1.
Introduction
The Environment
a.
BuyVCC
b.
Amazon EC2
c.
My.US (optional)
d.
Sellfy

Data Management
a.
BINS
b.
UCheck
c.
UniShop
d.
SSN Finder
e.
Zapili

2.Paypal Overview
Funding PayPal
a.
PayGarden
b.
GiftRocket
c.
xClick

Cashing Out PayPal
a.
PayPal MasterCard Debit
b.
altcoins
c.
Purchasing currency
d.
VirWox

3.
E-Trade
PayPal Account Juggling
a.
Premise
b.
Original example
c.
Our example

Neteller
a.
Verification
b.
Funding
c.
Account structure
d.
Cashing outIntroduction

This guide explains how to cash out both US and worldwide CVVs using two well-known payment processors, PayPal and Neteller.
Funds deposited into the accounts are then exchanged for cash, hard currency, Bitcoin or alternative crytocurrencies, or deposited into an E-TRADE Brokerage account acting as our bank drop.
We will also create a centralized address drop in the name of our Business PayPal cash out account in an
attempt to receive both the PayPal and E-TRADE debit cards and/or hard currency under multiple names.
Our goal in this guide is to create and grow three components in our virtual working area:

• An organized group of VPS/RDPs for long term PayPal administration.
• A small, turn-key merchant gateway to manage our PayPal transfers disguised as digital download sales.
• Organized group of PayPal and Neteller accounts to move and consolidate funds once they have left front line accounts.
• 
  I don’t like working within the context of only one or two PayPal accounts. It doesn’t allow for much testing and you’re exposing yourself to risk by linking your accounts together, just transferring back and forth between the two.
• 
  Instead we are going to cloak our transfers within the context of high value digital download products to keep each “class” of PayPal accounts separate. In the event that one of our accounts becomes limited, we just cut if off and buy another one.
• 
  I prefer to purchase PayPal accounts with both bank and credit card verified. We are not going to attach an E-TRADE account to every PayPal account, just our Business cash out account. The accounts first in line to receive funds will not use a bank drop at all. They are purchased preconfigured with both VBA and VCC and are used to temporarily hold and then move after a standard waiting or “cooling off” period of 24 – 72 hours after funds are deposited.
• 
  This guide also provides several resources to manage your data and identify successful trends so you can make better purchasing decisions when shopping for CVV data.
  One credit card’s Bank Identification Number, or BIN, may work well for online clothing purchases but may not necessarily translate to an approved transaction directly through PayPal or Neteller and vice versa.
• 
  This guide attempts to take all of this into consideration and list options for any level of CVV. Three methods are outlined in order of safety, efficiency and amount. The same priority is applied to the methods of withdrawing, our first being the PayPal MasterCard debit and last being VirWox as a USD/BTC/PayPal exchanger.
  Let’s begin.
• 
  The Environment
  We are going to rely on several components to build an assembly line of PayPal accounts capable of receiving, consolidating, and cashing out funds on a rolling schedule.
  Our PayPal accounts are sectioned off, away from the accounts that exchange our funds for cash. We will be creating a quick, turn-key digital download store-front using Sellfy to transfer funds to a Business PayPal account.
  Rather than worry about VCCs and VBAs that may potentially get your account limited, we will source our PayPal accounts from a third party.
  This Site sells clean, verified PayPal accounts with no transaction history that we are going to use for both our front line accounts, each acting the repository for clean, semi-clean, and dirty funds, as well as our PayPal Business cash out accounts.
  The Business account can be used to purchase assets that are easily exchanged to cash such as foreign currency or bullion, or we can try to get our hands on the PayPal MasterCard debit by using an expat forwarding service based in Florida. We’ll also open and attach an E-TRADE Brokerage account that includes an International debit card.

a.
BuyVCC
BuyVCC sells verified PayPal accounts with 3 – 5 day turnaround and 30 day guarantee.
They are clean accounts, not hacked, and do not have any transaction history aside from a $1.95 positive balance when the account is delivered to you.
Once the accounts are funded we make our purchases, or “transfers”, into our single Business account, which by now is synonymous with our cash out account. If you plan to secure a US drop address using My.US it may be best to coordinate with BuyVCC to arrange for an address in the proximity of Sarasota, Florida.
The accounts do not come with enough personal information to open PayPal MasterCard debit cards. We’ll cover that later in the document.

