Carding via BNPL systems (Klarna, Afterpay, Affirm): user instructions

[Good Carder]

From a carder to carders. Classic carding is a war against 3DS, AVS, and AI anti-fraud. BNPL (Buy Now, Pay Later) services are a different universe. Klarna, Afterpay, and Affirm issue instant loans without a complex credit check. They focus on speed, not security. You register a drop, receive the item for just 25% of its value, and ignore the rest. The platform will write off the debt and ruin the drop's credit history, but that doesn't affect you.

In this article, I'll examine why BNPL is an ideal target for carders, how "buy now, pay later" works from a fraud perspective, the "first payment - receive the item - ignore the rest" scheme, and how to use VCC for the first payment to avoid detection.

Part 1: Why BNPL is the perfect target for carders​

BNPL services aren't just "convenient payments." They're billions of dollars in instant loans issued without credit checks, 3DS, or complex KYC. Their business is built on speed: the faster the approval, the higher the conversion rate. Every additional verification step is a lost customer. This makes them an ideal target.

2026 Statistics: The global BNPL market will reach approximately $560 billion in gross merchandise volume in 2025, growing at an annual rate of nearly 14%. The BNPL fraud market is growing rapidly. According to reports, losses from BNPL fraud could exceed $40 billion by 2027.

BNPL is particularly vulnerable to three types of fraud:

1. Synthetic ID fraud. Creating a fictitious identity to obtain a loan.
2. Account Takeover (ATO). Hacking a real user's account.
3. New Account Fraud (NAF). Registration of a new account under the name of a fictitious person.

For a carder, BNPL is an ideal target because:

• Minimal identity verification. For a first purchase of up to $200–500, your name, address, and email address are often sufficient. No passport scans or ID verification.
• No 3DS. You don't enter card details directly — BNPL pays the merchant with its own funds. There's no card authentication step at all.
• The first payment is only 25%. You receive the item for just a quarter of its value. The rest can be ignored.
• The money is not returned from your card. If the victim initiates a chargeback, the money is debited from the BNPL service, not you.
• Easy automation. BNPL services have APIs and web interfaces that can be automated through scripts.

As analysts note, BNPL providers suffer disproportionately high losses from first-party fraud because their underwriting is typically more sophisticated and their repeat customer behavior is shorter. It is this "sophistication" that we will exploit.

Part 2. How BNPL Works from a Fraud Perspective​

2.1. BNPL payment architecture​

When you select Klarna, Afterpay or Affirm at the checkout, the following happens:

1. You enter basic information: name, address, date of birth, email, phone number.
2. The BNPL service performs instant scoring. It checks your history against its database (not a credit bureau), analyzes data on previous purchases (if any), and makes a decision in 2-5 seconds.
3. BNPL pays the merchant the full price of the item. You must repay the BNPL debt within 2-4 weeks or in installments.
4. The first payment is debited instantly. Typically, it's 25% of the total amount (Afterpay, Klarna Pay in 4 days) or 0% (Klarna Pay in 30 days).

Key vulnerability: The BNPL service doesn't verify that you actually own the card used to make the initial payment. It only checks that the card is valid and has funds on it.

2.2. Weak verification for new users​

For first-time purchases of up to $200–$500, checks are minimal. Klarna, Afterpay, and Affirm don't require document uploads or video verification. Basic data is sufficient.

In 2026, a class action lawsuit was filed against Klarna in the Netherlands, alleging the company failed to conduct adequate credit checks and inform consumers of the risks. This confirms that BNPL services do leave loopholes.

The ideal candidate for BNPL fraud is someone with real but "clean" data and no credit history (such as a student or low-income individual). Such a drop doesn't raise suspicions in the scoring system, and the small purchase goes through without question.

