SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 We got scammed, need help!

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
wenar
Not quite a Newb


Joined: 04 Apr 2007
Posts: 26


PostPosted: Tue Apr 10, 2007 6:51 pm Reply with quoteBack to top

Slightlyoutofit wrote:
Jag tror fortfarande det här något slags skämt. Om det är riktigt,så skulle du ha visat upp mera bevis än vad du har gjort, men i stället så har du bara jätt lite information här och lite information där. Men menar du fortfarande att det är oskyldig, så vissa upp videon som du pratar om och sluta larva dej.

PS: Vem som helst kanskriva på svenska bara man har nån som bor i Svergie.


Bad grammar, bad sentence structure and lots of typos. Smile
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Tue Apr 10, 2007 6:52 pm Reply with quoteBack to top

The first header was sent from Ghana, the second was sent from Togo:

41.204.34.159 = Ghana = http://www.dnsstuff.com/tools/whois.ch?ip=41.204.34.159

41.207.160.92 = Togo = http://www.dnsstuff.com/tools/whois.ch?ip=41.207.160.92

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery

Last edited by Scam Patroller on Tue Apr 10, 2007 6:54 pm; edited 1 time in total
View user's profileSend private message
wenar
Not quite a Newb


Joined: 04 Apr 2007
Posts: 26


PostPosted: Tue Apr 10, 2007 6:53 pm Reply with quoteBack to top

Thanks. The banker said he was in Togo on vacation, so he was not lying. Wow…
View user's profileSend private message
wenar
Not quite a Newb


Joined: 04 Apr 2007
Posts: 26


PostPosted: Tue Apr 10, 2007 6:55 pm Reply with quoteBack to top

Quote:
"That is correct. Knowledge of languages does not prove that wenar is not lying. After all, it's not that hard for a swede to pretend to be a kurd. But his swedish is correct, it can be little doubt about that."


I can write in Kurdish too. Do you want me to write using a Latin or an Arabic script? What do you want me to say?
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Tue Apr 10, 2007 6:59 pm Reply with quoteBack to top

^^^^^ Scammers tell lies, that's what they do, just because the banker says he is on holiday in Togo, does not mean he really is a banker telling the truth, plus he is using a Yahoo address, and the other is using a myway.com address, both of which are heavily used by scammers, bankers and lawyers do not use free yahoo and myway email addreses.

Wenar, can you let us have all of the email addresses they are mailing you from? Please feel free to PM them to me, I will not post them on here or anywhere else, just want to do some research on them, it would also be handy if we could have the very first email that you received from them.

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
View user's profileSend private message
luckey
Moderator


Joined: 25 Jan 2007
Posts: 5633
Location: Check the lost and found


PostPosted: Tue Apr 10, 2007 7:01 pm Reply with quoteBack to top

A "bank owner" @ myway.com and a "lawyer" @ yahoo.com should be proof-galore that your father is in bed with scammers.

Edit: SP is fast.
View user's profileSend private messageSend e-mail
wenar
Not quite a Newb


Joined: 04 Apr 2007
Posts: 26


PostPosted: Tue Apr 10, 2007 7:11 pm Reply with quoteBack to top

We are trying a strategy that basically is about gaining their trust, especially the Ghana lawyers, and trying to delay everything as long as possible. We want to get as much information out of them as possible so that the authorities can do a simpler job. My father and I also discussed the possibility of making a trap by promising the tax money of 100,000 $ and let the authorities arrest them. Do you think this plan is plausible? I believe that if we get one arrested, maybe “Kobo”, the one that was our contact with Dexia in Brussels, then he could lead us to the others. That is if they are not two different groups just working with each other. We actually called him and found out that he lives in Belgium, at least we think so because he answered on the old Belgium number he gave us and we think it is strange for someone not to change the SIM-card when leaving a country. But it is also strange that he has not discarded the SIM, we are still a bit unsure about this Kobo. We also have a very high quality pictures and fingerprints of him.
No, I will not post the pictures yet.

luckey wrote:
A "bank owner" @ myway.com and a "lawyer" @ yahoo.com should be proof-galore that your father is in bed with scammers.

Edit: SP is fast.


