-
Carding refers to the trafficking and unauthorized use of credit card information for fraudulent purposes.
-
The dark web has enabled the growth of underground marketplaces like Feshop that specialize in stolen financial data.
-
feshop (also known as Fe-acc18, “Ferum Shop”) was one of the largest and longest-running carding marketplaces before it was seized.
2. What Was Feshop?
-
Launched: Around 2013.
-
Specialty: Selling stolen credit card data (CC dumps and fullz – full identity profiles).
-
Users: Primarily cybercriminals engaging in card fraud, identity theft, and money laundering.
-
Reach: Global, though many victims were in the U.S. and Europe.
3. How Feshop Worked
-
Anonymity: Used Tor and cryptocurrencies (mainly Bitcoin) for transactions.
-
Inventory: Vendors posted stolen credit card data, often categorized by country, card type, and issuing bank.
-
Reputation system: Buyers rated sellers based on validity of data, encouraging a thriving criminal marketplace.
-
Prices: Typically ranged from $5 to $100 per card, depending on quality and completeness of the data.
4. Techniques Used for Carding
-
Data Breaches: Attackers harvested data via hacking retailers, banks, or payment processors.
-
Phishing & Malware: Common tools to collect login credentials and credit card numbers.
-
Skimming Devices: Used on ATMs or POS systems to capture card data.
-
Credential Stuffing: Using leaked usernames/passwords to access payment platforms.
5. Law Enforcement and Takedown
-
In January 2022, the U.S. Department of Justice (DOJ), in cooperation with international law enforcement, seized the Feshop domain and took it offline.
-
The takedown was part of Operation Carding Action 2022, which targeted multiple illegal online shops.
-
Seizure banner read: “This website has been seized…”, a hallmark of coordinated law enforcement action.
6. Impacts and Implications
-
Financial Damage: Tens of millions of dollars in losses for individuals, businesses, and banks.
-
Market Disruption: Temporary disruption in the dark web carding ecosystem.
-
Cybersecurity Awareness: Highlighted the importance of data protection, encryption, and fraud detection technologies.
-
Resilience: New carding sites emerged, showing the persistent nature of cybercrime.
7. Conclusion
-
Feshop illustrates the sophisticated nature of modern cybercrime and the challenges of policing the dark web.
-
While law enforcement can disrupt operations, continuous innovations in security and international cooperation are essential to combat digital fraud effectively.