Carding via instant money transfer services (Western Union, MoneyGram, Ria)

[Good Carder]

From carder to carders. Classic carding is always a war with payment gateways, 3DS, and AVS. But there are channels where security is built not on cryptography, but on bureaucracy. Western Union, MoneyGram, and Ria are systems built for speed, not security. They are required to issue money upon presentation of a code, without unnecessary checks. This is precisely what makes them the perfect target. You pay for a transfer with a stolen card, receive an MTCN code, and the drop takes the cash anywhere in the world. No product, no delivery, no chargebacks. Clean cash in 15 minutes.

In this article, I will analyze the architecture of instant transfers, the "card → transfer → MTCN → cash" scheme, methods for bypassing verification, pickup points in weakly regulated countries, and the risks you face.

Part 1: Why Money Transfer Systems Are Weaker Than Bank Cards​

Bank cards are protected by a multi-layered system: 3DS, AVS, CVV verification, transaction scoring, and behavioral analysis. Money transfer systems operate on the "sent and received" principle. Their business is built on speed, not security.

1.1 No 3DS or CVV verification​

When paying with a card via Western Union or MoneyGram, the payment gateway often doesn't request a 3DS. The transaction is considered "low-risk" because it's a money transfer, not a purchase of goods. To the bank, it looks like a legitimate transaction — a person sending money to family or friends. Stripe Radar and similar systems treat money transfers with less suspicion than purchases of electronics or cryptocurrency. As a result, non-3DS cards go through without additional authentication, and 3DS cards often don't require confirmation for amounts under $500.

Statistics 2026: According to fraud reports, credit transfers have overtaken card transactions as the largest fraud category in terms of losses. Authorized push payment schemes (APP scams), where victims are tricked into transferring money to scammers, now account for more than half of all losses from credit transfer fraud.

1.2. MTCN – the key to cash without verification​

An MTCN (Money Transfer Control Number) is a 10-digit code generated after a transfer is sent. To receive the money, the recipient only needs this code and identification. Without an MTCN, it's impossible to receive a transfer; with an MTCN, it's almost always possible. The system doesn't verify that the sender actually owns the card. It only checks that the code exists and the money hasn't yet been collected. This creates a perfect loophole: you pay for the transfer with a stolen card, receive an MTCN, and the money transfer agent picks up the cash at any Western Union or MoneyGram office. In 2026, scammers actively use "specialized software" and "bugs" to conduct fraudulent transfers through Western Union, promising MTCN delivery within minutes.

1.3. Instantaneity and Irreversibility​

Money transfers are like cash. Once the recipient has collected the money, it's virtually impossible to reverse the transaction. Western Union, MoneyGram, and Ria explicitly warn: "Once the money is paid out, we may not be able to give you a refund, even if you are a victim of fraud ." This means that even if the cardholder notices the charge and initiates a chargeback, the money is already yours. The bank will return the funds to the cardholder, but they will be debited from Western Union, not you. You're already out of the game.

1.4. Weak KYC for recipients​

The sender may undergo minimal verification (email and phone number). The recipient often doesn't require verification at all for amounts under $500. The MTCN and basic identification are sufficient. In some countries (especially in Africa, Southeast Asia, and Latin America), controls are so lax that it's possible to receive money with a fake ID or even without one. Most MoneyGram scams occur when senders are tricked into transferring money to strangers. Ria also warns: "Transferring money is like sending cash. Protect yourself from fraud by sending money only to people you know or can otherwise verify are trustworthy . "

Part 2. The "card → transfer → MTCN → cash" scheme​

2.1. Necessary components​

• A stolen non-3DS card with a balance sufficient for the transfer ($200–$1,000). US Fullz with billing is best.
• The drop is the person who will pick up the cash at the pickup point. The drop must have identification (fake is acceptable).
• VPN/proxy - the country must match the card's BIN and the sender's country.
• Anti-detect browser for fingerprint masking.

2.2. Step-by-step algorithm​

Step 1. Sender Registration and Verification:
Western Union allows you to send transfers online via its website or mobile app. For your first transfer of up to $500, an email address and phone number are often sufficient. For amounts above $500, basic verification is required, including uploading a photo ID. MoneyGram and Ria have similar requirements: for transfers above a certain threshold (e.g., €1,000), a scanned ID with a photo, signature, and date is required. MoneyGram also requires identity verification to use its services.

Step 2. Transfer Creation

1. Access the Western Union (or MoneyGram, Ria) website through a proxy corresponding to the BIN country.
2. Enter the recipient's details: name, country, and city. You can use the drop name.
3. Select payment method - credit/debit card.
4. Enter the stolen non-3DS card details.
5. Confirm the transfer. The system will generate a MTCN code (10 digits).

Step 3. Sending the MTCN to the dropper.
Send the dropper the MTCN code, the transfer amount, and the sender's name (which you specified). The dropper goes to the nearest Western Union (or MoneyGram, Ria) pickup location, presents the MTCN and ID, and collects the cash.

In Lebanon, for example, there have been cases of carders asking victims to send copies of money transfer receipts, after which they forged IDs in the recipient's name with a photo of one of the droppers and collected the transfer.

Step 4. Cashing out
. The dropper collects the cash. The dropper's commission is 20-30% of the amount. The rest is transferred to you (in cryptocurrency or cash).

Step 5. Covering your tracks.
After receiving the money, delete your account, change your proxy, and close your card (if it's still active). Western Union may request additional verification if the transfer is disputed.

2.3. Working with Ria and MoneyGram​

Ria Money Transfer allows you to fund your account using credit and debit cards, bank accounts, and cash (at 7-Eleven). Fees start at $0.99 per transfer, and delivery can take as little as 15 minutes. This makes Ria ideal for quick transactions — you pay with a stolen card, and the drop ship picks up the cash within 15 minutes. Ria also has an app with a 4.9 rating in the App Store, making it easy to conduct transactions from your smartphone.

