Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Community Alert 

CertiUpgrades carder (blackhat) - Active seller, uses carding techniques

SCAMMER UID: 5029041 (LINK)

Hi,

Today I logged into Hackforums and looked at the new posts-page. I saw that some guy had posted threads regarding upgrading Disney+ accounts, even if its your personal one. This is very interesting to me since I myself used the Telia/Spotify-exploit so I've had a personal, premium Spotify-account for like 7 years now without paying a cent. So, naturally I found it very interesting if this "concept" also could be applied to video streaming services. Imagine buying some kind of hack for your streaming account and it's free forever, no more getting logged out from a strangers account and generating a new one...

Anyways, I click on the thread and read it and I'm actually prepared to buy, then suddenly... I was cast back to the year 2013. There was a scam right in front of me, a scam so lazy and bad that I could not believe my eyes. The scam worked like this:

1. Create a new account
2. Wait for rep, until then post in Second sellers market
3. After rep, spam the Premium sellers market

It all started in this thread when I made this post: https://hackforums.net/showthread.php?ti...id60830001
(Jun 21, 2021 11:14 AM)Sharky Wrote:  Wtf I was about to buy a year of Disney+, but thanks to your post I saw this:
[Image: aiWRBi1.png]

I'll look elsewhere.

By saying "I'll look elsewhere", "CertiUpgrades" got very eager and said that it is not a scam and I was even offered 12 years of Disney+ for free to prove it was for real. Since I knew that this guy was about to fuck up real bad, I said "Sure", and just waited. Eventually he set me up with a Disney+ account and it had a valid monthly subscription. Nice! However, after looking at the billing history, it is clear that unlike the Spotify/Telia-hack, or YouTube Premium-family exploit, this was not any of the sort. Instead, there was a name of a person, a name of a brand of credit cards and the last 4 digits. So, naturally I thought I had been scammed (or "set up" (?), I did not intend to contribute to carding). Before alerting the roodypoo I saved everything as screenshots and sent them to the administrators using the report-function (reported my own post and attached a link to imgur). Since I kind of got stressed out since people could be making business with this scammer I also posted once in all of his 10 threads, claiming that OP is a carder. Afterwards I feel regret, I should not have claimed that he was a carder. However, it was later proven that he indeed carded the upgrade for my account. Lucky break for me. What I should have wrote in those early stages is that I suspect that he might be a carder. Not that he is one.

I also left him negative rep since scams and carding should not be tolerated here in the marketplace.
[Image: 9wOZo1D.png]
What is funny is that immediately, some kids from "Red Ion" flock to his profile and give him +3's. This obviously connect them (especially Screems) to the freshly created account. I had published proof that he was a scammer but still this shady group chose to promote him. And yeah, that's why I'm sitting here at 2AM with my alarm going off in 3 hours. What is extra funny is that Screams left the same message as I did, less than a minute after I did... Funny coincidences.
[Image: 96lAHpE.png]

... And some more friends from the same shitty group...
[Image: Es9L2sx.png]

Anyways: Since I have my personal Disney+ account right here with a recurring monthly subscription, I felt like I had to do something. Some poor fellow out there is paying $96 a year so some stranger on Hackforums can watch Disney+. What makes it especially serious in my eyes is that it is not a shared account, it is my personal one, only I have access, and a 3rd party person is paying without them knowing.

I did some research and managed to find the girl who owns the card, (99% certainty) but they have not replied. I fully understand if they never reply since my message looked like spam anyways, it was something like "Hey are you blabla, I think you've been hacked, my name is White Knight plz sex me".

I also contacted Disney+ and provided them with my username and the tax invoice ID in order for them to see if this transaction was fraudulent or not. After lika an hour of chatting, the operator confirmed that this is 100% fraudulent.
[Image: juJXxKY.png]


The Scammer!
The following is a picture which displays a conversation between the alleged scammer/CertiUpgrades and myself. You can ignore all messages except for mine there to the right in the middle. I say that he is not from the US, and he confirms that he is not. The thing is that before I even asked this question, I had talked with Disney+ who themselves say that their SOC has traced the transaction to the United States. They also say that they do not offer any kind of API-service nor are they running any promotion right now such as a family membership etc.
[Image: WXf1F77.png]
[Image: IqLSVkq.png]
[Image: 6txCJER.png]
[Image: WK18235.png]


More pictures: https://imgur.com/a/L3SBP3p

This fucking looney sent me 40 convos:
[Image: UDoqq4X.png]

It was very hard to talk with the Disney+ representative, it was obvious that it was a lady and they were not very hitech. That is completely fine though, because we ended with this message. I'll leave it in fullscreen for transparancy reasons, also note the scrollbar please, and the time in the bottom right corner as well as the time in previous screenshots where it shows when I logged in. I've been working with this shit all night and now it's soon 2AM.

