Author |
Topic: Sellers Beware |
Bobby D. Hunter
From: USA
|
Posted 18 Feb 2005 3:49 pm
|
|
Beware of this scam email. If you receive one of these, Forward it to me as an attachment, immediately. Do not reply to this African scammer. If you have replied to him/her, Forward any and all correspondences to me. Forward as an attachment only. Don't try to send me inline content from webmail on your browser, unless you know how to display and copy the full incoming headers.
Here is the scammer's pitch:
quote:
I am Trisha Emde from Belgium, I am interested in the above subject item and will like to purchase it, if available for pick up.
Therefore, kindly supply the following informtion for its purpose.
1. Brief Discription of its present condition with picture(s) if available.
2. Bottom Line Cost of it without shipping cost.
Thanks for your co-operation, while awaiting for your quick response.
Thanks,
Trisha
------------------
Bobby D. Hunter
Security for SGF
Hunting down Slimeball Game
Reporting member of SpamCop
[This message was edited by Bobby D. Hunter on 18 February 2005 at 03:50 PM.] |
|
|
|
Terry Sneed
From: Arkansas,
|
Posted 18 Feb 2005 4:03 pm
|
|
I got one just like it today about my Zum.
I just deleted it, I knew it looked to scamish.
Terry
------------------
Zum D10 /8x5 / session 500rd/ American Strat Highway 1 model
steelin for my Lord
|
|
|
|
Cartwright Thompson
|
Posted 18 Feb 2005 4:06 pm
|
|
I sent them some photos. I'm expecting a come on and I'm planning to reply to them asking them to "pardon my French". They are Belgian.....
|
|
|
|
Richard Gonzales
From: Davidson, NC USA
|
Posted 18 Feb 2005 4:07 pm
|
|
I got the same message yesterday and I also deleted it. Sounded phoney to me! |
|
|
|
autry andress
From: Plano, Tx.
|
Posted 18 Feb 2005 4:08 pm
|
|
Yep I got the same E-mail last night. |
|
|
|
Bobby D. Hunter
From: USA
|
Posted 18 Feb 2005 4:23 pm
|
|
Not Belgium, Kenyan. |
|
|
|
Hugh Jackson
From: Dunn North Carolina
|
Posted 18 Feb 2005 6:03 pm
|
|
I GOT THE SAME EMAIL I ALSO DID NOT KNOW SO I SENT PICS
------------------
|
|
|
|
Al Marcus
From: Cedar Springs,MI USA (deceased)
|
Posted 18 Feb 2005 7:29 pm
|
|
Bobby-Thanks for the warning. You are doing a great service for us.
I got it on my Millenium and it looked phony so I deleted it too.
I figured if it was real, I would be contacted again, with a more personal letter.
If you wanted it, how would I send it to you.?
Boy, it is getting rough out there....al
------------------
My Website..... www.cmedic.net/~almarcus/
|
|
|
|
Ernie Pollock
From: Mt Savage, Md USA
|
Posted 19 Feb 2005 6:16 am
|
|
I got that email, saying they were interested in one of the GFI Ecomomy Steels that I have on the forum. I just mailed em back & told that I don't ship overseas. Sure sounded like a scam to me.
Ernie
ERNIES MUSIC http://www.hereintown.net/~shobud75/stock.htm
------------------
|
|
|
|
Jon Light
From: Saugerties, NY
|
Posted 19 Feb 2005 6:26 am
|
|
You have an item I want. I have money. I will give you money. You will send me the item.
If this does not describe the transaction about to take place, there will be no transaction. Life is simple. Life is good. No shoes, no shirt, no dice. |
|
|
|
Bobby D. Hunter
From: USA
|
Posted 19 Feb 2005 6:28 am
|
|
Ok, everybody, listen up!
I appreciate your help in my hunt for Slimeball Game, but you gotta learn to sedn those scam emails to me as attachments, not as inline text. Here is the difference between what I receive when the message is simply forwarded by hitting the Forward button and what the same message looks like when it is properly forwarded as an attachment. Webmail users may have to use other options, explained below the first two samples.
Scam simple-forwarded by hitting the Forward button:
quote:
----- Original Message -----
From: Trisha Emde
To: intended-victim@his-isp.net
Sent: Thursday, February 17, 2005 6:35 PM
Subject: Williams 400 Series D-10
I am Trisha Emde from Belgium, I am interested in the
above subject item and will like to purchase it, if available for pick up.
Therefore, kindly supply the following informtion
for its purpose.
1. Brief Discription of its present condition with
picture(s) if available.
2. Bottom Line Cost of it without shipping cost.
Thanks for your co-operation, while awaiting for
your quick response.
Thanks,
Trisha
Forwarded as an attachment:
quote:
From: "Trisha Emde"
To: x
Subject: Fender Champ
Date: Thu, 17 Feb 2005 17:39:45 -0600
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0002_01C515DB.C1EF1720"
X-Mailer: Microsoft Outlook, Build 10.0.4510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-RBL-Warning: NOPOSTMASTER: Not supporting postmaster@domain
X-Note: This E-mail was scanned by SecureMail at (abyss.activeservers.net) for spam.
X-Spam-Tests-Failed: NOPOSTMASTER, SPAMHEADERS
X-RCPT-TO: x
X-UIDL: 401585763
X-OriginalArrivalTime: 17 Feb 2005 23:40:01.0369 (UTC) FILETIME=[FF85EC90:01C51549]
X-Sender: trishaemde@hotmail.com
X-Originating-Email: [trishaemde@hotmail.com]
X-Originating-IP: [196.201.129.239]
This is a multi-part message in MIME format.
------=_NextPart_000_0002_01C515DB.C1EF1720
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
I am Trisha Emde from Belgium, I am interested in the
above subject item and will like to purchase it, if available for pick up.
Therefore, kindly supply the following informtion
for its purpose.
1. Brief Discription of its present condition with
picture(s) if available.
2. Bottom Line Cost of it without shipping cost.
Thanks for your co-operation, while awaiting for
your quick response.
Thanks,
Trisha
As you can see the full headers are visible in the second example, revealing the numeric details about the route this message took to get to the recipient. This is what I need to track these swine down and block them from the SGF.
If you are using webmail, look at your preferences, or email options, to see what you should do to display the full incoming headers, then refresh your inbox view, and forward the scam messages to me, if they show a different IP address than the one listed at the end of the second sample's headers. Most webmail accounts also give you the option to Forward as an attachment, which preserves the full headers from the scam message.
Thanks again for your assistance. Keep sending those scams to me for tracking, but if you can read the headers and it is from the same IP, just tell me about it, don't send it. We are actively working on a blocking solution, and are filing reports with this person's ISP and with SpamCop.
------------------
Bobby D. Hunter
Security for SGF
Hunting down Slimeball Game
Reporting member of SpamCop
[This message was edited by Bobby D. Hunter on 19 February 2005 at 06:38 AM.] |
|
|
|
Bobby D. Hunter
From: USA
|
Posted 19 Feb 2005 6:35 am
|
|
Ernie Pollock;
They are also hitting all of the dealers listed under the Links section of the SGF. I saw the CC'd message that went out to one of the dealers.
Jon Light wrote:
quote:
You have an item I want. I have money. I will give you money. You will send me the item.
If this does not describe the transaction about to take place, there will be no transaction. Life is simple. Life is good. No shoes, no shirt, no dice.
The problem with these "transactions" is that the money they send is not valid. Whatever piece of paper they send or deliver to you will bounce and you will have to pay back the bank, or check cashing company. If you are foolish enough to refund their overpayment you will be out that amount also. If they actually send somebody to pickup the goods, you'll never get them back either.
------------------
Bobby D. Hunter
Security for SGF
Hunting down Slimeball Game
Reporting member of SpamCop
|
|
|
|
Bobby D. Hunter
From: USA
|
Posted 19 Feb 2005 9:21 am
|
|
I have just taken action against the African scammers. It may take a little while to see the effect, and those of you who were already contacted by these people have lost their email privacy. If you continue receiving solicitations from scammers who previously contacted you, I recommend that you get a new email account and update your profile on the SGF.
If any SGF members live anywhere in Africa, contact me ASAP, via my address posted above this Post. After the changes go into effect you may lose access to all of the Forums.
------------------
Bobby D. Hunter
Security for SGF
Hunting down Slimeball Game
Reporting member of SpamCop
|
|
|
|
Jerry Warner
From: Charleston, West Virginia, USA
|
Posted 19 Feb 2005 1:33 pm
|
|
i got the same phony email from these damn crooks. |
|
|
|
Dave Potter
From: Texas
|
Posted 19 Feb 2005 1:36 pm
|
|
Far as I'm concerned, "internet email privacy" is an oxymoron, if one actually *uses* his email address. |
|
|
|
Malcolm McMaster
From: Beith Ayrshire Scotland
|
Posted 19 Feb 2005 2:09 pm
|
|
The scam is widespread, not only on the forum , but in any goods advertised.I recently received about eight or more when I advertised my litter of chocolate labrador puppies on puppy planet.They claimed to be, American, Canadian, French, all working or visiting the Uk. The wording of all emails was similar ,all used terms like Your commodity , spelling was poor, and all wanted to pay by certified uk cheque. All were deleted as they arrived. |
|
|
|
Bill McCloskey
|
Posted 20 Feb 2005 5:18 pm
|
|
Wow, I got this too and they were asking to send me $6,000 for a $3,200 sale and I was supposed to forward the balance to their shipper. Sounded fishy so I came her to ask a question about it and saw this. I'll forward the email exchange. |
|
|
|