cracked.io/Evil-Corporation
MANAGED PAYMENTS
STEALTH MASTERS
GUIDE
cracked.io/Evil-Corporation
01
cracked.io/Evil-Corporation
BEFORE YOU START READING
First of all we wanted to truly thank you for placing your order! Means a lot to us.
Good news are - this book is exactly as advertised. It will keep its promise of providing all the knowledge you need to create multiple eBay stealth accounts.
This guide is written using a very simple conversational English, making it easy for anyone to understand and learn the secrets of stealth accounts. Some technical details are explained just to provide you
a general understanding and we encourage you to check the free resources on the web (reddit, forums,
blogs) to gain some deeper insights if there's something you want to dig deeper in.
After reading this ebook, you'll be able to connect all the dots completely and understand what is
needed to create accounts successfully, legally and at scale.
cracked.io/Evil-Corporation
02
cracked.io/Evil-Corporation
OUR STORY (short version)
We are a team of e-commerce and operational security specialists, managing 160+ our own eBay
stores at this moment and been doing that consistently for the past 2+ years. eBay isn't the only venue
we currently sell in, but this marketplace alone grosses between 3 and 4 million dollars of revenue for
our company every year. We sell a high variety of items, starting with clothing, ending with craft supplies, digital items, pet products and custom home decor accessories.
Similarly like you, we were selling items and at some point got suspended without any proper explanation. Back in 2020 before managed payments was rolled-out, selling on eBay was our main source of
income, and we could not afford firing our employees, cancelling office and warehouse and get into
debt with our suppliers. We took a fight and decided to figure out a way to continue selling and were
successful in winning it. Instead of selling on just a one account, we now do that with 160+ and whenever account gets suspended - we make new ones.
Suspensions are a very common thing nowadays. Accounts can be shut down completely by mistake
and never reinstated back. Ask yourself: who they are to prevent you from selling and profiting from
your hard work? You are the one to dictate the rules there, not some marketplace algorithm and bots
suspending accounts without even looking at them and impacting thousands of sellers, their employees and their families worldwide.
You might be selling high risk items, and that's up to you completely. No matter what you sell, in the
end of the day you are putting your work, efforts, time, taking risks, paying suppliers and possibly
employees. The algorithm will not decide whether you can continue selling on eBay and profit from
your work. You will learn how to make new stealth accounts and will continue on.
Dealing with thousands of suspended accounts in the past, we've seen it all.
There are secrets that marketplace security algorithms use against your stealth accounts to figure out
what's going on. And we will teach you how this algorithm works and how you can master it to your
advantage.
cracked.io/Evil-Corporation
03
cracked.io/Evil-Corporation
LET'S BEGIN.
What is needed to successfully create
stealth account?
Summary of all aspects you need to create your new stealth account
a)
b)
c)
d)
e)
f)
g)
New identity
Operational setup (how to configure your laptop, what plugins, extensions and software to
use, how to make sure you can operate multiple accounts on one laptop).
Correct IP solution
New or altered listings (photos, titles, etc)
New phone number
New bank account
New credit card
Understanding eBay's security algorithm
eBay marketplace has specific internal security measures, assigning risk and fraud scores to each of the
newly created account. There are certain things in your account creation methods, information used,
account patterns that will make or break your attempts to create a stealth account. By making sure you
tick all the boxes, you maximize your account creation success which can reach up to 30-40% success
rate once implemented correctly. Without knowing and implementing these aspects, your chances are
close to 0 in 2022, or having 1 out of 100 attempts to survive on a good day.
cracked.io/Evil-Corporation
04
cracked.io/Evil-Corporation
What eBay bots are looking for:
01
Where is the IP of this user coming from? Who is the internet provider? Is it a VPN? A proxy? A
02
What is the country of account? Is it from one of high-risk countries? - Score is assigned based
03
Browser fingerprints. What are the languages, timezone, browser, operating system? Is it con-
04
First item which is uploaded. Is it unique or taken from google? Is it made with photoshop or
residential proxy? A mobile hotstpot? - Score is assigned based on the answers
on the answers
sistent with the account information? - Score is assigned based on the answers
a real picture taken by device? Is it VERO or handmade?- Score is assigned based on the
answers
05
What phone number is used: Is it online VOIP number or a number coming from a real sim
06
Credit card used. Where is it based from? What is the issuing bank? Is it credit/debit? Prepaid
07
Bank number used. Is it a real bank number? Is in virtual bank account? Is it coming from risky
card? - Score is assigned based on the answers
or not prepaid? Is it a gift card?
low tier banks?
Good news is that all of these aspects can be obtained legally, safely and without any hassle.
You will learn what are the options of getting new identity, how to setup your laptop for multiple
accounts, how to make sure your listings are edited correctly to avoid linking between accounts, what
phone numbers you can use, how to get multiple bank accounts legally and how to use virtual credit
cards which are accepted.
cracked.io/Evil-Corporation
05
cracked.io/Evil-Corporation
Getting new identity
There are different options depending on the country of your eBay account you want to create. Since
there are operational differences between countries and regions, we will breakdown each country and
region separately.
For US
For European Union/Euro currency zone countries
For UK
For Canada/Australia
The rest of the world countries where direct enrollment in MP is not available (non
EU countries)
Firstly, lets lay out some principles of creating new eBay accounts.
01. You can create multiple accounts under the same identity, even if you had suspended
accounts under the same identity in the past.
We can confidently state that it is currently working as of 2022 and we run multiple eBay accounts under
the same names as previously suspended ones. It does not mean that you simply sign out of the previously suspended account and start creating new one on top with only changing the email. You'll need
to create new operational environment for each of the account, obtain new phone number, bank
account, create new email, get new IP and use random address around your IP location instead of real
one this time. The only details that remain the same are: Name, Surname, Date of Birth, last 4 numbers
of your SSN (in case you are in US).
To conclude, this is a list of aspects you need to change/obtain new ones when creating new eBay
account under the same name:
1). Email
2). IP
3). Phone number
4). Bank account
5). Fresh operational environment (cookies, history, browser fingerprint)
6). New or similar address to the previously used one
cracked.io/Evil-Corporation
06
cracked.io/Evil-Corporation
These details must remain the same as they will be used to verify your identity:
1). First name + Last name
2). Date of birth
3). Last 4 numbers of your SSN (for US)
02. You can enable international shipping and have your listings visible on other Ebay sites.
Meaning is your account is created within ebay.co.uk domain you can enable international shipping
and sell on ebay.com as well.
03. You have 2 options: You can register under personal account or business account when
you start.
cracked.io/Evil-Corporation
07
cracked.io/Evil-Corporation
Based on some feedback from our clients, other stealth account makers and our experience there
might be a slight advantage by choosing to create business account from the get go.
The process is different compared to opting in as personal account:
Choosing to operate as "personal account" will require to list first listing but will not require to add your
bank account and verify it during registration.
Regardless of the option chosen, you still need to input identity details, phone number and address.
Going on, we will expand on the different account creation methods for different countries and
regions.
cracked.io/Evil-Corporation
08
cracked.io/Evil-Corporation
Getting IDENTITY for new accounts
a) For US
Starting 2022, once accounts reach $600 sales threshold, tax requirements apply and you will be
requested to enter either your FULL SSN or EIN number. We do not suggest obtaining SSN data from
darknet marketplaces, as from 2022 IRS monitors taxes of online sellers more strictly, sending 1099-K
tax forms for the ones crossing $600 revenue mark (compared to $20,000 until then). Meaning with
stolen identity, there is a real person behind who will receive the tax form.
But there are ways around that.
How to get new identity information for
US eBay account?
Option 1: You need to ask a permission/consent of the person you are in touch with to use his details
for opening an account initially.
Option 2: As explained in the paragraph above (darknet), but we do not recommend this option.
Option 3: Re-using your own SSN number (last 4 number of it) during account sign up and adding
EIN info when the 1099-K form needs to be filled.
Option 4: Stealth method. Going with random (made up) identity information (name, surname, SSN,
address) and uploading your identity documents to confirm identity during
registration. Put your real EIN info once tax threshold reaches, since made up full SSN seems to be
rejected later on even if submitting the required documents.
cracked.io/Evil-Corporation
09
cracked.io/Evil-Corporation
Stealth method still works in 2022, but with noticeably decreased account survival rates. You can expect
around 1/10 of accounts to survive this way. On a larger scale it can be around 5-15 survived accounts
out of 100 made. Since made-up information does not match to any real records once Adyen crosschecks it, your account is assigned with a higher risk score. You are then required to upload verification
documents (passport/id/license + utility bill/bank statement). Then it comes down to luck and how
close to reality your profile actually is. Do not expect extremely random names to pass like: Donald
Duck or Tony Montana. Try to get creative and think of a way to create your identity profile as realistic
as possible.
