<!doctypehtml><html lang=en><meta charset=utf-8><meta content=width=device-width,initial-scale=1,maximum-scale=1 name=viewport><title>
   Credit card thieves are using mobile games like 'Clash of Clans' to launder money | GameDaily.biz
  </title><link href=https://gamedaily.biz/article/126/credit-card-thieves-are-using-clash-of-clans-to-launder-money rel=canonical><link href=https://gamedaily.biz/article/126/credit-card-thieves-are-using-clash-of-clans-to-launder-money?amphtml=1 rel=amphtml><meta content="It's like Breaking Bad, but with video games. Kind of."name=description><meta content="It's like Breaking Bad, but with video games. Kind of."property=og:description><meta content="It's like Breaking Bad, but with video games. Kind of."itemprop=description><meta content="It's like Breaking Bad, but with video games. Kind of."name=twitter:description><meta content="Credit card thieves are using mobile games like 'Clash of Clans' to launder money"property=og:title><meta content="Credit card thieves are using mobile games like 'Clash of Clans' to launder money"name=twitter:title><meta content="Credit card thieves are using mobile games like 'Clash of Clans' to launder money"itemprop=name><meta content=https://deifoexkvnt11.cloudfront.net/assets/article/2018/07/19/og-clashofclans_feature.jpg property=og:image><meta content=https://deifoexkvnt11.cloudfront.net/assets/article/2018/07/19/og-clashofclans_feature.jpg itemprop=image><meta content=https://deifoexkvnt11.cloudfront.net/assets/article/2018/07/19/og-clashofclans_feature.jpg itemprop=twitter:image><meta content=summary_large_image name=twitter:card><meta content=GameDaily.biz property=og:site_name><meta content="INDEX, FOLLOW"name=ROBOTS><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/css/style.css rel=stylesheet><script>var STATIC_URL = "https:\/\/deifoexkvnt11.cloudfront.net\/deploy\/3560e56\/";</script><script src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/js/app-built.js></script><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/apple-icon-57x57.png rel=apple-touch-icon sizes=57x57><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/apple-icon-60x60.png rel=apple-touch-icon sizes=60x60><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/apple-icon-72x72.png rel=apple-touch-icon sizes=72x72><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/apple-icon-76x76.png rel=apple-touch-icon sizes=76x76><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/apple-icon-114x114.png rel=apple-touch-icon sizes=114x114><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/apple-icon-120x120.png rel=apple-touch-icon sizes=120x120><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/apple-icon-144x144.png rel=apple-touch-icon sizes=144x144><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/apple-icon-152x152.png rel=apple-touch-icon sizes=152x152><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/apple-icon-180x180.png rel=apple-touch-icon sizes=180x180><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/android-icon-192x192.png rel=icon sizes=192x192 type=image/png><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/favicon-32x32.png rel=icon sizes=32x32 type=image/png><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/favicon-96x96.png rel=icon sizes=96x96 type=image/png><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/favicon-16x16.png rel=icon sizes=16x16 type=image/png><link href=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/manifest.json rel=manifest><meta content=#ffffff name=msapplication-TileColor><meta content=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/favicon/ms-icon-144x144.png name=msapplication-TileImage><meta content=#ffffff name=theme-color><script>(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
	(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
	m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
	})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');

	ga('create', 'UA-79833003-9', 'auto');
	ga('send', 'pageview');</script><script>var _comscore = _comscore || [];
_comscore.push({ c1: "2", c2: "24936062" });
(function() {
var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true;
s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js";
el.parentNode.insertBefore(s, el);
})();</script><noscript></noscript><body class="tmpl-light side-menu"><img src=http://b.scorecardresearch.com/p?c1=2&c2=24936062&cv=2.0&cj=1><script>var adUnits = {
