Cbi Manual of Operations
Cbi Manual of Operations
==============================================================================
INTRODUCTION
~~~~~~~~~~~~
Welcome to The Complete CBI (Equifax) Manual. This file is both a compilation
of information from both me (Video Vindicator), /<ludge, and The White Rider.
The object of this file is to disband all the mis-information all over the
place concerning CBI, and to help new users to use this service to the peak
of it's potential. CBI can be a very powerful tool if used properly, and it
can also be close to worthless if you don't know what you are doing, or are
doing it improperly. This file also has three sister-files, Equifax Info (by
/<ludge), and Carding My Way (1 & 2) as well as the CBI Account and Merchant
directory (all by me). These files are all very useful reading as well, and do
contain some info which it just wasn't fesable to include.
Once again it's time to go for my disclaimer, and I must point out that I
speak only for me, and not for /<ludge (he can speak for himself quite well you
know). I don't care how you use this info, as long as it's in some sort of
illegal or immoral way. I do not solicite or condone the legal uses of this
system, and or this file.
These, of course, aren't valid, but they give you the idea of the setup of the
accounts. Every time you pull up someones credit history, your list of accounts
(but not passwords) will grow, and can be utilized when the current account
dies.
The First group of 3 numbers represent the state that the company originates
from, and their basic geographic location in the state. There can be many 3
number identifiers for each state, and they aren't in any real order, so 111 &
113 might be Wyoming, while 112 might be Oregan. They are alot like Social
Security numbers, and only expand when needed. Currently they span only from
139 to 906, but 907-999 have been left open and initialized, which would lead
me to believe they plan to have to expand into their sometime in the future.
The second group of 2 chars represent whatever type of company this may happen
to be. Below is a current list of all the ones I have compiles, although this
is updated in my file quarterly:
The ones with a (?) before the type means that I am not sure that it is this
type of company, but that it is my best guess. Some are still listed as unknown
because I have not gotten enough information on them in order to formulate a
good guess. By using this list you can target certain companies, and find
exactly what you want to appear to be.
The Business ID number is a 1 to 5 character number that simply represents
which store or business it happens to be. This is of no real value to us, other
than for reference. Later on in the file I will cover this more completely,
since it is the real heart of the account, other than the password.
Following the Business ID is a dash (-) and then a 2 character alphanumeric
(meaning it can be either numbers or letters) which is the accounts password.
If the account dies, and you wish to continue using it, it is always possible
to just hack out the new one, since only these two chars changed.
Next is the operators name or initials. In most cases this is the operators
initals (so John Doe would be JD), although in some rare cases it is actually
a name (so John Doe might be JOHN). Some companies have fixed operators, and
this will have to be hacked as well, although some do not, and anyones initials
can be put here without detection. One default initial setting is 'MC', so I
would recommend using it when the proper one is not given with the rest of the
account information.
Ok, here's the most important part of the account (aside from the password),
this specifies what type of credit report you want, and/or what format you
would like it it. Here's a list of the types that can be used, and a brief
description as well as an example pullup:
The first piece of information you get is the specific place the database is
located, and the subsidiaries name; in this case 'Credit Accounts Reporting
Services', located at 1333 North 27th Box 20661, etc... Next is the persons
last name, then first, middle initial (or name if on file), and then a space
for Jr, Sr, etc, then finally the spouses name (if any), in this case Sharon.
SINCE means when the file was originally created, and FAD means the last time
the file was accessed by someone else. The FN represents the file number, but
at this point it's only useful for reference. The next three lines represent
the last three addresses, from most recent to oldest, and the last date the
subject was reported at it. The final line (which is not alway there) will
show the date of birth (BDS), and Social Security Number (SSS). In some cases
it will only tell you the persons age; if this happens then try pulling the
file by one of the other methods. Now onto the specifics...
THE LETTER A
~~~~~~~~~~~~
The Letter A simply stands for [A]lert, and is usually not a standalone (term
is explained later). It will tell you if anything in the report is something
you should take extra note of.