2.3. The difference between "payment in installments" and "payment in 30 days"​

• Pay in 4 (Afterpay, Klarna): You pay 25% now, and the remaining 75% in three payments every two weeks. The first payment is 25% of the purchase price, not the full amount. Ideal for carders: you receive the item for 25% of the purchase price.
• Pay in 30 days (Klarna): You receive the goods now and pay in 30 days. This is the perfect option for carders: you receive the goods, sell them, and after 30 days, simply "forget" about the debt. The system will transfer you to debt collectors, but by then you've already received the money.

Part 3. The "First Payment - Receive Goods - Ignore Remaining Balance" Scheme​

3.1. Selecting a target​

The ideal product is digital (gift cards, activation keys, software) or highly liquid physical goods (iPhones, PlayStations, video cards). Klarna and Afterpay don't always approve gift card purchases, but you can buy another item and then return it for cash.

Why digital goods are convenient:

• Instant delivery (code by email).
• No need to mess around with drop addresses and forwarding.
• Easy to sell on P2P platforms.

3.2. Preparing the drop​

1. Find someone with real passport information (you can buy Fullz for $30-50 or hire one for $10-20).
2. Register a Klarna/Afterpay/Affirm account in their name. Use a clean proxy and anti-detection. The proxy country must match the drop's registration country.
3. For your first purchase, select an item worth $200–$500 (no more to avoid verification).
4. For the delivery address (if it's a physical product), use the drop address or parcel locker.

3.3. Purchase​

1. At the checkout, select "Klarna" or "Afterpay." Enter your drop details (name, address, date of birth, email, phone number). For amounts under $300, SMS confirmation is often not even required.
2. The system will approve it in seconds. The BNPL service sees that the drop has no history, but for a small purchase, that's not a problem.
3. The first payment (25% of the amount) will be debited from the drop card. Make sure the card has sufficient balance for the first payment. Use VCC (see Part 4).
4. The item has been shipped. If it's digital, you'll receive a code via email. If it's physical, the dropshipper will receive the item within 2-5 days.

3.4. Cashing out​

• Digital goods: sell the code on NoOnes, LocalMonero, or in Telegram channels for 70-80% of the face value.
• Physical goods: Sell on a local flea market (Craigslist, OfferUp, Facebook Marketplace) for 80-90% of retail or pawn.

3.5. Ignoring the remainder​

You don't pay the remaining debt (75% of the amount). Klarna, Afterpay, and Affirm will forward your data to a collection agency and call the merchant, but they can't physically collect the goods. After 3-6 months, the debt will be written off as a loss. This could result in a damaged credit history for the merchant, but if you paid them $50-$100 for using your data, they may be willing to take the risk.

According to Klarna, about 15% of all late payments are intentional fraud, where the scammers don't pay after receiving the goods. BNPL providers — especially Affirm and Afterpay — cover basic fraud on approved transactions, but this doesn't protect against first-party fraud, when the borrower themselves fails to repay the debt. This is precisely the "blind spot" we exploit.

Part 4. Using VCC for the First Payment​

If you don't have a drop card with a balance, you can use a virtual card (VCC) with a small balance ($50-$100). The main thing is that the card authorizes the first payment.

4.1. Where to get VCC for BNPL​

• RedotPay. Virtual Mastercard, USDT deposits. No KYC required, up to $5,000 per month. Custom descriptor available.
• Advcash (Volet). Virtual Mastercard cards. Up to $1,000 per day without verification.
• Privacy.com (US). Create virtual cards with a single transaction limit. Requires a US bank account.
• Klarna One-Time Card. Klarna itself provides single-use virtual cards for purchases at stores that aren't directly integrated with Klarna. You can use this card for payments, but it's linked to your Klarna account — not suitable for our scheme, as we want to avoid any connection.

Schematic with VCC:

1. You issue VCC with a balance of $100.
2. You buy a product for $400 via BNPL, the first payment of $100 is debited from VCC.
3. You receive the goods.
4. Don't pay the remaining $300. The VCC can be closed by then.

Risk: If the VCC is closed before the first payment is debited, the transaction may be canceled. Make sure the card is active for at least 2-3 days after the purchase.

