Linear methods, such as carding, can be expanded upon and turned into what I am calling “Multi-System Exploits”.
Like all other methods, this one has several iterations, but typically goes like this:
Generated credit card numbers are used to reserve a rental car online. The same card number and expiration date are embossed onto a card matching the issuer. 3 for Amex, 4 for Visa, 5 for Mastercard, 6 for Discover. No CVV / Billing Address information is needed due to the weakness of the checkout form.
The account is made under the name of someone who has a real (stolen) drivers license that can pass the DL without suspicion. Both the card and the DL are presented in-person when picking up the car. Now a relatively brand new car is in the hands of the fraudster.
Next steps, by using a duplicate title, razorblade and laser printer, the information on the title is removed and reprinted with information matching the rental car.
The VIN number is inside the door and, of course, the VIN won’t be listed as stolen (which are the two main things that consumers are told to look for). Now the fraudster has a car and a title to match.
To sell the car, peer-to-peer marketplaces are used along with a sprinkle of social engineering. Discounted prices and sob stories about a relative passing are common.
The buyer can pay with cash or check. Checks would be deposited into dummy accounts and cash… well…. Cash is cash and is encouraged.
Strategy Items:
1. Identify counterfeit titles: No matter what method the fraudster uses to manipulate the duplicate title, or how well they complete the task, there will be some damage to the title. Some soak documents, which leads to lightening of the printed background and a softness to the paper (like dollar bills). Others use the razor blade technique, which leads to roughness centered around the areas with typed information.
2. Scams on P2P networks are a dime a dozen. Be cautious and keep your guard up. When in-person, ask for supporting documents, such as the insurance information and an ID. Rental cars are registered to…. Rental Car Companies (Surprise!) For good sellers, this shouldn’t be an issue as the insurance information is typically with the car or the driver (there’s an app for that now).
Be proactive, my friends.