	'skin': [
		'<!-- default skin ad code -->'
	],
	'300x250': [
		'<img src="http://placehold.it/300x250" />',
		'<img src="http://placehold.it/300x250" />',
		'<img src="http://placehold.it/300x250" />',
	],
	'728x90': [
		'<img src="http://placehold.it/728x90" />',
		'<img src="http://placehold.it/728x90" />',
	]
}</script><script>function loadAdUnit(size, rand) {
		var adWrapper = document.getElementById('adUnit-' + rand);
		var display = window.getComputedStyle(adWrapper).display;
		if (size === 'skin' || display !== "none") {
			unit = adUnits[size].splice(0, 1);
			adWrapper.innerHTML += unit;
		}
	}</script><div class=page><div class="menu-hider cover"></div><div class=header-spacer></div><header class=primary><div class=header-top><div class=in><div class=header-top-left><time> Sunday 13, December 2020 </time><ul class=trending-bar id=trending-bar><li><a href=https://gamedaily.biz/article/1411/arkane-founder-and-former-executive-producer-team-up-to-form-wolfeye-studios> <h1>Arkane founder and former executive producer team up to form WolfEye Studios</h1> </a><li><a href=https://gamedaily.biz/article/1405/greg-rice-long-time-business-vp-at-double-fine-leaves-the-company-after-10-years> <h1>Greg Rice, long-time business VP at Double Fine, leaves the company after 10 years</h1> </a><li><a href=https://gamedaily.biz/article/1399/x019-reveals-new-first-party-ip-roadmap-for-project-xcloud-new-details-for-xbox-game-pass> <h1>X019 reveals new first-party IP, roadmap for Project xCloud, new details for Xbox Game Pass</h1> </a><li><a href=https://gamedaily.biz/article/1369/starbreeze-q3-2019-sales-down-year-over-year-as-reconstruction-continues> <h1>Starbreeze Q3 2019 sales down year-over-year as reconstruction continues</h1> </a><li><a href=https://gamedaily.biz/article/1358/epic-games-extends-its-free-content-initiative-on-the-unreal-engine-marketplace> <h1>Epic Games extends its free content initiative on the Unreal Engine Marketplace</h1> </a></ul></div><div class="header-tools header-top-right"><div class=social><script src=//s7.addthis.com/js/300/addthis_widget.js#pubid=ra-5b0314dd64a88f56></script><a href=https://www.facebook.com/GameDailyBiz/ target=_blank> <span class="tmpl-icon mini">  </span> <span class=text> Facebook </span> </a><a href=https://twitter.com/gamedailybiz/ target=_blank> <span class="tmpl-icon mini">  </span> <span class=text> Twitter </span> </a><a href=https://www.instagram.com/gamedailybiz/ target=_blank> <span class="tmpl-icon mini">  </span> <span class=text> Instagram </span> </a><a href=https://www.linkedin.com/company/gamedaily-biz/ target=_blank> <span class="tmpl-icon mini">  </span> <span class=text> LinkedIn </span> </a></div><div class=search-form><form action=/search/><input name=q placeholder=Search><span class="tmpl-icon mini">  </span></form></div></div></div></div><div class=header-mid><div class=in><nav class=primary><div class=menu-button></div><ul><li><a href=https://gamedaily.biz/topic/news/> News </a><li><a href=https://gamedaily.biz/topic/podcast/> Podcast </a><li><a href=https://gamedaily.biz/topic/development/> Development </a><li><a href=https://gamedaily.biz/topic/publishing/> Publishing </a><li><a href=https://gamedaily.biz/topic/esports/> Esports </a><li><a href=https://gamedaily.biz/topic/ar-vr/> AR/VR </a><li><a class=selected href=https://gamedaily.biz/topic/mobile/> Mobile </a><li><a href=https://gamedaily.biz/topic/culture/> Culture </a></ul></nav><div id=logo><a href=https://gamedaily.biz/> <img src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/brand/logo-game-daily-biz.png> </a><a class=powered-by href=https://www.facebook.com/fbgaminghome/marketers target=_blank> <span> Powered by </span> <img src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/ad/facebook-gaming/facebook-gaming-logo-small.png> </a></div></div></div></header><article id=detail-view><script type=application/ld+json>
     {"@context":"http:\/\/schema.org","@type":"Article","url":"https:\/\/gamedaily.biz\/article\/126\/credit-card-thieves-are-using-clash-of-clans-to-launder-money","mainEntityOfPage":true,"headline":"Credit card thieves are using mobile games like 'Clash of Clans' to launder money","datePublished":"2018-07-19T12:07:00-07:00","dateModified":"2018-07-19T12:11:21-07:00","publisher":{"@type":"Organization","name":"GameDaily.biz","logo":{"@type":"ImageObject","url":"https:\/\/deifoexkvnt11.cloudfront.net\/deploy\/3560e56\/brand\/project-logo.png"}},"author":{"@type":"Person","name":"Amanda Farough"},"image":{"@type":"ImageObject","url":"https:\/\/deifoexkvnt11.cloudfront.net\/assets\/article\/2018\/07\/19\/og-clashofclans_feature.jpg","width":1600,"height":840}}