4.2 Why VCC is ideal for BNPL​

BNPL services don't verify that you're the actual cardholder. They only check that the card is valid and has funds. A VCC with a $100 balance undergoes this verification just like a real card. After the first payment is debited, the card can be closed.

Important: Klarna doesn't accept certain card types, including Maestro, Electron, American Express, e-cards, and virtual cards. Use Visa or Mastercard from trusted issuers (RedotPay, Advcash).

Part 5. Risks and how to minimize them​

5.1. Collection agencies​

Klarna, Afterpay, and Affirm refer overdue debts to collection agencies. The collector will receive phone calls, emails, and threats of legal action. If the amount is small ($100-$200), the collectors usually stop paying within 3-6 months. Larger amounts ($1,000+) can result in legal action.

Solution: Keep the amount per collector to $500. For larger amounts, use multiple collectors.

5.2. BNPL blacklisting​

Klarna, Afterpay, and Affirm share fraud information through internal databases. If you use the same email address or phone number for multiple late payments, you will be blocked from all BNPL services.

Solution: Use a unique email address and phone number for each payment.

5.3. Verification via TrueName (Klarna)​

Klarna has implemented the TrueName system , which verifies the name on the bank card during the first payment. If the name on the card doesn't match the name on the registration form, the payment is declined.

Workaround: Use a drop card where the name matches the registration form. Or use a VCC, where the name can be set freely (RedotPay allows you to specify any name when issuing the card).

5.4. Return of goods after receipt (friendly fraud)​

If you received an item but initiate a return via BNPL, the system may request proof. Don't take any chances — it's better to simply not pay the remaining balance than to try to cheat with a return.

In some cases, merchants lose both the goods and the money during chargebacks through Klarna. For example, one Shopify merchant reported: "I used Klarna via Shopify Payments and lost both the goods and the money after a chargeback, despite confirmed delivery and full evidence provided." This confirms that BNPL services don't always protect merchants, which plays into our hands.

5.5. Legal Actions​

In the US and Europe, BNPL fraud can lead to criminal prosecution if the amount exceeds the felony threshold (usually $1,000–$2,500). Avoid handling amounts above this threshold unless you're certain of the transaction.

Part 6. Comprehensive Checklist​

• Choose a service: Klarna for international purchases, Afterpay for the US and Australia, Affirm for large amounts ($1,000+).
• Find a dropper with real information (name, address, DOB) and their consent. Fee: $20–50 per account.
• Register an account through a clean proxy and anti-detection. Use real drop data.
• Choose a product: digital (gift cards, software) or liquid physical (iPhone, video cards, consoles). Amount $300–$500 for your first purchase.
• Pay the first payment (25% of the amount) via a drop card or VCC with sufficient balance.
• Receive your product: code by email or parcel to your drop address.
• Redeem: code - at NoOnes, physical product - at a flea market or through resale.
• Ignore the remaining payments. Tell the dropper that they might be being harassed by debt collectors and pay them the agreed-upon amount.
• Delete your account after 2-3 overdue payments. Don't reuse it.

Summary​

BNPL services are the perfect tool for carders who want to receive goods without spending money on cards. The first payment is only 25% of the total amount, and the rest can be left unpaid. Weak verification allows accounts to be registered under the names of fictitious individuals with minimal data. Using VCC for the first payment sever the connection between you and the transaction. Risks include debt collectors and blacklists, but for small amounts ($200–$500), they are minimal.

Klarna, Afterpay, and Affirm aren't just "convenient payment options" — they're a hole in the system that can be exploited until regulators shut them down.

A quick one-line reminder:
"Klarna and Afterpay give you the goods for 25% now, and the rest later. But the later may not come. Register a drop with real data, take the digital product, sell the code on NoOnes. Debt collectors will call, but you already have the goods." BNPL is a loan that you don't have to repay if you don't mind ruining someone else's credit history."