|
It's probably the same people who almost got Dutchbilling bankrupt. They scammed many webmaster programs and processors.
They seem to have a huge database of creditcards, including full addresses, cv2, etc. For each signup they use different IP addresses/proxies, so each signup they send looks unique.
It took Dutchbilling over 2 months before they noticed that these people send over 50 fake signups a day. As soon as they became aware of the fraud they have refunded every suspicous transaction, probably too late because they are beeing flooded with chargebacks now.
The scammers were using free email addresses from mail.com (you can get free email addresses @ many, many different domains there). They also use some way to send fake traffic with proxies, so the clicks/signup ratio seems normal as well.
The webbrowsers used for the fake signups orignated from Russia and Australia. The addresses for checks and wire information came from countries like russia and israel.
I think they have access to the complete customer databases of some really big card issuers from the US, since many of the fraud signups came from the same card number ranges, and since they have full names and addresses, etc. it's not generated with some hacker program.
I think these people are very smart and when they get cought they will change their tactics and move on to different niches/sponsors/programs/processors so it won't be easy to stop them.
|