The Three-Touch Rule: How to Warm Up your Profile so that Anti-Fraud will Trust You

[Good Carder]

From a carder to carders. You bought a perfect non-3DS card, set up anti-detection, and selected a residential proxy. But when you hit details, you get a fraudulent alert. Why? Because you visited the site for the first time and immediately tried to pay. To the anti-fraud system, you're a bot looking to steal money. It doesn't care how clean your IP is. What matters is that you have no history. In this article, I'll show you how to create a history in three taps, trick the system into believing you're a real buyer, and pass the anti-fraud alert without a single suspicion.

Part 1: Why a Cold Profile is a Death Sentence​

Anti-fraud systems (Stripe Radar, Sift, Forter, DataDome) analyze more than just your card and IP address. They analyze your behavior. Every step you take on a website is a signal. The system looks at:

• How long have you been on the site?
• What pages do you visit?
• Do you add items to your cart?
• Do you delete them?
• Do you return to the site after a few hours or days?

If you visit a website, immediately add an item to your cart, and pay within two minutes, that's the perfect scammer profile. A genuine buyer never does that. They research, compare, hesitate, and then come back.

Statistics from 2026: According to behavioral analytics research, users who make a purchase within the first five minutes of visiting a website have a 12 times higher fraud score than those who spend more than 15 minutes on the site. 78% of legitimate buyers view at least three pages before adding an item to their cart.

Conclusion: a cold profile is a red flag for anti-fraud. Warming up is not an option, but a necessity.

Part 2. The Three-Touch Rule: Philosophy and Practice​

The three-touch rule is a profile warm-up technique where you visit the target website three times before hit a request, each time simulating the behavior of a real buyer. Three touches is the minimum number needed to build a sufficient history for anti-fraud purposes.

Touch	Target	Duration	Actions
1st touch	First acquaintance	5-10 minutes	View main, categories, 3-5 products
2nd touch	Doubt and choice	10–15 minutes	Detailed view, comparison, adding to cart, deleting
3rd touch	Decision making	5-10 minutes	Re-view, add to cart, start checkout

2.1. Why three and not two or five?​

• One touch – bot. Nobody buys on the first try.
• Two touches is still suspicious. A real person usually returns at least three times.
• Five touches is too many. You risk being remembered and manually checked.
• Three touches is the golden mean—enough to create a story, but not so many that it grabs attention.

Part 3. Touch #1: First Acquaintance​

3.1. Purpose of the first touch​

Show the system that you just came to the site, looked at what's available, and left. No purchases, no shopping carts. You're just "browsing."

3.2. What to do on the first touch​

1. Go to the main page. Spend 1-2 minutes scrolling down. Look at the products, banners, and promotions.
2. Go to a product category. Select the category that matches what you plan to buy. For example, if you want to buy an Amazon gift card, go to the "Gift Cards" category.
3. Open 3-5 products. Look at each item for 15-30 seconds. Scroll through the description, check the price, and read the reviews. Don't add them to cart.
4. Close the site. Don't register anything. Just leave.

3.3. Imitation of "human" behavior​

• Scroll the page at varying speeds. Don't scroll down mechanically. Stop at interesting points.
• Move the mouse around the screen. Don't draw straight lines. Draw curves, and sometimes pause.
• Sometimes return to the main page and back to the category.

3.4. First Touch Time​

Optimal duration: 5–10 minutes. Less than 3 minutes is a bot. More than 15 minutes is unusual for a first visit.

3.5. Pause before the second touch​

After your first encounter , don't visit the site for at least 2-4 hours. A real person doesn't come back right away. They need to think, compare, and discuss it with someone.
Ideally, 4-6 hours. You can leave it overnight—visit in the morning and evening.

Part 4. Touch #2: Doubt and Choice​

4.1. Purpose of the second touch​

Show that you came back because you liked the product. You're almost ready to buy it, but you're hesitant. You add it to your cart, but then delete it. You're not sure.

4.2. What to do on the second touch​

1. Access the site as usual, through the main page.
2. Go to the product you looked at first, or a similar one. Spend 1-2 minutes examining it again.
3. Add the item to your cart. This is an important signal. You're almost done buying.
4. Go to your cart. Check the total and shipping costs. Stay there for 30-60 seconds.
5. Don't buy. Remove the item from your cart. Or, better yet, close the cart page without deleting the item. Leave it there.
6. Browse other products. Discover 2–3 alternatives. Compare prices, reviews, and specifications.
7. Close the site. Don't place an order.

4.3. Simulating "Doubts"​

• Return to the product page after adding it to your cart. This shows you're double-checking.
• Stay on the payment page (if there's one already). Look at the card entry fields, but don't enter anything.
• Periodically return to the main page and then to the trash bin. You hesitate.

4.4. Second Touch Time​

Optimal duration: 10–15 minutes. This is longer than the first contact because you're already seriously considering the purchase.

4.5. Pause before the third touch​

After the second contact, wait at least 12–24 hours. A real buyer often makes a decision the next day. They sleep, think, and discuss.

Part 5. Touch #3: Decision Making​

5.1. Purpose of the third touch​

You've finally decided to buy. You go to the website, check your cart, see if the item is there, and then you place your order. You act like a real buyer who's finally made up their mind.

