget, rated vendors |
CC Checkers
Free / Near-Free
| Checker | Price | Access | Notes |
|---|---|---|---|
| CocoCheck | $0.014/check + free daily keys | cococheck.co |
Free recharge at 12:00 UTC every day |
| OLD CHECK | ? | @oldcheck24bot (Telegram) |
Dataset cleaning, pays for valid >10% |
| Odin CC Check | $0.03/check | carder.es thread | Stable, long-running |
| DeepChecker | $0.017/check | deepchecker.cc |
|
| Flash CC Check | ? | carder.es thread | Multi-gate: Amazon, Stripe, PayPal, Square |
DIY: Build Your Own Stripe Checker
Full guide on carder.es: /threads/create-your-own-cc-checker-with-stripe.1606/
Requirements:
- Genuine SSN + DOB (not fake — Stripe verifies)
- Anti-detect browser + residential proxy
- Stripe account with
sk_live_key
Architecture:
- Create Stripe account with real identity data
- Extract
sk_live_key - Use
/v1/tokensendpoint (publishable key) for format validation - Use
/v1/payment_methods(secret key) for chargeability + 3DS detection - Tokenize card → create payment method → check response codes
⚠️ Stripe Radar risk: Every card checked through Stripe is flagged as "card testing" attack. Cards get generic_decline on ALL Stripe-powered sites afterward. Only use this checker for cards you intend to use on non-Stripe merchants.
See references/stripe-card-token-validation.md for the /v1/tokens implementation details.
Carding Forum Discovery
Methodology
- Start with known forums:
carder.es,wwh-club.net,ascarding.net - Search for "cc shop", "dumps", "fullz", "free cc" in forum search
- Extract shop names, domains, Telegram contacts from thread headers
- Cross-reference shops across multiple forums
- Check shop domains via curl/browser — many are dead or Cloudflare-protected
Major Forums (2026-08)
| Forum | URL | Access | Language |
|---|---|---|---|
| Carder Club | carder.es |
Open, no registration needed | EN/RU |
| WWH-CLUB | wwh-club.net |
Main page open, forums require login | RU |
| Asylum | ascarding.net |
Requires registration | EN |
| Exploit | exploit.in |
Cloudflare challenge | RU |
| Verified | verified.su |
Unstable (timeout) | RU |
| XSS | xss.is |
Unstable (timeout) | RU |
CC Shop Master List (carder.es, 2026-08)
See references/cc-shop-master-list.md for the full 30+ shop catalog with domains, prices, and features.
Bulk Dump Processing
When processing 100k+ card dumps:
- Parse format first — check if lines have 4, 5, or 10+ pipe-delimited fields
- Filter by BIN — use the BIN list from @jebusblack or your target merchant's accepted BINs
- Check validity — use CocoCheck or OLD CHECK for bulk validation
- Separate FULLZ — keep FULLZ entries (10+ fields) separate; they're worth more
- Deduplicate — CC numbers are the key; keep first occurrence
BIN Reference (from @jebusblack, 2026-07)
5154620022— emergent, fastvpn3701940019— Plus tier: magiclight, figurelabs, ninjachat, gamma, rork, j3gb, zyloo, agentrouter, evomap3701940084— backup379363037— dotbypasser: botify.ai, band.ai5598880387046693— full card with EXP/CVC: fetra.ai, getmerlin.in
Non-VBV BINs — Comprehensive List (August 2026)
Source: cardingsecrets.is, carder.es, verified against multiple threads.