Ok, the *SUM line will also remain mostly the same, although I will include it
in each of the methods, as a point of reference. SUM stands for Summary from
begining date to last updated date. PR/OI means whether or not the person has
other files open, such as a lien on their house, a legal judgement, etc. FB
means whether or not the information was gathered from another credit service.
It is not uncommon to see a file with an inquery from either TRW or Trans Union
since they all reference through eachother when in doubt. Next is ACCTS, which
tells you how many open accounts they currently have, followed by the amount
added to the amount owed thus equalling their High Credit Limit... I don't mean
for it to sound harded than it is, but here's basically what it looks like:
The $2000 is the amount they haved paid off, the $9580 is the amount they owe,
and the $11580 is their High Credit Limit. If the amount paid off is $0, then
the next number is the High Credit limit, and not the amount owed. Following
this is a number, followed by a one, two, three, etc on up to nine. The number
(typed) represents the number of accounts, where the number (written) represents
their certain payment history. A one means they pay within 30 days, two means
60 days, three means 90, etc. eight means a repossesion (voluntary or other-
wise), and a nine means you can only DREAM of owning a Visa again.
Ok, now you see the 'A' in action, it alerts you to the fact 9 companies
have pulled up her account since June of 91 (6/91). These usually looks pretty
bad, but inqueries rotate off in around a year or two. Now lets take a look
at the inqueries...
They are set up this way, the company abbreviation, the company account, and
then finanlly the date the file was pulled by the specific organization. If
the merchant name abbreviation is preceeded with a 'IAR', then it means it was
a pullup of their Inquery History. If it is replaced with a 'DAT EMPL', then
this means the company is planning on employing this person, and did an employ-
ment pull.
That concludes the file, and it is then stamped with the same generic ending
and dated (wow, much like my gfiles!)
THE LETTER B
~~~~~~~~~~~~
The letter B asks for a [B]alance to be listed, sort of an easier way to see
exactly what the person's High Credit, amount past due, and current ballances
are. Here's an example pullup:
THE LETTER D
~~~~~~~~~~~~
The letter D turns on the online [D]irectory, which then gives you the phone
number (if available) for every company listed in the pullup. This file is not
a standalone and must be used in a group. Here is an example of what you would
see added to the file:
THE LETTER E
~~~~~~~~~~~~
The letter E is for [E]mployment pulls, which are supposed to be for employment
verification only. The only signifigate difference between this an P is the
fact this removes all the account numbers from the file. These pulls are
preceeded with this:
then continue on like a normal pull like we've seen, except now we see this
added:
* FIRM/ID CODE RPTD OPND H/C TRM BAL P/D CS MR ECOA ACCOUNT NUMBER
BK1-DAY-VI*148BB917 07/91 10/90 2000 10 217 R1 09 I
AMOUNT IN H/C COLUMN IS CREDIT LIMIT
What this represents is this, the FIRM/ID code is simply the name of the merch
and their account number. RPTD is the last date the specific account was used,
or in other words RePorTeD. Then is the date the account was OPeNeD, followed
by the [H]igh/[C]redit, which in the case of credit cards is their limit, then
the term, which represents how long they have had the specific account, or
what the monthly payment is. BAL is plainly the current BALlance (as of the
last date reported), then the P/D (or Past/Due) area. CS is the rating and
type of account, MR refers to the Months Reviewed, ECOA refers to the type
of account (Individual, Authorized, etc), and finally Account number, where
the magic numbers would be.
THE LETTER F
~~~~~~~~~~~~
The letter F sets up the file or account area in a little different way,
which is a bit easier to read and follow. The terms are all the same, the
configueation is just a bit different... Notice now we recieve the full visa
number for the first account. I don't mean the COMPLETE visa number since this
specific bank cuts off the last 4 digits of the card, so if it was a 16 digit,
we would get 12, or a 13 digit (like this case), we get 9...
