What is this?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Thu Feb 21, 2013 5:50 pm

I received this in my catcher box:

Quote:

I am Mrs .Lucy Ye from AES CORPORATION GROUP SDN BHD. I write to inform you that we re interested in your products.Please kindly send me your catalog, Minimum Order Quantity ,Delivery time ,Payment terms and warranty But our payment term is T/T.

Your early reply is highly appreciated.

Yours Sincerely,

Lucy Ye
Supervisor of Oversea Marketing
AES CORPORATION TRADING AND CONTRACTOR COMPANY
311 Chase Road,Southgate
N14 6JS,London

I ran the header and there was no valid IP on it. Is this a legit email, or is it a kind of scam that apparently I do not recognize?

Posted: Thu Feb 21, 2013 5:56 pm

These are called 'product lads'. My favourite. Wink

They order stuff, and then want you to pay for a license to export into their country.

One way of dealing with these, is to say you already have a license but want a reliable partner in their country to expand your market. Then say you will send them free samples of your products (laptops and iPhones work best Very Happy

) to get them going.

Then it all goes Pete Tong. Laughing

Posted: Thu Feb 21, 2013 6:18 pm

Wow! I had no idea. I see where maybe that GPS Tracker thingy would play a part. Sounds like fun! Twisted Evil

Posted: Thu Feb 21, 2013 6:30 pm

If your worried about the IP you can always use "Whoreadme" and see if it doesn't come back with one.

1. Open a free Whoreadme account.
2. Register your baiter E-mail address.
3. reply to the lad but add .whoreadme.com after the original E-addy.

Ex: Lad @ yahoo.com; becomes Lad @ yahoo.com.whoreadme.com;

Posted: Thu Feb 21, 2013 7:29 pm

Need advice here. AES is a legit company here and I know the CEO very well. Should I let them know that someone is using their company name for fraud. I can easily have all their customers mass mailed in a matter of minutes or a warning letter sent.

Elite Baiter Joined: 19 Jun 2011 Posts: 1066

^That would probably help. It won't stop the scammer from using the name but it will spread awareness and possibly prevent someone from falling prey to the scam.

Posted: Thu Feb 21, 2013 7:43 pm

No harm in that.

Though AES customers are not likely to be sent this format. The lad has used the company name but is getting his mailing list from the usual sources. Guestbooks etc.

Posted: Thu Feb 21, 2013 7:50 pm

Just phoned the CEO. It happened to them 6 mths ago and they killed the scammers addys and site etc. However they posted KIDDIE PORN to this Company in revenge.

If anyone can get the ip address they would really appreciate it. I am forwarding the email to the CEO and they will mass mail customers in the morning.

Posted: Thu Feb 21, 2013 8:20 pm

Now that is spooky. I used to live on the road on that address. I am the other side of town now. Shocked

Posted: Thu Feb 21, 2013 8:22 pm

Here is the original header and message if you need that for your report to the CEO.

Quote:

Delivered-To: <snipped>
Received: by 10.64.44.205 with SMTP id g13csp2494iem;
Thu, 21 Feb 2013 02:32:09 -0800 (PST)
X-Received: by 10.50.40.129 with SMTP id x1mr12601467igk.54.1361442729030;
Thu, 21 Feb 2013 02:32:09 -0800 (PST)
DomainKey-Status: good
Received-SPF: softfail (google.com: best guess record for domain of transitioning [email protected] does not designate <unknown> as permitted sender)
Received: by 10.12.152.3 with POP3 id z3mf4733628iad.18;
Thu, 21 Feb 2013 02:32:08 -0800 (PST)
X-Gmail-Fetch-Info: <snipped> 2 smtp.gmail.com 995 abigglesworth
Delivered-To: <snipped>
Received: by 10.220.201.136 with SMTP id fa8csp7686vcb;
Thu, 21 Feb 2013 02:10:42 -0800 (PST)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.42.176.193 as permitted sender) client-ip=10.42.176.193
Authentication-Results: mr.google.com;
spf=pass (google.com: domain of [email protected] designates 10.42.176.193 as permitted sender) [email protected];
dkim=pass [email protected]
X-Received: from mr.google.com ([10.42.176.193])
by 10.42.176.193 with SMTP id bf1mr6279475icb.55.1361441442786 (num_hops = 1);
Thu, 21 Feb 2013 02:10:42 -0800 (PST)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.42.176.193 with SMTP id bf1mr4744289icb.55.1361441442491;
Thu, 21 Feb 2013 02:10:42 -0800 (PST)
Sender: [email protected]
Received: by 10.50.16.41 with HTTP; Thu, 21 Feb 2013 02:10:42 -0800 (PST)
Date: Thu, 21 Feb 2013 18:10:42 +0800
X-Google-Sender-Auth: 4TjL6H2TEsd2qbcyBvC4o0e9Z1k
Message-ID: <CAPd28Zbdntc=-eetV6QzucEne9=3ExmWYD_4iToVm9gSMn1jvw@mail.gmail.com>
Subject: INQUIRY
From: AES CORPORATION GROUP SDN BHD <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=90e6ba6e83908ff09c04d6394951
Bcc: <snipped>

Quote:

I am Mrs .Lucy Ye from AES CORPORATION GROUP SDN BHD. I write to inform you that we re interested in your products.Please kindly send me your catalog, Minimum Order Quantity ,Delivery time ,Payment terms and warranty But our payment term is T/T.

Your early reply is highly appreciated.

Yours Sincerely,

Lucy Ye
Supervisor of Oversea Marketing
AES CORPORATION TRADING AND CONTRACTOR COMPANY
311 Chase Road,Southgate
N14 6JS,London

Posted: Thu Feb 21, 2013 8:38 pm

Your letter looks like it could be a simple CC scam too. Those are common.

Lad want to buy some gods from you (flux capacitators for example) and he pay you with a stolen credit card. However, he overpay with quite a bit so that you can arrange his shipment. So when you pay the shipper (the lad too) he get the money you overpay to the shipper. Whereas you get stuck with accepting a stolen credit card and questions from the police.

Posted: Thu Feb 21, 2013 8:42 pm

Thank you for the header. I passed it on. If anyone wants to dance with this scammer, please do, we need phone numbers etc.

I am going to go for this one also....as I want as much traceable evidence as possible.

Any info you get please keep me informed please. Very Happy

Also CEO says Thank You for letting them become aware of this.
(Actually it was a huge Thank You)

Posted: Thu Feb 21, 2013 8:51 pm

Hello Kitty wrote:

(Actually it was a huge Thank You)

Posted: Fri Mar 01, 2013 5:46 pm

Hi
I do not know if any one got reply's from the lad, but the real AES company had their techies on to it first thing.

So once again they say Thank You.

Baiting Guru Joined: 27 Mar 2011 Posts: 21158

You might want to ask a mod to move you behind a login if people will be posting in here.

Baiting Guru Joined: 03 May 2007 Posts: 18313

I don't think this needs to be behind a log in.

@Mr. Kruse: I agree with Dr. Mike, it looks like an overpayment with stolen credit card type of scam.

These are explained here: http://www.scamwarners.com/forum/viewtopic.php?f=43&t=23020

419Eater is my life Joined: 07 Feb 2012 Posts: 438

I got the same letter, but I didn't pursue it as I was already working with a different CC lad and wasn't sure if he was testing me. Yeah, I'm paranoid. SO WHAT!?!

Also that email is dead.