5.2. What to do on the third touch​

1. Go to the website. Go straight to your cart. Check that the item is still there.
2. Look at your cart for 30-60 seconds. You check the total, shipping, and taxes.
3. Begin your order. Proceed to the checkout page.
4. Fill in the delivery details (if required). But don't enter your card details right away. Pause.
5. Then enter your card details and only then send the payment.

5.3. Simulating the "final solution"​

• Pause for 1-2 minutes before inserting your card. This is your last time checking the amount.
• If the website allows, change your delivery method or add a promo code. This shows you're interested in saving money.

5.4. Third Touch Time​

Optimal duration: 5–10 minutes. You've already decided everything. Don't delay. Buy.

Part 6. Automating Warm-Up: How to Avoid Doing It Manually Every Time​

6.1. Puppeteer Script with Human Delays​

const puppeteer = require('puppeteer-extra');
const StealthPlugin = require('puppeteer-extra-plugin-stealth');
puppeteer.use(StealthPlugin());

async function warmUpProfile(profilePath, url, productUrl) {
const browser = await puppeteer.launch({
userDataDir: profilePath,
headless: false,
args: ['--no-sandbox', '--disable-setuid-sandbox']
});
const page = await browser.newPage();

// First touch
await page.goto(url);
await page.waitForTimeout(2000 + Math.random() * 3000);
await page.evaluate(() => window.scrollBy(0, 300));
await page.waitForTimeout(1000 + Math.random() * 2000);
await page.goto(productUrl);
await page.waitForTimeout(3000 + Math.random() * 4000);
await browser.close();

// Pause 4–6 hours
await wait(4 * 60 * 60 * 1000);

// Second touch
browser = await puppeteer.launch({userDataDir: profilePath, headless: false});
page = await browser.newPage();
await page.goto(productUrl);
await page.waitForTimeout(2000 + Math.random() * 3000);
await page.click('.add-to-cart');
await page.waitForTimeout(3000 + Math.random() * 4000);
await page.goto(url + '/cart');
await page.waitForTimeout(3000 + Math.random() * 4000);
await page.click('.remove-from-cart');
await page.waitForTimeout(2000 + Math.random() * 3000);
await browser.close();

// Pause 12–24 hours
await wait(12 * 60 * 60 * 1000);

// Third interaction + card hit
browser = await puppeteer.launch({userDataDir: profilePath, headless: false});
page = await browser.newPage();
await page.goto(url + '/cart');
await page.waitForTimeout(2000 + Math.random() * 3000);
await page.goto(url + '/checkout');
await page.waitForTimeout(5000 + Math.random() * 5000);
// Enter card details here
await page.type('#card-number', cardNumber);
await page.waitForTimeout(300 + Math.random() * 500);
await page.type('#card-expiry', expiry);
await page.waitForTimeout(300 + Math.random() * 500);
await page.type('#card-cvc', cvc);
await page.waitForTimeout(1000 + Math.random() * 2000);
await page.click('#submit');
await browser.close();
}

6.2. Using ready-made solutions​

• Dolphin Anty has built-in automatic warm-up functionality via the API. You can customize the script and run it for each profile.
• Octo Browser allows you to record macros and play them back for mass warm-up.

Part 7. Warm-up Mistakes and How to Fix Them​

Mistake 1. Warming up too quickly​

Symptom: You make three touches in an hour. The system sees that you've visited three times in a row and realizes it's a bot.
Solution: Maintain breaks. Leave at least 2-4 hours between the first and second touches. Leave at least 12-24 hours between the second and third touches.

Mistake 2: Identical patterns​

Symptom: You always view the same items, adding and removing them from your cart at the same time.
Solution: Vary it. Sometimes look at different categories, sometimes don't remove the item from your cart, sometimes linger on the page longer. Add randomness.

Mistake 3. Profile overheating​

Symptom: You're spending too much time on the site (30+ minutes), browsing dozens of products, adding and deleting items five times.
Solution: Don't overdo it. 10-15 minutes per interaction is the maximum. You're a regular shopper, not a researcher.

Part 8. Profile Warming Checklist​

• First touch: 5-10 minutes, viewing 3-5 products, no shopping cart.
• Break: 4–6 hours.
• Second touch: 10–15 minutes, adding to cart, deleting, comparing products.
• Pause: 12–24 hours.
• Third touch: 5-10 minutes, checking the cart, placing an order, hit cards.
• Randomness: vary time, goods, actions.
• Don't overheat: 10-15 minutes per touch is maximum.

Summary​

The three-touch rule isn't magic, but rather an imitation of real buyer behavior. Antifraud looks not only at your card and IP address, but also at how you navigate the site. If you visit, immediately buy, and leave, you're a bot. If you visit, browse, leave, come back, think, leave again, and finally buy, you're human.

Pause, simulate doubt, and introduce randomness. Then your profile will become "warm," and antifraud will let you through.

A quick one-line reminder:
"3 touches: look → think → buy. Pauses: 4 hours, then 12 hours. 10-15 minutes per touch. Don't overdo it. Simulate doubt. And then antifraud will believe you."