Carding via BNPL (Buy Now, Pay Later) systems: Klarna, Afterpay, Affirm

[Good Carder]

From carder to carders. While traditional carding is suffocated by 3DS, BIN filtering, and AI anti-fraud, smart money has moved to where the credit risk outweighs the risk of fraud: BNPL (Buy Now, Pay Later) systems. Klarna, Afterpay, and Affirm aren't just "buy now, pay later." They offer billions of dollars in instant loans issued without a credit check, without 3DS, and without CVV. It's the perfect tool for carders, if you know how to use it.

In this article, I'll examine the architecture of BNPL payments, how Klarna and Afterpay make decisions in seconds, vulnerabilities during the initial purchase, the "buy a digital product in installments - receive the product - don't pay the rest" scheme, as well as the risks and how to minimize them. Let's get started.

Part 1. BNPL Architecture: How You Get Credit Without Verification​

BNPL systems operate on the "instant approval" principle. You select an item, click "Klarna" or "Afterpay" at the checkout, enter basic information (name, address, date of birth, sometimes a phone number), and the system makes a decision in 2-5 seconds. The key difference from traditional carding is that you don't pay directly with a stolen card. You receive credit in your name (or the name of the cardholder), and the BNPL service pays the merchant. You must repay the BNPL debt in 2-4 weeks or in installments.

Technical architecture:

1. Payment gateway partnerships. Klarna and Afterpay are integrated into Shopify, WooCommerce, and Magento via dedicated plugins. They work on top of standard payment methods, adding their own layer of functionality.
2. Minimal identity verification. For a first purchase of $200–$500, only a name, address, and email address are often sufficient. No passport scans, no ID verification. This is a weakness we'll be exploiting.
3. No 3DS. Since you don't enter card details, and BNPL pays the merchant with your own funds, there's no card authentication step. BNPL verifies your creditworthiness using its internal databases (purchase history, scoring).
4. The first purchase is the easiest. For new users, limits are low ($200–$500), and verification is minimal. After several successful payments, limits increase to $2,000–$5,000.

2026 Statistics: BNPL transaction volume exceeded $500 billion annually, with fraud rates increasing by 40% over the past two years. Klarna reports a 150% increase in fraud attacks in 2025–2026, but admits that traditional detection methods (IP, device fingerprinting) are ineffective because the user is legitimate (a drop with real data).

Part 2. BNPL vulnerabilities for carders​

2.1. Weak verification on first purchase​

For purchases under $300–$500, Klarna and Afterpay may not even require a phone number. A name, email address, and address are sufficient. You can register an account under a fictitious name, use a temporary email address, and any address (for example, a hotel address). The system will only check whether the email address is blacklisted and approve the purchase.

Example: In 2025, researchers registered a Klarna account under the name "John Doe" with a Las Vegas hotel address and purchased an iPad for $499 on an installment plan. The payment went through, even though no verification was performed.

2.2. Using drops with real, but "poor" data​

Klarna and Afterpay use internal scoring based on previous purchase data, not credit history. If a drop has never used BNPL, their score is neutral, and a small purchase will be accepted. The ideal candidate is a student or low-income person with no credit history but valid passport information.

2.3. The difference between "payment in installments" and "payment in 30 days"​

• Pay in 4 (Afterpay, Klarna): You pay 25% now, and the remaining 75% in three payments every two weeks. It's important to us that the first payment is 25% of the purchase price, not the entire amount. If your card has a $100 balance and the item costs $400, you pay $100 now, receive the item, and don't have to pay the remaining amount (risking being taken to a collection agency).
• Pay in 30 days (Klarna): You receive the goods now and pay in 30 days. This is the perfect option for carders: you receive the goods, sell them, and after 30 days, simply "forget" about the debt. The system will transfer you to debt collectors, but by then you've already withdrawn the money.

2.4. Possibility of using virtual cards for the first payment​

For the first payment (25% of the total amount), you can use VCC with a small balance. Once the item is received, the remaining payments can be ignored. Klarna and Afterpay do not block access to the item if it is overdue (unlike physical goods purchased on in-store credit, which can be repossessed).

Part 3. The "Buy on installment, receive the goods, and don't pay the balance" scheme​

3.1. Selecting a target​

The ideal product is digital (gift cards, software, subscriptions) or physical but highly liquid (new iPhones, PlayStations, video cards). Klarna and Afterpay discourage gift card purchases, but you can buy another item and then return it for cash.

Why digital goods are convenient:

• Instant delivery (code by email).
• No need to mess around with drop addresses and forwarding.
• Easy to sell on P2P platforms.

3.2. Drop registration​

1. Find someone with real passport information (you can buy Fullz for $30-50 or hire one for $10-20).
2. Register a Klarna or Afterpay account in his name. Use a clean proxy and anti-detection.
3. For your first purchase, select an item worth $200–$500 (no more to avoid verification).
4. For the delivery address (if it's a physical product), use the drop address or parcel locker.

3.3. Purchase​

1. At the checkout, select “Klarna” or “Afterpay”.
2. Enter the drop details (name, address, date of birth, email, phone number). For amounts under $300, SMS confirmation is often not even required.
3. The system will approve in seconds.
4. The first payment (25% of the total) will be debited from the drop card (or your VCC). Please ensure there is sufficient balance on the card for the first payment.
5. The item has been shipped. If it's digital, you'll receive a code via email. If it's physical, the drop will receive the item within 2-5 days.

3.4. Cashing out​

• Digital Goods: Sell your code for NoOnes or LocalMonero for 70-80% of the value.
• Physical goods: sell them at a local flea market (Craigslist, OLX, Avito) for 80-90% of retail or pawn them.

3.5. Ignoring the remainder​

You don't pay the remaining debt (75% of the amount). Klarna and Afterpay will forward your details to a collection agency and call the merchant, but they can't physically collect the goods. After 3-6 months, the debt will be written off as a loss. This could result in a damaged credit history for the merchant, but if you paid them $50-$100 for using your details, they may be willing to take the risk.

Statistics: According to Klarna's 2026 report, approximately 15% of all late payments are intentional fraud, in which the scammers fail to pay after receiving the goods.

Part 4. Using VCC for the First Payment​

If you don't have a drop card with a balance, you can use a virtual card (RedotPay, Advcash) with a small balance ($50-$100). The main thing is that the card authorizes the first payment.

Workflow::

1. You issue VCC with a balance of $100.
2. You buy a product for $400, the first payment of $100 is debited from VCC.
3. You receive the goods.
4. Don't pay the remaining $300. The VCC can be closed by then.

Risk: If the VCC is closed before the first payment is debited, the transaction may be canceled. Make sure the card is active for at least 2-3 days after the purchase.

Part 5. Risks and how to minimize them​

5.1. Collection agencies​

Klarna and Afterpay transfer overdue debts to debt collectors. The debt collector will receive calls, emails, and threats of legal action. If the amount is small ($100-$200), the debt collectors usually stop paying within 3-6 months. If the amount is large ($1,000+), they may file a lawsuit, but this requires finding the debt collector, and if the data is fake, they won't find it.

Solution: Use debt collectors who understand the risks and are willing to accept them for a commission. Or use completely fake data (but then the first payment may fail due to a lack of scoring).

5.2. BNPL blacklisting​

Klarna and Afterpay share information about fraudsters through internal databases. If you use the same email or phone number for multiple overdue payments, you will be blocked from all BNPL services.

Solution: Use a unique email and phone number for each payment.

5.3. Verification via TrueName (Klarna)​

Klarna has implemented the TrueName system , which verifies the name on the bank card during the first payment. If the name on the card doesn't match the name on the registration form, the payment is declined. This protects against the use of unauthorized cards.

Workaround: Use a drop card where the name matches the registration form. Or use a VCC, where the name can be set freely (not all issuers allow this). RedotPay allows you to specify any name when issuing the card.

5.4. Return of goods after receipt (friendly fraud)​

If you received the item but initiate a return via BNPL, the system may request proof. Don't take any chances — it's better to simply not pay the remaining balance than to try to cheat someone with a return.

5.5. Legal Actions​

In the US and Europe, BNPL fraud can lead to criminal prosecution if the amount exceeds the felony threshold (usually $1,000–$2,500). Avoid handling amounts above this threshold unless you're certain of the transaction.

Part 6. Checklist for BNPL carding​

• Choose a service: Klarna - for international purchases, Afterpay - for the US and Australia, Affirm - for large amounts ($1,000+).
• Find a drop with real information (name, address, DOB) and their consent. Fee: $20–50 per account.
• Register an account through a clean proxy and anti-detection. Use real drop data.
• Choose a product: digital (gift cards, software) or liquid physical (iPhone, video cards, consoles). Amount $300–$500 for your first purchase.
• Pay the first payment (25% of the amount) via a drop card or VCC with sufficient balance.
• Receive your product: code by email or parcel to your drop address.
• Redeem: code - at NoOnes, physical product - at a flea market or through resale.
• Ignore the remaining payments. Tell the drop that they might be being harassed by debt collectors and pay them the agreed-upon amount.
• Delete your account after 2-3 overdue payments. Don't reuse it.

Summary​

BNPL services are the perfect tool for carders if you want to receive goods without spending money on cards. The first payment is only 25% of the total amount, and the rest can be left unpaid. Weak verification allows accounts to be registered under fictitious names with minimal data. The risks are debt collectors and blacklists, but for small amounts ($200–$500), they are minimal.

Klarna, Afterpay, and Affirm aren't just "convenient payment options" — they're a hole in the system that can be exploited until regulators shut them down.

A quick one-line reminder:
"Klarna and Afterpay give you the product for 25% now, and the rest later. But the later may not come. Register a drop with real data, take the digital product, sell the code on NoOnes. Debt collectors will call, but you'll already have the product." BNPL is a loan that you don't have to repay if you don't mind ruining someone else's credit history."