+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: My FTID Experience (/Thread-My-FTID-Experience)
My FTID Experience - Charonony - 06-09-2020
I believe FITD is flawed as mothered stated. I will share my experience.
I used option 3 as that one makes the most sense in regards to success
I did a trial just to experiment what would happen, basically using a house I had access to.
SO the pacakge was logged online to be sent to a pizza place. Within two days shipping, it successfully went to where it needed, (not the pizza place, obviously) .
This had me thinking the method worked and was a perfect shot at refunding ANYTHING.
Exactly, one week later I recieve an email from the post office.
They noted the package had a weight discrepancy and that the labels were different.
The email read as this;
"An over payment has been identified for a label on your account and you will be refunded the additional postage paid.
The information entered during label creation differed from the information captured by (shipping company) during the shipping process. "
I figured the weight could be managed for manipulation
BUT the issue seems to be the emailed notice of what was done.
I followed the instructions step by step in the ebook
The pacakge landed but I dont like the fact an email is sent to the label creator.
It makes me wonder when actually implemented on a company, what notice would they receive.
I believe the reason it works is because the tracking number is scanned and gives a confirmation to the company asap. Therefore approving the refund. Though it seems paypal is the better way to go when doing ftid.
I guess my worries come from possible investigation and awareness of the label.
Any tips, suggestions, or experiences you guys had would be appreciated. I would love to hear someone who actually uses this method flawlessly without problem.
THanks.
RE: My FTID Experience - Filament - 06-09-2020
(06-09-2020, 06:11 PM)Charonony Wrote: I believe FITD is flawed as mothered stated. I will share my experience.
I used option 3 as that one makes the most sense in regards to success
I did a trial just to experiment what would happen, basically using a house I had access to.
SO the pacakge was logged online to be sent to a pizza place. Within two days shipping, it successfully went to where it needed, (not the pizza place, obviously) .
This had me thinking the method worked and was a perfect shot at refunding ANYTHING.
Exactly, one week later I recieve an email from the post office.
They noted the package had a weight discrepancy and that the labels were different.
The email read as this;
"An over payment has been identified for a label on your account and you will be refunded the additional postage paid.
The information entered during label creation differed from the information captured by (shipping company) during the shipping process. "
I figured the weight could be managed for manipulation
BUT the issue seems to be the emailed notice of what was done.
I followed the instructions step by step in the ebook
The pacakge landed but I dont like the fact an email is sent to the label creator.
It makes me wonder when actually implemented on a company, what notice would they receive.
I believe the reason it works is because the tracking number is scanned and gives a confirmation to the company asap. Therefore approving the refund. Though it seems paypal is the better way to go when doing ftid.
I guess my worries come from possible investigation and awareness of the label.
Any tips, suggestions, or experiences you guys had would be appreciated. I would love to hear someone who actually uses this method flawlessly without problem.
THanks.
FTID as per Bob's e-book is definitely flawed. Option 3 isn't the best (if I remember which one option 3 is correctly), it's better to send directly to them. I don't think Bob really tested his method much when he wrote the e-book (at least as of v3).
I'm a little confused. To clarify, you had pizza place as the original address, your house as the modified address, and it got delivered to your house?
Can you send the whole email (omitting personal information)?
However, I don't think the weight matters much if the company does not have the package in the first place. However, I can see how this may spur a more in-depth investigation and can cause your card to be charged again if you used FTID to refund.
The SE'er must contact the company and ask for a refund and it will be issued manually. It is not automatically issued when the tracking number gets updated to delivered.
btw, thank you for your post and testing! This is very helpful to learn more about how the internal details work and will help us all become better at SE
RE: My FTID Experience - Charonony - 06-09-2020
The label was filled online .
The original address was the pizza place
The manipulated address was a house
The package went where intended (it workd)
I would rather DM you the email and account information as that is better coveted imo.
Mind you this was a test and not done with a company because I did not want to make a mistake and possibly pay or serve any sort of repercussion.
I figured option 2 would likely fail because the company would keep the mail, regardless of what its contents were. ALso figured they would make note of repetitive packages like such being sent to them (empty, advertisements, etc.) In addition to that, most mail workers find it weird when a senders address is missing.
I think the weight matters because when cross checked they can see online through the carrier at what weight the package was delivered.
Yes, I am glad to be here and share. This is the only forum I've found to openly talk about methods and become better at SE.
RE: My FTID Experience - Filament - 06-09-2020
(06-09-2020, 08:32 PM)Charonony Wrote: The label was filled online .