You’ll receive 10% off your order by paying in Bitcoin (powered by Coinbase) making each Premier account or “Triple” package only $67.00.
b.
Create VPS (RDP) in Amazon EC2
Some people may scoff at the idea of using RDPs within EC2 to manage PayPal accounts. What they fail to realize is that Internet giants including reddit, Instagram, Netflix, as well as many content distribution networks use EC2 for their infrastructure. We utilize Elastic IP Addressing or EIP meaning that our IP address is released back into the customer pool as soon as we are done with it, rending IP- based security policies nearly impossible to enforce with massive blowback from the customer experience. That’s not as complicated as it may sound. We don’t require much. We can exist in the pre-sales space for as long as we need to. Read about the introductory Amazon Web Services free usage tier Here—
We can do the following within the free introduction period—

• 750 hours of Amazon EC2 Linux† Micro Instance usage (613 MB of memory and 32-bit and 64-bit platform support) – enough hours to run continuously each month*
• 750 hours of Amazon EC2 Microsoft Windows Server‡ Micro Instance usage (613 MB of memory and 32-bit and 64-bit platform support) – enough hours to run continuously each
  month*
  We are specifically interested in Amazon Elastic Compute Cloud (EC2). All that is required is an Amazon account that has never signed up for AWS. Register and sign into the Console –
  You are met with the entire list of AWS product offerings. Click Elastic Compute Cloud (EC2) in the top left corner.
  You may create server instances in the regions all over the world, or, as Amazon calls them, Availability
  Zones—
  US East (Northern Virginia) us-east-1
  US West (Oregon) us-west-2
  US West (Northern California) us-west-1
  EU (Ireland) eu-west-1
  Asia Pacific (Singapore)
  Asia Pacific (Sydney) ap-southeast-2
  Asia Pacific (Tokyo) ap-northeast-1
  South America (Sao Paulo) sa-east-1
  ** Not all Availability Zones are eligible for the free usage tier

Within the main EC2 dashboard you will see a large blue button for “Launch Instance”. This is where we are going to configure and launch our Windows Server.
Choose the following towards the bottom of the list of Operating Systems –
Microsoft Windows 2008 R2 SP1 Datacenter edition, 64-bit architecture. [English]
Micro instances are eligible for the AWS free usage tier. For the first 12 months following your AWS sign- up date, you get up to 750 hours of micro instances each month. When your free usage tier expires or if your usage exceeds the free tier restrictions, you pay standard, pay-as-you-go service rates.
Check that port 389 is open for RDP on the security group settings otherwise you will not be able to connect to your instance. You will need to create a key pair to decrypt your password for the initial connection. Follow the directions on the key pair creation screen and save it to an encrypted volume. Give your instance about 30-40 minutes to spool up completely. When your instance shows the green indicator mark and you see it is running, choose connect. Enter the key that you just created to decrypt your Windows Admin password.
To create a shortcut click

Start -> Run > mstsc

Click “Show Options” and enter your EIP or public DNS details, Administrator credentials including password, and save the shortcut on your desk top.Unless you choose otherwise, your instance will launch immediately after creation and you will begin to incur charges until you manually shut it down.
If you do not plan to use your VPS right away, be sure to suspend it otherwise you’ll burn through your “free usage tier” credits.
The main EC2 dashboard here shows four VPS instances in a stopped state.

Name each instance using the email address of your PayPal account. When you are ready to connect to that user’s profile, simply right click the instance, click Start, and wait until the instance state has turned to green/running before attempting to connect using your RDP shortcut.
IMPORTANT: Enable Termination Protection on your instances! Don’t learn the hard way!
You can keep your RDP shortcuts together in a folder or you may choose to use a front end manager like RemoteNG to manage multiple user profiles within a single interface, shown below.

Log into your RDP and begin installing your applications and preferred web browsers, etc., but do not begin personalizing anything to a particular account just yet. Once you have completed installing your applications and updated your settings to your liking, log off the RDP and cleanly power down the instance in the EC2 dashboard by right-clicking its name and choosing “Stop”. Not “Terminate”.
Once fully stopped, right click on the instance and choose “Create Image” like shown below:

You will be prompted to give your image unique identifiers in case you are planning to manage multiple Amazon Machine Images or AMIs. Since this is going to be the baseline desktop environment for our future desktop environments, we are going to name this one “clean_rdp”.

Click “Create Image” to begin the creation process.
You will be prompted with a confirmation screen and you can click through to check the status your image. It will take several minutes to complete.

What we’ve done here is create a baseline image that all your future PayPal account administration RDPs will be based off of. So the order of events in your PayPal assembly line is to purchase an account from BuyVCC then launch a new EC2 instances from your clean copy.
Choose “AMI” from the left hand menu and look for the image that you took of your original instance with the name you gave it. Our example is “clean_rdp”.
Choose it, click “Launch” and configure instance details to align with the free-usage tier.

This new instance is and launched and appended to the list of available instances in your main EC2 dashboard. All your programs are installed already and everything is ready to be built around the profile of your new user account details.

Amazon EC2 Alternatives
If you do not have access to an Amazon account that is eligible for a free usage tier you can look into other VPS/cloud providers. The interface and pricing structure is somewhat similar but our theory remains the same. Create one VPS and clone it for each of our PayPal accounts.
Alternative 1
Alternative 2
List of VPS providers that accept BTC: Alternative 3
Alternatively, you can purchase a VPN with dedicated IP in nearly any country in the world for as little as $6.00 per month.
Alternative 4
Alternative 5
If you have no intention of keeping each user’s cookie history, you can manage all of your accounts from a single local user profile. Each PayPal account would be bound to its unique IP address, based on whatever VPN you paired with it.
If the idea of binding your activities to a single IP address bothers you, good. It should.
Unfortunately that’s exactly what we have to do if you want to build a legitimate history with PayPal. The painless transactions in the future will more than make up the administrative overhead. Create an additional Windows user for each of your PayPal accounts. Each of these profiles can be light. Not many applications are needed. Just be sure to keep your user data profile directories full of your account history.
IMPORTANT: Think about your organizational structure before committing to any changes. Are you in the habit of running BleachBit constantly? If so, there’s no real point in keeping user profiles separate as the only benefit is each user’s unique IP address delegated by you to your VPN client.
d.
My.US address (optional)
We are going to use a reshipping service to allow our PayPal Business account and its “employees” an American address to receive PayPal and E*TRADE debit cards. Their primary market is reshipping International Amazon orders but we are going to use the Premium + Mail package under our Business PayPal account to receive mail on behalf of our “employees” using the USPS 1583 form.
You are simply allowing My.US to act as the agent to forward mail rather than actively changing any addresses. You list all of your “employees” on the form in section 12 and you may receive and forward documents, in their name, only when sent to that address, on behalf of your company.
You are not disrupting regular mail service because only the name, not address, is listed on the form and never submitted anywhere. It is kept just like an I-9 employment form. No one looks at it until it’s needed. However, the form must be notarized. You have three options—

• Go to the local US consulate and have it notarized
• Have the form notarized by friend / relative / notary
• Buy a notary stamp from Here or Here
  If overseas, you can simply have the form notarized at the Consulate and add additional names in Section 12 before you submit it to My.US.

d.
Sellfy
Sellfy is a turn-key solution for anyone to sell digital download products through a simple and intuitive interface. We are going to use these products to transfer funds between our front line worker bees and our Business account(s). Sign up for an account and begin creating products in the denomination you are preparing to transfer. You’ll need to be creative if you plan on moving larger amounts of money through the Sellfy gateway.
Some examples include:

• AutoCAD plugins
• Adobe Photoshop or Premier Plugins
• Audio Sample Packs
• Scientific Journals
• Marine chart books or sailing maps
• Trade Show Registrations
• TEFL Education materials
  There are plenty of products that can safely disguise your 3 and 4 digit transfers rather than relying $3.99 smartphone apps.
  By default, each product will have its own sales page with shortened URL. You have three options with your Sellfy merchant gateway. Choose whatever is appropriate for the amount and frequency of your future transfers.
  $ – Bookmark each individual product page for later use.
  $$ – Complete your Sellfy profile, social media presence, and create a product wall.
  $$$ – Build a third party web store using a management plugin such as the WordPress Sellfy Buy It Now button. (Most logical for Four Horsemen readers)

Data Management
Purchasing CVVs is a gamble unless you know how to validate and organize your data. There is no one- size-fits-all approach to funding your PayPal account. We need to understand and identify the appropriate tools for each task. Even if you are just beginning and do not yet have a preferred BINs list you should get into the habit of researching your bases, no matter how small.
For example, you’ve acquired a lot of 20 CVVs from an auto-shop that advertised 70% validity. We’re not going to use the shop’s checker since we don’t want to check and purchase from the same place. We are still going to check our cards, but only by our standards. We may not want to check all of them, or only check the cards once we’ve identified the issuing bank, i.e., BIN.
We’ll enter our list of CVVs into a text editor like Notepad++and extract the entire column of the first six digits of each card number by holding Ctrl + Alt, then copying the entire column to a new file.

The first six digits are extracted and entered into a new text file.

Worldwide BIN directory
This site is a simple but invaluable resource to identify and organize your BINs. We can enter our column of BINs straight from our text file into the search field.

Search results are returned in the format shown below –

Ucheck
Validate card data using Luhn algorithm. Check 3DS (VBV/MSC) security. Check validity.
If you are not familiar with 3DS security,
Read More Here
Say what you will about checking CVVs, this site deserves to be mentioned. I have personally used this checker and my CVVs have stayed alive for months after. CVV data can be parsed from text files uploaded in .zip archives. The parser can effortlessly extract valid data from the messiest of text files. Highly recommended for those who like to check their cards. Their business is data integrity.

UCheck will just check if the card is live, though. A merchant code cannot be confused with an authorized purchase. You may use a variety of tools to make purchases on a “trial” or pre- authorization basis, meaning the transaction is staggered up to 30 days before the charge is shown on the card holder bill, if at all.

Authorization tools-
Tool 1
Tool 2
Tool 3

UniShop
Not just another auto shop, Uni updates more often than Vault Market but is not nearly as popular, likely due to the $100.00 entry fee, despite being immediately applied to your balance upon
registration.

They are a good source for both US and worldwide CVV data however their fullz are inconsistent. Some may have SSN/SOB while others will one have or the other but MMN. Some include 3DS passwords and some don’t.

I don’t suggest using either of the merchant checkers. However they do have a separate tool to check if a card is attached to a PayPal account, which is the reason they are mentioned in this guide. The bulk PayPal checker is not functional at the time of this writing but you may search one by one using only the card number, no EXP or CVC necessary.

KX – is used in PayPal.
KK – is OK

This site is an indispensable resource for turning your CVV data into fullz.
For example, we used UCheck to validate recently purchased CVV data and we see that one of our cards had a 3DS secure BIN but was not currently using the feature on the card. They may not use this card for online purchases or simply have registered with 3DS yet.

It is generally understood that you’ll need the card holder’s Social Security Number (SSN), Date of Birth (DOB), and, in some cases, Mother’s Maiden Name (MMN) to set or reset the password.

4147183094317783 | 07/25 | 684 | Urvashi Patel | 320 Trail St. | Madera | CA | 93637

So we check all the information on the card holder against whatever is returned from our query.

We’ll use the default fields of First and Last name but change the custom field to state.
While it’s a relatively unique name, our search for “Urvashi Patel” returned 23 results, nearly all from California, but we can cross reference unique identifiers, in this case State, from our data against the returned results

Using a little deductive reasoning we are then able to reset or change the 3DS password when prompted during our purchase.
You’ll need to keep your future search criteria in mind when shopping around for CVVs you expect to turn into fullz. Many directories such as This One or even This One will not have data for people born after 1985.
Zapili
One of the most important components of our operation, Zapili offers custom document scan services
for the following countries —

• USA
• United Kingdom
• Canada
• Germany
• Netherlands
• Switzerland
• Spain
  Photo ID, passport, utility bills, credit and gift cards can be customized and delivered in less than one minute.
  The average cost of each document is $11.00 at the time of this writing. An example template is shown below. The nine required fields are listed to the right in red.

We can validate the MRZ details (machine readable zone) of the passport by checking the data with UniqueID –
Encode MRZ
Decode MRZ
PayPal Overview
At this point we should have a general understanding of each of the components in our virtual assembly line of PayPal accounts and user profiles and how to manage them concurrently.

This section will outline how to structure our PayPal accounts so that we may safely receive funds from our front line and move them to our cash out account(s) on a regular, interruptible basis.

Even if accounts on the front line become limited due to dirty transactions we can continue safely making purchases against our Sellfy gateway.