MoneyGram, meanwhile, suffered a major data breach in 2024, when hackers gained access to the personal and financial information of millions of users, including names, email addresses, mailing addresses, and Social Security numbers. This means ready-made MoneyGram accounts with verified data are available on the dark web, making it easier to create legitimate sender accounts.

Part 3. Bypassing Identity Checks​

3.1. Recipient Verification Requirements​

Western Union requires a valid government-issued photo ID for almost all recipients. In the US, the following are acceptable: driver's license, state ID, US passport, permanent resident card (Green Card), military or tribal ID, and EAD (work authorization card). Foreign passports are also accepted, but some agents may request additional identification.

How to circumvent: Use fake IDs. In 2026, ID counterfeiting became accessible: AI-powered document generation, high-quality printers, and holograms make it possible to create IDs that pass visual inspection at the point of issue. In some countries (Nigeria, India, the Philippines), controls are so lax that you can get money with a photocopy of your passport.

3.2. Distribution points in countries with low control​

The best places to receive transfers:

• Nigeria. Western Union and MoneyGram are widely represented, but identity controls are minimal. Fake IDs are sold on every corner.
• India. A huge number of pickup locations, but weak verification for amounts under $500. Drops are active in major cities.
• Philippines. Western Union and Ria have thousands of locations, often in grocery stores. Identity verification is often a formality.
• Kenya, Tanzania. M-Pesa and other mobile money services are integrated with Western Union, allowing you to receive transfers to your phone without a physical ID.
• Latin America (Mexico, Colombia, Dominican Republic). Western Union is the main money transfer channel, with pickup locations operating with minimal verification.

In one case from 2026, a group of carders used fake Syrian IDs to receive money transfers in Lebanon. They asked victims to send copies of receipts, then forged an ID in the recipient's name using a photo of one of the money mules and collected the money.

3.3. Using Drops with Real Documents​

The most reliable method is to hire a money mule with real documents, who will collect the money for a 20-30% commission. The mule presents their real passport, collects the cash, and hands it over to you. If investigated, the police will trace the mule, not you.

Part 4. Risks and how to minimize them​

4.1. Passport requirement for amounts over $500​

Western Union, MoneyGram, and Ria may request a passport for amounts over $500. For amounts over $1,000, a tax identification number (SSN or ITIN) may be required.

Solution: Keep the amount per transfer to between $300 and $500. For larger amounts, use multiple transfers to different drop accounts. Mobile money (M-Pesa, Airtel Money) can also be used as an intermediary, as they have higher limits and looser controls.

4.2. Card blocking and chargeback​

The cardholder may notice the charge and initiate a chargeback. The bank will refund the cardholder, but the money will be debited from Western Union, not you. Western Union may block the sender's account and blacklist it. This is not a problem — the account was a one-time use.

Solution: Use fresh accounts for each transfer. Don't keep funds in your Western Union account.

4.3. Western Union requests additional verification​

If Western Union suspects fraud, it may request additional verification (such as a selfie with your passport or proof of address). This may happen before or after the transfer is sent. Use accounts that have already been verified.

4.4. The drop "throws" and disappears with the money​

The money launderer may take the cash and not give it back to you. This is the main risk. Use a partial payment system: the money launderer receives an advance payment (10-20%) after the first successful transfer, and the rest after they transfer the money to you. You can also use an escrow service through a trusted intermediary.

4.5. The mobile operator calculates the drop​

In African countries, police often request billing information from mobile operators to determine the location of the money mule. In Kenya, police use mobile operator data to track fraudulent networks. In Nigeria, the EFCC (Economic and Financial Crime Commission) also actively uses mobile operator data.

Solution: the money mule must use a separate device without social media, with location services disabled, and replaceable SIM cards. After receiving the transfer, the SIM card is destroyed.

Part 5. Checklist for carding via Western Union / MoneyGram / Ria​

• Select a service: Western Union is the most liquid, Ria is the fastest (15 minutes), MoneyGram is average.
• Prepare a stolen non-3DS card with a balance of $200–500. US Fullz with billing is best.
• Create an account on the selected service via VPN/proxy (country = BIN). Use a temporary email and phone number (SMS activation).
• Complete verification (if required). Upload a fake ID or use an account that has already been KYC-verified.
• Create a transfer in the drop's name (real or fake). Amount: $200–$500.
• Pay for the transfer with the stolen card. Obtain an MTCN code.
• Send MTCN to the drop. The drop will collect the cash at the pickup point.
• Get money from the drop (minus its 20-30% commission).
• Delete your account, change your proxy, and close your map. Don't reuse your account.
• For large amounts, use multiple transfers to different drops.

Summary​

Western Union, MoneyGram, and Ria are ideal channels for cashing stolen cards. The MTCN code is the key to cash, which you receive in 15 minutes. Weak verification, the lack of 3DS, and the irreversibility of transfers make these systems vulnerable. The main risks are the passport requirement for amounts over $500 and the scamming of drop-money machines. Use amounts up to $500, fake IDs, and drop-money machines in countries with poor control (Nigeria, India, the Philippines, and Kenya). With proper OPSEC, money transfers can become your fast and stable source of cash.

A quick one-line reminder:
"Western Union + non-3DS card = MTCN in 5 minutes. Drop-money machines collect cash using a fake ID. Amounts up to $500 require no passport. Nigeria, India, and the Philippines have poor control. Ria means 15 minutes to cash. MTCN is the key to cash." "Burn your account after the transfer. And don't forget to pay the drop, otherwise he'll screw you."