My father is not very technical; he uses hotmail and sees no problem with others using them. I tried to explain this to him but he is not putting as much weight on it as you and I.
View user's profileSend private message
Splooshy
** SUSPENDED **


Joined: 05 Dec 2006
Posts: 135


PostPosted: Tue Apr 10, 2007 7:25 pm Reply with quoteBack to top

Unfortunately, wenar, there's not much that the authorities can do to stop these scammers. Many of them are in Nigeria and arrests there are few and far between. As time goes on and they become more successful, some of them leave their home country and base themselves in places like the United Kingdom, the USA, South Africa, Amsterdam, Ireland, Australia, Indonesia, Hong Kong, and various other countries. It is easier to get an arrest in some of these places and the authorities are usually not able to be bribed, so this is much more risky for the scammers.

Even if the police could arrest the scammers, they would not know who to go after. Most scammers will create false identities, so they cannot be traced.

Your dad will be safe from the scammer if he block/ignore his emails. Be aware that the scammers are not shy about picking up the phone and calling their victims. If you have received any calls, he should politely tell them that he is no longer interested, and then hang up the phone (repeatedly if necessary). They will soon move on and stop bothering him.
View user's profileSend private messageSend e-mail
luckey
Moderator


Joined: 25 Jan 2007
Posts: 5633
Location: Check the lost and found


PostPosted: Tue Apr 10, 2007 7:31 pm Reply with quoteBack to top

Quote:
My father is not very technical; he uses hotmail and sees no problem with others using them. I tried to explain this to him but he is not putting as much weight on it as you and I.


My father would be the same way. I'd better give him a call. Wink
View user's profileSend private messageSend e-mail
wenar
Not quite a Newb


Joined: 04 Apr 2007
Posts: 26


PostPosted: Tue Apr 10, 2007 7:52 pm Reply with quoteBack to top

Quote:
Return-Path: <[email protected]>
Received: from ironport.bredband.com ([195.54.107.82] [195.54.107.82]) by mxfep01.bredband.com with ESMTP id <[email protected]om> for <[email protected]>; Wed, 4 Apr 2007 21:46:44 +0200
Received: from bay0-omc1-s18.bay0.hotmail.com ([65.54.246.90]) by ironport.bredband.com with ESMTP; 04 Apr 2007 21:46:34 +0200
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AgAAAJGdE0ZBNvZajGdsb2JhbACDCItQE4EXAQEBCAgGBwYWBw
Received: from hotmail.com ([65.54.168.48]) by bay0-omc1-s18.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Wed, 4 Apr 2007 12:46:33 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 4 Apr 2007 12:46:33 -0700
Message-ID: <[email protected]>
Received: from 65.54.168.200 by by113fd.bay113.hotmail.msn.com with HTTP; Wed, 04 Apr 2007 19:46:32 GMT
X-Originating-IP: [195.229.236.213]
X-Originating-Email: [[email protected]]
X-Sender: [email protected]
In-Reply-To: <[email protected]>
From: "XXX" <[email protected]> [Lägg till i adressbok]
To: [email protected]
Bcc:
Subject: RE: 419
Date: Wed, 04 Apr 2007 19:46:32 +0000
Mime-Version: 1.0
Content-Type: text/html; format=flowed
X-OriginalArrivalTime: 04 Apr 2007 19:46:33.0089 (UTC) FILETIME=[F27E0710:01C776F1]
Return-Path: [email protected]


This one is from "Abdul", we believe he is a good guy. He is writing from Dubai. He lost 150,000 $ on this and he was an advocate of precautions. I would be very surprised if he was part of the scam, but then again, nothing should surprise me anymore :/

Quote:
X-Message-Status: n:0
X-SID-PRA: XXX <[email protected]>
X-SID-Result: Pass
X-Message-Info: LsUYwwHHNt0DkxaZFhApLdEOoLNuXo4WU0NyHdxz9XQ=
Received: from bay0-omc1-s24.bay0.hotmail.com ([65.54.246.96]) by bay0-imc1-s38.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 28 Feb 2007 02:25:00 -0800
Received: from hotmail.com ([64.4.26.24]) by bay0-omc1-s24.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Wed, 28 Feb 2007 02:25:00 -0800
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Wed, 28 Feb 2007 02:24:59 -0800
Message-ID: <[email protected]>
Received: from 64.4.26.200 by by112fd.bay112.hotmail.msn.com with HTTP;
Wed, 28 Feb 2007 10:24:55 GMT
X-Originating-IP: [195.207.156.213]
X-Originating-Email: [[email protected]]
X-Sender: [email protected]
From: "XXX" <[email protected]>
To: [email protected]
Bcc:
Subject: FW: VAT RECEIPT AND THE ACCOUNT INFORMATION. FROM XXX.
Date: Wed, 28 Feb 2007 11:24:55 +0100
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_634c_235b_6900"
X-OriginalArrivalTime: 28 Feb 2007 10:24:59.0964 (UTC) FILETIME=[B35DE7C0:01C75B22]
Return-Path: [email protected]


This is an email from someone in Ghana. I don’t really know what he works with, but I think he is responsible for the tax being paid. This was sent to my fathers hotmail account and then forwarded to mine.

Quote:
X-Message-Status: n:0
X-SID-PRA: XXX <[email protected]>
X-SID-Result: Pass
X-Message-Info: LsUYwwHHNt3FLnHAJF+//CYTbySUUvBrJEKIsj4iqGg=
Received: from bay0-omc2-s41.bay0.hotmail.com ([65.54.246.177]) by bay0-imc1-s38.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 28 Feb 2007 02:28:10 -0800
Received: from hotmail.com ([64.4.26.43]) by bay0-omc2-s41.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Wed, 28 Feb 2007 02:28:10 -0800
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Wed, 28 Feb 2007 02:28:09 -0800
Message-ID: <[email protected]>
Received: from 64.4.26.200 by by112fd.bay112.hotmail.msn.com with HTTP;
Wed, 28 Feb 2007 10:28:05 GMT
X-Originating-IP: [195.207.156.213]
X-Originating-Email: [[email protected]]
X-Sender: [email protected]
From: "XXX" <[email protected]>
To: [email protected]
Bcc:
Subject: FW: [email protected]
Date: Wed, 28 Feb 2007 11:28:05 +0100
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1; format=flowed
X-OriginalArrivalTime: 28 Feb 2007 10:28:09.0809 (UTC) FILETIME=[2485F410:01C75B23]
Return-Path: [email protected]


This one is from the bank owner using another name/address. FW to me.

I would also like some info on this email address if possible: [email protected]
View user's profileSend private message
wenar
Not quite a Newb


Joined: 04 Apr 2007
Posts: 26


PostPosted: Tue Apr 10, 2007 7:55 pm Reply with quoteBack to top

I am hoping for something like this.

http://www.youtube.com/watch?v=5fLn86Q4wSM

I also have alot of documents scanned and sent to my email.
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Tue Apr 10, 2007 7:59 pm Reply with quoteBack to top

@ Wenar, of those headers, these are where they were sent from, first one from the UAE which is where are lot of West African scammers operate from on large operations, the other 2 have the same IP and were both sent from Belgium:

First header:
195.229.236.213 = United Arab Emirates = http://www.dnsstuff.com/tools/whois.ch?ip=195.229.236.213

Second header:
195.207.156.213 = Belgium http://www.dnsstuff.com/tools/whois.ch?ip=195.207.156.213

Third header:
195.207.156.213 = Belgium = http://www.dnsstuff.com/tools/whois.ch?ip=195.207.156.213

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
View user's profileSend private message
wenar
Not quite a Newb


Joined: 04 Apr 2007
Posts: 26


PostPosted: Tue Apr 10, 2007 8:01 pm Reply with quoteBack to top

mod edit: No, you're not a badger but would you please use "post reply" instead of "quote"? I've edited out nearly all of your messages now. (Don)

The Belgium addresses really freaked me out, but then I remembered that I used the Hotel computer to forward them from my fathers email account to mine. (Another proof that I am not a BADger..?)
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Tue Apr 10, 2007 8:02 pm Reply with quoteBack to top

As for this email address:

[email protected]

That is laughable, the Ghana inland revenue service using a free French Yahoo email address Laughing Laughing

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
View user's profileSend private message
GeorgJ
Not quite a Newb


Joined: 09 Apr 2007
Posts: 21


PostPosted: Tue Apr 10, 2007 8:23 pm Reply with quoteBack to top

wenar wrote:
Quote:
"That is correct. Knowledge of languages does not prove that wenar is not lying. After all, it's not that hard for a swede to pretend to be a kurd. But his swedish is correct, it can be little doubt about that."


I can write in Kurdish too. Do you want me to write using a Latin or an Arabic script? What do you want me to say?


I don't have any opinions about this at all, actually. I just confirmed that you had written your own Swedish.
View user's profileSend private message
Pastor Frank
Moderator


Joined: 31 Jan 2007
Posts: 11649
Location: EN34ix


PostPosted: Tue Apr 10, 2007 8:27 pm Reply with quoteBack to top

ASEM sent to the "Ghana inland revenue service"

It didn't bounce, so it seems they are still in business.

_________________
"Father Juan are sure that you are man of God,because your behaviors showed you as unbeliever" -Mary R
View user's profileSend private messageSend e-mail
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



E-Mail Header Analysis


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT