I'm so embarrassed now

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sun Mar 14, 2010 5:45 pm

Ok, so dumbass lad FINALLY replies, wanting MG:

scammer:

Quote:

MAKING IT FAST FOR US WE WILL LIKE YOU TO SEND IT ON M0N3Y GR@M SO WE CAN PICK IT FAST,WE GIVE OUT BANK ACCOUNT WHEN THE MONEY HIS HIGH BUT YOU CAN SEND IT ON THE M0N3Y GR@M SO THE STAFF SENDING THESE MONEY TO HAITI BY TOMORROW CAN MEET UP THANKS AGAIN.
MRS L1ND@ D

PFF,

Yea, well I ain't having it!

I SLAP back:

Quote:

I am sorry but for TAX PURPOSES I am UNABLE to use M0n3yGr@m, it cannot be used as a tax deduction. Only a bank account allows for me not only to donate to your organization, but lets me write it off as a donation. I hope you understand that.

I also hope that slap makes the scammer think that I am thinking she is a complete idiot, cause of course we know, she is, and deserves being treated as such.

Posted: Sun Mar 14, 2010 6:03 pm

OK, I just also noticed something else: Can anybody help me with this? what is this?

Quote:

From Matt Smith james Sun Mar 14 15:00:37 2010
X-Apparently-To: <snip> via 76.13.12.142; Sun, 14 Mar 2010 08:00:38 -0700
Return-Path: <[email protected]>
X-YMailISG: <snip>
X-Originating-IP: [209.67.128.171]
Authentication-Results: mta1050.mail.re4.yahoo.com from=; domainkeys=neutral (no sig); from=mail2Doctor.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mwsmtp01vmoc.mail2world.com) (209.67.128.171) by mta1050.mail.re4.yahoo.com with SMTP; Sun, 14 Mar 2010 08:00:38 -0700
Received: from mail pickup service by mwsmtp01vmoc.mail2world.com with Microsoft SMTPSVC; Sun, 14 Mar 2010 08:00:37 -0700
auth-sender: [email protected]
Return-Path: <[email protected]>
Received: from 10.1.107.123 unverified ([10.1.107.123]) by mwsmtp01vmoc.mail2world.com with Mail2World SMTP Server; Sun, 14 Mar 2010 08:00:36 -0700
Received: from [41.206.15.3] by mail2Doctor.com with HTTP; 3/14/2010 8:00:37 AM PST
thread-index: AcrDhxq8gF93bRxER6qZ0bBxNvIO1A==
Thread-Topic: ACCOUNTS UPDATE
From: "M@tt Sm1th j@m3s" <[email protected]>
Add sender to Contacts
To: <[email protected]>, <[email protected]>, <snip>
Subject: ACCOUNTS UPDATE
Date: Sun, 14 Mar 2010 08:00:37 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_28EF_01CAC34C.6E5D4EA0"
X-Mailer: Microsoft CDO for Exchange 2000
Importance: normal
Content-Class: urn:content-classes:message
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325
X-Spam: [FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF,0,41]"\Miscellaneous\Strong" <0>
X-OriginalArrivalTime: 14 Mar 2010 15:00:37.0811 (UTC) FILETIME=[1B379830:01CAC387]
Content-Length: 2727
Compact Headers
GREETINGS TO YOU MY NAMES ARE DR BILL MARK FROM THE UNITED
NATIONS HERE IN LONDON.I WAS DIRTIED BY THE FBI AND THE MEMBERS OF THE
RED CROSS ON THE TRANSACTION OF FUNDS THAT WAS MADE BY YOU
THROUGH MRS L1ND@ D@V3 ABOUT THE HAITI EARTHQUAKE,SHE DID NOT SEND THE PAYMENT
SLIP TO THE OFFICE AND THE FBI JUST KEPT HER ON HOUSE ARREST ON TILL THE
Investigation IS DONE AND WE WILL LIKE YOU TO WRITE US IF POSSIBLE SEND US THE
BANK SLIP,SO WE CAN MAKE A GOOD INVESTIGATION ABOUT THE FUNDS. ALL WE NEED FROM YOU
HIS JUST THE THROUGH FROM YOU SO WE CAN MAKE A GOOD STATEMENT ABOUT MRS L1ND@ D@V3 JUST
TELL US IF YOU HAVE REALLY SEND THE MONEY TO THE BANK.
YOU CAN ADD YOUR INFORMATION'S TO US TOO.
THANKS DR B1LL M@RK
DIC TO HAITI

