> ## Documentation Index > Fetch the complete documentation index at: https://wiki.darknetsearch.com/llms.txt > Use this file to discover all available pages before exploring further. # Credit Cards > Search leaked and for-sale payment cards by BIN, last 4, owner, and bank across indexed leaks and deep-web marketplaces Search leaked and for-sale payment cards by BIN, last 4, owner, and bank. Two paths sit behind this source: a synchronous index of cards recovered from leaks, and an asynchronous lookup of cards listed for sale on deep-web marketplaces. Use it to find exposed cardholder data tied to your BINs before the fraud lands. ## Indexed leak cards (sync) Cards recovered from indexed leaks return in a single call. Query by card number prefix, owner, or bank. ### Search ```bash theme={"dark"} curl -G "https://client-api.leak.center/api/service/cc_leaks_search/" \ -H "Authorization: Bearer $DNS_API_KEY" \ --data-urlencode 'query=543210* AND bank:Acme' \ --data-urlencode 'page=0' \ --data-urlencode 'size=10' ``` See the [`cc_leaks_search` reference](https://client-api.leak.center/scalar-docs/#tag/cc-leaks/GET/service/cc_leaks_search/) for the full schema. #### Request parameters | Parameter | Type | Required | Notes | | --------- | ------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `query` | string | Yes | 3–1024 chars. Fields: `createdAt`, `number`, `Hash`, `expireDate`, `cvv`, `owner`, `bank`. Default field is `number`. Operators: `AND`, `OR`, `NOT`. Examples: `543210*` (BIN prefix), `543210XXXXXX1234` (BIN plus last 4), `owner:Johnson AND bank:Citibank`. | | `page` | integer | No | Zero-based page index. Default `0`. | | `size` | integer | No | Results per page, 10–100. Default `10`. | | `sort` | string | No | Default `createdAt,desc`. | | `org_id` | integer | No | Subsidiary organization ID for system-level users. | #### What comes back A paginated control envelope. `content` holds the card hits; `number`, `size`, `totalElements`, `totalPages`, `numberOfElements`, `first`, and `last` describe the page. A `follow_up_token` is attached for re-running the same search. Each item in `content`: * `number` — masked or recovered card number. * `bank` — issuing bank name. * `owner` — cardholder name. * `cvv` — card verification value, when present in the leak. * `expireDate` — expiry date (YYYY-MM-DD). * `cvssScore` — severity score for the finding. * `leakId` — UUID of the source leak. * `leakName` — name of the source leak. * `leakPublishDate` / `leakDiscoverDate` — when the leak was published and first seen. * `leakSize` — record count of the source leak. * `leakTags` — tags on the source leak. * `id` / `createdAt` — record ID and index timestamp. ```json theme={"dark"} { "number": "543210XXXXXX0019", "bank": "Acme Federal Bank", "owner": "Jordan Rivera", "cvv": null, "expireDate": "2026-09-30", "cvssScore": 7.5, "leakId": "0a1b2c3d-4e5f-6789-abcd-ef0123456789", "leakName": "acme-pos-dump-2025", "leakPublishDate": "2025-11-02", "leakSize": 48211, "id": "cc_99812" } ``` ## Marketplace cards (async) For-sale cards from deep-web marketplaces are collected asynchronously. Submit a lookup, poll for the task, then read the served result. Submit a lookup by BIN, cardholder, location, vendor, or date range. ```bash theme={"dark"} curl -X POST "https://client-api.leak.center/api/service/cc_search_request/" \ -H "Authorization: Bearer $DNS_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "bins": "543210", "country": "United States", "last_name": "Rivera", "card_type": "Visa", "from_date": "2025-01-01", "to_date": "2025-12-31" }' ``` See the [`cc_search_request` reference](https://client-api.leak.center/scalar-docs/#tag/credit-card/POST/service/cc_search_request/). The response carries a `follow_up_token` you reuse to track the task. Poll the results endpoint until your task reports a completed status and a `served_link`. ```bash theme={"dark"} curl -G "https://client-api.leak.center/api/service/cc_search_results/" \ -H "Authorization: Bearer $DNS_API_KEY" \ --data-urlencode 'page=1' ``` See the [`cc_search_results` reference](https://client-api.leak.center/scalar-docs/#tag/credit-card/GET/service/cc_search_results/). Read the task once `status` is complete. Each task carries a `served_link` to the result file and a `link_expire_date` after which the link is no longer valid. ```bash theme={"dark"} curl -G "https://client-api.leak.center/api/service/cc_search_results/" \ -H "Authorization: Bearer $DNS_API_KEY" \ --data-urlencode 'page=1' ``` ### Request parameters Submit (`cc_search_request`) — every field is optional; combine the ones that narrow your target. | Parameter | Type | Required | Notes | | ------------ | ------- | -------- | -------------------------------------------------- | | `bins` | string | No | BIN digits, up to 1024 chars. | | `country` | string | No | Country name, e.g. `United States`, `Canada`. | | `first_name` | string | No | Cardholder first name. | | `last_name` | string | No | Cardholder last name. | | `vendor` | string | No | Marketplace vendor. | | `source` | string | No | Data source, e.g. `pp24shop`. | | `zip_code` | string | No | ZIP/postal code. | | `card_type` | string | No | Card brand, e.g. `Visa`, `MasterCard`. | | `from_date` | date | No | Search start date (YYYY-MM-DD). | | `to_date` | date | No | Search end date (YYYY-MM-DD). | | `bins_file` | file | No | File of BINs for bulk lookups. | | `org_id` | integer | No | Subsidiary organization ID for system-level users. | Poll / Read (`cc_search_results`): | Parameter | Type | Required | Notes | | --------- | ------- | -------- | -------------------------------------------------- | | `page` | integer | No | Page number for the task list. Default `1`. | | `org_id` | integer | No | Subsidiary organization ID for system-level users. | ### What comes back `cc_search_results` returns a paginated list of your submitted tasks: `tasks` plus `current_page` and `total_pages`. Each task: * `id` — task ID. * `status` — task state; wait for completion before reading. * `created_at` — when the task was submitted. * `search_term` — the submitted query. * `served_link` — link to the result file once ready. * `link_expire_date` — when `served_link` stops working. The result file behind `served_link` holds the marketplace card offers. Each offer carries the cleaned card facts (`cleaned_bin`, `cleaned_type`, `cleaned_country`, `cleaned_state`, `cleaned_city`, `cleaned_zip`, `cleaned_expires`, `last_digits`), the listing economics (`offer_final_price_usd`, `stock`, `seller_rating`, `source_reputation`), and flags for what extra data the offer bundles (`offer_has_cvv`, `offer_has_ssn`, `offer_has_dob`, `offer_has_track1`, `offer_has_track2`, `offer_has_full_card_number`). ```json theme={"dark"} { "tasks": [ { "id": 4821, "status": "completed", "created_at": "2026-06-22T09:14:00Z", "search_term": "bins=543210; last_name=Rivera", "served_link": "https://files.example.com/cc/4821.json", "link_expire_date": "2026-06-29T09:14:00Z" } ], "current_page": 1, "total_pages": 1 } ``` Cross-reference recovered BINs and last 4 against your own card portfolio, then push confirmed exposures to your fraud team for reissue. Marketplace offers flagged with full card number, CVV, or track data are the highest-priority reissues.