This report is based on data collected from nulled.to, cracked.io, and linked Telegram channels. A custom web crawler indexed 494,267 posts, with a filtered subset of 128,356 posts from 980 threads/channels selected for qualitative analysis. The sample included both randomly selected threads and purposefully chosen channels focused on UK refund fraud and discussions involving “insiders” (retailer employees assisting fraudsters).