Decoding #CyberChoices: What "Carding" and "Credential Stuffing" actually mean.

Decoding #CyberChoices: What "Carding" and "Credential Stuffing" actually mean.

Hi Cheshire Residents

Continuing our mission to demystify teenage tech speak for National Cyber Security Month, here is our latest quick-reference guide. Teens with advanced coding or gaming skills often use terminology that sounds entirely otherworldly. While usually harmless, certain terms can indicate they are flirting with illegal online activity.

Many young people use malicious tools thinking they are just "mods," "cheats," or a normal part of the gaming community. 

Under the Computer Misuse Act 1990, however, using these tools without permission is a serious criminal offense.

Here is a second quick #CyberChoices glossary to help you de-mystify what they are actually saying:

The Gateway Glossary

"Credential Stuffing"

What it sounds like: Cramming too many passwords into a single login box until it breaks.
 

What it actually means: An automated cyberattack where hackers use lists of leaked username and password combinations from previous data breaches to try and log into accounts on completely different websites.

"Swatting"

What it sounds like: Hitting a computer bug with a flyswatter or deleting a virus.
 

What it actually means: A dangerous harassment tactic where someone makes a fake emergency call to the police (reporting a fake hostage situation or violent crime) to trick a heavily armed firearms unit into raiding an innocent person's home.

"Doxxing"
 

What it sounds like: Sorting through physical documents, or treating a computer with medicine like a doctor.
 

What it actually means: Maliciously searching for and publishing private or identifying information about a person online (such as their home address, real name, or phone number) without their consent to encourage harassment.

"Carding"
 

What it sounds like: Checking someone's ID at a shop or collecting sports cards.
 

What it actually means: A form of credit card fraud where criminals use automated bots to test stolen credit card numbers on websites to see if the accounts are active and can be used for illegal purchases.

"Skid" (Short for Script Kiddie)

What it sounds like: Slipping or sliding on a wet surface.
 

What it actually means: An amateur, unskilled hacker who uses pre-written, existing scripts or software created by others to launch cyberattacks, usually because they lack the knowledge to write their own code.

"Sandbox"

What it sounds like: A wooden box filled with sand for children to play in at a park.
 

What it actually means: An isolated, secure testing environment on a computer where developers and security experts can safely run suspicious programmes or execute unauthorised code without risking harm to the host operating system or network.

Hearing these terms doesn't mean your child is a criminal—it means they are curious, highly capable, and tech-literate. These exact same concepts form the core of legitimate, high-paying jobs in professional network engineering and penetration testing (ethical hacking).  

If you hear these words being thrown around, don't panic. Ask them:

Get the Official Guide

The National Crime Agency has compiled extensive information to help parents navigate these digital legal boundaries. Download the official parent guides, booklets, and regional support information via the Cyber Choices Brochure 2026 - Parents

Let's talk their language so we can guide their future

Kind regards

Stephen Blake

Cyber Prevent Officer