Can I catch someone using a VPN? How ?

R

Rug Love

Newbie
Joined
Apr 2, 2020
Messages
29
Reaction score
20
Someone is sabotaging my online business, a rival . With fake orders . They are using a VPN. How can I catch them out, or lead them into a trap to discover the true details - I know enough it is, I just need to prove it ? Any help guys ? Cheers
 
Advertise on BHW
That sucks! I’m curious about this myself though can you catch some using a VPN! I don’t guess you could trace an IP address when they are using it!
 
Yeah it’s frustrating bro . Just wondering if any of the wizards on here knew a hack or trap I could place
 
Rug Love said:
Yeah it’s frustrating bro . Just wondering if any of the wizards on here knew a hack or trap I could place
Click to expand...

It's not possible to get someone's real IP through a VPN.

I don't understand how this is an issue though.. Fake orders? Surely he has to pay to order?
 
splishsplash said:
It's not possible to get someone's real IP through a VPN.

I don't understand how this is an issue though.. Fake orders? Surely he has to pay to order?
Click to expand...
Yes it is. But it depends on what VPN they have.

Also; if it's used for vreating fake orders, is this with cc fraud? in that case they're most likely not only using a VPN.
 
DunderMannen said:
Yes it is. But it depends on what VPN they have.

Also; if it's used for vreating fake orders, is this with cc fraud? in that case they're most likely not only using a VPN.
Click to expand...

Definitely not possible unless you have a backdoor on the VPN.

A full IPsec VPN routes ALL packets through the VPN. It's a full tunnel. Nothing can be sent outside it. A VPN is using a virtual network adaptor, so anything sent, no matter whether it's accessing a webpage, javascript or any other protocol will go through the tunnel.

I'm open to hearing how you would go about getting someone's real IP behind a VPN though, but as far as I know, there is no known way. You can sometimes get someone's real IP through tor through exit node manipulation, but not VPNs.
 
splishsplash said:
Definitely not possible unless you have a backdoor on the VPN.

A full IPsec VPN routes ALL packets through the VPN. It's a full tunnel. Nothing can be sent outside it. A VPN is using a virtual network adaptor, so anything sent, no matter whether it's accessing a webpage, javascript or any other protocol will go through the tunnel.

I'm open to hearing how you would go about getting someone's real IP behind a VPN though, but as far as I know, there is no known way. You can sometimes get someone's real IP through tor through exit node manipulation, but not VPNs.
Click to expand...
DNS leaks? Hence me saying depending on the VPN
 
Are you self hosting your shop? Do you have full access to your server? Have you seen any patterns in the fake orders? Same IP? Same IP range? Weird Refferrers? Weird Useragents?

When exactly is an order fake? Is he doing chargebacks?

Please tell us more details someone here can suggest a possible solution.
 
Yes 1 location has spent 22 hours on my site . As I have video logs . Would a random VPN pick a certain location all the time or not ? It’s not a main city . No it’s shopify . Weird pattern would be placing orders then live chat 2 seconds after several times asking has it been dispatched .
My fraud app flags it as high risk due to the IP being miles from the delivery addesss . I know it’s easy set up s free email .. but where is he getting these bank details from ? Some have been Klarna, regular payments and PayPal .. PayPal never clears and is an Echeque that is always held by PayPal . We are involved in a email back and forth where he’s saying he report me if I don’t change my name as I’m threatening his intellectual property . What is an IP range or user agent ? What should I be looking for ? I just need lay a trap to catch him somehow then it backs me up in court that he has been harassing me . Can he open up several PayPals with just his own bank details ? It’s not out the realms he’s using friends from around the country to deliver stuff too. Maybe I need get s bit more investigative, like look at electrol roll of the addresses he is asking these to go too. Nearly always comes in via google shopping suspect just wasting my PPC budget . Any tips or hacks i can try .. in layman’s terms . I’m desperate guys. Can’t focus or sleep
 
You can sign up for the free service in FraudLabs Pro and link it with your shopping cart.

It screens all orders and detects all VPN connections.
 
splishsplash said:
I don't understand how this is an issue though.. Fake orders? Surely he has to pay to order?
Click to expand...
I had the same problem happen to me. A competitor (and friends of his) placed orders via my site, and then did chargebacks at the same time, saying that it was a scam. I got an instant perma ban by PayPal (+ domain backlisted) and lost a 6 figure/year site. Lovely.

tenor.gif
 
I know paypal is retarded but for a six figure / year website I would fight them to death.

Stackz said:
I had the same problem happen to me. A competitor (and friends of his) placed orders via my site, and then did chargebacks at the same time, saying that it was a scam. I got an instant perma ban by PayPal (+ domain backlisted) and lost a 6 figure/year site. Lovely.

tenor.gif
Click to expand...
 
Sorry to hear that bro - how awful . How does the charge back and domain black list thing work ? Like what will he be trying to do next and how do I prevent ? Do PayPal ban you for what ? The customer saying they have not had the parcel yes
 
I think your making this more of a hassle than it should be. a few avenues like:
1. Unfortunately your internet service provider/VPN was automatically flagged from previous persons fraudulent activity. Before an item can be shipped, please provide 3 seperate points of ID including 1 item that shows your name, photo and address(IE. Drivers licence) and send them to blah.
2. Block the ip's each time
3. tell them that when the money clears the item will be shipped with tracking and signage.
4. tell them that due to recent activity, a tracker and signature is required on pickup
5. tell them that his location & his postal address and provide proof of address.
though some of the documents can be forged, atleast you got something to back u up with. not to mention tracking with signage will make them think differently too. i think they'll then give up and move to another site.
 
Stackz said:
I had the same problem happen to me. A competitor (and friends of his) placed orders via my site, and then did chargebacks at the same time, saying that it was a scam. I got an instant perma ban by PayPal (+ domain backlisted) and lost a 6 figure/year site. Lovely.

tenor.gif
Click to expand...

PayPal are really an awful company. These kind of tactics shouldn't work, but unfortunately they do
 
  • Like
Reactions: Psh
The majority of people that use VPN have IP addresses that are allocated to a data centre. Use this website https://iphub.info/ paste the IP most of the time it will show as "Hosting, proxy or bad IP" if they are using a VPN/Proxy. If it shows as "Good IP (residential or business)" then it's probably not a VPN.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top