+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Can a merchant get informations about the account linked to your virtual card ? (/Thread-Can-a-merchant-get-informations-about-the-account-linked-to-your-virtual-card)
Can a merchant get informations about the account linked to your virtual card ? - docksd9 - 12-25-2022
Let's say I run the sealed box method on a merchant. I pay with a virtual card from a Revolut account (for example) opened to my name. However, the name I use for the order is a fake name and I use a drop house.
The refund runs smoothly. A few weeks later, they figure it out.
My questions are:
- If I deleted the virtual card from Revolut, is there any way for them to try a chargeback ?
- They have the number of the virtual card I used: is there any way for the merchant to figure out the name linked to the account that emitted the card ?
Thank you
RE: Can a merchant get informations about the account linked to your virtual card ? - ruonis55 - 12-25-2022
By deleting your vcc, you should not be charged, but I would not use it as the main bank and keep the funds at it. The second question at sometime I asked my friend, because he also does SE, he told me, how many persons with the same name and surname there are in the world, they can't just say that person with the same name and surname every time does these things. I'm not even talking that doing refunds use different emails, IP's , password and etc.
RE: Can a merchant get informations about the account linked to your virtual card ? - Exodeen - 12-25-2022
First question: no chargeback possible
Second question: absolutely, when you pay with a credit card, the merchant has access to all this information: last name, first name, full address, phone number linked to the bank account as well as all the information that it will have taken care to record: IP address, device used, browser, screen resolution, cookies etc.
if you want to use a VCC, regularly change the billing address, phone number and use a VPN, on the other hand all these measures can panic the anti-fraud detections of payment methods and block the payment
(12-25-2022, 09:08 PM)ruonis55 Wrote: By deleting your vcc, you should not be charged, but I would not use it as the main bank and keep the funds at it. The second question at sometime I asked my friend, because he also does SE, he told me, how many persons with the same name and surname there are in the world, they can't just say that person with the same name and surname every time does these things. I'm not even talking that doing refunds use different emails, IP's , password and etc.
they are not based on that, just a correlation between the name + first name + postal code used for delivery
even the IP address is not always used to identify someone
RE: Can a merchant get informations about the account linked to your virtual card ? - docksd9 - 12-27-2022
Of course the merchant has access to informations like IP address, but does it really get access to informations like the name and number linked to the card ? That's very surprising.
Usually merchants use a payment service (like Stripe for example), I dont think they even store anything about the card. I dont see how they would get informations about the account, do you have more informations on this ?
RE: Can a merchant get informations about the account linked to your virtual - vard - 12-27-2022
I work for a large E commerce company. We do not have access to that information. We only see the billing address that you provide. If it does not match, it will result in an AVS error. We rely on the customer to provide the correct address.