With "creative" and made up identity information you are minimizing your account creation costs only
to your time and approximately $1 for SMS verification for each account attempt.
In general account verification works this way:
Ebay requires date of birth, SSN, address and all of these details are crosschecked with internal US
records via Adyen's payment processor API system. The details must match during registration for highest account survival scores. Names, DOB and SSN must match 100%, address can be altered or
changed completely to a new one close to your IP address.
After successfully creating your account and
getting first sales your options are the following:
If you opted in with Option1: You can pay taxes on their behalf (considering there is mutual consent) or add your EIN info obtained from forming an LLC.
If you opted in with Option2: The risk of using someone's else full SSN are explained. You can
also add your EIN info obtained from forming an LLC.
cracked.io/Evil-Corporation
10
cracked.io/Evil-Corporation
If you opted in with Option3: The SAFEST option is to add your EIN info obtained from forming
an LLC. In that way your accounts are diversified as much as possible from the previously suspended or
currently active ones. They are more likely to be treated as separate entities (considering all other operational procedures are followed). The RISKY option is to add your own full SSN. In this scenario it’s possible that eBay will link your account with previously suspended ones. We have reports of people successfully doing this with 10 or 20 accounts. But there is always an additional risk factor of cascade of
suspensions if eBay decides to look deeper into what’s going on or do some designated internal investigation. In 2022 it seems you can still sell with your own SSN on multiple accounts considering you
don't get under the radar.
If you opted in with Option 4: Similarly like with Option3 you can add your full SSN (change
name, surname and DOB on the account as well). You can also add your EIN info obtained from forming an LLC.
Bonus:
LLC and EIN: How it works?
LLC can be opened easily online and it will provide you with an EIN number. Upon submitting info for
the 1099-K form you will be asked to submit your LLC name, EIN code and in some instances company
registration code.
Why it works? During information validation process, eBay sends automatic request to IRS to match
the EIN information with taxpayers name which is LLC name in your case. As both of them are fully legit
and with matching details - it passes. The director, owner or shareholder is not being checked, only the
EIN and LLC names. This is your way to having a multiple accounts in a legal way.
cracked.io/Evil-Corporation
11
cracked.io/Evil-Corporation
b) For European Union/UK countries
This zone is less complicated than the US, since there is no $600 sales threshold after which taxes must
be reported and collected automatically. Therefore it opens some more options to operate your
account.
Option1: Getting confirmation to use your close friends/relatives information.
For option 1 you will need:
1). Their agreement/consent
2). Their exact date of birth
3). Their exact address
4). Depending on the country, their personal code (most EU countries do not require that)
Option2: Using made up information to open your account (stealth method)
In the EU you have an option to use a legal way to create a stealth account using non-existent personal
details. Does it still work on 2022? Short answer is - Yes it does. And it will until verification algorithm will
not change.
Why it still works?
After account information is submitted, Adyen and other 3rd party non-disclosed operators aggregate
account data and crosscheck it with different both internal and public records of that country, such as:
Credit reports
Tax authorities
Public databases
Social profiles
cracked.io/Evil-Corporation
12
cracked.io/Evil-Corporation
When using non-existent details for the account, you will get an error in most cases that there was a
trouble verifying that information and you will be requested to submit additional identity documents:
passport/id/license + utility bill/bank statement.
Because of European user data privacy laws, different country legal systems, credit check restrictions
and the fact that its a union of different countries - eBay algorithm can never 100% be sure whether the
details are correct or not, and will have a room for error and mismatches. The less digitalized the country is - the more chances to pass the verification.
Your best options can be:
Italy
France
Spain
Portugal
Poland
Croatia
c) For UK accounts
There is a similar option as for European based accounts (Option 1 and Option 2). There is also
an Option 3.
Option 3.
Disclaimer: We do not recommend doing this, just explaining the possible options.
You can search the public databases for company directors like companies house webpage or any similar information and try to recreate the account details using the publicly available information. You will
still need to produce the identity document for verification but it can help you to create a more realistic
profile of your seller account.
cracked.io/Evil-Corporation
13
cracked.io/Evil-Corporation
d) For Canadian/Australian based accounts
Follow the same procedures as explained in UK/EU section.
e) For all other countries
eBay sellers living or established outside of the United States, Canada, Australia, United Kingdom, or
the European Economic Area (except Iceland) need a Payoneer account to receive funds from Managed Payments.
The 30 EEA countries (EEA stands for European Economic Are) are: The 27 EU member states +
Iceland, Liechtenstein and Norway.
Meaning that if you want to create an account from the country outside this list - you will be required to
sync your Payoneer account during registration process.
There are 2 options this can be done:
1) You already have an existing Payoneer account and will sync it during registration
cracked.io/Evil-Corporation
14
cracked.io/Evil-Corporation
cracked.io/Evil-Corporation
15
cracked.io/Evil-Corporation
This is a very solid option for all sellers, regardless of your country. Payoneer is still one of the platforms
that accepts "made up" stealth information details and documents for account creation, meaning you
can verify your eBay account using stealth Payoneer.
Also you will not need to explore other options how to get EU/GBP/USD bank accounts for your eBay
accounts, as payments will be made directly to your Payoneer account.
Can I use the same Payoneer for multiple different eBay accounts? (eBay + Payoneer direct sync
method)
From what we currently see - no, you can't. After your Payoneer account is connected to eBay, your
Payoneer's account information is directly pulled-up (name, surname, address, and unique Payoneer
account number). Meaning it will simply not pass since the details will mismatch or you will get linked
with your previous account.
cracked.io/Evil-Corporation
16
cracked.io/Evil-Corporation
You can, however, proceed with creating multiple Payoneer stealth accounts and connecting them with
new eBay accounts.
Lastly, this sign-up process for countries outside of Managed Payments list also requires adding credit/debit card to cover seller fees upfront. But good thing is we have covered that part as well in our later
chapters so you will fully understand what credit cards you need to use and where to obtain them.
Hope this identity chapter fully covered all options and aspects how to create new eBay accounts.
Producing documents for Stealth accounts
This chapter will cover everything you need to know about producing your identity documents.
First of all, you don't need to be a photoshop guru to succeed in this area and produce the documents
that will get accepted. Secondly, "creative" documents are still accepted by marketplace algorithms (if
done correctly). It is still a very effective method to verify accounts where only the scanned/photo
versions of documents are accepted. The good news is - that's still how most of the marketplaces verify
their seller accounts.
Becoming a master of stealth documents consists of these elements:
1)
For starters - Adobe Photoshop software
2)
The right templates
3)
The data which you put on the documents
4)
Altering the document's metadata to make it look legit
We will not go into details about downloading Adobe Photoshop; that process is self-explanatory (just
get the torrent), but instead talk about the right templates.
The right templates
1) To make creative passports, ID cards, licenses, utility bills, statements, etc. - you need the right templates for that. By templates, we mean .psd files that you can easily alter and put the data you want to.
cracked.io/Evil-Corporation
17
cracked.io/Evil-Corporation
One of the leading websites to download these templates (can be paid via BTC for anonymity) is:
https://gotempl.com
There you will find a vast majority of country passport templates, bills, bank statements, literally everything you might need to produce accounts. You can also search in google for PSD passport templates
will and find dozens of sites selling them.
2) Second important part of the templates are: layers. You do not want your passport scan to appear
without the background or in plain white. You want it to look as realistic as possible, same as with real
scanned documents: there are areas which are more dark than others, areas with glare, small dirt, etc.
The templates you use must have the background effects of a scan. You can always ask for the template
seller whether that's included into .psd file (usually they do include that, as additional PSD layers). Or
you can download them separately from other sources.
The data which you put on the documents
1) For the identity documents the numbers, codes, etc. is the set of data called MRZ (machine readable
zone) data. For example, passport numbers have a certain sequence and length - therefore you can't
just put random numbers into it. Now that you know how this set of data (MRZ) is called, you can find
online sources to generate what you need for the documents. For example if you want to produce UK
passport, this is the source that will help you to generate the right MRZ: https://emvlab.org/mrz/
2) Secondly, there is name, surname, DOB. As always, you want your stealth profile to look as realistic
as possible, therefore you don't want to name your stealth identity as Donald Duck or similar. In the past
chapter, we've explained your options to obtain this data, so we're confident that you will get some
ideas what to do in this case.
