Fraud-as-a-Service (FaaS): Rent AI-powered carding tools for $20 per month

[Good Carder]

From a carder to carders. Remember the days when you had to learn Python, understand proxies, and write OpenBullet configs to start carding? No longer. All you need is $88 a week, a Telegram account, and the desire to make money. Fraud-as-a-Service has transformed carding from a craft into a production line accessible to any schoolchild with pocket money.

In this article, I'll explore how the Fraud-as-a-Service market works in 2026, what tools are sold on the darknet, how much they cost, and how this industry is changing the rules of the game. No morals involved — just numbers, facts, and real-world experience.

Part 1: What is FaaS and Why It Changed Everything​

Fraud-as-a-Service (FaaS) is a model in which professional carders, phishers, and other fraudsters package sophisticated fraud tools into ready-made solutions and sell them as a subscription. No technical skills are required. Simply pay and gain access to a pipeline that previously required months of training.

Key statistics for 2026:

• Over the past year, more than 27 million card records have been compromised through Telegram channels alone that offer card generation and testing services.
• The number of scam merchant accounts has quadrupled compared to the previous year, affecting 230 processing companies in 40 countries.
• Mentions of AI tools on underground forums increased from 38 in December to 1,486 in February — an increase of more than 3,800%.
• Mastercard predicts global losses from fraud will increase by 153% by 2030, from $23 billion to $58.3 billion.

FaaS operates like a legitimate SaaS startup: it offers freemium models, pricing plans, technical support, regular updates, and even loyalty programs. One group, EvilTokens, saw its attacks increase by 1,380% in the first months of 2026 compared to the same period last year.

Part 2. FaaS Tools Catalog: What You Can Buy for $20–$1,000​

The FaaS market is divided into several categories. Here's what's actually being sold in 2026.

2.1. Phishing-as-a-Service (PhaaS) – a phishing factory​

This is the most widespread segment. You pay a subscription and receive ready-made phishing pages, email templates, and automated mailings.

Tool	Price	What does it do?	Scale
Outsider Enterprise	$88/week or $200/month	290+ ready-made templates for faking websites of banks, USPS, E-ZPass, and other services	3.87 million cards stolen, $1.9 billion in losses
Forg365	$400/month or $3,800/year	AI-powered phishing email generation, Microsoft 365 session hijacking, and automated management of compromised mailboxes	5-day free trial, Device Code phishing support
EvilTokens	$600–$1,500 depending on the plan	Personalized phishing attacks with AI, each victim receives a unique email	Attacks increase by 1380%, bypassing MFA
BlackForce	$200–1 000	Injecting fake MFA windows into a real website, intercepting OTP codes in real time	Bypassing two-factor authentication
GhostFrame	$200–1 000	Similar to BlackForce, session hijacking	Mass attacks on corporate accounts
InboxPrime AI	$200–1 000	AI-powered generation of convincing phishing emails	Bypassing spam filters
Spiderman	$200–1 000	Visual phishing page builder for cloning banking portals	Mass creation of fake pages

The most interesting thing about PhaaS isn't the tools themselves, but their accessibility. Outsider Enterprise sold subscriptions through a Telegram bot, allowing anyone without technical skills to start sending phishing messages for $88 a week.

Quote: "We're seeing a clear maturation of the PhaaS market, as carders and fraudsters increasingly integrate AI workflows into their products. The result is directly visible in telemetry: a 1,380% increase in device-code phishing attacks."

2.2. Card-Testing-as-a-Service – checking cards without a checker​

You don't even need to write your own checker. You simply buy access to a platform that does everything for you.

• More than 27 million card records were compromised through Telegram channels offering card generation and testing services.
• These services use BIN attacks to generate mass lists of numbers from known BIN ranges and then run them through gateways to find live ones.
• The cost to check a thousand cards can be as little as a few dollars.

2.3. Synthetic Identity-as-a-Service – creating fake identities​

Bypassing KYC on crypto exchanges and banks requires documents and identification. This is now also sold as a service.

Service	Price	What does it include?
Synthetic ID kit	~$5	AI-generated face + voice + biometric data
Deepfake-as-a-Service	from $10/month	Real-time face swapping, voice cloning
Virtual camera	$20–50	Substituting a video stream to bypass KYC

Dozens of Telegram channels openly advertise software for spoofing video feeds during KYC verification. Instead of live selfies, scammers use AI-generated faces to create fake accounts on exchanges. These channels have thousands of subscribers and operate as full-fledged online stores with product demonstrations, installation guides, and technical support.

2.4. eSkimmer-as-a-Service – Website skimming without skills​

Magecart attacks (injecting skimmers into legitimate websites) are now also sold as a service.

• 7,300 new eSkimmer infections detected in 2026.
• There are 10,500 websites with active skimmers.
• Estimate: 234 million transactions were compromised via Magecart in 2025.

The business model is simple: an experienced provider installs and maintains the skimmer and, in return, receives a share of the stolen data.

2.5. OTP-Interception-as-a-Service – interception of one-time passwords​

This is a rapidly growing segment because it allows for bypassing 2FA and accessing digital wallets.

It includes:

• Ghost tapping is the retransmission of an NFC signal.
• SIM swapping as a service.
• SS7 attacks – interception of SMS messages with OTP codes at the operator level.

Part 3. Democratizing Carding: How FaaS Makes Anyone an Carder​

Previously, to start carding, you had to:

1. Learn to program (at least at a basic level).
2. Understand proxies and fingerprints.
3. Find card sellers and avoid scams.
4. Write or buy a checker.
5. Set up infrastructure.

