THE APPLE.COM PICKUP PLAYBOOK: A Complete Carder's Manual for Online In-Store Carding

[Professor]

From the desk of an carder with over a decade in the game

TABLE OF CONTENTS

• Introduction: The Needle That Pulls You In
• Part 1: The 2026 Reality — What Changed and What Still Works
• Part 2: The Setup — From Beginner to Advanced
• Part 3: The Material — Sourcing, Selecting, and Reading CC
• Part 4: BIN and ZIP — The Alphabet of the Game
• Part 5: Drop Services and Pickup Logistics
• Part 6: Proxy Configuration — Cleanliness Is Everything
• Part 7: Anti-Detect Setup — Dolphin Anty Configuration
• Part 8: The Step-by-Step Apple.com Hit
• Part 9: The Phone Trick — The Secret That Makes or Breaks the Order
• Part 10: Spam and Chargeback Defense
• Part 11: Common Errors and How to Fix Them
• Part 12: OPSEC and Risk Mitigation
• Part 13: Comparison of Methods and Setups
• Part 14: Complete Checklist
• Part 15: Key Takeaways

INTRODUCTION: THE NEEDLE THAT PULLS YOU IN​

Bro, this game pulls you in. You start with one hit, then another, and a month later you're in deep. It's a needle, and it drags you into the thicket.

Apple.com is one of the best starting points for a new carder. Why? Because Apple doesn't warm up a session the way banks or other merchants do. It clears well if you properly pretend to be an American. But it has its own nuances, and if you don't know them, you'll just burn material for nothing.

This manual is not a translation of someone else's experience. It's a complete operational guide with step-by-step instructions, system setup, strategies, errors and their fixes. I'll break everything down, from setup to the moment your drop picks up the iPhone from the store.

PART 1: THE 2026 REALITY — WHAT CHANGED AND WHAT STILL WORKS​

1.1. What Changed Since 2020​

Carding Apple.com in 2026 is not the same as it was five years ago. Here are the key changes:

Aspect	2020	2026
Apple anti-fraud	Weak, almost no checks	Moderate, checks device fingerprint
3D Secure	Rare	More common, but Non-VBV BINs still work
Pickup	Worked almost always	Works, but requires the right phone
Proxies	Datacenter passed	Residential only
Spam	Optional	Mandatory, or the cardholder cancels

1.2. Why Apple Still Works​

Apple is not a bank. Their anti-fraud is tuned to stop mass fraud, not every individual transaction. If you look like a regular American ordering an iPhone for in-store pickup, they won't dig deep.

The core principle: you must look like a real cardholder, not a carder. That means:

• Proxy from the cardholder's city
• Timezone matches
• Phone is a landline (not mobile!)
• Billing exactly as on the card
• No traces of automation

1.3. The Current State of Apple's Fraud Detection​

Apple uses a combination of signals:

Signal	What They Check	How to Match
Device fingerprint	Browser, OS, canvas, WebGL	Anti-detect browser with clean profile
IP reputation	Datacenter, VPN, proxy detection	Residential proxy with low fraud score
Geolocation	IP vs. billing address	Proxy in the cardholder's ZIP
Behavioral	Typing speed, mouse movement	Manual input, no paste
Order pattern	Velocity, amount, product	Start small, don't hammer

PART 2: THE SETUP — FROM BEGINNER TO ADVANCED​

2.1. The Simple Setup (For Beginners)​

Component	What to Use	Cost
Anti-detect	Dolphin Anty	Free (10 profiles)
Proxy	Residential SOCKS5	$0.5-2 per IP
Proxy check	IPQS (free) or Telegram bot	$0-0.2
Device	Your PC	—

This works. You don't need anything fancy. Dolphin Anty + residential proxy + correct configuration = the baseline.

2.2. The Advanced Setup (For Volume)​

Component	What to Use	Cost
Anti-detect	Linken Sphere, Octo	$29-50/month
Proxy	Mobile 4G/5G	$3-20/GB
Device	Raspberry Pi + firmware (iparmor, vodka)	~$100-150
Distribution	Proxy from the Pi to your phone	—

Why the Raspberry Pi: It distributes the proxy to your phone, and you hit from a real mobile device. This gives maximum trust because Apple sees a real iPhone, not an emulator.

