The Triangle Scheme: A Step-by-Step Guide to Cashing Out via Marketplaces

[Good Carder]

From a carder to carders. Classic carding is a war on payment gateways, 3DS, and AVS. The "triangle" scheme is a whole new level. You don't steal the card directly, and you don't combat the seller's anti-fraud measures. You become an invisible intermediary between an unsuspecting buyer and a legitimate seller. The buyer pays you, you buy the goods from the real seller with the stolen card, and the goods go to the buyer. You receive the buyer's clear money, and the seller is left with a chargeback. The ideal scheme is one where the victim (the cardholder) and the buyer don't even know each other.

In this article, I'll explain why the "triangle" is alive and well, how to choose a platform, how to register a shell seller, and I'll provide a complete step-by-step algorithm — from purchasing with a stolen card to receiving cash.

Part 1. Why the "triangle" is alive and well​

Triangulation fraud has been around for years, but it's not dying because it exploits fundamental weaknesses in the online retail ecosystem: trust between buyer and seller, lack of physical inspection of the product, and the delay between payment and chargeback.

Here's how it works: A fraudster creates a fake store or seller account on a marketplace. The buyer finds an item at an attractive price and pays for it. The fraudster accepts the payment and then purchases the same item from the real seller using a stolen card, specifying the buyer's delivery address. The buyer receives the item directly from the real seller. The owner of the stolen card initiates a chargeback — the money is debited from the real seller's account. The fraudster keeps the buyer's money.

Why the scheme persists:

1. The buyer receives the product. The victim (buyer) is satisfied, leaves a positive review, and is unaware of any fraud.
2. The real seller ships the goods. They fulfill the order, unaware that the card has been stolen.
3. A chargeback hits the merchant, not you. The owner of the stolen card disputes the transaction, and the money is debited from the real merchant's account. You've already received your money from the buyer.
4. You leave no trace. You don't receive the goods, you don't provide your address, and you don't reveal your payment information.

In 2026, marketplaces became more demanding regarding documents and verification, but the system is adapting. Fraudsters use aged accounts, fake documents, and deepfakes to bypass KYC. The "triangle" survives because it attacks not the technology, but the business process, which is difficult to change without harming legitimate sellers and buyers.

Part 2. Choosing a Platform: Amazon, eBay, Etsy — What, Where, and When​

Each platform has its own characteristics, verification level, and risks. Your choice determines the entry difficulty and potential profit.

2.1. Amazon is the fattest, but the most difficult​

Amazon is the king of marketplaces. It has the highest traffic, the highest sales, but also the strictest verification process.

Seller verification in 2026:

• State ID with photo
• Tax information (SSN for individuals, EIN for businesses)
• Bank account for payments
• Proof of business address (utility bill)
• Video Verification - Amazon conducts virtual identity verification through video interviews

Why Amazon is a target: The largest customer pool, high order values, and a huge product selection. A single successful transaction can generate $500–$2,000+.

Risks: Amazon blocks Section 3 accounts at the slightest suspicion of fraud. Documents must be impeccable — even minor discrepancies result in rejection. Amazon also uses AI to analyze document metadata.

When to use: If you have access to high-quality fake documents and the ability to pass video verification (via drop or deepfake).

2.2. eBay — the golden mean​

eBay is simpler than Amazon, but more complex than Etsy. Verification is less stringent, but the platform actively combats multiple accounts.

Seller verification in 2026:

• State identity card
• Phone verification
• Bank account for Managed Payments
• Proof of address (utility bill)

Why eBay is a target: Fewer document requirements, faster registration, and a more lenient hold system for older accounts.

Risks: eBay tracks multiple accounts and can link accounts by IP address, payment methods, and behavioral patterns. New seller accounts may be subject to account limits of up to 30 days.

When to use: If you have an aged account with a history or are ready to create an account from scratch with high-quality documents.

2.3. Etsy is the easiest entry point​

Etsy is an ideal destination for beginners. Verification is simpler than on Amazon and eBay, but the limits are also lower.

Seller verification in 2026:

• State ID with photo
• Selfie (live-selfie verification)
• Bank account for payments
• Phone verification

Why Etsy is a target: The lowest entry threshold, quick approval, and minimal document requirements.

Risks: Etsy actively bans new accounts if fraud is suspected. Accounts are linked via shared payment details. Sales limits for new accounts are low.

When to use: If you're just starting out, have a limited budget for paperwork, or want to test the scheme with small amounts.

2.4. Comparison table​

Parameter	Amazon	eBay	Etsy
Verification	Very Tough (Video Interview)	Average	Easy
Registration time	3–7 days	1–3 days	1–2 days
Hold for new sellers	7–14 days	14–30 days	Up to 20 days
Risk of blocking	Very tall	High	Average
Average bill	$100–2 000+	$50–500	$20–200
Better for	Pro with documents	Intermediate level	Newcomers

Part 3. Registering a Shell Seller: From Documentation to Verification​

Creating a shell merchant is the most important and most difficult step. Your account must appear legitimate.

3.1. Stealth Account Infrastructure​

Each seller account must be completely isolated. An OPSEC error will lead to account linking and mass bans.

What is required for each account:

1. Antidetect browser (Dolphin Anty, Octo, GoLogin) - a unique fingerprint for each account.
2. Residential proxies - the proxy's country must match its registration address. Data-center proxies — instant ban.
3. Separate email - create a new one for each account (preferably on your own domain with catch-all).
4. Separate phone number - SMS-activate or virtual number.
5. A separate bank account - a neobank (Revolut, Wise, Payoneer) or a drop account.

The golden rule: one account, one proxy, one fingerprint. No exceptions.

3.2. Fake Documents: How to Bypass KYC in 2026​

In 2026, platforms use AI scanners to verify documents. Simple Photoshop won't cut it anymore.

What you'll need:

1. Fake ID. Use AI-generated documents (OnlyFake, ChatGPT-based generators). In 2026, attackers will actively use AI-generated documents to bypass KYC. The key is that the document passes visual verification and has the correct metadata.
2. Proof of address, utility bill, or bank statement. Use PSD templates with realistic logos and fonts.
3. Selfie. For video verification, use DeepFaceLive to spoof the video stream or find a drop willing to undergo verification.
4. Bank account. Use virtual accounts at neobanks (Revolut, Wise, Payoneer) with minimal KYC.

Critical Warning: Amazon requires a video interview for verification. If you can't provide a live person to complete the interview, please use an aged account that has already been verified.

3.3. Aged Accounts: Why History Matters​

A new seller account raises suspicions. An aged account with a sales history, positive reviews, and good metrics is verified faster and has fewer hold periods.

Where to find aged accounts:

• Darknet markets. Prices: $200–$10,000+ depending on metrics.
• Forums. Exploit, XSS, Carder.es — "Accounts" sections.
• Telegram channels. Specialized channels for selling accounts.

Risks of purchasing: accounts may be created using stolen or fabricated identities. Amazon may request re-verification at any time. If you fail, your account will be blocked and your funds frozen.

Alternatively, create an account from scratch, but first make 5-10 small sales ($5-$20) using legitimate cards (or through drops) to build a history. This will reduce holds and increase trust in the platform.

Part 4. The full cycle: from purchasing with a stolen card to receiving cash​

Now that the seller account is ready, let's move on to the main scheme.

4.1. Classic "triangle" scheme: step-by-step algorithm​

Step 1. Preparing a dummy salesperson.

• Register a seller account on your chosen platform (Amazon, eBay, or Etsy).
• Pass verification (documents, selfie, video interview).
• List your product for sale, preferably digital (gift cards, activation keys, software). Digital products don't require shipping or confirmation of receipt, which speeds up payment.

Step 2. Find a buyer.

• Your product should be attractively priced (slightly below market price to attract buyers).
• The buyer finds your offer and pays for it. The funds are deposited into the platform's escrow account.

Step 3. Purchasing goods from a real seller using a stolen card.

• You find the same product from a real seller on the same or another platform.
• You pay for it with a stolen non-3DS card.
• Specify the delivery address - the address of your buyer.

Step 4. Receipt of goods by the buyer.

• The real seller sends the goods to the buyer's address.
• The buyer receives the goods, is satisfied, and leaves a positive review.

Step 5. Receiving payment from the platform.

• The platform transfers money from the buyer to your seller account (after delivery is confirmed).
• You withdraw funds to a drop bank account or crypto card.

Step 6. Chargeback from the owner of the stolen card.

• The owner of the stolen card notices the charge and initiates a chargeback.
• The money is debited from the actual seller's account.
• You've already received the buyer's money. The actual seller is left with a loss.

4.2. Variations of the scheme​

Option 1: "Triangle" through a single seller.
You are both the seller and the buyer. You buy the product from yourself using the stolen card through another account. This is simpler, but riskier — the platform can link the accounts.