Altering document's metadata to make it look legit
1) Exporting your document from .PSD to PDF straightforwardly will leave photoshop fingerprints all
over the file and your documents will be easily detected as fake. If you check Properties/Get info section
of your file after exporting it from .PSD to PDF you'll notice that the "content creator" section of the file
is Adobe Photoshop. That's the immediate red flag which will tell the algorithm that this document is
fake. And that's the last thing you want if your goal is to succeed.
cracked.io/Evil-Corporation
18
cracked.io/Evil-Corporation
What you need to do is alter the EXIF data on your file. Real, scanned documents will never have their
metadata associated with Adobe Photoshop, but with a printer it was scanned with. Its specific color
profile, device code, device name, etc. Using this tool you can alter all of these aspects in your files after
finishing the photoshop part.
One of the tools you can use: https://exiftool.org
2) With correctly applying EXIF data to your files, you will ensure that your metadata looks legit and
coming as a real scan or photo.
3) When making the statements, utility bills, etc - it's possible to skip this step. Simply PRINT&SCAN
your new creative document and it will get its EXIF data naturally and will look more real as well.
Producing supplier invoices
Good news are that this part is easier than you probably thought. Those are the main principles you
need to go with while producing your supplier invoices.
1) Never pick the brand owner himself as your supplier. If you are selling Nike shoes, do not pick Nike
company as your supplier. If you are selling Microsoft digital products do not pick Microsoft as your
supplier. That's not the way it works in reality and may bring suspicion by PayPal reps. Big brands use
authorized distributors/manufacturers who are responsible for dealing with 3rd party retailers/re-sellers like you.
The way to look for correct supplier is by searching who is re-selling that brand. If you are selling Gucci
T-shirt, your possible supplier can be: https://www.brandsdistribution.com or www.farfetch.com (this
one is a retailer, but it will work with PayPal since they do not have a strict invoice verification procedure,
would not work with Amazon in most cases). Do not use very small and unprofessionally looking websites.
You can look at the brand's website and find its approved distributors, for example: https://devicepartner.microsoft.com/en-US/connect/distributor
cracked.io/Evil-Corporation
19
cracked.io/Evil-Corporation
2) Now that you have an understanding what supplier should be picked for you invoice and know how
to find ones, it comes to making the invoice itself. One of the easiest and quickest ways are finding
online invoice generator, put all the suppliers info (address, logo, phone, etc), put all the items on it (its
best to make them exactly the same as they are on Paypal transactions), come up with logical invoice
number, price, tax. Making it look as legit as possible. And that's it! PayPal will not go an extra mile to
verify the invoice and only will look how it appears on screen.
https://invoice-generator.com - its one of the best and beginner friendly online tools to produce your
invoices. Make sure to add all the info correctly, do not forget to put the logo to make it appear more
legit, add your info in a same way it appears on PayPal, do some extra touches if you want by adding
something on notes/terms field (like "delivery after invoice is paid in full", etc.)
3) In a same way as with utility bills/bank statements - be sure to print and scan your invoice to avoid all
risky EXIF data elements (like the ones showing that invoice was generated via online tool).
This is literally everything you need to know about producing documents. If you master these variables
in your document making process - it's all you need to start making stealth accounts nonstop.
This tutorial is not a step-by-step guide to make your stealth documents. One of the reasons - it's against
the forum's guidelines to engage in fake documents and similar things from this area. All you need is a
day or two of practicing and getting to know the subtle aspects of Photoshop and you will be able to
make anything you need in your sleep. With this chapter, we've saved you a tens of hours (at least) by
giving you all the variables and specifics you need to be aware of. You'll find it easily when you know
exactly what to search for.
cracked.io/Evil-Corporation
20
cracked.io/Evil-Corporation
Operational setup
There are different ways how you can manage your multiple existing stealth accounts and create new
ones. We will explain the core main aspects of operational setup, what marketplaces actually track and
look for and how you can alter that to your advantage.
To sum up, these are your options to manage multiple stealth accounts or create new ones:
1). Different user accounts on windows laptop
2). Different users on macbook laptop
3). Remote desktop protocol (RDP)
4). Using virtual machines with Oracle VMware
5). Antidetect browsers
6). Firefox portable browsers on the same user account
7). Using VPS - virtual port server
8). New laptop for each account
9). Different Chrome/Firefox browser profiles for each account
Before we give you a concise explanation of each option, its important to understand the main factors
how accounts can get linked and suspended.
cracked.io/Evil-Corporation
21
cracked.io/Evil-Corporation
1) Cookies
Cookies are small blocks of data created by a web server while a user is browsing a website and placed
on the user's computer or other device by the user's web browser. Cookies are placed on the device
used to access a website, and more than one cookie may be placed on a user's device during a session.
"value": "73091649.630089682.1565171499.1565171499.1565171499.1",
In the example above, the unique cookie "value" string was injected into the users browser and its associated with this unique account only. Meaning if you previously had an account XXX@gmail.com on
eBay, associated with this string of cookie value, creating new account without cleaning your browser
from this cookie value first will very likely link those 2 accounts and result in suspension.
cracked.io/Evil-Corporation
22
cracked.io/Evil-Corporation
The ways how being linked by cookies can be avoided:
The most important part is to have a fresh browser history which is new or without any links to the previously managed account. There are just a few ways how you can easily get a new browsing history:
New laptop will give you a fresh browser
Uninstalling and reinstalling your browser will give you a fresh browser
Cleaning your browser from all browsing history, passwords, cache, cookies will give you
a fresh browser also.
Using firefox if chrome was used before will give you a fresh browsing history
Using free version of CCleaner and wiping out your history, cookies, etc. will give you a
fresh browser
Be aware that google chrome has an option for different browser profiles with individual browsing
history assigned to each user. If you accidentally sync previously suspended account's browsing history
to a new user, you can be also linked and suspended.
Most reliable way to clean your previous cookies and completely wipe out your browser of any aspect
that might link you with previously suspended account is using the program: CCleaner. Free version
will be sufficient to achieve completely new browser profile. That makes sense considering you only
want to manage 1 account on the same laptop and user as you previously did.
2) Browser fingerprint
Browser fingerprinting is a powerful method that websites use to collect information about your browser type and version, as well as your operating system, active plugins, time zone, language, screen resolution and various other active settings.
Main aspects tracked by eBay while fingerprinting your browser are:
cracked.io/Evil-Corporation
23
cracked.io/Evil-Corporation
a) User agent.
A user agent is a “string” – that is, a line of text – identifying the browser and operating system to the
web server. The contents of the user agent field vary from browser to browser. Each browser has its
own, distinctive user agent. Essentially, a user agent is a way for a browser to say “Hi, I’m Mozilla
Firefox on Windows” or “Hi, I’m Safari on an iPhone” to a web server.
BROWSER
Headers:
Mozilla/5.0 (Windows NT 10.0;
WOW64) AppleWebKit/537.36
(KHTML, like Gecko)
Chrome/100.0.4896.60 Safari/537.36
JavaScript:
Mozilla/5.0 (Windows NT 10.0;
WOW64) AppleWebKit/537.36
(KHTML, like Gecko)
Chrome/100.0.4896.60 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; win64; x64) ApplewebKit/537.36
(KHTML, like Gecko) Chrome/99.0.4844.84 Safari/537.36
RuxitSynthetic/1.0 v7027719053848187403 tll30491875682666471
athlfb31b7a altpriv cvcv=2 smf=0
How to spoof your user agent?
These are the options how you can differentiate your multiple accounts as much as possible with
minimal efforts.
For generating new versions of your browser/operating system for each account - this extension does
the perfect job and was tested by creating hundreds of accounts without being linked together and
being suspended. Available for both firefox and chrome browsers.