I've been scammed before... I think the most I've lost was like, $200 maybe? Nowadays $200 is not as much but back then it was like 80% of the money I had. Anyways, it is very easy to get hacked, and deals like these are attractive, especially when people who aren't shit like Screemy, look intimidating because they have awards etc. Just remember, an award on this website is literally worth jack shit, it's like a fucking wooden shield in OSRS, it doesn't mean anything, it isn't real. Lets say you got a job interview tomorrow, or a date, or a family dinner, or a funeral, or any other scenario: Can you ever say "Yeh, I have this award on HF, kinda cool huh?" and have people be impressed by you? No, none of you scare me, I'm here to have fun, do business, meet friends, discuss. But I will also call out these obvious scammers when I see them and I hope to do it in a better looking way next time (instead of posting in all of his threads like this time).

[Image: psI7xeu.png]


What do I do now Hackforums? Should he be allowed to continue his business on HF (since some of his products seem to be legit, like Spotify), or should he receive a warning/ban? He's been very naughty.
Spoiler (Click to View)
I don't deal on discord
I do not think he "carded" anything, because most likely what he did was use a combo list brute force attack on the login page of disney+ and found real peoples accounts with an active subscription.... Many people on here sell cracked accounts that have active subscriptions.
For the record, I think your PM's between you and Screems should be posted. Screems repped this user because he thought you were being hard on a new member for accidentally breaking a rule. Screems had no knowledge of who this user was, or what his intention on this forum was going to be. Upon seeing the user's sales thread, I told Screems that I get that he was just looking out for a new user, but this is not the hill he wants to take a stand on, as it does certainly look like the user is up to no good.

Poor judgement was made repping a user he didn't know, but he did so thinking he was offsetting bullying, not trying to elevate a scammer's account. It's unfortunate that it had to happen on this user's account and not an account of an actual innocent member.


(Jun 21, 2021 05:35 PM)El Chapo Guzman Wrote:  I do not think he "carded" anything, because most likely what he did was use a combo list brute force attack on the login page of disney+ and found real peoples accounts with an active subscription.... Many people on here sell cracked accounts that have active subscriptions.

He's adding the membership to your personal account, not giving you access to an account. He's also not adding your account to any family plans. He claims it's through a glitch, but it's certainly just carding, as it's next to impossible that this guy is exploiting a glitch across every single major streaming service.
(Jun 21, 2021 05:35 PM)El Chapo Guzman Wrote:  I do not think he "carded" anything, because most likely what he did was use a combo list brute force attack on the login page of disney+ and found real peoples accounts with an active subscription.... Many people on here sell cracked accounts that have active subscriptions.
Please read thread.

(Jun 21, 2021 05:35 PM)SUI-3183372 Wrote:  For the record, I think your PM's between you and Screems should be posted.

Screems repped this user because he thought you were being hard on a new member for accidentally breaking a rule. Screems had no knowledge of who this user was, or what his intention on this forum was going to be. Upon seeing the user's sales thread, I told Screems that I get that he was just looking out for a new user, but this is not the hill he wants to take a stand on, as it does certainly look like the user is up to no good.

Poor judgement was made repping a user he didn't know, but he did so thinking he was offsetting bullying, not trying to elevate a scammer's account. It's unfortunate that it had to happen on this user's account and not an account of an actual innocent member.



He's adding the membership to your personal account, not giving you access to an account. He's also not adding your account to any family plans. He claims it's through a glitch, but it's certainly just carding, as it's next to impossible that this guy is exploiting a glitch across every single major streaming service.

Here are the only conversation I've had with that dude: https://imgur.com/a/CxV4DFy

And no he did not +3 the scammer just because I -3 the scammer.

Also, nobody broke a rule, everyone post has probably posted full retard themselves at one point or another, myself included. This was not a mistake though, you can not have missed that this user created 5 threads in one category and then moved on to create 5 threads in another category (in an hour) after getting +rep. My point has been from the beginning that if you want to offer a service of any kind, then do so, but post one thread for your service. Imagine if 20 people all posted 5 threads each for their service, what a fucking cancerous forum it would have been.
(Jun 21, 2021 05:48 PM)SIM-3749878 Wrote:  And no he did not +3 the scammer just because I -3 the scammer.

That's exactly what he did. There very first message in that image kind of shows his intention pretty clearly: https://i.imgur.com/2o53pA2.png


(Jun 21, 2021 05:48 PM)SIM-3749878 Wrote:  Also, nobody broke a rule, everyone post has probably posted full retard themselves at one point or another, myself included. This was not a mistake though, you can not have missed that this user created 5 threads in one category and then moved on to create 5 threads in another category (in an hour) after getting +rep. My point has been from the beginning that if you want to offer a service of any kind, then do so, but post one thread for your service. Imagine if 20 people all posted 5 threads each for their service, what a fugging cancerous forum it would have been.

I don't disagree with this, the user deserved a warning and any negatives that he received. ScreemS is more sympathetic than I am though, and thought he was helping a new member learn the ropes. He just chose the wrong member to try and help out.
(Jun 21, 2021 06:00 PM)SUI-3183372 Wrote:  That's exactly what he did. There very first message in that image kind of shows his intention pretty clearly: https://i.imgur.com/2o53pA2.png

I don't disagree with this, the user deserved a warning and any negatives that he received. ScreemS is more sympathetic than I am though, and thought he was helping a new member learn the ropes. He just chose the wrong member to try and help out.
We won't agree, the member is not new, so I'll just stop.

Here is complete chat with scammer: https://www.docdroid.net/NgQoKMh/hackfor...268195-pdf
(Jun 21, 2021 05:48 PM)SIM-3749878 Wrote:  Please read thread.


Here are the only conversation I've had with that dude: https://imgur.com/a/CxV4DFy

And no he did not +3 the scammer just because I -3 the scammer.

Also, nobody broke a rule, everyone post has probably posted full retard themselves at one point or another, myself included. This was not a mistake though, you can not have missed that this user created 5 threads in one category and then moved on to create 5 threads in another category (in an hour) after getting +rep. My point has been from the beginning that if you want to offer a service of any kind, then do so, but post one thread for your service. Imagine if 20 people all posted 5 threads each for their service, what a fugging cancerous forum it would have been.

Popularity (what you call reputation) is not required to post in Premium Sellers Section. What is required is an upgraded HF account.
[Image: DE93-ABEA-2-E28-4-F9-D-9-BB6-312-B3328937-E.png]
You're an idiot. I am going to say this only once.

You were being an ass to a new member, he broke a rule which he corrected once I pointed it out to him, the first thing you did was -3 the guy because of it. I +3'd him because you -3'd him. I asked some guys to take a look at the thread because it was funny and they decided to rep him as well.

This was all WAY BEFORE the carding allegations. Please show me the timestamp of me repping him and the time that your first allegation came out because I'll tell you now that I repped him way before that.

Don't use my name or those of people I know in this way again, fucking moron.

I nor anyone I know is affiliated with him.


(Jun 21, 2021 06:06 PM)SIM-3749878 Wrote:  We won't agree, the member is not new, so I'll just stop.

Here is complete chat with scammer: https://www.docdroid.net/NgQoKMh/hackfor...268195-pdf

His account is 16 days old, that's new🤦🤦🤦🤦
[Image: 8ogV22y.gif]
So what proof do you have exactly which shows that these 3 members a promoting the user other than they gave +pop to the user after your neg? Sure, Screems made it clear his +pop is related to your neg, what about Shadow and Charger?

Also, why did you only show these 3 members? Here's a screenshot of all members who +pop that user before you posted this thread:
[Image: 45dcb85b39dea80e65c1bcf1660c7cf4.png]

Are you saying all these members are coordinating some +pop to promote this user in some elaborate scam? cuz i can tell you right now that half these users don't know each other nor do they talk to each other.

Oh btw, pretty sure Charger was never in Red Lions lol

Now this sc:
[Image: aPumQRl.png]
Are you saying the user in question, Screems, Shadow, and Charger are the same person? I would love to see you prove that lmao.
Bleh
(Jun 22, 2021 01:01 PM)flavoral Wrote:  So what proof do you have exactly which shows that these 3 members a promoting the user other than they gave +pop to the user after your neg? Sure, Screems made it clear his +pop is related to your neg, what about Shadow and Charger?

Also, why did you only show these 3 members? Here's a screenshot of all members who +pop that user before you posted this thread:
[Image: 45dcb85b39dea80e65c1bcf1660c7cf4.png]

Are you saying all these members are coordinating some +pop to promote this user in some elaborate scam? cuz i can tell you right now that half these users don't know each other nor do they talk to each other.

Oh btw, pretty sure Charger was never in Red Lions lol

Now this sc:
[Image: aPumQRl.png]
Are you saying the user in question, Screems, Shadow, and Charger are the same person? I would love to see you prove that lmao.
No not at all, sorry, I'm bad at elaborating/explaining and I accept that I look like a fool. The text was written in frustration over this carding incident.

My proof for carding: Disney+ confirmed that the purchase was made from the US (he maybe used VPN for legit purposes, no hard worries here), then they say that they have no API available (which OP claims to have used, some kind of API exploit). They also do not offer any kind of promotion where you can share a subscription with others (where it shows up as a transaction, and a creditcard is added to the account, and there are personal details of a woman in the USA). The seller also claim to not live in the USA. I ended my conversation with Disney+ asking if this 100% is fraud, and they said it was and refunded the transaction. The card belonged to a woman in the US, the same card was not used on any other account. Therefore it was concluded that this is carding, at least 99% in my opinion. I accept if I am wrong but I would need a good explanation how this was accomplished.

However: The seller has done legit deals as well and I am not calling him out for anything (anymore) regarding anything but Disney+.

My proof for people collaborating to boost the user: None, and I didn't claim all of them did. I understand most of his positive rep comes from legit deals. Good! However, after I negged this user (because I was mad that his threads took up 50% of both premium & second seller sections) and one minute afterwards a user from Red Lions +rep him. Good! Then I saw 2 more people from the same group shortly +rep him. Screemy also said that he sent those two to the thread. I'm not mad about it at all and if it seems so then I apologize.

For now, all I am mad about is the carding issue. Am I correct that my "proof" deserves an explanation? I have also contacted the woman the card belonged to but I have not received a reply yet (and it might not be the correct person but I'll keep searching until I find her, very unique name, like 9 results lol and all have social media).

So, in either case, I hope to one day come back with the hard proof which would be a conversatiom with this woman. But, I think we still want to know about this API exploit, explain how I was granted a subscription.


(Jun 21, 2021 06:00 PM)SUI-3183372 Wrote:  ScreemS is more sympathetic than I am though, and thought he was helping a new member learn the ropes. He just chose the wrong member to try and help out.

I hope to one day be able to keep composure and professionalism at its highest like Screemy did. I've become better at it, as you might suspect I used to be an extremely toxic person. There are still some work to be done. In this case I should have contacted the seller and staff. But still, no, my mind halts there. I still feel that I did the right thing about creating a community alert. What if it finally is revealed that he is a carder? Perhaps I could then have impacted the blackhat activity somewhat. If I am wrong, then I've trashed his sales for nothing. If that is the case, if the seller can prove his innocence, how can I make it up to him? Monetary compensation?
(Jun 22, 2021 01:38 PM)SIM-3749878 Wrote:  My proof for people collaborating to boost the user: None, and I didn't claim all of them did. I understand most of his positive rep comes from legit deals. Good! However, after I negged this user (because I was mad that his threads took up 50% of both premium & second seller sections) and one minute afterwards a user from Red Lions +rep him. Good! Then I saw 2 more people from the same group shortly +rep him. Screemy also said that he sent those two to the thread. I'm not mad about it at all and if it seems so then I apologize.

I'm not arguing against the proof regarding the seller carding or not, the screenshots you posted are interested and could be right, I'm mostly on about the popularity cuz you addressed them before even address the carding allegations.

It seems like you've been inactive for the past 3 years. Popularity != Reputation. Reputation was deleted and replaced with canned Popularity in 2018. Poparity is just an esthetic, it's useless. It's all about B-Ratings, that's what's important for marketplace. Each B-Rating is linked with a contract which was used for a deal.
A user could have -1500 popularity right now but have good B-ratings and they won't have issues dealing in marketplace.