    </script><div class=in><div class="wide ad"><a href=https://www.facebook.com/fbgaminghome/marketers/Automated_App_Ads?utm_source=GameDaily.biz&utm_medium=Referral&utm_campaign=AAA&utm_term=&utm_content=SponArticle target=_blank> <img src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/ad/facebook-gaming/pg-banner-wide.jpg> </a></div><section id=article-lead><div><ul class=tags><li><a href=https://gamedaily.biz/topic/mobile/> Mobile </a><li><a href=https://gamedaily.biz/topic/news/> News </a></ul><h1>Credit card thieves are using mobile games like 'Clash of Clans' to launder money</h1><div class="meta module"><div class=by-line><div class=author-block><a style="background-image: url('https://deifoexkvnt11.cloudfront.net/assets/author/2019/01/20/dxx2li8w0am8lu2_512x512.jpg')"class=author-avatar href=https://gamedaily.biz/author/amanda-farough> </a><address class=nh3><a class=read-more-author href=https://gamedaily.biz/author/amanda-farough> Amanda Farough </a></address> , </div><div class=time-stamp><time datetime=2018-07-19T12:07:00-07:00> July 19, 2018 12:07 PM </time></div></div><div class=addthis_inline_share_toolbox></div></div></div></section><div class="ad vert mobile"><div class="ad vert"><a href=https://www.facebook.com/fbgaminghome/marketers/Automated_App_Ads?utm_source=GameDaily.biz&utm_medium=Referral&utm_campaign=AAA&utm_term=&utm_content=SponArticle target=_blank> <img src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/ad/facebook-gaming/pg-banner-square.jpg> </a></div></div></div><section id=article-body><div class="article-body-container in"><main><div class="article-pic main-pic"><img src=https://deifoexkvnt11.cloudfront.net/assets/article/2018/07/19/og-clashofclans_feature.jpg></div><description> <p>It's like Breaking Bad, but with video games. Kind of.</p> </description><p>German cybersecurity firm, Kromtech, <a href=https://kromtech.com/blog/security-center/digital-laundry> has reported on the growing concern of money laundering </a> in mobile games. Credit cards thieves are using popular games like <em> Clash of Clans </em> , <em> Clash Royale </em> , and <em> Marvel Contest of Champions </em> to launder hundreds of thousands of dollars.<p>The cultural perception of money laundering is usually something akin to Breaking Bad or Netflix’s Ozark — brick and mortar businesses taking dirty money and “washing” it through the legitimate business’ revenue. These days, money laundering isn’t as cut and dried as all that. PayPal has cracked down on launderers. And now they’ve popped up in games like <em> Clash of Clans </em> , <em> Clash Royale </em> , and <em> Marvel Contest of Champions </em> .<p>“In the 2011 the Danish part of the Apple App Store was flooded with expensive suspicious applications,” Kromtech communications director, Alexander Kernishniuk said in the company’s report. “More than 20 out of 25 of the most downloaded applications were from China. The price of the apps ranged from $50-$100. For example, one of them <em> LettersTeach </em> , was intended for children who are learning English letters, yet it cost nearly $78. This pointed to money laundering then, however, what we encountered now is much more sophisticated.”<p>“This laundering is possible because of the accessibility to automatically create accounts on a large scale,” <a href=http://www.gamasutra.com/view/news/322413/Credit_card_thieves_reportedly_using_Clash_of_Clans_to_launder_money.php> according to Gamasutra </a> . Apple’s requirements for creating an account are relatively lax: valid email address, password, date of birth, and three security questions. Creating these accounts on a large scale with relative ease doesn’t require much more than scripts and a bit of processing power.<p>Kromtech doubled-down on their previous research into MongoDB security flaws and did another round of audits. Lo and behold, there was an errant database that wasn't locked down that gave away the game. “In June 2018 we spotted a strange database publicly exposed to the public internet (no password / login required) along with a large number of credit card numbers and personal information inside.”