This plugin gives you tens of different browser strings to choose from, enabling you to use different
browser string for each stealth account.
cracked.io/Evil-Corporation
24
cracked.io/Evil-Corporation
Operational system can be also spoofed using this plugin. It is however less accurate in cases when your
operating system is Mac OS and you're trying to appear as windows user. In cases where your home
operating system is Windows, it does the good job providing different values each time. You should
always aim to pick the most popular browser and operating system combinations to avoid being "singled out" and possibly flagged. Making your browser to appear as windows XP user using Opera
browser, definitely will make your profile look "odd" and possibly flag as a high-risk. You should always
blend into the crowd and combine most popular browser - operating system combos. Windows 10, 8
and 7 with Firefox/Chrome browsers.
Continuing to browser fingerprinting topic, these are the remaining aspects marketplaces track
to identify you.
Languages - your browser languages can be detected and fingerprinted. Your options are to install
different language combinations on your different browsers used to manage accounts. For example:
Account1 has US and US (British) versions installed. Account2 has US and ES (Spanish) installed.
Account3 has US only. Pick the popular languages that would make sense depending on the account
country you are operating from. For example adding African languages to your account and operating
account from Germany might raise suspicion for the algorithm and assume you are actually operating
account from Africa and possibly trying to fraud the platform.
Timezone - your timezone is matched with the one of your IP. GeoIP - Timezone match is important
aspect, which may flag the account if those two are mismatching. If your IP location is showing US but
timezone is Indian, you either travelled recently and did not adjust your computers timezone or are
using VPN/Proxy to connect and the later one is more likely. Make sure your device timezone and location is matching the one of your IP location. There are VPN's/Residential proxies that does that automatically for you, other options being adjusting that on your computer manually.
cracked.io/Evil-Corporation
25
cracked.io/Evil-Corporation
Login patterns - its a pattern how you are logging in and managing your accounts which can be used
to note some repeating activity between your accounts. As example: logging into multiple accounts
on the same times, listing new similar products on multiple accounts at the same time with the similar
details. There is no need to be paranoic about this aspect and be over cautious about every step you
make, but take that into consideration and adjust your workflow so its convenient and avoids some of
the patterns also.
IP/DNS/WebRTC - being the most crucial part of the successful operational setup process. Identical
IP's between different accounts will immediately link them together on most platforms such as (Amazon, eBay, Etsy, etc) and it should be prevented at all times.
Besides that IP not only has to be unique for each account, the score of your IP quality and type of
provider is also crucial. Having solved IP issues might not be sufficient as there is still DNS and
WebRTC aspects you need to take care of. We will have another dedicated chapter to cover these
details in more depth.
To recap this chapter, those aspects of browser fingerprinting are mostly used to track and identify
your stealth accounts: 1) user agent 2) timezone 3) languages 4) IP/DNB/WebRTC
How to manage multiple stealth accounts correctly
Some popular myths and beliefs that we need to address first.
Many sellers operating stealth accounts or trying to create new ones tend to overthink and think about
every possible detail that can link their accounts or suspend newly created ones. Such as: canvas
fingerprinting, webgl, their laptops being "flagged", MAC addresses being tracked or being identified
as stealth user using satellites, webcams or microphones. We have tested countless of setups on all
marketplaces, consulted with 3rd party operational security software developers and surfed every
possible information piece available on the forums and internet.
cracked.io/Evil-Corporation
26
cracked.io/Evil-Corporation
So there are some popular myths that are proved to be untrue in practice.
"You need to disable javascript and disable/spoof canvas fingerprinting". Reality is that the
more your setup is altered/hidden/spoofed the more redflags you are placing on your
account. Algorithms can identify that this particular user is spoofing or hiding some
advanced aspects of the browser as canvas fingerprint, meaning that its very likely to be a
stealth account as this is very unlikely for first time sellers and most users in general. None of
these elements are spoofed by genuine first time sellers.
"MAC addresses can be tracked and seen" - there is no way the marketplaces can detect
your MAC address. MAC addresses can only be seen by your internet service provider (ISP)
during the time you connect to the internet via their modem. So the only way the marketplace (Amazon, eBay, Etsy, etc) can get access to your MAC address is if your ISP will
disclose it. And it never happens unless serious investigations are coming your way initiated
by the government, which is never the case for the people who are just trying to create and
operate stealth accounts.
Being tracked using webcams, microphones and any other external way - unless your device
is hacked by the Etsy, Ebay or Amazon there is no way to get an access to your computer's
hardware.
To become successful in creating stealth accounts and operating multiple of them you need to go with
the strategy of "blending in". You should always replicate the way a normal internet user or first-timer
behaves and the setup he has. "Overdoing" your operation part by spoofing every aspect of your
browser, using rare browser versions, devices, operational systems will make you "stand out" too much
from the population sample and being put under the microscope by their algorithms and security
teams.
As example using Linux operational system with Opera browser and disabling canva fingerprints will
definitely make you look like a "hacker", bot, or at least not what 99% of the visitors would do. Creating
a stealth account is all about imitating the regular user who genuinely is looking for selling and doing
that for the first time.
So now that you are aware of the main operational aspects of successful stealth formula, these are the
options below giving you a methods to manage/create multiple accounts without being linked together.
cracked.io/Evil-Corporation
27
cracked.io/Evil-Corporation
9 Different options to manage your
stealth account:
1-2) Different user accounts on windows/macbook laptop
This is the most "noob-friendly" and effective way to manage your stealth accounts. Every new user profile will give you a fresh browser. Technically you can manage as many accounts as you want using this
method, however there are some scalability and efficiency issues when more accounts are being managed this way. There are some pros and cons of this option:
Pros:
• Cost effective. Does not require to buy new device or any additional software
• Easy to setup, delete, add new accounts
• Safe for few accounts
Cons:
• Every new user will still be under the same operational system/browser string and some
hardware fingerprint values. You will need to use browser extensions to hide and differentiate
those as much as possible between user accounts.
• If you manage stealth accounts from different countries: your time zone settings remains the
same for all users, and will require changing manually every time new user account is opened.
• Can be time consuming. You can manage only 1 account at the same time and it requires
logging out/switching users every time.
• Due to similar fingerprint patterns creating tens or hundreds of stealth accounts is more risky
compared to other options.
cracked.io/Evil-Corporation
28
cracked.io/Evil-Corporation
3) Remote desktop protocol (RDP)
Its a remote connection protocol to another windows desktop. Putting that simply is like managing
other computer remotely through your computer. Just like you can connect to other computer using
teamviewer and do any operations, RDP works in a similar way letting you to connect to remote desktop and carry out your operations here. Communication between your host device and RDP is also
encrypted, making it a secure option for managing multiple accounts.
You can explore the guides and resources of setting up your RDP connection here:
Pros
• Extremely safe and almost impossible to be linked between different RDP's.
• RDP is one of the most popular choices for internet users whose goal is to be almost
untraceable on the internet. As none of the files, browsing history is stored on your device,
but on cloud in your RDP.
Cons
• Not "noob-friendly" and requires significant time for first time users to set up
• Time consuming. Managing different RDP's every time might be time consuming due to
complicated set up process
• Can be costly. Every RDP connection costs usually on the monthly basis, varying between few
dollars upwards to $50-70 monthly for each account.
• Reliability concerns. It might take some time to find the high quality RDP provider. There are
providers offering overused, abused or hacked RDP's which might disturb managing multiple
accounts stably in a long-term.
• Usually used by some more complex internet activities which requires extreme security
measures.
From our experience RDP is an "over-kill" and not effective for the purpose of managing and creating
multiple stealth accounts.
cracked.io/Evil-Corporation
29
cracked.io/Evil-Corporation
4) Using virtual machine oracle VMWare
This is a one of the most popular operating methods being used successfully by many. VMware is a solution which lets you create multiple virtual machines on the same computer. Simply put it’s like a having
multiple computers on the same computer.
Pros
• Free to use
• Requires minimal effort to set up and can be learned quickly
• Enables you operate multiple accounts at the same time. You can turn on multiple virtual
machines and access your accounts simultaneously without being linked.
• Each virtual machine represents separated environment: files, browsers, time zones, making
it safer option compared to just different users on your laptop.
Cons
• For efficient use powerful computer is required. You should aim for at least 8GB RAM, i5 core
CPU, 256 GB SSD device, that is being the minimum requirement. Each virtual machine
requires resources to run and you want it to run smoothly. Usually 2 GB ram, 2 cores of CPU
and 30-50GB hard drive space per machine is recommended. Meaning with the simple 4GB
RAM laptop you can expect to manage up to 1-2 machines efficiently.
• Worth noting that virtual machines in theory can be detected by marketplace security
algorithms. While its completely legal to use VM, it may flag your profile as "higher-risk".