Red Lions group was deleted years ago, it's on a crew right now which is using the Userbar cuz some people wanted to wear the Userbar.
Again, Charger was never in Red Lions.

By "Screemy also said that he sent those two to the thread" you mean he sent shadow and charger to the thread so then they +pop the user?
SIM-1729678 did you send Shadow and Charger to the thread?
Bleh
(Jun 22, 2021 01:59 PM)flavoral Wrote:  I'm not arguing against the proof regarding the seller carding or not, the screenshots you posted are interested and could be right, I'm mostly on about the popularity cuz you addressed them before even address the carding allegations.

It seems like you've been inactive for the past 3 years. Popularity != Reputation. Reputation was deleted and replaced with canned Popularity in 2018. Poparity is just an esthetic, it's useless. It's all about B-Ratings, that's what's important for marketplace. Each B-Rating is linked with a contract which was used for a deal.
A user could have -1500 popularity right now but have good B-ratings and they won't have issues dealing in marketplace.


Red Lions group was deleted years ago, it's on a crew right now which is using the Userbar cuz some people wanted to wear the Userbar.
Again, Charger was never in Red Lions.

By "Screemy also said that he sent those two to the thread" you mean he sent shadow and charger to the thread so then they +pop the user?
SIM-1729678 did you send Shadow and Charger to the thread?

No, this is what I am referring to:
(Jun 22, 2021 12:23 AM)SIM-1729678 Wrote:  I +3'd him because you -3'd him. I asked some guys to take a look at the thread because it was funny and they decided to rep him as well.

So I am wrong there too. Screemy didn't send anyone to +rep anyone (even tho +rep is useless and I've already proclaimed in this thread that I am aware of this, asking Screemy why he negged me since its irrelevance today), however Screemy did send "some guys" to look at the thread. And that's OK!
(Jun 22, 2021 01:59 PM)flavoral Wrote:  I'm not arguing against the proof regarding the seller carding or not, the screenshots you posted are interested and could be right, I'm mostly on about the popularity cuz you addressed them before even address the carding allegations.

It seems like you've been inactive for the past 3 years. Popularity != Reputation. Reputation was deleted and replaced with canned Popularity in 2018. Poparity is just an esthetic, it's useless. It's all about B-Ratings, that's what's important for marketplace. Each B-Rating is linked with a contract which was used for a deal.
A user could have -1500 popularity right now but have good B-ratings and they won't have issues dealing in marketplace.


Red Lions group was deleted years ago, it's on a crew right now which is using the Userbar cuz some people wanted to wear the Userbar.
Again, Charger was never in Red Lions.

By "Screemy also said that he sent those two to the thread" you mean he sent shadow and charger to the thread so then they +pop the user?
SIM-1729678 did you send Shadow and Charger to the thread?

Like I said before; "You were being an ass to a new member, he broke a rule which he corrected once I pointed it out to him, the first thing you did was -3 the guy because of it. I +3'd him because you -3'd him. I asked some guys to take a look at the thread because it was funny and they decided to rep him as well."

'some guys' is me posting it in a group Discord.
I never spoke to Charger, nor is he in that Discord.
[Image: 8ogV22y.gif]
(Jun 22, 2021 02:16 PM)SIM-1729678 Wrote:  Like I said before; "You were being an ass to a new member, he broke a rule which he corrected once I pointed it out to him, the first thing you did was -3 the guy because of it. I +3'd him because you -3'd him. I asked some guys to take a look at the thread because it was funny and they decided to rep him as well."

'some guys' is me posting it in a group Discord.
I never spoke to Charger, nor is he in that Discord.

Thank you for quickly providing this info. I am sorry for acting toxic to you.


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Community Alert] by RewardsJul 27, 2019 03:13 PM 1 211 Jul 27, 2019 03:13 PM
Last Post: Rewards
[Advice Needed] by POLY MATHMar 27, 2019 06:33 AM 2 195 Mar 27, 2019 06:33 AM
Last Post: POLY MATH
[Community Alert] by PronouncerNov 16, 2018 07:37 PM 7 736 Nov 16, 2018 07:37 PM
Last Post: Pronouncer