BLACKSEC FORUM RULES & GUIDELINES 2026 Read This Before Posting — Ignorance Is Not an Excuse
STAFF NOTE:If you're new here — welcome. BlackSec has been operating since 2021 and we've built one of the most comprehensive blackhat communities on the web. The reason we've survived while other forums got seized or shut down is simple: rules, structure, and OpSec.
This thread covers everything you need to know before posting your first thread or reply. Break the rules and you get warned. Break them again and you're gone. No refunds, no appeals, no second chances for egregious violations.
TABLE OF CONTENTS- 1.0 — Forum Etiquette Basics
- 2.0 — Posting Guidelines
- 3.0 — Marketplace Rules
- 4.0 — Scam & Dispute Policy
- 5.0 — OpSec Requirements
- 6.0 — Account Security
- 7.0 — Content Restrictions
- 8.0 — Warning & Ban System
- 9.0 — Vetting & Trust Levels
- 10.0 — Frequently Asked Questions
1.0 — FORUM ETIQUETTE BASICS
The Golden Rules:
- Don't be a snitch — This should go without saying but here we are. Nothing posted on BlackSec leaves BlackSec. Screenshot a thread and share it outside? Permanent ban.
- Don't be a dick — We're all here for the same thing. Disagreements happen. Keep it civil. No personal attacks, no doxxing other members, no harassment.
- Don't ask for handouts — "Can someone teach me carding?" gets you laughed at. Read the forums, do the work, then ask specific questions.
- Don't spam — Bumping your thread every hour, posting the same thing in multiple sections, or replying with garbage will get your thread deleted.
- Don't impersonate staff — Admins are marked with a red [A] tag. Mods have [M]. Anyone claiming to be staff without the tag is lying.
"Lurk for two weeks before posting your first thread. Read everything. Then decide if you have anything worth contributing." 2.0 — POSTING GUIDELINES
Thread Titles:
- Must be descriptive. "[WTS]" prefix for selling, "[WTB]" for buying, "[Guide]" for tutorials
- No ALL CAPS titles unless it's a [GIVEAWAY]
- Include relevant tags: [CARDING], [CRACKING], [SPAM], [CRYPTO], [TOOLS]
Thread Content:
- Minimum 100 characters for thread content (no "title says it all")
- Use proper formatting — walls of text get ignored. Break it up with headers, lists, code blocks
- Code dumps go in
Code:
tags. No pastebin links unless it's supplemental [*]Screenshots must show your username or they'll be assumed stolen [*]External links must use [URL] tags and must be relevant [/LIST] [SIZE=4][B]Replies:[/B][/SIZE] [LIST] [*]"thanks" or "nice post" is not a reply. If you have nothing to add, don't post [*]If a thread helps you, use the [B]Like[/B] button instead of bumping [*]Questions should be specific: "How do I check if a BIN is valid?" not "how carding plz teach" [*]If you're answering someone, make sure your answer is actually correct [/LIST] [TABLE] [TR] [TD][B]Do[/B][/TD] [TD][B]Don't[/B][/TD] [/TR] [TR] [TD]"Check your BIN on bindb.com first, then use Stripe's test endpoint with a proxy matching the BIN country"[/TD] [TD]"bro just use a checker lol"[/TD] [/TR] [TR] [TD]"I've been running this config for 3 months with 23% hit rate. Here's the setup..."[/TD] [TD]"nice config"[/TD] [/TR] [TR] [TD]"Adding to what OP said — you can also try the authorization hold method on smaller merchants"[/TD] [TD]"good post"[/TD] [/TR] [/TABLE] [HR][/HR] [COLOR=#ff6b6b][SIZE=5][B]3.0 — MARKETPLACE RULES[/B][/SIZE][/COLOR] [SIZE=4][B]Selling on BlackSec:[/B][/SIZE] [LIST=1] [*][B]Vendor verification required[/B] — Before you can sell anything, you need to be verified. See the "Vendor Applications" thread. [*][B]Escrow for high-value transactions[/B] — Any sale over $200 must use an approved escrow service. This protects both buyer and seller. [*][B]No FE (Finalizing Early)[/B] — Sellers cannot require buyers to finalize before receiving product. If caught, immediate ban. [*][B]Proof of