Gcard, Solopay ATM debit card holders Scam Alert. Urgent

Opti · 2005-08-28, 11:34 AM

If anyone has a list of all the resellers using GCARD cards, would be good to know asap.

A few hours ago information was posted on the ALT.2600 newsgroup on how any holder of one of the below card accounts can have it emptied.

The GCARD is an ATM debit card using the CIRRUS-MASTERCARD network,
sold by a network of resellers and franchised. The owner is
CARDONEPLUS/MYGCARD (www.mygcard.com). Resellers are many, for example
SOLOPAY.COM, CASHCARDS.RU, etc.

Quote:

Newsgroups: alt.2600, alt.2600.cardz, alt.2600.hackerz, alt.hacker, alt.hacking
From: "carder" <card...@mailvault.com> - Find messages by this author
Date: 27 Aug 2005 13:19:50 -0700
Local: Sun, Aug 28 2005 6:19 am
Subject: ATM CIRRUS GCARDS THAT WORK WITH ANY PIN CODE

))

CARDERS: GO!

The GCARD is an ATM debit card using the CIRRUS-MASTERCARD network,
sold by a network of resellers and franchised. The owner is
CARDONEPLUS/MYGCARD (www.mygcard.com). Resellers are many, for example
SOLOPAY.COM, CASHCARDS.RU, etc.

MYGCARD has in fact organized a large scam in 3 steps:

1- Massively sell ATM cards, directly and through various resellers

2- Offer anonymous solutions to reload the cards, for example e-gold.
By this way, they attract large amounts of money used by various
scammers and fraudsters.

3- Shutdown the all system and keeping the money from the GCARD users.

For this, MYGCARD has implemented TWO TECHNICAL BACKDOORS in their
cards. SIT DOWN before reading the following, it IS not easy to
believe, but YOU WILL BE ABLE TO VERIFY IT YOURSELF if you have one
GCARD... Or if you have a CARD WRITER to encode a GCARD (Encoding ISO1
and ISO2 methods below).

By revealing these backdoors, our goal is simple: MAKE COLLAPSE THIS
GCARD SCAM NETWORK!Mastercard who gave a licence to them, HAS BEEN
informed in the same time than you. Giving licence to a company who
makes cards where ANY PIN CODE WORKS, is for sure not very serious!

FIRST BACKDOOR: The GCARD numbers are easy to guess. NO "Luhn key"
here, just an arithmetical progression. See below for the explaination.
This backdoor is maybe a small one, BUT associated with the SECOND one,
it creates all the necessary stuff to scam everybody.

Now SIT DOWN AND READ:

SECOND BACKDOOR: ANY "PIN CODE", COMBINATION OF 4 DIGITS, ALLOWS ANY
GCARD TO WITHDRAW FUNDS AT ANY ATM!

Don't believe it? If you have a GCARD, JUST TRY !!!

The scheduled scam organized by MYGCARD is the following: After having
attracted "enough" clients, they will massively use forged MYGCARDS
using their clients' cards numbers (Method to create them, below),
withdraw funds AT THE ATM worldwide,
When the clients will complaint, MYGCARD will reply "Your card is PIN
CODE protected, so it is not possible, go nuts!"

Now we will reply in 3 points:

1- Generate GCARD "true" numbers

One true number is for example the card number of SOLOPAY as told on
their webpage http://solopay.com/fund_withdr.php

6220983013000016974

In fact only the SIX LAST DIGITS change on all the cards. In the series
we have, only the five last change. In the above example, the numbers
are 16974

16974
1697 4 and the following numbers will be:
1698 x
1699 x
1700 x
1701 x
1702 x
1703 x
etc

How to calculate the "x" now: Let's use the general notation : abcd x

Begin from a number you know for sure: 1697 4 and let's call it "abcd
x"
then:

if (d <> 4)
{
y=x+8;
if (y>9) {y=y-10;}
}
else
{
y=x+7;
if (y>9) {y=y-10;}
}

Got it?

16867 16875 16883 16891 16909 16917 16925 16933 16941 16958 16966 16974
16982 16990

BUT, and here we could not find the key, sometimes the numbers
"change", like if they were "reset". Then, the above rule applies
again. It means that if, with the above rule, we generate thousands of
numbers from ONE true number, maybe only 40/50 will be correct. Well
40/50 is not so bad, to encode them and run to the nearest ATM, type
ANY PIN CODE nd get the cash!

If you have one gcard, you can easily generate numbers "around your
number". With some friends, who ordered GCARDS in various resellers, we
could generate the following numbers (LIST BELOW).

Now of course, generated "possible" numbers are not ALL used. But it is
even possible to check if one generated number is used! Go to
https://bank.mygcard.com/forgot_password.aspx
Enter your generated number and look... If you receive a message like "
You have no security questions defined and your password cannot be
retrieved. Please contact your card provider directly.", it means that
the number is not used.
If you are prompted to reply to 2 "security questions", STOP ALL AND
JUMP TO THE NEXT STEP!