Our environment allows us to remove one of the front line PayPal accounts without jeopardizing any of our other resources since none of the front line accounts are linked together and the only transfers happen within the context of a digital download purchase.

Your three Premier accounts act as worker bees to accept funds from a variety of sources which will be covered later in the document.

The Sellfy payment gateway acts as the gatekeeper and delegates your transfers through the use of digital download products in whatever amount you choose. Your digital download products act just as efficiently as regular transfers within the PayPal dashboard but they are safely outside the context of invoicing or sending money to friends and family. Rarely will see you “we are unable to process your payment right now…” especially keeping a regular purchase schedule.

Your Business account acts as the single repository for all front line accounts and is linked to an E-TRADEBrokerage account and debit card either to replace or supplement the PayPal MasterCard
debit.

a.
PayGarden
The premise of this method is that we purchase gift cards that exist within the PayGarden network in exchange for cash. Cash, in this case, that is automatically deposited to our PayPal account.

For the purposes of this guide we use Bass Pro Shops as the gift card vendor and This Site as the exchange broker.

Toys R Us, Eastern Sports, Barnes and Noble, as well as many other retailers offer gift cards with PIN.

You may choose to use the gift card like cash with select retailers using the PayGarden network, such as Private Internet Access.

See More Here
Use an email provider that is not immediately recognized as “free”, such as Outlook
Email delivery should take approximately 1-2 hours if your card was approved. You may or may not receive an email confirmation if your card was declined.

If you have been waiting for 6 hours on a slow shopping afternoon in the US, your transaction may have been declined on the backend processing.

Once you have the email with both your card and the PIN, go to The Site and create a Personal account.

You are not eligible to be a bulk seller yet.

Choose “Sell Gift Cards” at the very bottom of the page.

Choose “Bass Pro” as the merchant and enter the value of the card. You must explicitly choose that you have the PIN or else you cannot cash out via PayPal and it will default to hard copy check. You should expect 112 USD returned for every 150 gift card sold.

Choose again to receive funds via PayPal and confirm that you will provide the code online instead of mailing a physical card.

Enter the credentials of your PayPal account that will act as the recipient for this transaction.

You must provide a card to charge in case the funds are reversed from within The Site. Use the same CVV as you used to purchase the original gift voucher.

A single dollar authorization is placed on the card while the validity of the Bass Pro card is checked. They are not related. You may use another card if you have to.

You should receive a confirmation email once the gift voucher has been validated.

If you are this far along then it’s just a matter of waiting your turn in line.

The recipient will also receive an email confirmation once the funds are released into the PayPal account.
If all goes well you should have the funds in your PayPal account no more than 6 hours after the original purchase of the PayGarden voucher.
Your transactions may fail for the any number of the following reasons:

• Incorrect user agent string
• Invalid address data
• Incorrect keyboard language
• Incorrect time zone
• DNS leaks
• IP address flagged for suspicious activity
• Merchant called issuing bank for telephone verification
• “Stale” cookies that conflict with the user you are trying to mimic
• Incorrect SOCKS configuration
• SMS notifications
• Credit monitoring services
  Some retailers will use telephone verification before releasing the PIN of the gift card. You’ll receive email confirmations but it will seem as if the PIN wasn’t delivered.
  Use a Google Voice number with matching area code during checkout to handle this problem if and when it happens.
• 
  
  GiftRocket
  GiftRocket is admittedly very difficult and will likely cause you a bit of frustration but it’s worth mentioning because it is fast and efficient and works well for high value transactions regardless if the card is already attached to another PayPal account.
• 
  Do not consider your transactions complete until you have the funds safely in your account, even if you have successfully reset the 3DS password and you have your gift voucher.
• GiftRocket will likely wait until you try to redeem the voucher before verifying by telephone.
• Their entire business model is just adding $7.00 to transactions so eating the cost of a $200.00 fraudulent transaction is very expensive for this company.
• 
  Oddly enough their primary customer base seems to be young women who solicit men online for gifts and other things. Camgirls looking for “sugar daddies”.
• Many camgirl forums act as unofficial customer support channels for this rebadged Western Union-esque service.

c.
xClick
xClick is the dirtiest of all funding sources. All we are doing is manipulating an HTML form called “_xlick” and entering our transaction details just like we were prompting a