Sinisterly
Wayfair - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Wayfair (/Thread-Wayfair--176839)



Wayfair - coreymcalinson - 12-26-2022

Okay - So with wayfair its fairly easy, order - damage - upload corrupt file, myself I have done orders for about 180 with the intention to ship directly to buyers. after doing a test order I attempted to do customer order but it was cancelled immediately due to a discrepancy with the billing address. only way possible would be to A. either do it in states as I believe there are some VCC's (mysudo) that allows you to choose billing address (so can match buyer) or change the billing address on your account(something I don't want to do) any other options?

to add to this I used starling card to do transaction as most details can be incorrect on payment but as long as you verify in app payment should sail through - unfortunately this didn't work with wayfair. however it does work with 9/10 sites I have done


RE: Wayfair - mothered - 12-26-2022

Quote: I attempted to do customer order but it was cancelled immediately due to a discrepancy with the billing address.
It's a security measure to protect transactions.

It happens with almost every company that operate on a large scale.


RE: Wayfair - coreymcalinson - 12-26-2022

(12-26-2022, 10:29 AM)mothered Wrote:
Quote: I attempted to do customer order but it was cancelled immediately due to a discrepancy with the billing address.
It's a security measure to protect transactions.

It happens with almost every company that operate on a large scale.

I manage to bypass it a lot of the time(next, moss bros, Adidas my protein even meta(currently trying to SE)) with either verifying in app or using Apple Pay - albeit I use monzo/starling as they ask me to verify in app to make sure its me, soon as I confirm order is placed successfully regardless of using the shipping as the billing


RE: Wayfair - mothered - 12-26-2022

(12-26-2022, 10:35 AM)coreymcalinson Wrote: I manage to bypass it a lot of the time(next, moss bros, Adidas my protein even meta(currently trying to SE)) with either verifying in app or using Apple Pay - albeit I use monzo/starling  as they ask me to verify in app to make sure its me, soon as I confirm order is placed successfully regardless of using the shipping as the billing
Very well planned and executed.


RE: Wayfair - sinisterlee - 12-28-2022

Are those one time disposable vccs? Despite putting the billing and shipping address as the same, they were able to identify that your registered details on the vcc are different?

When you say it was cancelled due to having a different billing address, did they tell you that or you are guessing that is the reason?


RE: Wayfair - coreymcalinson - 12-28-2022

(12-28-2022, 09:05 AM)sinisterlee Wrote: Are those one time disposable vccs? Despite putting the billing and shipping address as the same, they were able to identify that your registered details on the vcc are different?

When you say it was cancelled due to having a different billing address, did they tell you that or you are guessing that is the reason?

hey, so they're disposable vcc(through starling bank), can get 5 a week, and the billing for the vcc is the same as the master account if that makes sense, and also I called them querying the cancelled order and they said discrepancies with the billing info


RE: Wayfair - sinisterlee - 12-28-2022

(12-28-2022, 09:44 PM)coreymcalinson Wrote:
(12-28-2022, 09:05 AM)sinisterlee Wrote: Are those one time disposable vccs? Despite putting the billing and shipping address as the same, they were able to identify that your registered details on the vcc are different?

When you say it was cancelled due to having a different billing address, did they tell you that or you are guessing that is the reason?

hey, so they're disposable vcc(through starling bank),  can get 5 a week, and the billing for the vcc is the same as the master account if that makes sense, and also I called them querying the cancelled order and they said discrepancies with the billing info


makes sense but you found that if you approve in the app, you are able to bypass the websites security and get the order through anyway.
Scary though that they can see the real card holder if you are using fake info for the order.


RE: Wayfair - coreymcalinson - 12-28-2022

(12-28-2022, 10:08 PM)sinisterlee Wrote:
(12-28-2022, 09:44 PM)coreymcalinson Wrote:
(12-28-2022, 09:05 AM)sinisterlee Wrote: Are those one time disposable vccs? Despite putting the billing and shipping address as the same, they were able to identify that your registered details on the vcc are different?

When you say it was cancelled due to having a different billing address, did they tell you that or you are guessing that is the reason?

hey, so they're disposable vcc(through starling bank),  can get 5 a week, and the billing for the vcc is the same as the master account if that makes sense, and also I called them querying the cancelled order and they said discrepancies with the billing info


makes sense but you found that if you approve in the app, you are able to bypass the websites security and get the order through anyway.
Scary though that they can see the real card holder if you are using fake info for the order.

yes the bypass is a big life saver - ill also add that using Apple Pay allows you to bypass a lot of sites security - and yes true about it being scary they still know that its not the correct deets. to confirm this 100% I'm going to attempt on a new dev and using data - if it still doesn't work then its 100% they know wrong deets are being use but so far 2/2 attempts with incorrect bill/ship even with verification have cancelled


RE: Wayfair - 8y5tui4o - 08-12-2023

(12-28-2022, 11:35 PM)coreymcalinson Wrote:
(12-28-2022, 10:08 PM)sinisterlee Wrote:
(12-28-2022, 09:44 PM)coreymcalinson Wrote: hey, so they're disposable vcc(through starling bank),  can get 5 a week, and the billing for the vcc is the same as the master account if that makes sense, and also I called them querying the cancelled order and they said discrepancies with the billing info


makes sense but you found that if you approve in the app, you are able to bypass the websites security and get the order through anyway.
Scary though that they can see the real card holder if you are using fake info for the order.

yes the bypass is a big life saver - ill also add that using Apple Pay allows you to bypass a lot of sites security - and yes true about it being scary they still know that its not the correct deets. to confirm this 100% I'm going to attempt on a new dev and using data - if it still doesn't work then its 100% they know wrong deets are being use but so far 2/2 attempts with incorrect bill/ship even with verification have cancelled

Were you able to place an order in the end? The same thing happened to me even if I used different apartment numbers, devices and VCCs.


RE: Wayfair - KingDead - 08-13-2023

Lately I noticed it doesn't matter if I use a fake name and jigged billing and shipping on my credit cards and they go right through. Also never even have to sign in store anymore.

Would have made life much easier back in my carding days.