Sinisterly
First try - SE Apple (Apple Watch Hermès + Airpods Pro) - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: First try - SE Apple (Apple Watch Hermès + Airpods Pro) (/Thread-First-try-SE-Apple-Apple-Watch-Herm%C3%A8s-Airpods-Pro)

Pages: 1 2 3

First try - SE Apple (Apple Watch Hermès + Airpods Pro) - Exodeen - 12-21-2022

Hello guys,

Let's get straight to the point, Today I am trying to SE 2 items from Apple:
  • Apple Watch Hermès Series 8
  • Apple AirPods Pro (2nd Generation)

Technique: modify the return label so that it is untraceable when it arrives at Apple's warehouse
Delivery service: UPS

First mistake: items that don't arrive at the same time can't be sent back in the same package, if 2 packages get lost it may arouse suspicion but I'll try anyway.

The UPS return label is composed of several:
  • The name and address of the sender: this information must be deleted or replaced by false data
  • Package information (weight etc.): this information must be removed from the label
  • The information relating to the return: often called "RMA", this information must be deleted since it identifies a package
  •  The tracking number: as incredible as it may seem, it must be falsified, UPS does not use it to send the package to the right destination (they use the MaxiCode)
  • URC (UPS Routing Code): this code must not be modified, it allows the package to arrive at the right destination
  • UPS MaxiCode: this code CAN contain ALL the information for the shipment of a package (destination address, tracking number, sender's name, weight of the package etc.) and it is this code that is scanned when you drop it off at UPS. You must read the information contained in this MaxiCode, if it contains your information (name, first name, order number etc.) you must edit it to falsify this information while leaving the shipping information INTACT. Use MaxiCode readers available on the internet (e.g. https://www.dynamsoft.com/barcode-reader/barcode-types/maxicode/ ) The goal is for your package to arrive at its destination without being linked to you. In my case, I did not need to modify the MaxiCode, it only contained the shipping address and the UPS Routing Code

Here is a detail of a label, it is easier with a picture: https://i.imgur.com/vpLuSdl.png

The plan: I will simply send a bubble wrap envelope with advertising (anti-covid that I received from the government), I will wait nicely for the package to arrive at Apple and call them 2 weeks later to ask for a refund, they will check with the tracking number that the package did arrive but they probably lost it, which will trigger a refund.

I'll follow up with you over time.

RE: First try - SE Apple (Apple Watch Hermès + Airpods Pro) - IKINGKI - 12-21-2022

You’ve clearly done your research and have thought about this, props. One thing to note is when doing a refund directly with apple is you MUST NOT turn the devices on as apple is known to check devices during the FTID process. Another notable factor is with apple in particular is they very rarely issue refunds for FTID, much less two in a row.

I wish you luck in this refund. Keep us updated.

RE: First try - SE Apple (Apple Watch Hermès + Airpods Pro) - mothered - 12-22-2022

(12-21-2022, 11:26 PM)IKINGKI Wrote: One thing to note is when doing a refund directly with apple is you MUST NOT turn the devices on as apple is known to check devices
^ This.

In terms of the Apple Watch, they have the capacity to check the activity on the device - whether It's turned on or otherwise.

RE: First try - SE Apple (Apple Watch Hermès + Airpods Pro) - Exodeen - 12-22-2022

indeed, 2 items in a row seems a bit opportunistic

It would seem strange to me that Apple would refuse a refund for a package received that they "lost".

I have never had a failure with this technique, what makes me doubt a little with Apple is that they have more advanced techniques (conservation of all the packages, scan of the maxicod and correlation with the generated label) but it seems to me exaggerated

anyway, we'll know soon
(12-22-2022, 01:01 AM)mothered Wrote:
(12-21-2022, 11:26 PM)IKINGKI Wrote: One thing to note is when doing a refund directly with apple is you MUST NOT turn the devices on as apple is known to check devices
^ This.

In terms of the Apple Watch, they have the capacity to check the activity on the device - whether It's turned on or otherwise.

I will definitely turn on the apple watch, use it a bit and then turn it off when I start the FTID

RE: First try - SE Apple (Apple Watch Hermès + Airpods Pro) - mothered - 12-22-2022

(12-22-2022, 01:03 AM)Exodeen Wrote: I will definitely turn on the apple watch, use it a bit and then turn it off when I start the FTID
In that sense, It won't Impact the claim.

RE: First try - SE Apple (Apple Watch Hermès + Airpods Pro) - mcpvperz - 12-22-2022

(12-22-2022, 01:29 AM)mothered Wrote:
(12-22-2022, 01:03 AM)Exodeen Wrote: I will definitely turn on the apple watch, use it a bit and then turn it off when I start the FTID
In that sense, It won't Impact the claim.
If you're so against FTID then why would this work on Apple? Haven't really researched the method but I understand the basics of it. If it has a shot at working against Apple twice in this case, shouldn't it technically be an okay method to use?

RE: First try - SE Apple (Apple Watch Hermès + Airpods Pro) - mothered - 12-22-2022

(12-22-2022, 01:53 AM)mcpvperz Wrote: If you're so against FTID then why would this work on Apple?
I didn't say the garbage so-called FTID will work.

I'm referring to "turning on the device" during the said timing won't Impact the "claim", not the method.

RE: First try - SE Apple (Apple Watch Hermès + Airpods Pro) - mcpvperz - 12-22-2022

(12-22-2022, 02:14 AM)mothered Wrote:
(12-22-2022, 01:53 AM)mcpvperz Wrote: If you're so against FTID then why would this work on Apple?
I didn't say the garbage so-called FTID will work.

I'm referring to "turning on the device" during the said timing won't Impact the "claim", not the method.
Gotcha, misunderstanding.

RE: First try - SE Apple (Apple Watch Hermès + Airpods Pro) - mothered - 12-22-2022

(12-22-2022, 04:21 AM)mcpvperz Wrote:
(12-22-2022, 02:14 AM)mothered Wrote:
(12-22-2022, 01:53 AM)mcpvperz Wrote: If you're so against FTID then why would this work on Apple?
I didn't say the garbage so-called FTID will work.

I'm referring to "turning on the device" during the said timing won't Impact the "claim", not the method.
Gotcha, misunderstanding.
All good.

RE: First try - SE Apple (Apple Watch Hermès + Airpods Pro) - Jasondaws712 - 12-22-2022

(12-22-2022, 01:01 AM)mothered Wrote:
(12-21-2022, 11:26 PM)IKINGKI Wrote: One thing to note is when doing a refund directly with apple is you MUST NOT turn the devices on as apple is known to check devices
^ This.

In terms of the Apple Watch, they have the capacity to check the activity on the device - whether It's turned on or otherwise.

I'd like to add to this - in no way am I doubting what you're saying and I do agree that you should never use any device before you receive your refund, but I recently EBed an Apple Watch in-store after I'd turned the device on and the SE was still a success, though I assume this was because I was in-store and they didn't have the capabilities to check the device status there and then.