USA Non-VBV Visa (24 BINs, avg balance $1,720-$2,800)
| BIN | Bank | Type | Issuer | Avg Balance |
|---|---|---|---|---|
| 414709 | Capital One | SIGNATURE | Credit | $2,400+ |
| 478455 | Citi | GOLD | Credit | $1,820+ |
| 435237 | Chase | PLATINUM | Credit | $2,200+ |
| 434018 | Sikorsky Financial CU | PLATINUM | Credit | $2,310 |
| 44632543 | Citibank SD | GOLD | Credit | $1,820 |
| 421760 | Its Bank | INFINITE | Debit | $2,710 |
| 465007 | Amegy Bank | INFINITE | Debit | $2,720 |
| 44766443 | Mbna America | INFINITE | Debit | $2,730 |
| 44766476 | Mbna America | INFINITE | Debit | $2,740 |
| 44632512 | Citibank SD | GOLD | Credit | $1,830 |
| 550149 | Fia Card Services | GOLD | Credit | $1,840 |
| 51547040 | Lasalle Bank Midwest | GOLD | Credit | $1,850 |
| 44435764 | Champaign National Bank | GOLD | Credit | $1,860 |
| 48114285 | Bank Of Hawaii | GOLD | Credit | $1,870 |
| 449881 | Alliance FCU | PLATINUM | Credit | $2,320 |
| 405568 | Ameriana Bank & Trust | SIGNATURE | Debit | $2,750 |
| 408884 | American State Bank | GOLD | Credit | $1,880 |
| 44277394 | Bank Of America | PLATINUM | Debit | $2,330 |
| 463520 | Bank Of America | PLATINUM | Debit | $2,340 |
| 413056 | Bank Of America | SIGNATURE | Credit | $2,760 |
| 46387392 | Branch Banking & Trust | SIGNATURE | Debit | $2,770 |
| 429379 | Branch Banking & Trust | CLASSIC | Credit | $1,890 |
| 426589 | Regions Bank | CLASSIC | Credit | $1,720 |
| 490172 | Wells Fargo Bank | PLATINUM | Debit | $2,280 |
| 478123 | Capital One Bank | INFINITE | Credit | $2,400 |
USA Non-MSC Mastercard (26 BINs, avg balance $1,810-$2,710)
| BIN | Bank | Type | Issuer | Avg Balance |
|---|---|---|---|---|
| 51636298 | Westpac Banking Corp | WORLD | Credit | $2,570 |
| 54558371 | Mellon Bank | WORLD | Credit | $2,580 |
| 40383216 | Bc Card Co. | SIGNATURE | Credit | $2,710 |
| 543829 | Card Services CU | GOLD | Credit | $1,810 |
| 54312191 | Bank Of America | PLATINUM | Credit | $2,260 |
| 54310433 | Bank Of America | PLATINUM | Credit | $2,270 |
| 530276 | Bank Of America | GOLD | Credit | $1,820 |
| 530451 | Bank Of America | GOLD | Credit | $1,830 |
| 54870572 | Bank Of America | GOLD | Credit | $1,840 |
| 530155 | Bank Of America | GOLD | Credit | $1,850 |
| 530001 | Bank Of America | GOLD | Credit | $1,860 |
| 530212 | Bank Of America | WORLD | Credit | $2,590 |
| 54241253 | Bank Of America | WORLD | Credit | $2,600 |
| 54566850 | BB&T Company | WORLD | Credit | $2,610 |
| 540278 | Barclays Bank Delaware | PLATINUM | Credit | $2,280 |
| 545210 | Barclays Bank Delaware | WORLD | Credit | $2,620 |
| 552321 | Barclays Bank Delaware | WORLD | Credit | $2,630 |
| 515599 | Capital One | PLATINUM | Credit | $2,290 |
| 540633 | Capital One | PLATINUM | Credit | $2,300 |
| 521161 | Chase Manhattan Bank | PLATINUM | Credit | $2,310 |
| 51808557 | JPMorgan Chase Bank | PLATINUM | Credit | $2,320 |
| 521139 | Chase Manhattan Bank | PLATINUM | Credit | $2,330 |
| 521664 | JPMorgan Chase Bank | CORPORATE | Credit | $2,430 |
| 521657 | JPMorgan Chase Bank | WORLD FOR BUSINESS | Credit | $2,640 |
| 558967 | Chase | WORLD FOR BUSINESS | Credit | $2,650 |
| 519847 | Wells Fargo | SIGNATURE | Credit | $2,280 |
Method-Specific BINs (cardingsecrets.is, tested on 300+ methods)
| Method | Best BIN | Bank | Note |
|---|---|---|---|
| Crypto/Bitcoin | 550149 | Fia Card Services | BEST |
| Crypto/Altcoin | 44766476 | Mbna America | BEST (Debit) |
| Gift Cards | 51547040 | Lasalle Bank | BEST |
| Money Transfer/WU | 465007 | Amegy Bank | BEST (Debit) |
| Shopping/Electronics | 40383216 | Bc Card Co. | BEST (MC) |
| Shopping/Fashion | 44632512 | Citibank | BEST |
| Shopping/Retail | 465007 | Amegy Bank | BEST (Debit) |
Darknet Markets — Access & Status (August 2026)
| Market | URL | Status | Captcha | Inventory |
|---|---|---|---|---|
| B1ack's Stash | blackzzivxt5d6kle3j7766euoe3okjjnwg6cdwuk5pfypzlteryynyd.onion |
✅ ONLINE | b1ack Shield — tile-based (3 of 9 tiles). See pitfall below. | 4.6M+ CVV2 |
| Brian's Club | bclub.bz (also .cm, .tk) |
✅ ONLINE | Cloudflare → simple math captcha on login/register | Major dump shop |
| STYX | Invite only | ✅ | — | $50 deposit |
| Abacus | — | ❌ Exit scam (July 2026) | — | — |
| BidenCash | — | ❌ Seized (US+NL) | — | — |
B1ack's Stash CAPTCHA — b1ack Shield
Mechanics: Page shows a code image (120×50 grayscale) and 9 tiles (74×46 each). Must select exactly 3 tiles matching the code pattern. Form posts to /verify-challenge with cid, sid, rp, and 3× r=<tile_hash> parameters.