THE LETTER I
~~~~~~~~~~~~
The letter I is for [I]dentification, which is what this file pull is used
for. It does not create an inquery into the file, but only displays the name,
last 3 addresses, DOB and SSN. One note of this; if when you pulled the person
with P and it only listed the age, try with I and you usually will get the full
date of birth.
THE LETTER P
~~~~~~~~~~~~
The letter P is for [P]rimary, since this is the most commonly used method
of pulling someone's stats. P Pulls look just like an A pull with a E pull
(except account numbers ARE listed this way). Here's a complete P pull-
* FIRM/ID CODE RPTD OPND H/C TRM BAL P/D CS MR ECOA ACCOUNT NUMBER
BK1-DAY-VI*148BB917 07/91 10/90 2000 10 217 R1 09 I 4384xxxxxxxxx
AMOUNT IN H/C COLUMN IS CREDIT LIMIT
F INT BILG*898BB49 08/91 06/91 9580 259 9465 I1 01 J 1000xxxxxxxxxxx
&
It probably is best to just avoid these, since it is unknown what exactly they
do or don't do, and since I have no idea what the Beacon is.
THE LETTER Z
~~~~~~~~~~~~
The letter Z in much like P in the fact that it pulls full info, but it also
included the DAS scoring system (like the above). It's usually easy just to
list this at the end of a compound pull structure since it's the last letter in
the alphabet.
LOGGING ON TO CBI
~~~~~~~~~~~~~~~~~
Logging on is probably the easies portion of this text, since it is so basic.
All you do is dial the number through whichever service you choose, and connect
at 7E1. Most ports are 1200, although they are now upgrading a few to 2400
(either way is nice, but for lots of pull's 24 is hot). Once connected CBI
will not prompt you, and you must send a [CTRL-S] and wait. If it recieved it
properly, it should respond '(CB) Please Sign On.'. At this point you enter
the password, followed by another [CTRL-S]. If the account is valid it should
respond with something along the lines of 'D2D2 - Proceed.' Some ports will
give you the specific location the account is in, when it is a global account.
In these instances it will respond 'A-xxx Proceed.'. Where the xxx is repre-
sents the location, here is a current table:
Now you are ready to pull the file, so on with the next part
Tells CBI its a SSN First part of SSN, represents issueing state
\ /
DTEC-xxx-xx-xxxx.[CTRL-S]
/ \
Second Part, represents Last part, completely random and
issueing year represents the person
All commands with CBI are ended with a period '.' and [CTRL-S]. Returns are
for the most part invisible to CBI, and they will be ignored. For more info
on the structures of social security numbers, please refer to CMY-3. As I have
stated before, in other files, I prefer to do my pulls from random DTEC'ing,
since you cover a much larger geographic location (you pretty much just target
a certain state), whereas with name/address you are pulling from just on local
area and it makes the tracking of you much, much easier. DTEC'ing is then
followed by the next method, to actually pull the account.
NAME/ADDRESS PULLS
~~~~~~~~~~~~~~~~~~
The main method of pulling up someones file is by entering their full name
and one of their past three addresses (if listed in their account). You enter
the data in this format:
NM-KRAMER,KELLY,J.[RETURN]
CA-2501,8TH,RD,HUNTLEY,MT,59037.[CTRL-S]
CBI is not case sensitive, I simply do it for effect (hehe). You may also
add this to the file, in case you were having problems with the pull:
This will update the last reported address to whatever you entered. These are
both completely optional, and I very rarely find need to do either. About the
only real interesting use of this is one strange note on CBI... Whenever you
attempt to pull up someone by name/address, and they don't have a file, you
create one (unintentionally, in most cases) with the information you entered.
Now, if you enter with the ID-SSS as another, you would then not only include
the name and address, but the SSN as well (just if you were wondering, in CBI's
mind SSS stands for Social Security Sequence).