stock required[/B] — If you're selling fullz, combos, or accounts, you must provide proof you actually have them. Screenshots with your forum name. [*][B]No selling of drugs, weapons, or hitman services[/B] — This isn't that kind of forum. Stick to digital goods. [*][B]No selling of child exploitation material[/B] — Instant permaban. No warnings. We don't fuck with that. [*][B]Dispute resolution[/B] — If a transaction goes bad, open a dispute in the appropriate section. Staff will investigate and rule. [/LIST] [SIZE=4][B]Buying on BlackSec:[/B][/SIZE] [LIST] [*]Always check vendor reputation before sending money [*]Use escrow when possible [*]Check the Scam Reports section before dealing with unknown vendors [*]Don't finalize until you've received and verified the product [*]If something seems too good to be true, it probably is [/LIST] [HR][/HR] [COLOR=##ff6b6b][SIZE=5][B]4.0 — SCAM & DISPUTE POLICY[/B][/SIZE][/COLOR] [SIZE=4][B]How We Handle Disputes:[/B][/SIZE] [CODE]Step 1: Open a dispute thread in the Disputes section - Title format: [DISPUTE] VendorName - Product - Amount - Include: transaction ID, screenshots of conversation, payment proof Step 2: Staff will tag both parties and request evidence - Provide: full DM history, payment TXID, product delivery proof - Screenshots must include timestamps Step 3: Staff investigation (typically 24-72 hours) - We review evidence from both sides - We check vendor's history for similar complaints - We check buyer's history for false claim patterns Step 4: Ruling - If vendor is at fault: banned, funds returned if possible - If buyer is making false claims: buyer warned/banned - If unclear: split the loss or require more evidence Step 5: Resolution posted in thread - Both parties notified - Blacklist updated if applicable
Blacklist System:
We maintain a public blacklist of known scammers. If you've been scammed by someone on BlackSec, report it with evidence and they'll be added to the blacklist thread.
- First offense (minor dispute): 30-day suspension + refund
- Second offense: Permanent ban + blacklist
- Major scam (over $1000): Immediate permaban + blacklist + possible IP/account range ban
5.0 — OPSEC REQUIREMENTS
Minimum OpSec for All Members:
- VPN at all times — No exceptions. Your real IP should never touch our servers.
- PGP for sensitive communications — Marketplace transactions, vendor communications, and anything involving money requires PGP encryption.
- No doxxing — Posting another member's personal information is an immediate permaban.
- Separate identities — Your BlackSec identity should not be linked to your real identity or other online profiles.
- Burner email — Register with an anonymous email (ProtonMail, Tutanota). No Gmail, no Outlook.
- 2FA — Enable two-factor authentication on your account. Use Aegis or Raivo OTP, not Google Authenticator.
- Don't use the same password — Your BlackSec password should be unique. Not the same one you use for everything else.
Critical: Do not access BlackSec from:- Your home IP without a VPN
- Public WiFi without a VPN
- Your work computer
- A device with your real name/identity on it
- Any network that can be traced back to you
6.0 — ACCOUNT SECURITY
Keeping Your Account Safe:
- Strong password — Minimum 16 characters, mixed case, numbers, symbols. Use a password manager (Bitwarden, KeePass).
- 2FA is mandatory — We will eventually enforce this. Set it up now.
- Recovery email — Use a ProtonMail address that you check regularly. If you lose access to your email, you lose your account.
- Don't share accounts — Account sharing is prohibited. If two people are posting from the same account, both get banned.
- Session management — Log out from shared devices. Use private/incognito browsing.
- Check login history — If you see logins from IPs you don't recognize, change your password immediately and contact staff.
If Your Account Gets Hacked:
Code:1. Don't panic. Contact staff immediately via: - Forum PM to an admin - ProtonMail to blacksec@protonmail.com - Include your username, registered email, and any evidence 2. We will: - Freeze the account - Verify your identity (PGP-signed message from your registered email) - Reset the password and return control to you - Investigate how the breach happened 3. If you reused passwords (you shouldn't have): - Change your password everywhere else - Check if your email has been compromised (haveibeenpwned.com) - Consider the account compromised beyond recovery
7.0 — CONTENT RESTRICTIONS
Allowed:- Carding guides, methods, and discussions
- Cracking tutorials and tools
- Spam infrastructure and techniques
- Social engineering content
- Fullz, CCs, and credential trading
- Crypto/cashout methods
- Hacking tools and exploits
- Educational security research
Not Allowed:- CP / child exploitation (permaban + reported to authorities)
- Drugs, weapons, or human trafficking
- Hitman services or violence-for-hire
- Doxxing or personal information of non-consenting individuals
- Distribution of malware targeting hospitals, emergency services, or critical infrastructure
- Posting private keys to shared wallets (scam behavior)
- Racism, hate speech, or bigotry
8.0 — WARNING & BAN SYSTEM
Offense Penalty Notes Minor spam Warning + post deletion 3 warnings = 7-day suspension Uncivil behavior Warning Second offense = 3-day mute Scamming (under $200) 30-day suspension + refund Blacklist if not resolved Scamming (over $200) Permanent ban + blacklist Escrow avoids this Doxxing Permanent ban No appeals CP / illegal content Permanent ban + reported No appeals, ever Multiple accounts All accounts banned Evading ban = no appeal Phishing staff Permanent ban IP range banned
9.0 — VETTING & TRUST LEVELS
Member Tiers:
Code:Tier 0: Unverified (New Member) - Can browse and read - Can reply to existing threads - Cannot create threads in marketplace - Cannot PM other members - Duration: 14 days or 10 quality posts Tier 1: Verified Member - Full posting privileges - Can create marketplace threads - Can PM other members - Access to VIP sections (if applicable) Tier 2: Trusted Vendor - Verified through vendor application process - Escrow integration - Priority support - Vendor badge on profile Tier 3: Elite / Long-Standing - 1+ year membership - Clean record - Access to private elite section - Invite-only group buy access Tier 4: Staff - Selected by admin team - Full moderation capabilities - Access to backend tools
How to Get Verified:
Code:To apply for verification: 1. Have at least 20 posts (quality, not spam) 2. Been a member for at least 30 days 3. Submit a verification request via the application form 4. Include proof of identity (PGP key, linked accounts on other forums) 5. Staff will review within 3-5 business days To apply for vendor status: 1. Must be a verified member for 30+ days 2. Provide proof of product stock 3. Provide references from 3+ buyers (links to successful transactions) 4. Agree to escrow for all transactions over $200 5. Pay vendor bond ($50 BTC, refundable upon clean exit)
10.0 — FREQUENTLY ASKED QUESTIONS
Contact an admin via PM. Username changes are allowed once every 6 months. You must PGP-sign your request.
Use the "Forgot Password" feature on the login page. If your recovery email is inaccessible, contact staff via ProtonMail with your registered email.
We don't accept applications. Moderators are selected by the admin team based on activity, helpfulness, and trustworthiness. Usually after 6+ months of active membership.
No. Marketplace access requires vendor verification. Trying to sell via PM without verification will get you banned.
BTC (Bitcoin) and XMR (Monero) are the only accepted payment methods. No PayPal, no bank transfer, no gift cards.
Open a dispute thread with all evidence. Do not harass the vendor publicly before opening a dispute.
All sales are final unless the product is non-functional or misrepresented. Disputes handled case by case.
Absolutely not. Use ProtonMail or similar anonymous email services. Any staff member asking you for personal information is probably a scammer.
Report the post using the "Report" button (flag icon). Do not engage with the user. Let staff handle it.
END OF FORUM RULES — KNOW THEM, FOLLOW THEM
Welcome to BlackSec. Read everything, post carefully, and stay safe.