He Cheated and Didn’t Pass

The fraud Andi Peterson, or whatever his real name is used a stolen CC to try and purchase some high end products. He was one of the less sophisticated criminals, not even knowing the original street or zip code of the CC he used. We hope he spent a ton of money on that batch of stolen numbers. There wasn’t much of an investigation for this one, a simply look at the processor metadata gave a few red flags. The delivery address itself is odd & not able to be found on Google Maps (so obviously, it doesn’t exist).

Transaction Details

Name: Andi Peterson
Card: Visa Debit, 2166
Billing: 675 Metropolitan Parkway, SW STE 3110 – RSU 36547 Atlanta GA 30310
Origin: USA
CVC: Passed
Street Check: Failed
Zip Check: Failed

Unresponsive Sophia Lien

It’s not unusual for ecommerce companies to receive orders for items being billed in one area and shipped to another. What’s unusual is when someone orders $500 worth of product and never responds to emails or phone calls. It was the quantity of an item that tipped off this investigation. Most fraudsters want items that are “Marketable”, easy to resell  for a profit. This is what happened with Sophia Lien. The merchant attempted contact on multiple channels with no response. It then went to an investigation of the email address & shipping address.

It was the shipping destination that tipped off the fraud. The destination is a “Shipping Center” and “We Flip Your TVs” business.

A phone call was made to the local police regarding this attempt to defraud / stolen credit card.

Transaction Information:

Name: Sophia Lien
CVC Check: Pass
Street Check: Pass
Zip Check: Pass

• Email: lien.sophi@gmail.com
• Tel: 8656222545

CVC Passed, Logic Check Failed

This is yet another example of the CC processor failing to protect the merchant. “Fernando” made a $500 purchase using a stolen credit card. For just $10 a month, the fraudster maintains a shipping address at Last Vegas based “Mail Link” on Rainbow Blvd. We contacted “Mail Link” and they seemed concerned but naturally didn’t provide any additional details. The Las Vegas police non emergency number took a report. I’m sure they have detectives working in shifts to catch the guy.

Transaction Details:

Date: 2016/09/22
Name: Fernando Lumain
Card Used: Visa, 2723
Billing: 3119 Lake Shore Drive, Deerfield Beach Fl. 33442 USA
Shipping: 848 N Rainbow Blvd, Unit 8090 Las Vegas, NV 89107
Origin: USA
CVC Check: Passed
Street Check: Passed
Zip Check: Passed

• Email: nandolumain@aol.com
• Tel: 7574534474

Fool Us 8 Times, Shame On Enforcement

“Marvin” used the classic, unsophisticated stealing of credit card information either gleaned himself or purchased from someone else. The fraudster then purchases something “marketable” (easy to sell) online, using the real billing info, swapping out the shipping address for an anonymous location he has access to. The fraudster then picks up the item and is away to the pawn shop or ebay.

This transaction came in as fishy to the merchant only because it was for a large number of items that don’t usually sell in large quantities. That was red flag 1, followed quickly by red flag 2: a shipping address at a pack and ship that seems to be used by other fraudsters!

A quick Google search found that this shipping address has been used for fraud at least 8 times before: https://badbuyerlist.org/search?utf8=%E2%9C%93&q=472+Amherst+St&button=

The Nashua Police Department has been made aware of this individual instance along with the 8 other reported instances at this location.

Transaction Details

Name: Marvin Wedell
Card: Mastercard CC 3248
Billing: 1133 Ravine Ridge Drive, Worthington OH 43085
Shipping: 472 Amherst St #76789 Nashua, NH 03063
Origin: United States
CVC: Passed
Street Check: Passed
Zip Check: Passed
Email: wedell@dr.com
Tel: 8019005912

“Jhon Lee” of Singapore

This was an order for multiple items (thousands of dollars) with express shipping. The destination is a freight forwarding business within the Singapore airport. An inbound email was received regarding this order. The emailed used to contact us was the same email addressed used at checkout.

A quick Google Search of that email address yielded an eCommerce Scam Story on another website! The email address was flagged by them & all the details were spelled out.

We forwarded the information we had to authorities in Singapore & canceled the order.

What’s weird is this fraud origin was the USA (per the CC processor).

Conversations:

Apr 20, 2015

Dear Sir/Madame,
    I would like to know about my order status.
    Please confirm me soon.
    Thanks,

Apr 21, 2015

Comments: Hello,
I would like to know about my ORDER STATUS?
When you ready to ship my ORDER?
I’m waiting for your reply confirmation as soon as possible.
Thanks,

Details of Card Used:

Angela Lim” of Singapore

The street check failed on this one but that’s not totally uncommon. An order going to Singapore is also not uncommon. The “Customer” emailed us, requesting to pay via a manual CC run. We refused and sent her an invoice she could use a CC to pay online via PayPal. She refused to pay via PayPal, claiming she lost $ using PayPal. She then went through the website to place the order. She even “negotiated” the shipping method, claiming that USPS charges too much in duties (not true but whatever). The card was reported stolen to the CC company just a few days after the transaction went through.

Card Details:

Transaction Details: