Promo code and cashback farming via virtual cards and AI-based behavior simulation

[Good Carder]

From carder to carders. Classic carding is becoming increasingly difficult: 3DS is everywhere, AVS is suffocating, and non-3DS BINs are rare. But there is a way to make a profit without hit cards on sites with risky receipts. Instead, you register hundreds of accounts in loyalty programs, receive welcome bonuses and cashback, and then carefully withdraw them. Virtual cards, AI emulation of human behavior, and automated registrations are what turn bonus farming into a fully-fledged scheme.

In this article, I'll explore which services offer the biggest bonuses, how to register accounts en masse, how to use virtual cards for verification, and how to simulate real user behavior (scrolls, clicks, pauses) using AI. I'll also show you a scheme for "infinite cashback" through refunds and P2P exchangers.

Part 1: Why Farming Promo Codes and Cashback Is a Gold Mine​

Loyalty programs and cashback services (TopCashback, Rakuten, Capital One Shopping, local banking apps) pay real money for attracting customers. A typical welcome bonus for a new user is 10-20 for the first purchase, 5-10 with no minimum spend.

The problem for businesses: they expect one bonus per customer. But if you create 100 accounts, you'll receive 100 bonuses. The key is to ensure the system doesn't link these accounts to each other.

Why this is more profitable than carding:

• There is no risk of chargeback (you pay with real money or virtual cards with a small balance).
• You don't need "live" cards with a large balance - even prepaid cards with $5-10 are suitable.
• Less chance of attracting the attention of law enforcement (you're not stealing other people's cards, you're just registering multiple accounts).
• The scheme is scalable: one carder can manage hundreds of accounts using antidetect and bots.

Average income: farming on TopCashback and Rakuten, you can squeeze out 500-1000 rubles per month from a single account if you make real purchases. However, large-scale farming with virtual cards yields 5-10 rubles per account, and with hundreds of accounts, you can earn 500-1000 rubles per month, with virtually no costs. The main expenses are virtual cards (0.5-2 each), proxies ($0.1-0.2 per account), and setup time.

Part 2. Cashback Services: How They Work and Where to Find the Biggest Bonuses​

Cashback services are affiliate networks. You follow their link to a store, make a purchase, and the service receives a commission from the store and returns a portion (usually 1-10%) to you. Registering using a referral link often provides a fixed bonus ($5-$15).

Top 3 cashback services for farming (2027):

Service	Registration bonus	Withdrawal limit	Peculiarity
TopCashback (US/UK)	$10 after your first purchase	$5.01	The highest cashback (up to 15%)
Rakuten	10(10(30 during bonus periods)	$5.01	Payouts via PayPal or check
Capital One Shopping	$5–10 per registration (not always)	$5	Integrated as an extension, automatic search for promo codes

How the farm works: Register an account with a cashback service (using a new email, IP address, and fingerprint). Follow the link to a store (e.g., Amazon or Walmart) and purchase something using a virtual card with a minimum balance (e.g., a 10-dollar Amazon gift card). The service credits a welcome bonus (e.g., 10). You withdraw the money via PayPal to a dummy account or to the virtual card. Costs: 10 for the purchase (which you can then return or use) + fees. Profit: 10 bonus.

"Endless cashback" scheme through returns: If the store allows returns and the cashback has already been credited before the return, you can return the item and receive both the bonus and the money back. Some services (e.g., Rakuten) revoke the cashback upon return, but not always. Test it out.

Part 3. Virtual cards for farming: which ones are suitable and where to get them​

To verify your account and make purchases, you need virtual cards with a small balance. Regular cards aren't suitable (you'll need a lot). Use virtual card generators (VCCs) or cards with quick issue options.