Ok, I think I am a little over my head here, if I am correct, did another lad just enter into this? I wasn't really expecting, if so, I could use another more experienced b@iter to jump in with me. Sad

whois of mail2doctor:

Quote:

WHOIS information for mail2doctor.com :

[Querying whois.verisign-grs.com]
[whois.verisign-grs.com]

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: MAIL2DOCTOR.COM
Registrar: CSC CORPORATE DOMAINS, INC.
Whois Server: whois.corporatedomains.com
Referral URL: http://www.cscglobal.com
Name Server: NS01.MAIL2WORLD.COM
Name Server: NS02.MAIL2WORLD.COM
Status: clientTransferProhibited
Updated Date: 16-oct-2009
Creation Date: 17-oct-1999
Expiration Date: 17-oct-2010

Posted: Sun Mar 14, 2010 9:44 pm

^^^ interesting HappySlappy (slacker)

Googlely shows nothing useful. Noticed it's sorta similar to Mail2World.com but that's some sort of (spammy) mail server in the US I think. The email seems to have come from Ladgeria (41.206.15.3)

mail2doctor.com does not appear in any significant way DNSBL listing (69 checked) - a couple showed it resolving to the localhost IP (127.0.0.1).

I suspect the domain mail2doctor is hosted on the Mail2World servers or perhaps part of their business - sounds quite similar. Might be a legit domain - and a nasty place for a scammer to hide.

FWIW ...

SmartWhoIs wrote:

74.202.142.20
mail2world.net
Host unreachable

74.202.142.0 - 74.202.142.255

Mail2world INC.
10960 Wilshire Blvd., 9th Floor
Los Angeles
CA
90024
United States

Tang, Julian
+1-310-209-0060
[email protected]

Abuse:
Network Abuse
+1-310-209-0060
[email protected]

TWTC-MAIL2W-1
Created: 2007-07-23
Updated: 2007-07-23
Source: whois.arin.net

74.202.0.0 - 74.203.255.255

tw telecom holdings, inc.
10475 Park Meadows Drive
Littleton
CO
80124
United States

IP Manager
+1-800-829-0420
[email protected]
NOC SWIP Team
+1-800-898-6473
[email protected]

Abuse:
tw telecom Abuse Desk
+1-800-898-6473
[email protected]
tw telecom Abuse Desk
+1-800-898-6473
[email protected]

NS1.TWTELECOM.NET
NS2.TWTELECOM.NET

TWTC-NETBLK-9
Created: 2006-11-14
Updated: 2007-10-01
Source: whois.arin.net

74.202.142.0 - 74.202.142.255

Mail2world INC.
10960 Wilshire Blvd., 9th Floor
Los Angeles
CA
90024
United States

Tang, Julian
+1-310-209-0060
[email protected]

Abuse:
Network Abuse
+1-310-209-0060
[email protected]

TWTC-MAIL2W-1
Created: 2007-07-23
Updated: 2007-07-23
Source: whois.arin.net

Ummm ... was this anything important? "From M4tt Smith j4mes Sun Mar 14 15:00:37 2010"

Posted: Sun Mar 14, 2010 9:58 pm

Well thats what I am asking. I hope you did notice past the headers and read the message. It references L1ND@ D@V3. But I don't know if it is the same lad, or did another lad enter into this. I just wasn't expecting/prepared for this. I don't feel like dealing with two lads, at least not right now anyways.