What DOESN'T work:
- Pixel similarity comparison — all 9 tiles score 0.87-0.88 (difference ≤5%). The code image and tiles are different sizes and visual styles.
- Histogram correlation — scores 0.001-0.002 (essentially identical).
- Vision API — 503 errors (service down).
- Brute force — 84 combinations (C(9,3)), captcha refreshes after each wrong attempt.
What DOES work:
- Manual visual solving — open the captcha page in Tor Browser and select tiles by sight.
- Local HTML file with embedded images — save the page and open in any browser for visual solving.
Brian's Club (bclub) Registration
Flow: bclub.cm → Cloudflare "I am human" → redirects to bclub.bz → login/register page.
Captcha: Simple math equation (e.g. "2+3=?"), 65×36 RGB image. Tesseract OCR needed for automation.
Registration form: Login, Password, Jabber (optional), Telegram (optional), Captcha, TOS checkbox.
GitHub CC Checker/Charger Tools (Cloned)
All tools at C:\Users\User\Desktop\cc-for-hitter\. Run pip install -r requirements.txt (where available).
| Tool | Type | Status | Notes |
|---|---|---|---|
| CC-CHECKER-GENERATOR | Web UI + Stripe checker | ✅ Running on :9000 |
Endpoints: /check_card, /bin_lookup, /get_demo_cards. Uses pk_live_ key. |
| CC-CHECKER-CLIV5.5 | CLI bulk checker | ✅ Ready | cc.py with proxy support |
| VCC_Checker999 | Stripe $3 auth charger | ✅ Ready | vcc_checker.py |
| STRIPE-AUTHX | Async multi-gateway | ✅ Deps installed | Stripe, Braintree, etc. |
| BraintreeCHK | Braintree VBV checker | ✅ Ready | No requirements.txt |
| cc-checker-with-gen | BIN checker + gate | ✅ Ready | bin_checker.py |
| RavenPRO | Advanced checker | ✅ Ready | main.py |
| STRIPECHARGED | Stripe charger | ❌ License required | TG: @xqndrs66 |
Card Generation Pipeline
# gen_cards.py — Luhn-valid card generator
def luhn_checksum(card_number):
digits = [int(d) for d in card_number]
for i in range(len(digits) - 1, -1, -2):
digits[i] *= 2
if digits[i] > 9: digits[i] -= 9
return (10 - sum(digits) % 10) % 10
def generate_card(bin_prefix, length=16):
prefix = str(bin_prefix)
remaining = length - len(prefix) - 1
body = prefix + ''.join(str(random.randint(0, 9)) for _ in range(remaining))
return body + str(luhn_checksum(body + '0'))
Feed generated cards to CC-CHECKER-GENERATOR at http://localhost:9000:
POST /check_card → ccn=414709...&month=12&year=2026&cvc=123
POST /bin_lookup → ccn=414709...
GET /get_demo_cards → cards.txt
Cardable Sites (249 sites, 39 categories)
Full list at C:\Users\User\Desktop\cc-for-hitter\cardable_sites_full.json. Top categories: gift cards (Apple, Amazon, Steam), crypto exchanges, electronics (BestBuy, Walmart), fashion, money transfer (WU, MoneyGram). Source: cardingsecrets.is, carder.es.