The original address was the pizza place
The manipulated address was a house
The package went where intended (it workd)
I would rather DM you the email and account information as that is better coveted imo.
Mind you this was a test and not done with a company because I did not want to make a mistake and possibly pay or serve any sort of repercussion.
I figured option 2 would likely fail because the company would keep the mail, regardless of what its contents were. ALso figured they would make note of repetitive packages like such being sent to them (empty, advertisements, etc.) In addition to that, most mail workers find it weird when a senders address is missing.
I think the weight matters because when cross checked they can see online through the carrier at what weight the package was delivered.
Yes, I am glad to be here and share. This is the only forum I've found to openly talk about methods and become better at SE.
"intended" as in the modified address -> house?
Please do DM if you don't mind. I'd love to see.
There isn't a "perfect" method it seems. Option 3 may fail since if the company investigates with the courier, the courier will find that the delivered address was not the correct address.
I think the weight on the tracking number depends on the courier. I only have these data points:
With FedEx, there is no weight mentioned.
With UPS, I think it's the weight encoded within the barcode, but not the weight on the label or the actual package (the weight on tracking is different than the weight on original label or the actual weight).
Of course, all couriers will have the actual weight and package dimensions, though they may not disclose it on their tracking page.
I feel the same way. I really enjoy SL because there are actual discussions, not just reposted/old/obvious methods and everybody saying Thanks!
RE: My FTID Experience - Charonony - 06-09-2020
Yes
and Actually option 3 doesn't give the address for where it was sent.
Instead it shows delivered as being from the original address rather than the manipulated one.
Indeed, I believe carriers have different protocol. I tried USPS. I will try UPS, DHL and Fedex for a testrun as well.
I think clarity would come from an insider who works in all facilities or at least someone who knows enough about tracking labels.
I would assume the method works in action due to refunders using that or something
but my suspicion is still among the possibility of an investigation. Like i mentioned before, although it worked, they sent me an email saying there was a weight discrepancy and label change. (will send as soon as i get home)
Maybe Im just paranoid about mail fraud and getting rebilled
RE: My FTID Experience - Filament - 06-09-2020
(06-09-2020, 09:05 PM)Charonony Wrote: Yes
and Actually option 3 doesn't give the address for where it was sent.
Instead it shows delivered as being from the original address rather than the manipulated one.
Indeed, I believe carriers have different protocol. I tried USPS. I will try UPS, DHL and Fedex for a testrun as well.
I think clarity would come from an insider who works in all facilities or at least someone who knows enough about tracking labels.
I would assume the method works in action due to refunders using that or something
but my suspicion is still among the possibility of an investigation. Like i mentioned before, although it worked, they sent me an email saying there was a weight discrepancy and label change. (will send as soon as i get home)
Maybe Im just paranoid about mail fraud and getting rebilled
It doesn't give the address it was actually sent to, however when an investigation is carried out (possibly dependent on carrier), the driver has a GPS location that shows where it was actually delivered. As well as if the carrier remembers that the address on the label is different from the stop on their route. If the rep doesn't open an investigation, then option 3 will succeed either way.
USPS showed the actual weight of the package on the tracking page?
@mothered knows a lot about the shipping industry. I personally have been messaging employees of the various couriers on reddit and other forums to learn more.
As with all things - balance is best. Don't be overly paranoid, but don't be lazy and make mistakes. Though I'd say being on the more paranoid side is better.
RE: My FTID Experience - Charonony - 06-09-2020
So its probably better to do the method and wait maybe a week or 2 and follow through
@mothered would love if u can input your opinon on the topic
RE: My FTID Experience - mothered - 06-09-2020
(06-09-2020, 06:11 PM)Charonony Wrote: SO the pacakge was logged online to be sent to a pizza place.This method has a significant chance of failure.
the labels were different.
Simply stated, when the tracking number Is cross-checked, It will show as being delivered to a destination other than Its Intended address.
RE: My FTID Experience - Charonony - 06-09-2020
The tracking doesnt state where delivered
Only shows that it is delievered
Thus can be assumed the package was delivered to the original address
I will send u a picture as well .
It worked although an investigation could change the results
RE: My FTID Experience - Filament - 06-09-2020
(06-09-2020, 09:51 PM)Charonony Wrote: The tracking doesnt state where delivered
Only shows that it is delievered
Thus can be assumed the package was delivered to the original address
I will send u a picture as well .
It worked although an investigation could change the results
Correct. It will look successful until an investigation occurs. If you're confident an investigation won't happen, then you're safe.