I guess Ill do some reaserch as well, What kind of info do we need?

yes, id like the help but im not for sure what kinda info u need.

We need to know the what the numbers look like. Then we need to know what sequence they go in and then we need to find out how big there number blocks are. Then somehow we need to figure out how the numbers are generated. We also need to know exactly how the process works.

hmmm.. So far Ive found out nothing about what were looking for... But... Anyone with a tracfone call an anac heh, Chances are it isnt ur number...
So thats ANI spoofing... but... yah.

Here's a list of URLs that might help out.

Tracfone
http://www.hackcanada.com/blackcrawl/radiophone/assorted/tracfone.txt
http://www.hackcanada.com/blackcrawl/radiophone/assorted/trapfone.txt
http://www.tracfone.com
http://www.google.com/search?sourceid=navclient&q=tracfone

Nokia 252c
http://www.inlandcellular.com/phones/analog/252c.htm
http://www.pc4d.com/electronics/34/252c_phone_tracfone.shtml
Google Search

I was thinking about purchasing a Tracfone anyway. Because they're cheap, and there's no monthly payments...So when I get one, and input my first card I'll give you the number sequence. Of course, my numbers won't help you because you can't put in the pin for a card twice.

The problem with cheating Tracfone is the fact that a pin doesn't work until it's been bought and scanned. So you'd have to hope in all randomness to get a number that someone bought and hasn't put into their phone yet. If it were as easy as finding a random number, people would be shoplifting the cards. But unfortunately, like I said before, they're not active until scanned.

I have been getting free tracfone minutes for a couple years now...
I even got the new digital tracfone, and figured out how to get free e-mail and text messaging and everything!

Here is what I do:

I save a few tracfone cards that 'fell' into my pocket when i was visiting my local walmart. I called up and gave them the numbers. "We're sorry sir but this card needs to be taken back to the store and be reswiped" Oh yea? Well I didn't feel like it. Since I didn't pay or anything. So I kept calling. And guess what??

SOMETIMES THEY ACTIVATE IT FOR YOU WHEN YOU CALL!

Sometimes I had to call like 10 times, and even then some days I just don't get lucky. If anyone has any tips as to why or when the best times are or anything like that, PLEASE email me.

I'll tell you more.

I even go as far as CHANGING the numbers on the card by a few digits. They will also ask you for an SMP number (which is an 8 digit number near a UPC on the card, sometimes following a bunch of zeros, sometimes underlined) Anyway, these are sequential, and if it was a recently 'borrowed' card, then I up the digits by a few, if its very old, I up the number by a thousand or whatever.

ANYWAY, they will put you on hold and check with their technicians in another department.

This is where you cross your fingers. Sometimes these technicians okay it, and fill in the blanks on the numbers that dont match up (Each SMP matches the pin that is on the REAL card, so if you make one up it doesnt match, but they STILL do it sometimes) OR sometimes they activate it.

If they don't they say you need to return the card. If they do they say turn on your phone. Then they give you your code, and your minutes!!!

BUT sometimes they tell you to type in some testing codes, and will ask you to read them back the numbers that pop up on your screen, and they will check with their tech department again.

ONCE, a woman had me do the testing code, then she had me type in a code, it said invalid, then another code, and it WORKED! And she didnt even go to the other department!!!
This makes me believe there *IS* a way for someone to write a code generator program!!!!

PLEASE ANYONE WHO DOES THIS WRITE BACK WITH YOUR EXPERIENCES AND WHAT WORKS AND WHAT DOESNT.
It's annoying and takes many tries, but I've gotten tens of thousands of free tracfone minutes and YES THIS DOES WORK WITH THE ONE YEAR CARD!

Another thing I have noticed is that they know, by the pin usually, how many units are on the card, so use ones from a 300, that's what I do. They are more likely to put it through for you if it really has the amount of units on it that you told them it did. I also think there may be a connection to where you bought it. Because I've 'borrowed' a couple target cards, and didn't have as much luck when I say they are from walmart as I did when I said Target.

Any info would be greatly appreciated, and feel free to ask me any questions.

This really does work, so TRY IT AND LET ME KNOW HOW IT GOES!

Good luck! ENJOY!

I had an experience leading me to a simialar idea. I bought two 60 minute cards and tried putting one on my phone. Well all I got was invalid code. I tried the other one. Same, I took it back and exchanged them for two different cards after harrassing the people at Walmart for an hour about it.I got home, tried both cards again, and no go. I called the people at TracFone the next day. I told the guy my story and without talking to anyone else or even giving him my ESN, he gave me four different codes and it put about 300 minutes on my phone. This leads me to the conclusion that ESN has nothing to do whatsoever with the codes you put in for your minutes. Also, there has to be some universal codes just to stick in the phone to give it minutes. From now on, I just call the people there, tell them about the same story, and get minutes.

I have too much spare time,
Im in, Ill dig up some documents and make some diagrams

I found this, turns out Scarab already posted the site, but it has useful information.

http://www.hackcanada.com/blackcrawl/cell/assorted/trapfone.txt

In order to get free minutes, you have to hack the phones Nam memory bank, because if you try entering a second account on the phone, you’ll get the fallowing message “Location NAM error" . It’s not difficult and there is plenty of documentation on how to hack the phone’s NAM memory bank, here a couple sites that focus on hacking a Tracfones NAM memory bank:

http://www.hackcanada.com/ice3/cellular/index.html
http://www.nettwerked.net/TFA/cell.html

Once the Phone has been successfully hacked, you have to go into the NAM memory bank, which looks like the fallowing:

(1st) phone # - 555-555-5555
(1st) SID - 0 (A-side)

(2nd) phone # - [blank]
(2nd) SID - 1 (B-side)

In order to get free minutes, all you have to do is copy your phone information that is stored in the first block into the second block, once your number and SID have been copied into the second block, simply use your phone.
Like magic your phone works! However this is because Tracfone doesn’t have its own cell networks, so in order to prevent people from using more minutes then they’ve paid for, each Tracfone has a built in timer that will prevent you from using any more minutes than what you have paid for, however this is the only safeguard, once this is bypassed this by copying your phone number and SID number into the phones second block in the memory bank, you can talk to your hearts content! And who gets stuck with the bill you ask! Why, those bastard’s at Tracfone do! HA!
This works because Tracfone is pretty slow when it comes to updating account information to cell networks, so your phone will work fine until your accounts status has been updated on the cell network your Trakphone is using.
And thats how you rip off Tracfone. Have Fun!

Ok maybe this will help
Motorola V120t
ESN # 06610739546
Code # 2532 2330 3949 6176 2444 5456
Eperation date 8/25/03
180 minutes

When I put new airtime on my tracfone they ask for the ESN and then they give me a code to put into the phone. So I was thinking to make a generator you need to figure out how they get the code using the ESN and what the date has to do with it and the # of minutes. So theirs 3 veriables that make up a tracfone code. It will be hard to crack but someone should be able to do it.

four variables, I think the ammount of minutes would come into the algarythm

if there is any interest to continue this i would be very willing to help

Well i'll be the coder for this coz im bored as fuck the way i see it how all pay cards works they have a formula for making cards they pop out 20,000 within a range and start a new range etc...
its all about maths.. the best thing to do is to post all the numbers you have used to see if u can find a pattern
I made one for a new zealand vodafone network.. and it worked a couple of times it aint an exact sience..
anyway esn has nothing to do with the top up cards thats to do with the way the network handles your phone in most cases
u send ur esn and other info i'll post relevant shit later on.. continuing on.. they validate it within their network and check their database.. which led me to think a remote hack might be possible
to spoof the esn etc.. u can clone cellphone or what not.. but i reckon a num generator wud be sweet.. 1st of its kind
so send ur old numbers etc.. and get me more info on their systems

hey maybe this will help my esn is 21806355766

like i said esn is just your electronic signature now people can clone your phone good job :p

i have 2 tracfones that is the old one

1) i was thinking(and have confirmed) it seems that SOME stores who donot have Scanning/internet capibility have preactivated cards. now it seems to me that they could be activated ether before leaving the factory or just that possibly some complex phone registration is required appon the retailer oppening/receving the case(unlikely). sence all codes need to be activated at somepoint it seems ligit that we should be going after these pre-activated codes. If the later is true it may be possible to activate some 500 cards from the security of a cleanphone.


2) If you activate your tracfone in a different area(causing roamming) when your expiration date is passed it will still let you listen to the othernetworks services menus. i have yet to fool around and see if i could get a call out of this because i donot wish to waste me precious minutes(expecialy sence they are roaming 2x). i donot know if this could lead to a goast like phone sence it willnot allow incoming calls from the number it had(and still thinks it is).
Dose anybody know if you can still get these service voice menues once your time/date is up and/or to what extent?
I have a felling that it would be eayser to screw the analog service in this way if it is possible.
i know that this may be a definate no due to my own ignorece towards newer cells or do i have an idea here?

i know its fairly long but if u havent read yet u probaly might wana mosey on over
http://www.cellphonehacks.com/viewtopic.php?t=10315&postdays=0&postorder=asc&start=0
i think its ligit, they just dontknow how to activate those codes
yes i know im posting a link to another board and i hate people who do it but yet i dont hate myself

I just joined this forum but i have been doing alot of reading. I found that one way to crack them is a brute force attack. The only problem is after i ran it through some problems, I found that you would need a processor that can handle 92.5 trillion charachters per second in order to perform this action. And the connection between your phone and computer would have to handle it as well as the phone itself. But to write a card generator would be very difficult because of the fact that a card does not work until scanned. Unless someone can make a scanner for them. I have some upc reading hardware if anyone thinks they might be able to do this.

Oh yeah forgot here's my old card info.
300 Unit Card
073 1302 5901 9480
Hope it helps.

I have a Motorola tracfone and i was reading something from a hacking manuel for another phone and found this code **00##00
when i entered it into my phone in the code entry mode i got all the parameters for my phone i was wondering if anybody has found a way to change these

Sorry bout that

Umm jester, i'm just goinna say this once.... read the rules, don't post numerous times to yourself on my bulletin board. If you have more to add, you can edit your posts...