• Requires windows or linux operating systems to run smoothly. There are work-arounds for
Mac OS, but it requires additional time to set up it properly and some bugs/errors will arise
from time to time.
• Limited scalability. Due to hard disk space allocation requirement for each separate virtual
machine, you are limited to the number of machines you can operate by the capacity of your
hard disk.
cracked.io/Evil-Corporation
30
cracked.io/Evil-Corporation
5) Antidetect browsers
Antidetect browsers are a software solution enabling you to manage multiple separate browser profiles
on the same laptop, same user account and at scale. Those solutions are built mainly for managing multiple accounts in an easy way.
Antidetect browser solutions enables you to create different unique profiles for each account and
enables you to change: operating system, browser type and string, timezones, languages and other
multiple factors ensuring your fingerprints are as diverse as possible.
While there are different companies offering this solution, to sum up there are some pros and cons of
using this method.
Pros
• Easy to use and requires minimal effort to set up accounts
• Scalable. You can manage tens and hundreds of accounts with using only one laptop
• In most cases its possible to operate multiple accounts simultaneously making it efficient tool
to use
• Reliable. In most cases these solutions are designed for the sole purpose of managing stealth
accounts, whether its Facebook, Twitter or marketplaces such as Etsy, eBay or Amazon.
Meaning developers are aware of the aspects which needs to be ensured to manage
accounts safely
• Diversity of fingerprints. There is an option to customize tens of aspects of your browser such
as operating system, timezones, languages, even build custom cookies before even logging
in. Meaning you can manage hundreds of accounts and ensure they are highly differentiated
from each other.
Cons
• Not free to use in most cases. Prices vary between $30-150 usually. Might be costly for
managing 1-2 accounts only.
• As its a 3rd party service provider, some bugs or errors might arise which you are not aware
of. Therefore only the most reliable companies should be picked.
cracked.io/Evil-Corporation
31
cracked.io/Evil-Corporation
6) Firefox/Chrome portable apps
Portable browser app is working just like any regular browser, but enabling you to have multiple
copies of the same browser being isolated from each other. Each browsing history, cookies, etc. are
saved in separate folders and do not leak between different accounts. In theory you can have multiple
Firefox or Chrome icons on the same desktop/computer each representing different stealth account.
Pros
• Free to use
• Quite easy to set up
• Technically there is no limit on the number of accounts you can manage
Cons
• Reliability. As its a 3rd party solution, not developed by Chrome/Firefox themselves, there is a
risk that it might not work properly with other plugins or extensions. Also there can't be 100%
guarantee that accounts will not be linked as its a 3rd party solution
• Limited fingerprint diversity. As all browsers are operated on the same computer, they still
represent the same time zone, region and hardware fingerprint values.
cracked.io/Evil-Corporation
32
cracked.io/Evil-Corporation
7) Using VPS - virtual port server.
A virtual private server is a virtual machine sold as a service by an Internet hosting service. Similarly like
using Oracle VMware, VPS gives you an option to manage virtual machine which is hosted on cloud
rather your own Laptop.
Pros (compared to using Oracle VMware method are):
• Unlimited scalability. Meaning you can operate unlimited number of VPS machines from one
laptop
• Does not require powerful laptop
Cons
• Each VPS needs to be purchased separately which can possibly become costly
• Reliability: as with all 3rd party providers, it might take some time to find reliable and good
price/quality ratio provider.
cracked.io/Evil-Corporation
33
cracked.io/Evil-Corporation
8) New laptop/device for each account
Probably the simplest and most bulletproof way to separate your stealth accounts. Each laptop/device
is assigned to different stealth account, ensuring different fingerprinting and reducing the risks to be
linked between each to zero. (considering other aspects such as ip, account information, items, etc.
are done correctly).
Pros
• Bulletproof way to isolate different stealth accounts
• Does not require any additional technical knowledge to setup or manage
• In case your laptop is lost or damaged - only 1 account is affected.
Cons
• Requires a fixed investment for every new account depending on the device costs
• Time consuming to manage multiple accounts
• Challenging logistically - bringing multiple laptops with yourself is not convenient
• As there are a vast of software, 3rd party and other solutions such as multiple users available,
this option is generally the most costly and inefficient for multiple
cracked.io/Evil-Corporation
34
cracked.io/Evil-Corporation
9) Different Chrome/Firefox browser profiles for each account
This is a very solid method allowing you to manage multiple accounts simultaneously and at scale. As
Chrome/Firefox allows having multiple browsing profiles with isolated environments (cookies, history,
passwords, etc), you can use that functionality to your advantage.
In this article its covered in depth how this method works and how you can apply it in practice.
https://www.ipburger.com/docs/multiple-accounts-with-chrome-users/
Pros
• Scalability. You can manage high number of accounts at the same time
• Ease of use. It does not require different virtual machines, laptops, switching user accounts as
everything can be done inside one user account.
• Free to use. As you are utilizing the native function of Chrome/Firefox browser, using
browsing profiles does not bear any additional costs.
cracked.io/Evil-Corporation
35
cracked.io/Evil-Corporation
Cons
• Limited browser fingerprint customizations. In some cases Residential Proxy extensions are
not enough to effectively spoof/hide your true timezone and region set on device itself
• Works with Residential proxy/ip providers who has firefox/chrome extensions for their
services.
• Having multiple accounts opened on the same environment simultaneously can possibly lead
to some management errors (uploading items to wrong account accidentally, copy pasting
wrong tracking numbers, etc). So you'll need to be focused at all times.
These are the 9 possible options to manage and create your stealth accounts, all having different pros
and cons. We personally stick to 1-2, 4, 9 options for our own account management and creation.
Mastering your IP for success in
stealth accounts
The fundamental part of successful stealth account is that the platform can't notice that account is
stealth. Ebay, Amazon, Etsy, has advanced tracking technologies to detect the source, location, provider and risk score of your IP.
Using the wrong IP sources will void your efforts of creating new stealth identity, setting up your operational security and getting all needed pieces such as credit cards, bank accounts and etc. Without
knowing how platforms look at your IP and what needs to be done it can be very challenging to create
and maintain new accounts without suspensions.
cracked.io/Evil-Corporation
36
cracked.io/Evil-Corporation
How IP detection works in practice?
The second you are entering any domain in the destination tab, your IP is detected. And the following
aspects can be seen by any website operator:
1) Your IP string. This is the most basic thing you might be already aware of. You can easily check
up your IP by simply searching "what's my ip" in google search. However what you might not be aware
of that this IP string reveals more information about your IP than it could seem from first sight.
2) Your IP provider. Your service provider can be detected by the number strings of your IP. Similarly as each country has its code for telephone dialing, each IP provider has its specific number of IP
number strings. By that platforms can identify whether your IP is coming from reputable sources such
as local internet service providers: Vodafone, O2, Comcast, AT&T, etc. or whether it’s coming from
private server companies or datacenters. Based on your IP source certain risk scores are automatically
assigned without you even knowing that. The person whose IP source is a Vodafone, looks like a genuine, regular and non-risky internet user, meaning probably he is accessing the website simply from
home or work. The ones using VPN's/proxies signal that this user is trying to mask/hide his IP and might
represent a fraud risk. Successful stealth is all about imitating the low-risk activity patterns, and using a
VPN/proxy is certainly not a one.
3) Your exact IP location (city or even zip code level) - based on your IP websites can identify the location of where your IP is coming from with an approximate 98% accuracy. Your country, state,
region, city and usually a ZIP code can be identified by knowing your IP.
4) Are you using Proxy/VPN/Local internet service provider - based on the number
sequence of your IP, websites can accurately determine whether you are using Proxy, VPN, mobile
hotspot or your home internet to access the content.
5) Your DNS address - even using VPN's or other IP anonymizers - it’s still possible that your true
DNS is leaking. It can be easily detected and flagged by marketplace security algorithms as your IP and
DNS address countries can be mismatching or DNS matching the previously suspended account. Even
worse - multiple accounts with the matching DNS.
cracked.io/Evil-Corporation
37
cracked.io/Evil-Corporation
First of all you need to check for any possible DNS leaks in these sites:
https://www.dnsleaktest.com
https://dnsleak.com
What you need to look for?
a) Whether DNS leaks shows your true IP country (for example showing Vietnam while you are using
US based IP)
b) Whether it's showing your real IP (or very similar number string). Check your IP without any
proxy/vpn via incognito window/fresh browser and then turn on your proxy/vpn to perform DNS leak
test and see if results reveal your real IP or a very similar one.