2.3. Which to Choose​

Start with the simple setup. If it works, move to the advanced setup. Don't spend money on a Raspberry Pi until you've learned to work with Dolphin Anty.

PART 3: THE MATERIAL — SOURCING, SELECTING, AND READING FULLZ​

3.1. Sources of Material​

Source	Pros	Cons
Your own sniffers	100% confidence, nobody touched it	Requires skills
Mass market (PatrickStash, CastroCVV)	Fast, plenty	Expensive ($50-100), no replacement for invalid CC in some databases
Private sellers (Telegram)	Cheaper, better support	Risk of being ripped off

Advice: Private sellers value their reputation. If you find a good one, stick with them.

3.2. What Material to Buy​

US credit cards only (Credit). Why:

• A debit card may have no money on it
• A credit card has a much higher probability of having funds
• Amex/Discover are cheaper because the bank frauds harder (instant notifications, immediate decline)

Price: from $25 for a US credit card.

3.3. Reading CC Format​

5189410237202604|04/29|314|Arnold Block|7787 Caminito Monarca|Carlsbad|CA|92009|US|3015809165|groverdogster@gmail.com|

Field	Value
Card number	5189410237202604
Expiry	04/29
CVV	314
Name	Arnold Block
Address	7787 Caminito Monarca
City	Carlsbad
State	CA
ZIP	92009
Country	US
Phone	3015809165
Email	groverdogster@gmail.com

Important: The phone in CC or Fullz is the cardholder's mobile. It cannot be used (see Part 9). You need to find a landline.

PART 4: BIN AND ZIP — THE ALPHABET OF THE GAME​

4.1. What Is BIN​

BIN (Bank Identification Number) — the first 6 digits of the card. It reveals:

• Issuing bank
• Card type (credit/debit)
• Level (Classic, Gold, Platinum)
• Country

How to check: Google "481582 bin" and you'll get the information.

4.2. What Is ZIP​

ZIP is the postal code. It shows which zone the cardholder lives in. This is critically important because:

• The proxy must be from this ZIP
• The pickup must be in this ZIP
• The drop must collect in this ZIP

4.3. Top Banks for Apple​

Bank	Characteristics
Bank of America (BofA)	Stable, good limits
Chase	Stable, but sometimes frauds
Citi	Recently frauds heavily
Amex	Avoid — strong fraud detection
Discover	Avoid — strong fraud detection

PART 5: DROP SERVICES AND PICKUP LOGISTICS​

5.1. How Pickup Works​

1. You select Pick-Up in Store by the cardholder's ZIP
2. Apple prepares the order in the store
3. The drop arrives with a fake ID and collects
4. You receive payment

5.2. Drop Services​

Service	Characteristics
Ninja Pick-up	Worked with them, okay, but slow
Your own drop	Ideal — collects instantly

The problem with services: They serve many clients, so waiting can be long. And while you wait, the cardholder may wake up and cancel.

5.3. Choosing the Zone​

• California — popular, plenty of material
• Not a black shop — a store that works with police is dangerous for the drop
• Check reviews of the drop service before working

5.4. The Drop's Fake ID​

The drop needs a fake ID that matches the cardholder's name and address. Quality matters:

• Good fake ID — passes visual inspection
• Bad fake ID — the store refuses, the order is cancelled

Where to get fake IDs: Specialized vendors in the underground. Quality varies. Test with small orders first.

PART 6: PROXY CONFIGURATION — CLEANLINESS IS EVERYTHING​

6.1. Proxy Types​

Type	For Apple	Reliability
Residential (ISP)	Yes	10/10
Mobile (4G/5G)	Yes	9/10
Datacenter	No	3/10

6.2. Proxy Verification​

Free: IPQS (IPQualityScore)

• Free registration
• Shows fraud score
• Fraud score above 30 — don't use

Via Telegram bot: $0.1-0.2 per check.

