OK, how do I proceed from here?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Not quite a Newb Joined: 14 May 2009 Posts: 62

I'm baiting a scammer who has an ATM card for me.

A couple of days ago I got emails from the Nigerian Justice minister and another from Eric Holder, both warning me not to have any further contact with the scammers. I also got a letter from the original scammer saying criminals broke into their office and not to pay any attention to the threatening law enforcement letters.

Do I bait the fake Attorney General and Justice Minister? Or do I keep baiting the original scammer? I don't think I can do both because I strongly suspect they're the same person.

Posted: Wed Jun 24, 2009 7:32 pm

Hi Forrest Gump!

I am working on my first bait with an ATM lad too. I have been working on him for a week now, and also got an email from the FBI "based in the city of UK" telling me that I should trust my lad as they have checked him out and he is telling me the truth...yawn...

I'm pretty sure my lad and FBI guy are one and the same, so I am emailing my original lad as normal, also sent off a couple ot the FBI agent asking him all about the work they do there. I think as long as you stay in the same character and act dumb, you will be fine.
Also, you will be wasting double the time of our lad - exactly what we set out to do! Twisted Evil

Posted: Wed Jun 24, 2009 7:51 pm

Hi FG,

As you've correctly surmised, the Nigerian Justice Minister is also a scammer - I'll bet that he uses a free email address like [email protected].

The email from Eric Holder may be a different matter. This could be a genuine scam warner trying to prevent you being duped. I suggest you reply to Eric saying that you know the lad with the ATM card is a scammer, thanking him for his concern and telling him that you are a baiter.

In the case where you do come across a warner, this is the polite thing to do - it reassures them that you are not a victim and lets them know that their warning got through.

[Edited to ensure political correctness] Very Happy

Posted: Wed Jun 24, 2009 8:47 pm

I'd be interested in knowing where the Eric Holder email came from, assuming that you can get to the originating IP.

Not quite a Newb Joined: 14 May 2009 Posts: 62

The Eric Holder email is an obvious fake, based on the broken English. Unfortunately I don't have headers because I bait from a Gmail account (in order to hide my own IP address, on the outside chance I get a mugu who has some idea how to trace it).

Since my mugu switched characters, I think I'm going to switch characters too.

Posted: Thu Jun 25, 2009 3:08 pm

^^You can check headers from Gmail.

http://docs.department23.co.uk/Gmail.pdf

Not quite a Newb Joined: 14 May 2009 Posts: 62

Captain Pike wrote:

I'd be interested in knowing where the Eric Holder email came from, assuming that you can get to the originating IP.

Oops, been a while.

Here:

Received: by 10.204.65.73 with SMTP id h9cs333988bki;
Wed, 24 Jun 2009 11:57:29 -0700 (PDT)
Received: by 10.114.181.6 with SMTP id d6mr2471212waf.8.1245869847419;
Wed, 24 Jun 2009 11:57:27 -0700 (PDT)
Return-Path: <[email protected]>
Received: from bay0-omc3-s22.bay0.hotmail.com (bay0-omc3-s22.bay0.hotmail.com [65.54.246.222])
by mx.google.com with ESMTP id 14si2361921pxi.155.2009.06.24.11.57.25;
Wed, 24 Jun 2009 11:57:27 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.54.246.222 as permitted sender) client-ip=65.54.246.222;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.54.246.222 as permitted sender) [email protected]
Received: from BAY137-W16 ([64.4.48.51]) by bay0-omc3-s22.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 24 Jun 2009 11:57:24 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_0331e9ff-4f38-453e-9c37-381b1f284703_"
X-Originating-IP: [62.173.50.10]
From: prof justice christopher <[email protected]>
To: <[email protected]>
Subject: ATTN: MRS SUNNY D LIGHT
Date: Wed, 24 Jun 2009 18:57:24 +0000
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
<[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 24 Jun 2009 18:57:24.0731 (UTC) FILETIME=[9C8F4CB0:01C9F4FD]

Interestingly the Eric Holder guys explicitly told me the other guys were scammers and even offered to give me the passwords to their email accounts to prove it.

Very strange. If they were good guy hackers they would have locked the scammers out of their own accounts. If they were bad guys they wouldn't have warned me about scamming. Maybe bad guys trying to shake down other bad guys?

Baiting Guru Joined: 04 Jan 2006 Posts: 3193

That's from Nigeria, but it's the one from the Justice Minister. Let's see the one from Eric.

Posted: Tue Jul 21, 2009 8:55 am

Quote:

offered to give me the passwords to their email accounts to prove it.

Now that sounds like fun.

419Eater is my life Joined: 15 Apr 2009 Posts: 296

devil_woman wrote:

Quote:

offered to give me the passwords to their email accounts to prove it.

Now that sounds like fun.

Seconded, I would instantly take them up on that offer. Worst case scenario, nothing interesting happens, best case scenario, you get the details of some real victims and can covertly save them from the scammer. Of course, there's a chance that someone is already doing this, in which case you might not want to tread on their toes!

Posted: Tue Jul 21, 2009 9:43 am

@ Scammy Scameroo

Quote:

covertly save them from the scammer

If one were to find victim email addresses one would consult a moderator for instructions. Having copied all emails in with headers, and replies to record the matter for a higher authority.

OK, how do I proceed from here?	View next topic View previous topic