Option 2: "Triangle" with digital goods.
The buyer pays for a $100 Amazon gift card. You buy this gift card from the real seller using the stolen card. The code is sent to the buyer. You receive the money from the buyer. A chargeback hits the real seller. Ideally, there is no physical delivery, no trace.

Option 3: Mass "triangle."
You create 10-20 seller accounts at different drops. Each account makes 1-2 sales per day. Total income: $1,000-4,000 per day.

4.3. Product Selection: Digital vs. Physical​

Product type	Advantages	Flaws
Digital (gift cards, keys)	Instant delivery, no logistics, fast payout	For smaller amounts ($20-$100), platforms often block digital goods from new sellers.
Physical (electronics, clothing)	Large amounts ($100–$1,000+), less suspicion	Requires delivery, logistics costs, risk of return

For beginners, I recommend digital products. They are processed faster, and platforms require fewer proof of delivery requests.

4.4. Cashing out: how to withdraw money without leaving a trace​

Once the platform has transferred the funds to the seller's account, they need to be withdrawn:

1. To the drop's bank account. The account must be registered in the drop's name or a proxy.
2. To a virtual card (RedotPay, Advcash) - faster and more anonymous.
3. To a crypto wallet via a P2P exchange (USDT → XMR → cash).
4. Through payment systems (PayPal, Payoneer) - but this is risky, as they may request verification.

The golden rule: don't withdraw all your money at once. Do it in parts to avoid attracting the attention of AML systems.

Part 5. Errors and how to fix them​

5.1 Error: Using the same IP for multiple accounts​

Platforms link accounts using shared IP addresses and fingerprints. If one account is banned, all linked accounts will also be banned.
The solution: each account has its own residential proxy and anti-detection profile. No exceptions.

5.2. Error: Withdrawal too fast​

If you withdraw money immediately after receiving it, the platform may suspect fraud and block your account.
Fix: Make several small withdrawals over several days. Imitate the behavior of a real seller.

5.3. Error: Poor-quality counterfeit documents​

Amazon uses AI to verify documents. Even minor inconsistencies result in rejection.
Fix: Use professionally crafted documents with correct metadata. Test them on test accounts before use.

5.4. Error: Using one stolen card for multiple purchases​

If you use one stolen card for multiple purchases, the bank may block it, and all transactions will be canceled.
Fix: Use different cards for each purchase. Limit transactions to 2-3 per card.

5.5. Error: Ignoring Holds​

Platforms hold new sellers' funds for 7-30 days. If you don't take this into account, you could be left without funds for a long time.
Fix: Use aged accounts with a history to reduce hold times. For Amazon, use FBA (Fulfillment by Amazon) — payments arrive faster.

Part 6. Checklist for a Successful Operation​

• Choose a platform: Etsy (easiest entry), eBay (medium), Amazon (most difficult, but the most lucrative).
• Prepare the infrastructure: an anti-detection browser, a residential proxy, a separate email and phone number for each account.
• Prepare documents: fake ID, utility bill, drop's bank account.
• Complete verification: upload documents, complete video verification (if required).
• List your item: digital is best (gift cards, activation keys). Amount: $50–$200 for Etsy, $100–$500 for eBay, $100–$2,000+ for Amazon.
• Find a buyer: your product must be priced attractively. The buyer pays, and the funds are held in escrow.
• Purchase an item from a legitimate seller using a stolen non-3DS card. Provide the buyer's address.
• Receive your payment after delivery confirmation (instantly for digital goods).
• Withdraw funds to a drop account or crypto card in parts.
• Burn your account after 2-3 transactions. Do not reuse it.

Summary​

The "triangle" scheme is one of the most effective and persistent schemes for cashing out stolen cards. You act as an invisible intermediary between the buyer and the real seller. The buyer receives the item, you receive the money, and the real seller is left with a chargeback. Etsy is the easiest entry point for beginners. eBay is the intermediate level. Amazon is the most difficult, but also the most lucrative.

The main risks are account blocking for suspected fraud and confiscation of funds. Use aged accounts, anti-detection, and residential proxies to completely isolate each account. Don't be greedy, don't exceed 2-3 transactions per account, and withdraw funds in installments. With proper OPSEC, the "triangle" scheme can generate a stable income with an ROI of 500% or more.

A quick one-line reminder:
"Etsy is the easy entry point, eBay is the intermediate level, Amazon is the lucrative one." The buyer pays you — you buy from the real seller with a stolen card — the goods go to the buyer — you get the money. A chargeback hits the seller. An aged account + anti-detection + residential proxy = an invisible triangle. 10 transactions per month = $5,000–10,000. The main thing is not to be greedy and burn accounts.