Now it's enough:

1. Install Telegram.
2. Find a channel with FaaS services.
3. Pay for your subscription with cryptocurrency.
4. Follow the instructions.

The barrier to entry has dropped to zero. "The financial barrier to entry for newcomers is practically zero thanks to widely available freemium tools."

3.1. Telegram as a FaaS Platform​

Telegram has become a major showcase for FaaS for several reasons:

• Mass public channels – you can advertise your services to thousands of subscribers.
• Anonymous usernames make it difficult to identify the owner.
• Automatic bots – sales, technical support, and product delivery are automated.
• Large file size - tools and datasets can be transferred.
• Instant restoration - if a channel is banned, a new one will appear in minutes.

"Telegram is no longer just a messenger; it's an entire ecosystem. It allows large anonymous groups, bots, encrypted chats, and instant file sharing to coordinate, recruit, and distribute content. If one channel is shut down, another one appears within minutes."

3.2. Prices: from $20 to $1500​

FaaS tools are available for the price of a streaming subscription:

Tool	Price	What do you get?
Hacked ChatGPT account	$0.10	Access to LLM for generating phishing
Synthetic ID kit	$5	Face + voice + biometrics
Entry-level phishing kit	$20	Ready-made templates for bypassing spam filters
Outsider Enterprise	$88/week	290+ templates, automatic mailing
EvilTokens	$600–1500	AI-personalization, MFA bypass
Forg365	$400/month	Microsoft 365 Attacks, Session Hijacking

For $20 a month, you can rent an AI tool that will do 90% of the work for you. The rest is just following the instructions.

Part 4: Why FaaS is Changing the Carding Landscape​

4.1. Conveyor belt instead of craft​

Carding used to be a craft. You had to know how the payment gateway worked, how to bypass 3DS, how to choose a proxy. Now it's a conveyor belt. You simply upload a list of cards to a ready-made tool and get the result.

Services are divided into specialized roles:

Role	What does it do?	How is it monetized?
Tool supplier	Creates AI Tools	Sells subscriptions
Data provider	Collects leaks, Fullz	Sells bases
Carder	Uses tools	Steals and cashes out
Drop provider	Provides accounts for withdrawal	Takes a commission

4.2. AI Personalization at Scale​

Personalized phishing emails used to be the preserve of spear phishing attacks. Now, AI can do this on a scale that targets thousands of victims simultaneously.

"In hundreds of EvilTokens-related incidents, no two phishing emails were alike. This level of personalization was previously only available in manual, targeted campaigns. Now, it's available to any carder or scammer for the price of a subscription."

This means that traditional detection methods (pattern searching) no longer work.

4.3. Fragmentation and Stability​

The FaaS ecosystem is built to be indestructible:

• If the paid tariff is blocked → the free one continues to work.
• If the site is down → The Telegram bot continues to work.
• If a Telegram channel is banned → the forum topic remains.
• If the forum is captured → the site remains.

Each channel is a backup for the others.

Part 5. A Real Case: How I Used a FaaS Tool​

In January 2026, I decided to test one of the PhaaS tools. I won't reveal the exact name, but let's say it was one of the $200-per-month AI phishing kits.

What I got:

1. A control panel with templates for 50+ brands (banks, delivery, social media).
2. AI-based email generator : Enter your brand name, and the AI will generate 20 email variants.
3. Automatic mailing via SMTP servers with IP rotation.
4. Data collection – all logins/passwords entered by victims were recorded in the panel in real time.
5. Integration with Telegram – notifications about each new victim.

Result in 3 days:

• 5,000 emails sent.
• 230 clicks on the link.
• 47 entered logins and passwords.
• 12 cards with CVV.

Costs: $200 + setup time (30 minutes). Profit from selling 12 cards is about $400 (if selling at $30-40 each). ROI ~100% in 3 days. And this is without any technical skills.

What went wrong:

• Some of the emails ended up in spam (I had to change SMTP servers).
• Some victims were from countries where cards are not accepted.
• One of the accounts was blocked after 2 days.

Conclusion: The tool works, but requires minimal tweaking. The $200 investment pays for itself within the first week.

Part 6. Risks and how to minimize them​

6.1. The provider may be a scam​

Not all FaaS providers are honest. Some take your money and disappear, while others sell tools with backdoors (they'll steal all your data).

How to check:

• Look for reviews on forums (Dread, Exploit).
• Buy through escrow if possible.
• Start with the minimum tariff.

6.2. Legal risks​

Even if you use a ready-made tool, you are responsible for the results. In the US and Europe, such activity is illegal.

How to minimize it:

• Use tools that don't require installation on your computer.
• Work through VPS with clean proxies.
• Don't store logs on your main device.
• Do not use the tools on your own country's territory.
• Work through a chain of proxies and VPN.

Summary​

FaaS has changed carding forever. The technical barrier is gone. Anyone with $88 and a Telegram account can launch a phishing campaign that previously required a team of developers. Outsider Enterprise, for $88 per week, stole 3.87 million cards and cashed out $1.9 billion. EvilTokens, for $600 per month, increased attacks by 1380%.

These aren't just new tools — it's a new economy. Carding has transformed from a craft into an assembly line. And if you're not yet using FaaS, you're falling behind. But remember — every tool can be a trap.

A quick one-line reminder:
Outsider Enterprise — $88 per week, 3.87 million cards. EvilTokens — $600 per month, +1380% attacks. Forg365 — $400 per month, MFA bypass. Synthetic ID — $5, deepfake — $10 per month. The barrier to entry is $20 and Telegram. Carding 2026 isn't a skill, it's a subscription. You pay and you get a conveyor belt. But remember: for $88, you're buying not only a tool, but also a risk."