<p>It spurred the cybersecurity firm onwards and they determined that within just the three games previously mentioned, there are approximately “250 million aggregate users, generating approximately $330 million USD a year in revenue.” These games apparently have an active third-party market and use sites like g2g.com to “buy and sell resources and games.”<p>“With the account creation process automated,” the report continued, “the malicious actors then took the process further, automatically changing cards until a valid one is found, automatically buying games and resources, automatically posting the games and resources for sale, working with a digital wallet for order processing, and managing multiple Apple devices to distribute the load.”<p>There’s no easy solution to this, as it’s a nuanced problem with multiple companies and stakeholders involved in addition to these “bad actors.” Kromtech advises that developers (and Apple) start to take more of an interest in these transactions, rather than just bask in the earned revenue. If money talks, then this money has nothing good to say anyway.<p><strong> <em> For more stories like this one delivered straight to your inbox, please <a href=http://eepurl.com/dyvcgv target=_blank> subscribe to the GameDailyBiz Digest! </a> </em> </strong><div class=author-short-bio><div class=short-bio-heading><div class=author-pic><a href=https://gamedaily.biz/author/amanda-farough> <img src=https://deifoexkvnt11.cloudfront.net/assets/author/2019/01/20/dxx2li8w0am8lu2_512x512.jpg> </a></div><div><address class=nh3 itemprop=author><a href=https://gamedaily.biz/author/amanda-farough> Amanda Farough </a></address><div class=nh5></div></div></div><div class=author-about></div></div><ul class=tags><li><a href=https://gamedaily.biz/topic/mobile/> Mobile </a><li><a href=https://gamedaily.biz/topic/business/> Business </a><li><a href=https://gamedaily.biz/topic/news/> News </a><li><a href=https://gamedaily.biz/topic/legal/> Legal </a><li><a href=https://gamedaily.biz/topic/trending/> Trending </a></ul><script src=//s7.addthis.com/js/300/addthis_widget.js#pubid=ra-5b0314dd64a88f56></script></main><div id=side-rail><div class=side-rail-container><div class="ad vert"><div class="ad vert"><a href=https://www.facebook.com/fbgaminghome/marketers/Automated_App_Ads?utm_source=GameDaily.biz&utm_medium=Referral&utm_campaign=AAA&utm_term=&utm_content=SponArticle target=_blank> <img src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/ad/facebook-gaming/pg-banner-square.jpg> </a></div></div><section id=related><div class="article-list module"><h3>Related Reading</h3><div><article class=list-item><a style="background-image: url('https://deifoexkvnt11.cloudfront.net/assets/article/2020/12/11/kerde-severin-nvd-32bbzfe-unsplash_688x387.jpg')"class=article-pic href=https://gamedaily.biz/article/1944/report-playstation-5-breaks-unit-and-dollar-sales-records-for-a-new-console-launch-month-npd> <img class="spacer widescreen"src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/spacer-16x9.png> </a><div class=article-preview><div class=article-preview-container><h3><a href=https://gamedaily.biz/article/1944/report-playstation-5-breaks-unit-and-dollar-sales-records-for-a-new-console-launch-month-npd> Report: PlayStation 5 breaks unit and dollar sales records for a new console launch month (NPD) </a></h3><p>The games market grew by a massive 35% in November, highlighting consumer anticipation for next-gen hardware. Meanwhile, the Nintendo Switch continued its unprecedented hot streak. NPD's Mat Piscatella weighs in.</div></div></article><article class=list-item><a style="background-image: url('https://deifoexkvnt11.cloudfront.net/assets/article/2020/12/10/rollic-onnect-header_688x387.jpg')"class=article-pic href=https://gamedaily.biz/article/1943/zyngas-rollic-fully-acquires-onnect-from-chef-game-studio> <img class="spacer widescreen"src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/spacer-16x9.png> </a><div class=article-preview><div class=article-preview-container><h3><a href=https://gamedaily.biz/article/1943/zyngas-rollic-fully-acquires-onnect-from-chef-game-studio> Zynga's Rollic fully acquires Onnect from Chef Game Studio </a></h3><p>Rollic CEO Burak Vardal talks to GameDaily about what the deal means for the growing Turkish mobile games market.</div></div></article><article class=list-item><a style="background-image: url('https://deifoexkvnt11.cloudfront.net/assets/article/2020/12/09/1-hajwxgqqfs-wxyhqs0x1va_688x387.png')"class=article-pic href=https://gamedaily.biz/article/1941/manticore-announces-a-50-revenue-share-for-users-of-its-core-game-creation-platform> <img class="spacer widescreen"src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/spacer-16x9.png> </a><div class=article-preview><div class=article-preview-container><h3><a href=https://gamedaily.biz/article/1941/manticore-announces-a-50-revenue-share-for-users-of-its-core-game-creation-platform> Manticore announces a 50% revenue share for users of its Core game creation platform </a></h3><p>Manticore's efforts to democratize game creation continues with the announcement of Perks, Core's new economic engine.</div></div></article><article class=list-item><a style="background-image: url('https://deifoexkvnt11.cloudfront.net/assets/article/2020/12/08/cyberpunk2077-dive-in-rgb-en_688x387.jpg')"class=article-pic href=https://gamedaily.biz/article/1940/cyberpunk-2077-under-fire-for-epileptic-triggers> <img class="spacer widescreen"src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/images/spacer-16x9.png> </a><div class=article-preview><div class=article-preview-container><h3><a href=https://gamedaily.biz/article/1940/cyberpunk-2077-under-fire-for-epileptic-triggers> Cyberpunk 2077 under fire for epileptic triggers </a></h3><p>CD Projekt Red has issued a statement following a report from Game Informer. Attorney Richard Hoeg weighs in on the legal possibilities.</div></div></article></div></div></section></div></div></div></section></article><footer class=primary><div class="in sponsor"><span> Powered by </span><a class=powered-by href=https://www.facebook.com/fbgaminghome/marketers target=_blank> <img style="background-color: white; padding: 1rem;"src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/ad/facebook-gaming/facebook-gaming-logo-small.png> </a></div><div class="in footer-primary-container"><h1><img src=https://deifoexkvnt11.cloudfront.net/deploy/3560e56/brand/footer-emblem.png> GameDaily.biz <span class=tiny> © 2020 | All Rights Reserved. </span></h1><nav class=footer><ul><li><a class=heading href=https://gamedaily.biz/pages/about-us/> About Us </a><li><a class=heading href=https://gamedaily.biz/pages/contact-us> Contact Us </a><li><a class=heading href=https://gamedaily.biz/pages/privacy-policy> Privacy Policy </a><li><a class=heading href=https://gamedaily.biz/pages/terms-of-service> Terms of Service </a></ul></nav></div></footer><div style="display: none"class=mailchimp id=mailchimp-overlay><div class=in><a class=close href=#> x </a><h2>Sign Up For Our Newsletter</h2><form action=//mc.us18.list-manage.com/subscribe/post-json><input name=u type=hidden value=9d16869d0f44e90c42ad61f8a><input name=id type=hidden value=7d8ff4052e><input id=MERGE0 name=MERGE0 placeholder=email@address.com type=email><input id=MERGE8 name=MERGE8 placeholder=Company><input placeholder="Job Title"id=MERGE9 name=MERGE9><input class=button type=submit value=Submit><p class=message></form></div></div><script>require(['jquery'], function () {
	widget = $('.mailchimp');
	form = widget.find('form');
	messageField = form.find('.message');
	close = widget.find('.close');
	cookieName = 'mailchimpWidget'

	function formSubmit() {
		$.ajax({
			type: 'get',
			url: form.attr('action'),
			data: form.serialize(),
			cache: false,
			dataType: 'jsonp',
			jsonp: 'c',
			error: function(err) {
				callbackError('Something went wrong. Please try again later');
			},
			success: function(data) {
				if (data.result == "success") {
					callbackSuccess(data.msg);
				} else {
					callbackError(data.msg);
				}
			}
		});
	}

	function callbackError(msg) {
		messageField.addClass('error');
		messageField.html(msg);
	}

	function callbackSuccess(msg) {
		messageField.removeClass('error');
		messageField.html('Thank you for subscribing! Your first issue of GameDaily will arrive in the near future.');
	}

	function cookieExists(name) {
		return document.cookie.indexOf(name + '=') >= 0;
	}

	close.click(function (e) {
		e.preventDefault();
		widget.hide();
		expiryDate = new Date();
		expiryDate.setMonth(expiryDate.getMonth() + 1);
		document.cookie = cookieName + '=1; expires=' + expiryDate.toGMTString();
	});

	form.submit(function (e) {
		e.preventDefault();
		formSubmit();
	});

	if (!cookieExists(cookieName)) {
		widget.show();
	}
});</script></div><script async id=dsq-count-scr src=//gamedaily-biz.disqus.com/count.js></script><script src=//s7.addthis.com/js/300/addthis_widget.js#pubid=ra-5b0314dd64a88f56></script>