Card Cracking
A fraud scheme in which a criminal recruits account holders to share their debit card details in exchange for a promised share of fraudulently deposited funds.
Also known as: account cracking, cardcracking, bank account cracking
Last reviewed: 1 June 2026
Card cracking (sometimes called 'cardcracking' or 'account cracking') typically targets young adults through social media with promises of easy money. The recruit is asked to share their bank account login credentials, debit card number, and PIN. The fraudster then deposits a counterfeit or stolen cheque into the account, quickly withdraws cash before the bank identifies the cheque as fraudulent, and disappears. The recruit is left liable for the returned funds and any associated fees.
Victims may also be persuaded to file a false fraud report with their bank, claiming their card was lost or stolen, to cover the fraudster's tracks — a step that itself constitutes fraud and can lead to criminal charges for the recruit.
Card cracking is distinct from card skimming (which involves covertly capturing card data) because it relies on voluntary co-operation, often through social engineering on platforms where job offers or 'flipping money' promises circulate. The scheme disproportionately affects financially vulnerable young people lured by fast cash.
Examples
- A university student responds to an Instagram post promising quick cash; they share their account details, a cheque is deposited and withdrawn, and they are later contacted by their bank about a returned cheque for which they are held responsible.