Ask HN: Fake CC that you can give to scammers and they get owned
I was wondering why isn't there an app that generate fake cc numbers that are valid and when scammers use them, it gets traced and instantly gets reported to relevant law authorities. Lets say these existed. Somewhere there's a big CSV of valid-looking but honeypot credit card numbers. When an attacker uses one to sign up for an AWS account to mine crypto, or buys a bunch of things on Amazon to create fake reviews, or tries to use it to load up a Coinbase account, what happens next? Card companies can usually trace when and where a card number got used. Using fake numbers would not make that any easier. Likewise card companies can and do report fraud to the relevant law enforcement authorities. Credit card fraud detection already includes a lot of sophistication. The problem with stopping it and prosecuting offenders comes mainly from the scale of fraud, the relatively low amounts involved, and the cross-border nature of the crime. Many credit card providers, at least in the US, let their customers generate single-purpose or short-term card numbers, for when you don’t trust the merchant, or need to let someone else use your card. If we knew in advance that someone intended to scam us we wouldn’t give them a credit card number at all. How would anyone know when to use a fake number? > Many credit card providers, at least in the US, let their customers generate single-purpose or short-term card numbers, for when you don’t trust the merchant, or need to let someone else use your card. My experience with using short-term card numbers has been validation failure in the webforms where I try to use them. I use them all the time, never had one refused. The web site front end validation can only check the number with the Luhn algorithm — number looks valid. Actual validation and accept/decline gets done by the payment processor. I'm sure you could just use Stripe's test numbers...