If you are using your mobile hotspot/modem solely you do not need to perform this test.
You should always choose VPN/Proxy providers which reliably mask your real DNS ip and protect you
from any leaks.
5) WebRTC address - The problem with WebRTC is that it uses techniques to discover your IP addresses that are more advanced than those used in “standard” IP detection. Your WebRTC address can still
leak even when you are using VPN or other anonymizer solution. Leaking your true WebRTC might
disclose and suspend or link your stealth accounts. Therefore you should always check for WebRTC
leaks to ensure your setup is solid.
WebRTC leaks can be checked via www.whoer.net website. The WebRTC should never show your
actual IP. If IP showed in WebRTC leak is different than your actual home ip, or the same as your
VPN/Proxy - you're all set.
6) Is your IP blacklisted/used for SPAM? - your IP could be already blacklisted and assigned with high
fraud or spam scores. IP's used to send spam emails, malicious content or conduct fraudulent activities
are blacklisted and automatically included in multiple databases. You can check whether your current IP
is on the blacklist.
www.whoer.net will show you whether your IP is blacklisted.
Once you understand these concepts, now its time to use this knowledge to maximize your stealth success.
cracked.io/Evil-Corporation
38
cracked.io/Evil-Corporation
Mastering your IP for success
1) Do not use VPN's for creating new stealth accounts. The marketplace will immediately detect
that you are accessing from a VPN and flag or suspend your account immediately. Why would a first
time user would try to create an account while on VPN? That already indicates that you are trying to
mask or hide some details of your true identity. Even though the number of people using VPN's regularly is increasing, none of the marketplaces interpret that as a safe activity and choose "better safe
than sorry" approach and just automatically suspend that type of accounts. Not everyone using a VPN
is a fraud, but almost everyone who are, are using VPN's. The worst options for creating accounts are
providers assigning same IP's for multiple users. It’s possible that IP you were assigned was already
involved in fraudulent activities on the net before. Its suitable for personal protection, and additional
security, but not for creating or managing stealth accounts.
Creating or operating account while simply being on shared VPN connection would instantly flag the
account and get it shutdown. VPN's ip sources are datacenters which uses the same IP strings, and
service provider is simply a server company not an genuine internet service provider. Same thing is
with shared or dedicated VPN's. Therefore platforms immediately identify that you are accessing using
VPN services and that's not what usual user would do. Since what's the point of legit seller to use VPN
if he has nothing to hide? So residential ip's source their IP's from real internet service providers such
as T-Mobile, AT&T, O2, Verizon, and others depending on your country. And in terms of IP it makes
you look as low-risk individual.
2) Do not use dedicated/fresh VPN's. There are services promoting fresh and dedicated VPN
services for account management and creation. While it most cases those IP's are truly fresh and will
be fixed/dedicated for as long as you pay for them, they are still coming from datacenter companies,
indicating that you are using a VPN while accessing Etsy, Amazon, Ebay or other marketplaces.
3) Do not use simple proxies. Similar to VPN, proxies are also detected based on the IP strings and
can show its source being a datacenter. You can purchase a fresh (non used before) and dedicated
proxy, but it will not bring any additional benefits and will be the same as using VPN.
4) Do not use same IP's for multiple accounts that you do not want to link. Might be sounding
obvious for some, but still needs to be put out. Managing multiple accounts from the same IP will link
them in 100% of the cases. While it might not mean an instant suspension, in case one account gets
shut-down the others will follow as well due to strong association. If your goal is to diversify - different
IP's for each account is your only option.
cracked.io/Evil-Corporation
39
cracked.io/Evil-Corporation
The best way to manage multiple
stealth accounts:
Answer: Residential proxies.
With the residential proxies you can perfectly imitate the behavior of the genuine, low-risk internet user
while being from anywhere in the world. Residential proxies work in a way that assigns your with an IP
from a real internet service provider of that country, and will never be detected as VPN/regular server
proxy.
This is the best way currently to manage multiple accounts and we manage our accounts using residential proxies. Back 3-4 years ago, from the start of using residential proxies we immediately noticed
increased account survival rate, stability and significantly less suspensions during sign-up process.
There are reputable companies providing this service, which is completely legal. You can choose the
internet service provider, country, region and even the exact city where you want your IP from. With this
setup you can minimize your profile risk score to a complete minimum and match your stealth account
location info with the one of your IP address.
Pros of using residential proxies
•
Appearing as a regular internet user
•
Provides you a real IP's from real internet service providers
•
Can choose IP's from certain countries, states and cities
•
Huge variety of countries and cities to choose from
•
Can be used to manage 1-100 and even more accounts without any limitations
•
Quite easy to setup, expect to invest 20min-1hour for first time users to understand how
the process works
•
You can generate and assign unlimited number of IP's for your accounts
cracked.io/Evil-Corporation
40
cracked.io/Evil-Corporation
Cons of using residential proxies
•
There is one aspect which might seem as negative - IP's are rotating/dynamic. Meaning you will
not get an IP which will stay the same for days, weeks or months. But according to our and other
stealth operators experience that has never caused any suspensions directly.
•
Solution is not free. Expect to invest $50-200 monthly for this solution. The costs do not increase
proportionally for every additional account you want to manage. Usually regular plans allows to
manage tens of accounts. Meaning the more accounts you want to create or operate the lower
the cost per account will be. Imagine you want to manage 5 stealth accounts. Dedicated VPN's
(which are not a recommended solution due to reasons mentioned before) usually cost $15 per
IP/monthly, resulting in $75/monthly (5 accounts * $15 each). If you are managing 5 accounts
with a residential proxy plan costing $70/monthly for example, resulting in $14/monthly per
account ($70 divided by the number of 5 accounts) it's already more cost efficient. Managing 10
accounts with the same plan of $70, would save you around 50% monthly compared to dedicated VPN's for each account separately.
How to make sure you can sell similar
products from previously suspended
accounts?
You have your products, photos, titles that were performing well on previously suspended account and
want to resume selling with what's already working. Or you have found a niche of well performing products and want to expand that on multiple accounts without the risk of being linked. There is everything
you need to know about how to do that successfully.
Similarly how your browser and laptop can be fingerprinted, your listings have similar elements of that.
If you would take any random photo with your smartphone, send it to your computer and examine its
properties/details, some or all of the following information would appear:
1)
Location where it was taken
2)
Its dimensions/size
3)
Camera/color profile
4)
Device it was taken with
5)
The exact time it was taken
6)
Where it was downloaded from/its source
cracked.io/Evil-Corporation
41
cracked.io/Evil-Corporation
The combined set of this information is called EXIF data. Combination of EXIF metadata is usually
unique more or less for every different photo/image.
If you are taking photos of your listings using camera devices, they will contain this EXIF data which can
be seen and tracked by marketplaces. Meaning if two accounts have identical metadata of their listing
photos - they can be linked together and investigated.
What you should do:
1) First of all removing EXIF data from your images/photos.
How to remove this EXIF data?
There are easy and free solutions which will help you to remove all this data.
https://www.exifpurge.com/
You can bulk upload all your photos and remove EXIF data. Whether it is photos you took or digital
images, its still recommended to use this tool if you are planning to re-use the same listing photos.
2) Altering image dimensions
What is the chance of two separate sellers selling identical items with identical image dimensions?
Probably a very low one.
You should resize your listing photos at least by some px points, to generate unique dimension combination of width and length. Also by doing that you will change the time stamp of "last modified" for your
photos, making it different from previously used ones. What is the chance of two separate sellers selling
identical items with identical image dimensions? By altering image dimensions and last modified time
stamp you will eliminate this risk to a minimum.
3) Every image is a unique combination of pixel colors, saturation and density. There are bots in the
marketplaces programmed to find and detect images whose pixel combinations are overlapping
between each other. In other words - to find same listing images between different sellers or same
images that were previously used by suspended ones.
That's why its recommend to alter your listing photos/images to at least some degree. It can be adding
watermarks, logos, shop name text, changing color profiles. In cases where there is hundreds or thousands of different images, you can outsource it to virtual assistants or check for photoshop scripts which
would add same elements to each image automatically.
cracked.io/Evil-Corporation
42
cracked.io/Evil-Corporation
New phone number for verification
Understanding how phone numbers work and how to avoid getting suspended by using the wrong
sources and types for numbers for verification.
The main mistake when trying to get a new phone numbers for account creation is obtaining it from
most popular apps/free online sources or using google voice numbers.
The first reason being that phone numbers obtained in this way can be recycled and used previously
and the second reason being that those numbers are in 99% cases VOIP.
There are two types of mobile numbers: VOIP and non VOIP. Similarly like there is a VPN and Residential proxy, VOIP would be the same as using VPN and VOIP the same as using residential proxy.
1) VOIP (voice over Internet protocol) means it’s not a real number, which uses internet to communicate instead of cellular. VOIP numbers come from online databases and are not tied to any physical sim
card or mobile carrier. They can be easily detected and identified by marketplaces and any websites
that work on stealth accounts detection. You can try creating eBay account using VOIP number
obtained from application and you will receive an automatic error. Try verifying or creating your new
Gmail account using VOIP number and you will get an instant error. By using VOIP number you are
exposing yourself as probably a stealth account creator and minimizing your chances of successful
account creation.
2) Non VOIP are real numbers from real mobile carriers, meaning there is a real sim card tied to it.
There are two main solutions for getting non VOIP numbers.
cracked.io/Evil-Corporation
43
cracked.io/Evil-Corporation
How to get real numbers for account verification?
1) Obtaining real SIM cards and using them for account verification. Depending on your physical location, obtaining SIM cards physically can be challenging, so if that's not an option you can order them
online. There are may sellers on eBay offering different countries SIM cards for sale to ship worldwide.
2) Using online non VOIP number providers. During our many years of experience in managing and
creating stealth accounts, we've found some providers who offer online SMS receiving services by
using non VOIP numbers. The process is fully automatic and optimized, meaning you will only need to
pre-pay the amount you want (depending on the number of accounts you are planning to verify) and
then choosing the platform you want to receive SMS from.
Those providers usually specialize in Etsy, eBay, Amazon and other marketplace SMS receiving solutions, as well as google, Facebook, Instagram, etc.
https://juicysms.com/
https://smsverify.co.uk/
All you need to know about
getting new bank accounts
One of the biggest challenges people creating new stealth accounts and managing multiple ones face
is getting new bank accounts. And getting them legally, under your name can be even more challenging. While there are ways you can buy a hacked/stolen bank accounts, we do not recommend this
approach. Also what's the point of having a bank account which have a risk to be reclaimed by the true
owner in the future?
We will outline all options for getting multiple bank accounts and what could be your course of action
depending on the country of residence.
First of all, lets clarify the fundamentals of using multiple bank accounts and provide you an answer to
some of most frequent concerns or questions one might have.
cracked.io/Evil-Corporation
44
cracked.io/Evil-Corporation
Can different bank accounts under the same name be used? And can marketplaces see the real
name/surname of the bank account I enter?
1) There is no way for any marketplace to see the real name behind the bank account. All personal and
confidential information records are strictly kept by your banking service provider only. In case of any
investigation coming your way, company/marketplace can send a subpoena letter coming your banking service providers way, which might reveal your true identity. But that's only in cases you are doing
something extremely against the law and on a large scale. There is no such thing as unified banking
information databases that marketplaces can have an access to. Every bank has a strict client protection
policies and will not reveal your personal info to any 3rd parties (except on extreme cases of investigation, cyber criminal activity, etc)
2) There is no API that all banking institutions are implementing to use with payment processors such
as Adyen, Stripe, etc. None of the payment processors can see your real name/surname/address from
your banking number info.
3) Etsy uses payment processor called Adyen to verify your identity, card and check banking info.
Upon entering your banking details those details will be crosschecked and checked.
a) Your banking institution name: using routing number in the US, BIC numbers in the EU and Sort
codes within the UK.
b) Country of your bank account provider: Based on routing, BIC or sort codes your bank country can
be identified.
c) Correctness of your bank account info: US account numbers do not use checksums so any random
numbers can be input and they will look like real ones in the eyes of the system. Within the EU and UK,
account numbers use checksums therefore if you put any random bank while creating account its
correctness will be checked.
How IBAN validity works can be checked here: https://www.iban.com/iban-checker
How UK bank validy works can be checked here: https://www.sortcodes.co.uk/
That's all that can be checked or verified, meaning you are completely safe using multiple bank
accounts under the same name.
cracked.io/Evil-Corporation
45
cracked.io/Evil-Corporation
But marketplaces require to input correct name/surname in the accounts holder field?
They require it only to have it aligned on their end, it does not mean that you need to input REAL name/surname into accounts holders field. You can use the stealth account's info and it will work. Marketplaces can't verify and upon submitting payments are not required to have correct name/surname of the
bank account holder. The only one who might care about the name/surname is your banking service
provider. Some banks might decline if deposits sent to your bank account come from the different
name than account is registered on. Good news are that there are only a few banks that strictly decline
those kind of deposits, and 98% of them do not care or track this.
What information is actually the most important for marketplaces to understand how risky is your
account?
Similarly as with internet service provider whether your traffic is coming from VPN or from Residential
proxy/Real ISP, banks are also divided into two main camps:
1) Real brick and mortar banks - those are real, solid retail banks. Such as Chase, JP Morgan, Barclays,
Deutsche bank. Using these banks gives you the maximum possible safety score on your accounts fraud
monitor, as the only way to open bank account using under these institutions is to physically visit them
(or verifying your identity in online meeting), in most cases being an actual citizen of that country and
having your background checked. Meaning marketplaces interpret those bank account numbers as a
real person's.
You can open multiple checking/savings account within the same banking service provider. There are
certain limits on the number of accounts you might have, but having multiple banks with multiple providers will be enough for you at the beginning (in case you haven't reach your limits already). The process of getting multiple bank accounts is either automated by initiating new openings from your clients
portal or visiting bank physically to request more accounts to "expand" your business.
2) Online banks - those are banks primarily designed in a way to fit the needs of international sellers
who can't open certain country accounts due to residence restrictions, not being physically in that country or some other reasons. Let’s say you live in Vietnam and want to open a US account in JP Morgan.
There is no way for you to do that being in Vietnam, not having SSN of US (in most cases) and having a
strong reason behind doing that (work related, etc). In cases like that you will opt to opening online
bank which will give you US bank account information. In all cases, marketplaces can identify that
certain banking details are coming from online banking service providers, and depending on your
overall fraud/risk score act accordingly.
cracked.io/Evil-Corporation
46
cracked.io/Evil-Corporation
Using online banks are completely legal and normal for any person worldwide, but since most of the
stealth account creators use online banks only, it presents a higher risk. Online banks are divided into
two tiers, depending on their account holder verification difficulty and reputation.
Tier 1 online banks
Those are mainstream banks, used by people as a second alternative bank, for everyday spending, traveling ,etc.
These are the options accepting mismatched name deposits, and giving you a bank account which
works with Etsy.
•
Revolut N26 - does not accept mismatched deposits in some cases
•
Wise - does not accept mismatched deposits in all cases
•
Monese
•
Monzo
US-based options such as:
•
Chime
•
Cash-app
And other similar banks. Search for mobile banking providers in the US to see the full list.
Also the good thing about these Tier 1 online banks are that they usually issue 1 or multiple credit cards
both virtual and physical that can be used for account verification. You can open these banks under
your name, pass the verification and get brand new bank account to use with your stealth account.
The downside is that these Tier 1 banks do not issue multiple bank accounts under the same currency,
usually its 1 bank account per currency, meaning you can't create multiple stealth accounts at scale. It
can be a smart idea to diversify and use some of your best performing accounts with some of these solutions, but running multiple accounts (10-20 or more) with Tier 1 online banks is hardly possible or not
convenient at least.
Tier 1 online banks apply strict verification procedures, asking for selfies, live cam photo/video, biometric data reading and in most cases requires actual smartphone for verification. Meaning you can't simply
create multiple of them with just a help of a photoshop.
cracked.io/Evil-Corporation
47
cracked.io/Evil-Corporation
Tier 2 online banks
Those are banks mainly designed for sellers and offering solutions which will be a perfect way for you
to build multiple stealth accounts. Tier 2 online banks have usually less strict verification procedures,
but most importantly are able to offer multiple same currency bank accounts. You can verify your tier 2
online bank account with your real identity and proceed with creating dozens of bank accounts and
enjoy the benefits of accepted mismatched deposits policy of those banks.
Tier 2 online banks in almost all cases accept mismatching name deposits, meaning you can receive
deposits from multiple stealth accounts under different names, all coming to your 1 online bank
account.
These are the main Tier 2 online banks, giving you various numbers of multiple of bank accounts in most
popular currencies GBP/EUR/USD
Already tested and approved providers are:
•
Payoneer
•
Juni
•
Worldfirst
•
Pingpong
Those providers might be totally enough for you to manage arround 100 different accounts. Once you
have used all of these options you will already know what to look for while searching for new banking
provider and will be able to setup up everything easily. Stick to these 4 ones first and they will have you
covered.
Depending on your location and the currency of the bank accounts you need, you will find the most suitable scenario.
What you need to understand about Tier 2 online bank accounts. The bank account numbers you are
issued with are not exactly the same as a normal bank would do. They are virtual bank accounts, also
called VBA's/VBA, that enables you to receive ACH deposits made by marketplaces. In most cases
those accounts can't be used to simply receive standard Wire transfers from other banks, so do not be
mistaken. They are used solely for receiving payments from marketplaces and in some cases businesses.
cracked.io/Evil-Corporation
48
cracked.io/Evil-Corporation
Those Tier 2 online banks partner with other banking providers, (usually those which are more shady)
and receive bulk account numbers which they later distribute to marketplace sellers who sign up. These
Barclay's banking details you see on Payoneer as example, do not represent a bank account actually
sitting here in Barclays, but rather just a number which is managed by Payoneer. As there are only a few
of banks providing account details for Tier 2 online banks, there is just a couple of main routing/branch
codes used for most of them.
For example Payoneer issues GBP currency account details from Barclays bank which uses the same
sort code for all accounts. This sort code is already abused by various stealth account creators, scammers and of course some genuine sellers. Marketplaces already know that you are using Payoneer to
open/manage seller account, meaning there is a high chance you are "stealther". Why would a normal
UK living resident use a payoneer to open his first seller account? What are the chances that this person
is actually genuine? And what are the chances you are actually a person not from UK, opening multiple
accounts? Math is really simple, and its more efficient for algorithms to suspend 100% of these accounts
where 90% is being stealth and 10% real people.
Same Barclays sort details can't be used on PayPal - you will get a message telling you something wrong
with it (not actually disclosing the real reason behind), same goes with eBay - enter those UK banking
details and you will receive an automatic error. Same with Etsy - they will let you open an account and
later will just suspend it out of nowhere without any explanation. It's just how it works.
Tier 2 online banks usually use Citi bank for GBP, EUR and USD bank accounts issuing. Good news are
that not all virtual bank accounts are blacklisted, and you can use these accounts successfully coming
from multiple providers.
cracked.io/Evil-Corporation
49
cracked.io/Evil-Corporation
Understanding how credit/debit cards
work for verification
Getting new cards for opening your accounts can be equally challenging as finding solutions to opening multiple bank accounts.
First lets breakdown what are the elements of credit cards that marketplaces look at to determine and
assign risk/fraud scores to your stealth account.
These are the main types of cards:
Physical cards and virtual cards, called - VCC/VCC's
Physical cards can be the following types:
1) Regular Credit card - this is a type of card that is actually issued by a brick and mortar bank (JPMorgan, Chase, and others worldwide), and can be possibly used to settle debt amounts owed by you even
if there's no balance. That's the main card type used in the US, and also used by all countries worldwide
just being less common. This is the highest security score card type that security algorithms detect,
increasing your chances of successful stealth account operation.
2) Regular Debit card, Not prepaid - this is the regular card option which does not have a credit tied
to it, meaning you can only spend the amount you actually have on card. Not prepaid meaning its tied
to a real bank account, issued by a regular brick and mortar banks (JPMorgan, Chase, and others worldwide)
3) Regular Debit card, Prepaid - this is a card type that’s mostly common with all online banks such as
Revolut, N26, Chime, Venmo. Its debit since those online banks usually can't provide Credit cards unlike
high street banks, and prepaid since you top-up a card balance using another financial instrument like
your bank account, credit card, etc.
4) Gift card - those cards are mostly popular within US only. Those are the ones you can buy at retail
stores such as walmart, target and others by paying by cash or card. Most popular brand being Vanilla
Gift Card. These cards can be purchased by anyone and will have the fixed amount of funds on it,
depending on the price you paid for them. These cards are not tied to any online bank and can only be
topped up using cash or card at retail stores (in most cases).
cracked.io/Evil-Corporation
50
cracked.io/Evil-Corporation
Virtual cards can be the following types:
5) Virtual Credit card - card which can be used for buying online the same way as regular credit card,
except it does not have any physical form and can't be used physically (ATM's, in store payments, etc).
There is just a card number that you can see and use it for spending online.
6) Virtual Debit card, not prepaid - virtual card which is interpreted as being debit, usually issued by
Tier 1 online banks for online shopping activities.
7) Virtual Debit card, prepaid - virtual card which is interpreted as being debit and prepaid, usually
issued by Tier 1 online banks as well, used for one-time shopping, trial account verification, etc. Example: Revolut's disposable virtual credit card.
As you might have already guessed, marketplace's security algorithms track the type of card you use to
settle your billing or open your stealth accounts.
Every credit card contains BIN (bank identification number) which is the first 5-8 digits (5 digits is the
most popular length). This number reveals practically everything about your card - what is the issuing
bank, what type of card it is (credit, debit, prepaid, virtual), what is the location of the issuing bank.
This is one of the most accurate online verification tools you can use to check your card's info:
https://binlist.net
Enter first 5-6 digits only and you will see the info about your card. Let's take a look at the breakdown
below:
cracked.io/Evil-Corporation
51
cracked.io/Evil-Corporation
5587 67 is a BIN number of JPMORGAN Chase. Its identified as Credit, coming from United states and
by the JPMORGAN bank. There are some aspects also such as brand, scheme, etc. but those are being
less relevant. Also Credit cards by default can't be prepaid, so in most cases this tool show the value
"No" under the "Prepaid" or no value at all.
The example above is from a virtual card issued by Wise. Wise allows up to 3 active debit cards to be
issued. This card is correctly identified as Debit, country - Belgium which is low risk EU country, and not
identified as prepaid which (which is also a good thing).
cracked.io/Evil-Corporation
52
cracked.io/Evil-Corporation
Example above is the card breakdown of one of the Vanilla prepaid gift cards. It is debit, prepaid, issued
by a Bancorp which is not an actual bank but a banking service provider for other financial service providers. These type of cards have the least chances to pass marketplace required card format, and in
cases they pass your account will be identified as higher risk from the get go.
More examples: For example google AdWords will decline most online debit prepaid cards to pay for
ads, Amazon will decline prepaid cards to use for your seller subscription fees, and Etsy will decline all
prepaid cards such as vanilla, prepaid shopping cards, etc. when you are opening your seller account.
Marketplaces see credit cards tied to real banks as the safest option, meaning its very likely that there is
a real person behind the account and credit card number. Good news are that there are online card
providers which will cover that for you, by issuing a virtual credit card numbers used for account
creation, which look like a card from a real bank.
Physical credit cards issued by high street physical banks are the best for creating multiple accounts,
but having tens of credit cards under your name can become costly, not convenient and possibly questionable. Also depending on your country of residence you might not have access to getting such type
of cards at all.
As a rule of thumb you want your card to be: 1) Credit 2) Not prepaid 3) Issued by a real bank and 4)
Being from the same country as your account info. If you are opening an US seller account and use
Nigeria based debit card, issued by unknown bank, it will be suspended almost guaranteed and probably right after opening an account.
There are some sources of virtual credit card providers:
https://www.aspkin.com/forums/account-services
https://www.blackhatworld.com/forums/misc.18/ - filter by keyword: VCC
https://cardoshi.com/
While there quite a few service providers, what you need to do is ask for the BIN number of their cards.
You need to look for the best possible option of VCC's, that are: Credit, not prepaid and issued by real
banks. Getting random cards issued by non existent banks, high-risk countries (Africa for example), will
most likely lead to suspensions.
cracked.io/Evil-Corporation
53
cracked.io/Evil-Corporation
CONCLUSION
Now that you are aware of all the aspects it takes to successfully create new stealth accounts - it's time
to put everything into practice.
Apply the knowledge you got in this ebook and build your new eBay accounts empire. We wish you all
the best in growing and maintaining your business!
cracked.io/Evil-Corporation
54