Posted: Sun Mar 14, 2010 10:06 pm

Hard to say. I often find myself dealing with multiple lads pretending to be the same person. Their style of communicating is quite different or they get muddled up over simple facts ... accidentally (??) call my characters the wrong name etc. I just figure they are part of a gang working me.

I have multiple catcher accounts / bait accounts - they probably do too.

Anyone else have any other thoughts?

Posted: Sun Mar 14, 2010 10:12 pm

Well then I am just going to go ahead and ignore "lad 2" whether or not it is just the same lad.

So from Lad 1, I just got this:

Quote:

IT IS TO HARD TO UNDERSTAND YOU NOW AND WE NEED TO MAKE UP THESE NOW
IF YOU ARE READY TO HELP BUT IF YOU CAN NOT YOU CAN LET ME KNOW I AM
HAVING SOME PROBLEMS NOW THE COMPANY THINK AM PLAYING WITH THE MONEY
AND I DO NOT LIKE WHEN PEOPLE PROMISE AND FAIL ON IT.THANKS AND GOD
BLESS.
L1ND@

my reply:

Quote:

Look!

It is not difficult to understand. I said before that I have to donate by bank account because of tax purposes. How is that so difficult? Had you provided me with the CORRECT banking details, YOU would have already HAD the donations by now, and I would have been able to write off as a donation. How is that difficult? Seriously, it is not rocket science. It is because of your lack of knowledge YOU have lost so much time already. If you can't be serious and aren't smart enough to handle such a SIMPLE bank transaction, I suppose I will just have to find some other charity organization. This is ridiculous. I did not expect someone as you to be so damn incompetent!

Too harsh?

Posted: Sun Mar 14, 2010 10:24 pm

Dammit, now lad wants to talk with me on the phone, but I don't wanna. Can anyone here with a k7 acct, or whatever chat with em? This is what the lad wrote, and just came in a min ago.

scammer wrote:

Quote:

THANKS FOR THE MAIL AND DR M@RK B1|| WILL LIKE TO CHAT WITH YOU ON
PHONE CAN YOU SEND YOUR CELL NUMBER TO US.
THANKS
L1ND@

Now I really need another baiter with me. Anyone? Anyone at all????

Posted: Sun Mar 14, 2010 11:07 pm

Carefully read my two baits listed in the complete baits section. I used an obvious communications issue to reject the possibility of a phone call as unreasonable and got away from it.

It does pay to think a few moves ahead so you don't follow their script, but they have to follow yours instead. Read my threads and you may get an idea of how I completely blew the suggestion out of reach for the lads two separate ways. One was by using an alternate method suggested by Red Cross who they pretended to be, and then both came down to the service sucks as I have had a transfer stolen. Read my threads for an example of how to use this trick.

It worked just fine for me. Very Happy

I didn't have to generate a fake WU transfer.
i was amazed I didn't need to create or provide a tracking number for a certified letter. I got away with that because the scammer was working for someone else and was as new at this as I am.

Posted: Sun Mar 14, 2010 11:28 pm

Ok, I will take a look at those threads, thanks Agent1002. So I decided to stall by telling the scammer to stop stalling, and threaten to pull out of the deal, because of the unknown third person. This is what I said:

Quote:

Us who? I was under the impression that I am dealing with you, and that nobody else would be involved. I am much too busy to talk on the phone right now, and email is the only option for me for the time being. For god's sake YOU are making this way more complicated than it should be. I am very close to just giving up and finding a different charity organization. So, no more stalling, and no more asking me to talk to strangers. Either you and I are the only persons in this matter, or again I guess I can just consider somebody else!

Posted: Mon Mar 15, 2010 12:20 am

A firm goodbye worked on one of my lads. I think you are on the right track.

Posted: Mon Mar 15, 2010 6:46 pm

Happy,
If lad insists on Moneygram, go ahead. Personally, I love using Moneygram in baits. With it (and unlike that other lad standby, Western Union), lad cannot track your payment online; he needs to physically take his lazy ass to the bank, which makes for great comedy when the money you sent, oops, isn't there.