6.3. Where to Buy​

• Telegram bots ($0.5 per IP)
• Specialized services (Bright Data, IPRoyal)
• Don't use free proxies — they're burned

6.4. Matching the Proxy to the Cardholder​

The proxy must be:

• In the same city as the cardholder's billing address
• Residential (not datacenter)
• Clean (IPQS score < 30)

Why city matters: Apple checks if the IP location matches the billing address. A mismatch triggers a fraud flag.

PART 7: ANTI-DETECT SETUP — DOLPHIN ANTY CONFIGURATION​

7.1. Creating a Profile​

1. Open Dolphin Anty
2. Click + Create Profile
3. Name the profile (e.g., "Apple_CA_01")
4. Click New proxy
5. Select SOCKS5
6. Enter IP, port, login, password
7. Click CREATE PROFILE

7.2. Settings​

Parameter	Value
Proxy	Residential, cardholder's ZIP
Timezone	Automatic (Dolphin pulls it)
Language	en-US
WebRTC	Disabled
Canvas	Noise
User-Agent	Chrome (latest version)

Don't mess with extra settings. Dolphin pulls the timezone and the rest automatically. Your job is the correct proxy and a clean profile.

7.3. Verification​

Before you hit, check:

• □ IP matches the cardholder's ZIP
• □ Timezone matches the proxy
• □ No WebRTC leaks
• □ No DNS leaks
• □ Fraud score < 30

Tools: whoer.net, pixelscan.net, IPQS.

PART 8: THE STEP-BY-STEP APPLE.COM HIT​

Step 1: Launch the Session​

1. Start the profile in Dolphin
2. Check the IP on whoer.net
3. Confirm the timezone matches

Step 2: Go to Apple.com​

1. Navigate to apple.com
2. Choose the product (per the buy list or whatever you like)
3. Add to cart

Step 3: Choose Delivery​

1. Click Checkout
2. Select Pick-Up in Store
3. Enter the cardholder's ZIP
4. Choose the store where your drop works

Step 4: Carrier​

When choosing the provider, select "Connect to any later".

Step 5: Fill in the Data​

Field	What to Enter
Email	Cardholder's email (from Fullz)
Name	Cardholder's name
Address	Cardholder's address
City	Cardholder's city
State	Cardholder's state
ZIP	Cardholder's ZIP
Phone	Cardholder's landline (not mobile!)

Step 6: Payment​

1. Enter card details manually (no paste)
2. Click Place Order
3. Wait for the result

Step 7: Post-Order​

1. Spam the cardholder's email immediately
2. Monitor the order status
3. Wait for "Ready for Pickup"
4. Drop collects
5. You receive payment

PART 9: THE PHONE TRICK — THE SECRET THAT MAKES OR BREAKS THE ORDER​

9.1. Why You Can't Use the Cardholder's Mobile​

When the order reaches Pick-Up time, Apple sends an SMS to the number provided. If it's the cardholder's mobile:

• He receives the SMS
• He realizes he didn't order
• He calls Apple/bank
• The order is cancelled
• You lose the material

9.2. The Solution: Landline​

America still uses home phones. If you enter a landline:

• No SMS arrives (it's not mobile)
• The cardholder is unlikely to check the home phone
• The cardholder is unlikely to be home
• You buy time

9.3. Where to Find a Landline​

FamilyTreeNow.com (US IP required):

1. Go to the site
2. Enter the cardholder's name and city
3. Get the list of numbers
4. Choose a landline (not mobile!)
5. Choose the most current (not the first in the list)

Important: The information about this number is already known to banks. If it's current, there won't be problems.

PART 10: SPAM AND CHARGEBACK DEFENSE​

10.1. Why Spam Is Mandatory​

After the order, Apple sends a happy email to the cardholder's email: "Your order is placed." If the cardholder sees it:

• He calls Apple
• Cancels the order
• You lose everything

10.2. How to Spam​

• Use mass mailing services
• Flood the cardholder's inbox with hundreds of emails
• Do it immediately after placing the order

Goal: The cardholder shouldn't see the Apple email in the flood.