Ok, a little point to clarify on the CA line is this, the street type area
will list one of the following abbreviations:
They are pretty basic, so I don't think you'll have any real problem comprehend
ing their uses. One other note, but this on the NM line. If the person is a
Junior (JR), or a Serior (SR), add this to the end of the line, before the
period. This will help if you are having problems pulling the son and you're
always getting the father.
It will then respond with 'PROCEED.', and you're ready to rock. Now just
enter artd again, the command-specific dash, and then the companies account
number. Lets use 613bb1199 for example:
ARTD-613bb1199.[ctrl-s]
Which means it is a completely invalid account, and never fit their account
algorhythm (which I will cover later in the file). Or...
Which means it does fit the account algorhythm, but is not currently assigned
to a specific company any longer. This is helpful in checking the evolution
of a account chain. Or finally...
CUST-613BB01199
NAME-INTEGRATEC RECEIVABLE MGMT ABBRV-INTEGRATEC
ADDRS-PO BOX 36403 PHONE-
CITY-HOUSTON ST-TX ZIP-77036
This is pretty self-explanitory. If you struck out twice, the third has got to
be a hit. CUST is the merchant's account, ABBRV is the abbreviation you see in
the comment field of a pull, NAME is the complete company name, ADDRS is the
address of the company, PHONE the phone number, etc... This can be helpful for
either verifying what the person's credit history is comprised of, or just for
reference.
When CBI echos back a proper CBI customer account, it will fill all of the
five digit spaces. This is simply so the terms (which also do this type of pull
to store on the system) can have a specific field buffer size, which will never
fluxuate. CBI does not see the zeros listed before.
When you are done, all you do is type:
ARDT-END.[ctrl-s]
And you're out. Simple as that. This command is fairly useful, but mainly
just for information gathering.
.1. There is one account space reserved every for every nine empty
.2. There is never more than or less than ten per hundred
.3. The additive sum of the number increases by ten every two-hundred
.4. The additive sum loops every hundred
.5. The account evolves in ninty-nines from the first number of ten
.6. The first number of the chain is between one and nine, never zero
.7. Every fifty will flip the numbers odd/even quality
Ok, well, that seems really complex, but in reality it isn't. It's mainly just
a game of adding 99 to the base number, the rest will just fall into place. Ok,
let's list the evolution of each base 1 through 9 and respectively to 100:
Wow, pretty easy to see a pattern emerge, eh? Sideways they simply evolve up
one locked into the group of ten. Ok, here's the evolution of group [1] to
200:
/````````````````````````````\
/````/``````````````````````\ \
1 19 27 35 43 50 68 76 84 92 100 118 126 134 142 159 167 175 183 191
\.....\......................../ /
\............................../
Do you see the evolution in 99's? An easy way to do the calculation in your
head is just add 100 to the number, and then subtract 1, thus adding 99.
You probably also notice that it flip-flops from odd to even, or the other
way around every 50. This will remain true for the whole length of the string.
Ok, so now what does this mean to you? Simple, by knowing the starting group
evolution number, you can instantly tell whether or not an account someone gives
you even has the ABILITY to be real, not whether or not it will work, just if
it could. Here are some of the starting digits for some of the groups. They
evolve just like the identifier, so I see no need to list them all:
There you have it... Now you know the coveted CBI account configuration to
it's very CORE! Wow, what true power..
SECOND GROUP
~~~~~~~~~~~~
INQS: Inqueries to the file by companies who use CBI
PR/OI-Yes: File Has Public Records (lawsuits, leins, etc)
FB-NO: No information obtained from other Credit Agencies
ACCTS.#: File Contains # Trade Lines
HC: High Credit Range ($300-37,000)
One-Nine: Refer to CS
PR/OI DEFINITIONS
~~~~~~~~~~~~~~~~~
BKRPT: Bankruptcy; Date Filed, Court Number, Case Number, Liabilities
Assets, Exempt Amount, Filer, Type, Intent
COLL: Collection; Date Reported, Date Assigned to Collection Agency
Agency ID Number, Credit Grantor Name & Number, Amount, Date &
Status, Balance-Date of Last Activity WIth Creditor on Acct,
ECOA Designator, Account Serial Number.
