My Visa - How to uncover phone scammers

by Abdulla
2 minutes
My Visa - How to uncover phone scammers

Before you start:

⚠️By using this service, you agree that you will use it for legal purposes only and/or protecting yourself from suspecious actors (phone scammers ...etc).

Sales pitch?

Do you ever get a phone call or email telling you that you won a prize?

Sometimes, the caller tell you that your visacard is about to expire and you need to give them the card details or say goodbye to your money?

Introducing, MYVISA web app. A new way to trick the attackers to access a fake link that will grab some information about their activity (IP, Hostname ..etc) which can help you get more insight about their identity ... for legal purposes of course.

How?

Whenever you get a phone scam asking for your visa card details, just do the following:

  1. Tell the caller that you uploaded the visa card image and will send the link in Whatsapp
  2. Open MYVISA app on your mobile or computer

  3. Enter a redirection URL (I prefer a link to an image of someone holding a visa card): Example 1, Example 2
  4. Enter a secret code (all the logs will be encrypted and can be accessed only using this code, so SAVE IT)
  5. Click "Create Tracking Link" button and wait for few seconds

  6. Send the newly generated tracking link to the attacker over Whatsapp
  7. Sit back and enjoy the logs using the monitoring link

Pro tip: You can bookmark this link for an easy access.

Features:

  • Auto-redirects attackers to the fake link after grabbing their information (ip, hostname, port, user-agent and time).
  • Fake link ends with visa.png to mimic an image extension.
  • Fake link creates a Whatsapp preview that tricks the attacker into clicking it.

  • Full logs encryption - Only you can access the logs using the secret code.
  • Subdomain redirection. The attacker cannot browse the subdomain as all invalid links will redirect to Google by default.
  • New Logs Page that lists all access attempts with their details
  • [Soon] IP to Map resolution.
  • [Soon] WebRTC leak detection (for cases where the attacker hides behind a VPN).

Screenshots:

Create a new link

Log monitoring

Final thoughts:

If you have a suggestion or want to report a bug, feel free to ask@0d.ae

Also, follow my Github Account. I release many amazing tools.

- Abdulla