Ill-disguised thieves

For some reason, Quora is crammed full of people who want to steal credit card numbers, and none of them are the least bit subtle about it: a typical question might be “I don’t have my card with me. How can I look it up online?” No merchant who expects to pass a security audit ever posts numbers anywhere where they can be found, and people with actual cards seldom leave them at home, so this is obviously some sort of phishing expedition. Members of the answering corps grow increasingly weary of these things, but the crooks aren’t about to let up. In fact:

What are some good sites or apps for generating fake debit/credit card numbers that match major card companies real number patterns so I can test my app?

A whole lot of people need to go to jail for this one: both the questioner, and anyone who’s ever written a generator.


  1. Brian J. »

    20 April 2019 · 9:00 am

    I have one such credit card number generator bookmarked, but it’s been a long time since I had to test a storefront, and the link has gone stale.

    So it could be a legit question. But a better question for Stack Overflow than Quora, I reckon.

  2. McGehee »

    20 April 2019 · 9:12 am

    The only time I wish I could look up a credit card number online is if I’m looking to place an order online and I don’t have my wallet with me. However most sites I order on these days, I have an account with various details saved — securely, one hopes. Some exceptions take Paypal.

    For the rest, I get up off my lazy butt and go get the damn card.

  3. fillyjonk »

    20 April 2019 · 9:24 am

    I take the “get up off my lazy butt…” as the shopping equivalent of “Do you *really* want to eat that, dear?”

  4. CGHill »

    20 April 2019 · 12:18 pm

    If you know the card ranges, plugging them into the Luhn algorithm borders on trivial. (Amex starts with 37 and runs 15 digits; all Visas are 16 digits starting with 4; all Mastercards are 16 digits starting with 51 through 55; Discover starts with 6011 and runs 16 digits.) There are store cards and stuff which use the same checksum method and occupy ranges unused by the big boys.

RSS feed for comments on this post