Top 3 VCC services for farming:

Service	Price per ticket	No KYC?	Limits
Advcash (Volet)	$1 (issue)	Partial (up to $1000 without verification)	Up to 10 cards per account
RedotPay	$2	Yes (without verification up to $500)	Issue of up to 5 cards
Capital One Eno (US only)	For free	Requires a real account	Virtual cards with limits, but not suitable for mass farming
Buying cards on the darknet	$0.5–2	Yes	Any BIN, but can be burned

For mass farming (100+ cards), it's best to use Advcash. Create an account (without verification), issue 10 cards ($1 each), and top them up from your main wallet (crypto). You can register multiple Advcash accounts (using different proxies and email addresses) to get more cards.

Topping up virtual cards: Transfer $10–20 to each card. This is required to make your first purchase (to receive the welcome bonus). After receiving the bonus, you can close the card.

Part 4. Mass registration of accounts with AI-simulated behavior​

Registering thousands of accounts manually is hell. You automate everything: from email creation to profile filling. But cashback services' antifraud systems (like Rakuten's) analyze behavior. If registration takes 10 seconds, without scrolling, and with the same input pattern, you're banned.

Components of automated farming:

1. Antidetect browser with API (Dolphin Anty, Octo, GoLogin). Each account has its own profile with a unique fingerprint.
2. Residential proxy pools (50–100 IPs). One IP per 2–3 accounts per day. Use only clean proxies (fraud score <20).
3. Email generator. You can use Catch-all domains (buy a domain for $5, set up Catch-all). Create addresses like user{random}@yourdomain.com. No temporary emails—they're blacklisted.
4. Virtual numbers for SMS. SMS-activate or 5sim — for verification (if required).
5. AI behavior emulation: Scripts with human-like delays, random mouse movements, and scrolling.

An example Python script with Playwright for registering with TopCashback:

import asyncio
from playwright.async_api import async_playwright
import random

async def register_tcb(email, proxy, fingerprint):
async with async_playwright() as p:
browser = await p.chromium.launch(
headless=False,
proxy={"server": proxy},
args=[f"--window-size={fingerprint['width']},{fingerprint['height']}"]
)
context = await browser.new_context(
user_agent=fingerprint['user_agent'],
viewport={"width": fingerprint['width'], "height": fingerprint['height']},
locale="en-US",
timezone_id="America/New_York"
)
page = await context.new_page()

# Simulate scrolling and delay before Action
await page.goto("https://www.topcashback.com/ref/...")
await page.wait_for_timeout(random.randint(2000, 4000))
await page.evaluate("window.scrollBy(0, 300)")
await page.wait_for_timeout(1000)

# Filling out the form
await page.click('a[href="/join"]')
await page.wait_for_timeout(1000)
await page.fill("#email", email)
await page.fill("#confirm_email", email)
await page.fill("#password", "StrongP@ss123!")
await page.wait_for_timeout(500)

# Solving captcha (if any)
# ... (integration with CapSolver)

await page.click("#register_button")
await page.wait_for_timeout(3000)

# After registration, add behavior: page browsing
await page.goto("https://www.topcashback.com/merchants/amazon/")
await page.wait_for_timeout(random.randint(5000, 8000))
await page.evaluate("window.scrollBy(0, 500)")

await browser.close()

AI-based behavioral simulation (LSTM/GAN): For the most complex systems (Rakuten, Capital One Shopping), use models trained on real user sessions. Record a real user's rrweb session, then the script replicates it with variations in latency and trajectories. This bypasses detection.

Part 5. The "Infinite Cashback" Scheme Through Returns​

This is a scheme where you receive cashback for a purchase and then return the item, keeping both the cashback and the money. Not all cashback services allow this, and some (especially smaller ones) don't check returns.

The algorithm:

1. Register an account on the cashback service (using a referral link to receive a bonus).
2. Follow the link to the store (Amazon, Walmart, AliExpress) and buy the product (for example, electronics or a gift card).
3. You receive cashback (usually within 30–90 days).
4. Return the item to the store (within 30 days) and receive a full refund to your card.
5. Cashback remains in the service account (unless revoked). Withdraw it via PayPal or to your card.