I usually try to send the lad to Moneygram at least three times -- using slightly different numbers each time. At that point he then asks for WU or bank transfer. No problem. Piggy time!

Posted: Tue Mar 16, 2010 12:09 am

Well I won't know right now, because it seems this is a weekend lad. I never get any responses during the week. Go fig.

Posted: Tue Mar 16, 2010 12:23 am

Well never mind.. Rolling Eyes

Quote:

UPDATE US WITH YOUR PERSONAL INFORMATION'S SO WE CAN REACH YOU THANKS
AND GOD BLESS.
MRS L1ND@ D@V3

Posted: Tue Mar 16, 2010 12:36 am

Hrmm, so it continues:

Me

Quote:

I already said that I am much too busy to talk on the phone, whatever you need to talk simply state in an email. It is fast and convenient.

Well, no phone, lad resorts back to MG requests.

Scammer

Quote:

WE DO NOT HAVE PROBLEM WITH THE ACCOUNT AND WE WILL LIKE YOU TO SEND
THE FUNDS TO M0N3Y GR@M IF YOU CAN MAKE IT FAST WE NEED TO SEND DOSE
MONEY AND THINGS TO HAITI IN LESS THAN TWOS DAYS.HOPE YOU CAN SEND
THAT IN TIME THANKS.
L1ND@

Ok, maybe someone more experienced would frown at this next tactic, or maybe not I don't know. My character is now going to get a little more curious about why MG is preferred, and never heard of any charity using MG. Lets see what happens. I say:

Me:

Quote:

If there is no problem with the account, then why must you insist on M0n3yGr@m? As I said before, the account details you gave me were not entirely correct, and you would have had your donation if the details were correct. Also, I have never heard of any charity using M0n3yGr@m, so why exactly do you prefer that instead of a standard bank transfer?

Also have you forgotten why I need to donate through a bank account in the first place? How am I supposed to prove to the tax office that I donated to charity? They clearly said that only a bank account is valid for tax purposes.

Not quite a Newb Joined: 15 Nov 2009 Posts: 46

I'm baiting L1nd4 too!!!!

Keeps bugging me for a phone number - Told her I'm waiting for my provider to send new one.

I've also asked for a bank account rather than MG or WU - just waiting now though.

They sent me the WU info so I payed dumb and said I've never heard of it!

Posted: Tue Mar 16, 2010 4:10 am

Hrmm, was about to turn in for the night, but decided to check my mail one last time:

Scammer wrote:

Quote:

THANKS ***** WE HAVE BEEN GIVING YOU A CORRECT ACCOUNT NUMBER BUT YOU
KEEP TELLING US ABOUT NOT CORRECT.YOU CAN HAVE ONE OF OUR ACCOUNT.
SORT CODE: XX-XX-XX

Account no: XXXXXXXX

Barclays
NAME ROS3M@RY 0NWUB0LU
ADDRESS LAKEDALE ROAD S E 18
PLEASE SCAN THE PAYMENT SLIP TO US THANKS.
L1ND@

Wow, this lad is NOT that bright. Time to send this to our mysterious friend too. Don't know whether or not this is also a fake acct, but this time I'M CLAIMING IT DAMMIT!

Posted: Tue Mar 16, 2010 4:34 am

^^congrats Happy_Slacker I've been reading the progress how you ended up with a fake piggy, now I see x1 and headed for x2
I have shared your pain and now your joy by reading this thread

Posted: Tue Mar 16, 2010 10:55 pm

Congratulations Happy Slacker!!