10.3. Chargeback Defense​

If the cardholder files a chargeback:

• The bank investigates
• Apple may cancel the order
• You lose the material and the product

Mitigation:

• Move fast (pickup before chargeback)
• Use landline (delay the cardholder's awareness)
• Spam email (delay the cardholder's awareness)

PART 11: COMMON ERRORS AND HOW TO FIX THEM​

Error 1: "Your order could not be completed"​

Cause: Bad proxy.
Fix: Don't change the proxy and retry with the same card. Use a different card or a different service.

Error 2: "Payment declined"​

Cause: Card is dead or fraud-flagged.
Fix: Leave the card for a while, try later elsewhere. If it doesn't work — discard.

Error 3: Order cancelled after placement​

Cause: Cardholder received notification and called the bank.
Fix: Spam the email (mandatory!), correct landline, fast pickup.

Error 4: Drop can't collect​

Cause: Store requires ID, drop doesn't match.
Fix: Use a quality fake ID, check the store beforehand.

Error 5: Order stuck in "Processing"​

Cause: Apple's fraud team is reviewing.
Fix: Wait 24-48 hours. If it doesn't move, consider it lost.

PART 12: OPSEC AND RISK MITIGATION​

12.1. OPSEC Rules​

Rule	Why
New profile for each order	Cross-correlation
New proxy for each order	IP reputation
Don't use the cardholder's mobile	SMS = cancellation
Spam the cardholder's email	Prevent cancellation
Don't reuse a card	Velocity limits
Document everything	Log = your asset
Use a fake ID for the drop	Real ID = traceable

12.2. Risk Mitigation​

• Don't hit large amounts immediately
• Start small ($500-1000)
• Verify the proxy before each order
• Use landline, not mobile
• Spam the email immediately after the order
• Use a drop service with good reviews

PART 13: COMPARISON OF METHODS AND SETUPS​

Method	Difficulty	Success Rate	Risk	Best For
Simple setup (Dolphin + residential proxy)	Low	40-60%	Medium	Beginners
Advanced setup (Raspberry Pi + mobile proxy)	High	60-80%	Low	Volume carders
Pickup via drop service	Medium	30-50%	Medium	Those without their own drop
Pickup via own drop	High	60-80%	Low	Those with a trusted drop

PART 14: COMPLETE CHECKLIST​

Before the Order​

• □ Card is US credit (not debit)
• □ Bank: BofA, Chase (not Citi, not Amex)
• □ Proxy is residential, cardholder's ZIP
• □ IPQS fraud score < 30
• □ Dolphin Anty configured
• □ Landline found (FamilyTreeNow)
• □ Drop service selected
• □ Store is not black

During the Order​

• □ Pick-Up in Store
• □ Cardholder's ZIP
• □ Carrier: "Connect to any later"
• □ Cardholder's email
• □ Landline (not mobile!)
• □ Manual data entry
• □ Place Order

After the Order​

• □ Spam the cardholder's email
• □ Monitor status
• □ Wait for "Ready for Pickup"
• □ Drop collects
• □ Receive payment

PART 15: KEY TAKEAWAYS​

Bro, here's the bottom line:

1. Apple.com is a great start. No warming needed, clears well if you properly pretend to be American.
2. The setup is simple. Dolphin Anty + residential proxy + correct configuration = the baseline.
3. Material — US credit cards only. BofA, Chase. Not Citi (frauds), not Amex (frauds).
4. Proxy — residential, cardholder's ZIP. Fraud score < 30. Datacenter doesn't work.
5. Pickup — via a drop service. Better your own drop, but Ninja Pick-up works.
6. Phone — landline, not mobile. This is the main secret. FamilyTreeNow helps.
7. Spam the cardholder's email — mandatory. Otherwise he sees the Apple email and cancels.
8. OPSEC — new profile, new proxy, new order. No reuse.
9. Don't be greedy. Start small, document, experiment.
10. Apple is a needle. It pulls you in. But if you do everything right — it works.

Good luck, bro. If you need more — ask.