Note: This Text file contains Extremely damaging material about the American Express account making algorithm. I do not commit credit card fraud. I just made up this scheme because I was bored. However, I do possess some morals. I called American Express to see if they'd have a reward for anyone finding a loophole in there system. I was going to tell them the loophole, get a reward and keep my mouth shut about what I found. Well American Express didn't seem to interested in what I discovered. In fact there "Special Investigation Division" didn't even believe me. Now that really burns me. In fact that got me really pissed. Since AMEX didn't seem to interested in this information, I thought that all you junior credit card frauders would. As for AMEX, they can kiss my ass.
Sorry about 'Xing' out all the account numbers in this file. But I just want to keep myself out of legal hassles.
37XX XX XXXX 61006 37XX XX XXXX 01007 37XX XX XXXX 71007 37XX XX XXXX 81000 37XX XX XXXX 81012Notice the last FIVE digits in the numbers. You'll see that the second number is almost always a 1 followed by two zeros. In other words the number 100 is almost ALWAYS in the middle of the series of five numbers. But look at the last number. In the middle you have a 101 and not a 100. Why is that? Let me tell you why. It's because AMEX made a bad mistake which I picked up on... Card A 37XX XX XXXX 81007 Card B 37XX XX XXXX 81015 Notice these two numbers. They are almost identical except for the last 2 digits. You see AMEX can't have two identical card numbers can they? Of course not because then who would they bill? What AMEX did instead was this... 37XX XX XXXX 81015 They changed the damn zero to a 1 and made a new check digit for the end!! If you don't know what a check digit is. Get Dr. Cyclops file on the "Mod 10" method of check digits. If you can't get a hold of the file you can still make a valid card number. Here's what you do...
Look in your cancellation book for a number similar to the one above. Make sure that within the last 5 digits the number 101 is in the middle. Now do this....
Before - 37XX XX XXXX 81015
After - 37XX XX XXXX 81005
Change the 1 to a 0. Now to the number on the end add 2.
37XX XX XXXX 8100(5+2) = 37XX XX XXXX 81007
Now you have a valid card number: 37XX XX XXXX 81007
You'll notice that the card number just made matches the Card A listed above. That is because those two cards were cancelled together. Therefore in the cancellation bulletin you'll want to look for a card number in the format:
XXXX XX XXXX X101X
Then you'll want to make sure that there is not an identical card with the number:
XXXX XX XXXX X100X
Right above or below it. You see AMEX would not have made the card number XXXX XX XXXX X101X unless there was already a duplicate card number in existence! That alone makes my system 100 percent effective. There is no way that the card can't exist because it's XXXX XX XXXX X101X counterpart WOULDN'T, COULDN'T, AND WON'T exist without a XXXX XX XXXX X100X number being right next to it in there account system!
Once Again: In short do the following:
X- Number,C- Check Digit
XXXX XX XXXX X101C
XXXX XX XXXX X100C
XXXX XX XXXX X100(C+2)
It's that easy! If you can add you can do it. Just make sure the number 101 is in the middle of the series of 5 and you can do this trick.
But suppose the last 5 digits in the card number are the following:
XXXX XX XXXX 81019
If you add 2 to the check digit 9 you get 11! No problem. Just drop the 1 in the tens place so you get this:
XXXX XX XXXX 81001
Now you have a valid number.
Remember this is 100 percent effective! No one else can say that about there system. No one. So get a cancellation book and make up a whole list of cards. It takes about 10 seconds to make a card with my system so enjoy!
Final note here. Yes there are other ways to "Play the numbers" with AMEX. So go see if you can find them like I did!
As for American Express. If there security agents are reading this, let me offer a cheap solution...
Operator - "Account number please"
Frauder - "37XX XX XXXX XXXXX"
Operator - "Expiration Date"
Frauder - "Ahhh... 10/90"
Operator - "I'm sorry that account is invalid"
NOTICE that the operator did not say that the DATE was invalid. NOR did s/he say that the CARD NUMBER was invalid. S/he should not make a distinction to the person trying to get authorization. That way you always keep the frauder guessing...
Frauder "Gee I wonder whether the expiration date is bad. Or is it the account number? Or is it both?"
You see that is a great and cheap defense. Too bad AMEX is too damn ignorant to see it.
This file was written by Saturday Knight For the Enjoyment of All. 12-27-89 In Association With Damage Inc. Special thanks to: Ponce DeLeon - for his lasting moral support and con-artist manipulation of others. Toxic Offspring - For showing me the right way to make smoke bombs. Remember: I'm only the gun salesman, not the person pulling the trigger.