Risks: Large cashback services (Rakuten) have learned to track returns and cancel cashback. To avoid this, use stores with a long return period (Amazon: 30 days) and withdraw cashback before the return. Some services allow you to withdraw cashback even if the return hasn't yet been processed.

The gift card option: Buy an Amazon gift card (which is non-refundable), receive cashback, and sell the gift card on a P2P platform for 85-90% of its face value. Conversion losses are 10-15%, but the cashback more than offsets this. This scheme is more stable.

Part 6. Monetization and Withdrawals​

You've accumulated cashback on TopCashback, Rakuten, and other accounts. How can I withdraw it without being blocked?

Withdrawal methods:

• PayPal (to a dummy account). The most common. Create a PayPal account for the drop and withdraw the cashback there. Then transfer it to another PayPal account or to a crypto card (Advcash). PayPal's fee is 2–5%.
• Virtual cards (Payoneer, Advcash). Some services withdraw funds directly to your card. If the card is virtual and not linked to an individual, that's great.
• Bank transfer (risky). Use only through a drop account if the amount is large.

Mass Withdrawal: When you have 100 accounts with a $10 bonus, you can't withdraw everything to one PayPal account—that's a red flag. Use multiple drop accounts (5-10) and spread out the withdrawals.

Scaling: Run a farm on 200 accounts, withdraw 5-10 from each, and earn 1000-2000 per month. Costs: virtual cards (0.5-2 x 200 = 100-400), proxies (20), antidetect (50). Net profit: $500-1500. Not millions, but a stable passive income.

Part 7. Risks and how to avoid them​

Risk #1: Account ban from the cashback service. If the service suspects cheating, it will freeze your account and withhold cashback payments.

How to avoid it:

• Don't use one IP for multiple accounts. Each account is its own residential proxy.
• Don't register dozens of accounts per hour. Take 10-20 minutes breaks.
• Manage your accounts like real users: browse stores, sometimes make real purchases (not just for the bonus).
• Don't withdraw your cashback immediately after it's credited. Wait 2-3 days.

Risk #2: Virtual card freezing. Advcash may suspect unusual activity (multiple small purchases on one account).
Solution: Card rotation. Use a card 2-3 times, then delete it and issue a new one.

Risk #3: AI behavior detection. Advanced systems analyze mouse movements and fill rate. If your bot is perfectly straight, you'll get banned.
Solution: Implement random micro-movements, overshoots, and hover pauses. Use libraries like ghost-cursor.

Risk #4: Chargeback from the store (if you used a refund). If the store suspects suspicious activity, they may block the dropped card. Use one-time-use virtual cards that are deleted after the transaction.

Part 8. OPSEC for Farmers​

• Antidetect: each account is a unique fingerprint. Don't skimp.
• Proxies: residential only, fraud score <20. Data centers are burning out.
• Mail: Catch-all domain is better than temporary mail.
• SMS: SMS-activate, not your numbers.
• Virtual cards: do not use one card for multiple accounts.
• Behavior: Emulates scrolling, pauses, and mouse movements. No faster than a real person.
• Conclusion: through different drop accounts, at intervals of several hours.
• Logging: Keep a database of accounts (email, password, proxy, status), but encrypt it.
• Destruction: After closing your account, delete your data.

Summary​

Farming promo codes and cashback using virtual cards and AI-based behavioral simulation is a legal (or almost legal) alternative to carding. You don't steal other people's cards; you simply take the bonuses that stores offer themselves. The main costs are virtual cards and proxies. The main risk is account bans. With proper automation, you can earn $500–2,000 per month with virtually no investment.

A quick one-line reminder:
TopCashback pays 10 for registration. Advcash gives cards 1 for registration. Advcash gives cards 1. 100 accounts = 1,000 bonus – 200 cards – 50 proxies = 750 net. Antidetect emulates a human, AI adds scrolling and pauses. Don't be greedy – withdraw $10–20, don't show off PayPal alone. Cashback + refunds = an endless cycle.