Posted: Wed Mar 17, 2010 7:56 am

Way to go HS! Steward (bless his flowing flow) has seen fit to bestow great piggies upon your brow.
You have been found worthy:D

Posted: Thu Mar 25, 2010 3:00 pm

Well I neglected this bait, on purpose actually. I figured if I didn't respond anymore I would be dropped, especially after being provided an account and then it suddenly 'mysteriously' closes. I don't know if this is a second lad, or third lad now, or just the same original lad, but now it is a new address with a mail2socialist domain, last one was mail2doctor. PFF! Rolling Eyes

So it reads:

Quote:

DEAR *****

These Mail is coming from the Executive Director of United Nation London,We want to Thank you for the wonderful

Donation you told us that you are going to send' to one of our Newly Member Mrs L1nd@ D@v3 and we are All most through

With your Certificate that We are to send to you as an award to the Hero in the World, I hope to here from you about

the Funds you promise to send (Transfer) to Us for the Haiti Victims and i hope to here from you soon

If not i can send one of the Accountant to send you an account information for you to Transfer the Funds,

Please get to me back as soon as possible.Thanks

S@m D@w$
Executive Director
Ex3cutiv3$@[email protected]
WWW.Una.org.UK/

e = 3
i=1
a = @
$= s

For ref. this is the headers:

Quote:

From $@m D@w$ Thu Mar 25 13:02:32 2010
X-Apparently-To: <snip> via 76.13.12.184; Thu, 25 Mar 2010 06:02:33 -0700
Return-Path: <3x3cutiv3$@[email protected]>
X-YMailISG: <snip>
X-Originating-IP: [209.67.128.171]
Authentication-Results: mta1029.mail.sp2.yahoo.com from=; domainkeys=neutral (no sig); from=mail2Socialist.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mwsmtp01vmoc.mail2world.com) (209.67.128.171) by mta1029.mail.sp2.yahoo.com with SMTP; Thu, 25 Mar 2010 06:02:33 -0700
Received: from mail pickup service by mwsmtp01vmoc.mail2world.com with Microsoft SMTPSVC; Thu, 25 Mar 2010 06:02:32 -0700
auth-sender: [email protected]
Return-Path: <[email protected]>
Received: from 10.1.106.48 unverified ([10.1.106.48]) by mwsmtp01vmoc.mail2world.com with Mail2World SMTP Server; Thu, 25 Mar 2010 06:02:32 -0700
Received: from [41.206.15.1] by mail2Socialist.com with HTTP; 3/25/2010 6:02:32 AM PST
thread-index: AcrMG26DpAjZFQ5MTFmuplpQsoUNpA==
Thread-Topic: United Nations Association- UK With The Haiti Victims
From: "$@m D@w$" <Ex3cutiv3$@[email protected]>
Add sender to Contacts
To: <snip>
Subject: United Nations Association- UK With The Haiti Victims
Date: Thu, 25 Mar 2010 06:02:32 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_12F6_01CACBE0.C2244470"
X-Mailer: Microsoft CDO for Exchange 2000
Importance: normal
Content-Class: urn:content-classes:message
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325
X-OriginalArrivalTime: 25 Mar 2010 13:02:32.0643 (UTC) FILETIME=[6EAC0130:01CACC1B]
Content-Length: 2704

whois: 41.206.15.1 - Nigeria of course

Anyways, I'm in no rush to reply as of yet, the only pro is that I'm offered another potential piggy, but I'm not greedy, anyone who wishes to "represent" me is welcome. Say whatever comes to mind, I have fallen ill, blah blah blah, go nuts.

Posted: Thu Mar 25, 2010 4:46 pm

Quote:

GREETINGS TO YOU MY NAMES ARE DR BILL MARK FROM THE UNITED
NATIONS HERE IN LONDON.I WAS DIRTIED BY THE FBI AND THE MEMBERS OF THE
RED CROSS ON THE TRANSACTION OF FUNDS THAT WAS MADE BY YOU
THROUGH MRS L1ND@ D@V3

I found this so funny for a lot of reasons ..
MY NAMES ARE - A man known by many names eh ..
DR BILL MARK - Marked Bills Smile

DIRTIED BY THE FBI - How, did they push you into a muddy puddle?
AND THE MEMBERS OF THE RED CROSS - Who, the particularly evil ones?

What a dick Smile