2- ENCODING A GCARD NUMBER

Here that is easy:

ISO1
62209830000ABCDX=1505120000031ha301

ISO2
B6220983000ABCDX^-------------ha---------?^

Not hard: Replace the ABCDX by the numbers you generated

Note that the exp date is set to May 2015! They dream

3- ATM RUN

OK, you have now a few white-plastic encoded GCARDS. Run to the nearest
ATM, and use ANY PIN CODE: if there is money on the account, you will
take it

Carders, GO !

A few of the following numbers have been tried the last hours in PARIS,
FRANCE! Some gave some money

)

A few GCARD numbers: 62209830130000xxxxx

with xxxxx as:

10506 10514 10522 10530 10548 10555 10563 10571 10589 10597
10605 10613 10621 10639 10647 10654 10662 10670 10688 10696
10704 10712 10720 10738 10746 10753 10761 10779 10787 10795
10803 10811 10829 10837 10845 10852 10860 10878 10886 10894
10902 10910 10928 10936 10944 10951 10969 10977 10985 10993
14508 14516 14524 14532 14540 14557 14565 14573 14581 14599
14607 14615 14623 14631 14649 14656 14664 14672 14680 14698
14706 14714 14722 14730 14748 14755 14763 14771 14789 14797
14805 14813 14821 14839 14847 14854 14862 14870 14888 14896
14904 14912 14920 14938 14946 14953 14961 14979 14987 14995
16040 16057 16065 16073 16081 16099 16107 16115 16123 16131
16149 16156 16164 16172 16180 16198 16206 16214 16222 16230
16248 16255 16263 16271 16289 16297 16305 16313 16321 16339
16347 16354 16362 16370 16388 16396 16404 16412 16420 16438
16446 16453 16461 16479 16487 16495 16503 16511 16529 16537
16545 16552 16560 16578 16586 16594 16602 16610 16628 16636
16644 16651 16669 16677 16685 16693 16701 16719 16727 16735
16743 16750 16768 16776 16784 16792 16800 16818 16826 16834
16842 16859 16867 16875 16883 16891 16909 16917 16925 16933
16941 16958 16966 16974 16982 16990 18004 18019 18027 18035
18043 18050 18068 18076 18084 18092 18100 18118 18126 18134
18142 18159 18167 18175 18183 18191 18209 18217 18225 18233
18241 18258 18266 18274 18282 18290 18308 18316 18324 18332
18340 18357 18365 18373 18381 18399 18407 18415 18423 18431
18449 18456 18464 18472 18480 18498 18517 18525 18533 18541
18558 18566 18574 18582 18590 18608 18616 18624 18632 18640
18657 18665 18673 18681 18699 18707 18715 18723 18731 18749
18756 18764 18772 18780 18798 18806 18814 18822 18830 18848
18855 18863 18871 18889 18897 18905 18913 18921 18939 18947
18954 18962 18970 18988 18996 20509 20513 20521 20539 20547
20554 20562 20570 20588 20596 20604 20612 20620 20638 20646
20653 20661 20679 20687 20695 20703 20711 20729 20737 20745
20752 20760 20778 20786 20794 20802 20810 20828 20836 20844
20851 20869 20877 20885 20893 20901 20919 20927 20935 20943
20950 20968 20976 20984 20992 21016 21024 21032 21040 21057
21065 21073 21081 21099 21107 21115 21123 21131 21149 21156
21164 21172 21180 21198 21206 21214 21222 21230 21248 21255
21263 21271 21289 21297 21305 21313 21321 21339 21347 21354
21362 21370 21388 21396 21404 21412 21420 21438 21446 21453
21461 21479 21487 21495 21503 21511 21529 21537 21545 21552
21560 21578 21586 21594 21602 21610 21628 21636 21644 21651
21669 21677 21685 21693 21701 21719 21727 21735 21743 21750
21768 21776 21784 21792 21800 21818 21826 21834 21842 21859
21867 21875 21883 21891 21909 21917 21925 21933 21941 21958
21966 21974 21982 21990 22501 22519 22527 22535 22543 22550
22568 22576 22584 22592 22600 22618 22626 22634 22642 22659
22667 22675 22683 22691 22709 22717 22725 22733 22741 22758
22766 22774 22782 22790 22808 22816 22824 22832 22840 22857
22865 22873 22881 22899 22907 22915 22923 22931 22949 22956
22964 22972 22980 22998 23501 23517 23525 23533 23541 23558
23566 23574 23582 23590 23608 23616 23624 23632 23640 23657
23665 23673 23681 23699 23707 23715 23723 23731 23749 23756
23764 23772 23780 23798 23806 23814 23822 23830 23848 23855

Go, carders, GO! ANY PIN CODE WILL GIVE YOU THE CASH