STJD: Satisfied Judgement; Date Filed, Court Number, Amount,
Defendant, Case Number, Plaintiff, Date Verified, Status, Date
Satisfied.
THIRD GROUP
~~~~~~~~~~~
Firm/ID Code: Name & member Number of Reporting Company
*: Trade Information From Automated Tape Supplier
RPTD: Date Item Was Reported
OPND: Date Account Was Opened With Reporting Company
H/C: High Credit (On "R" (Revolving) Accounts indicates Credit Limit
TRM: Monthly Repayment Amount or Number of Months or Years
BAL: Balance Owed as of Reporting Date
P/D: Past Due Amount
CS: Current Status of Account [R]evolving/[O]pen/[I]nstallments
CS BREAKDOWN
~~~~~~~~~~~~
0: Too New to Rate;Approved But Not Used
1: Pays (or Paid) Within 30 Days of Payment Due Date, or Not Over One Payment
Past Due.
2: Pays (or Paid) in More Than 30 Days From The Payment Due Date But Not More
Than 60 Days.
3: Pays (or Paid) In More Than 60 Days From The Payment Due Date But Not More
Than 90 Days, or Three Payments Past Due.
4: Pays (or Paid) In More Than 90 Days From Payment Due Date, But not More
Than 120 Days, or Four Payments Past Due.
5: Pays (or Paid) In More Than 120 Days, or More Than Four Payments Past Due.
7: Making Regular Payments Under Debtor's Plan
8: Repossession, volintary or otherwise
9: Bad Debt (Credit from hell)
OTHER DEFINITIONS
~~~~~~~~~~~~~~~~~
ECOA: Equal Credit Opportunity Act Designator
LIST: Date Assigned to Collection Agency
AMT: Total Amount of Collection
DLA: Date of Last Activity (Payment to Creditor)
AGENCY: Collection Agency I.D. Number
CLIENT: Credit Grantor Name or Industry
SERIAL: Account Serial Number
BAL: Balance as of Date Reported
RPTD: Date Reported
MAX/DEL: Most Recent, Highest Delinquency Beyond the 24 Mont's History
24 Month History-Rate History for 24 Months Prior to Current Status.
Slash (/) Separates Two 12 Mont Periods (Read From left to Right)
*=No Delinquency Reported This Month
GRAND TOTAL: Grand Totals for Limit, High Credit, Balance, Past Due, and Terms.
ARDT (MERCHANT PULLS)
~~~~~~~~~~~~~~~~~~~~~
CUST: The merchants Account number
NAME: The merchants complete name
ABBRV: The merchants CBI name abbreviation
ADDRS: The merchants Street Address (If available)
PHONE: The merchants Phone Number (If available)
CITY: The City it is located in
ST: The State abbreviation
ZIP: The zip code
Catch these and more on the way at any of the BBS's listed below! They will
definantly get them first...
CONCLUSION
~~~~~~~~~~
Hopefully this file will help you in the exploits of one of America's more
profitable system to play with. I don't say you really Hack CBI, since it is
pretty basic and takes no brain to use. If you can't figure out how to use the
system after reading this, well, start calling the PD Express and give up the
H/P scene. I also hope the algorhythm helps to weed out those losers who try
to pawn off invalid accounts, I'm getting tired of that.
Well, in this file, I'm including the biggest list of systems to call, just
since they're good and I think anyone who want's to get into the scene will
find at least one of these will suit their tastes. Give'em a call.
And now for the wonderful greet's, which of course go out to EVERYONE who I
talk to, but specifically: The White Rider, /<ludge, Crypt Roamer, Psycho Smurf,
Mcbeth (thanks for the stuff!), Grandmaster Ratte' (go cDc in '92), Mind Walker,
Crystal Warrior, and any other poor souls I forgot to list!
And always remember...