Author |
Message |
sekhmet29
Master Baiter
Joined: 31 Oct 2007
Posts: 226
Location: Leading myself astray
|
Posted:
Wed Oct 31, 2007 1:29 pm |
|
I run a videography company, and recently we've been having a wave of what seems like scammers contacting us. Most have left us alone after a few well-chosen comments, but we've got one that is hanging on quite hard. Basically, the situation is, they contacted us asking for a photographer. We informed them we're not photographers but vidoegraphers. They say fine - we need a videographer. The wedding is in Glasgow (we're not based in Scotland), and they will pay for our travel and accommodation once there. We quote price, they say fine - give us contact details.
The things that mark them out as probable scammers - firstly, they say they're born and brought up in Scotland, yet they can't spell "Glasgow". The name on the email is "Kenny Scott" - the person who has been contacting me with this email is Joanna Sheldon, and her fiance is David.
They have given the address of a real church on the outskirts of Glasgow, and I was considering calling the church to find out if they have these people registered for that day (although, knowing what scammers are like, they will have...)
Basically, I could do with some advice - if it's real, we could do with the money, but my spidey sense is tingling, and I just don't trust it...
Ta muchly!
Sekhmet |
|
|
|
|
Scam Patroller
Baiting Guru
Joined: 08 Jul 2004
Posts: 11857
Location: UK
|
Posted:
Wed Oct 31, 2007 1:40 pm |
|
Hi Sekhmet, that bears the hallmarks of a fake cheque overpayment scam.
Basically, they will pay for your travel and accommodation, along with your normal videography charges, for which they will probaly send you a fake cheque, a couple of things can happen, the cheque will be made out for far more than it is supposed to be, and they will ask you to send the remainder back to them via Western Union saying it is to pay someone else such as wedding caterers, alternatively, they might send the cheque, then cancel the work, and request you send the money back via Western Union, claiming they can't receive money to their bank blah blah blah.
The end result is the same, the cheque will come back as fraudulent, leaving you to repay your bank the full amount that you withdrew to send to the scammer, along with having your account frozen and possibly facing criminal charges.
Just out of curiosity, could you post the full headers from the email they sent to you, we can then pinpoint which country they are emailng you from cheers. |
_________________
40x 4x 2x 2x 10x 34x 17x 9x 1x 1x 6x 4x 1x 6x 1x 23x
YMCA Summer Holdiay + Bus Hijack
www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery |
|
|
|
sekhmet29
Master Baiter
Joined: 31 Oct 2007
Posts: 226
Location: Leading myself astray
|
Posted:
Wed Oct 31, 2007 2:56 pm |
|
Hi, thanks for your reply. Yeah, I was thinking it was most likely to be a cheque scam, but they haven't offered to give us any money yet (which was what gave me doubts...) and even if they do, they know they aren't giving us all the cost - just �200 out of a total of a fair chunk more than that! I think I'll get them to give me a call and then base judgement on that.
I checked the header, and there were 2 IP numbers - the first based in the US and the second in Glasgow. Here is the header and body of the email. "She" includes 2 phone numbers, both of which are UK-style mobile numbers.
Thanks for your help!!
Return-Path: <[email protected]>
Delivered-To: 10-**************
Received: (qmail 26105 invoked from network); 19 Oct 2007 03:37:29 +0100
Received: from web58502.mail.re3.yahoo.com (68.142.236.185)
by 62-128-202-87.iomart.com with SMTP; 19 Oct 2007 03:37:29 +0100
Received: (qmail 60656 invoked by uid 60001); 19 Oct 2007 02:46:21 -0000
DomainKey-Signature: deleted to prevent page blowout.
Received: from [41.211.229.2] by web58502.mail.re3.yahoo.com via HTTP; Thu, 18 Oct 2007 19:46:20 PDT
Date: Thu, 18 Oct 2007 19:46:20 -0700 (PDT)
From: kenny <[email protected]>
Reply-To: [email protected]
Subject: BOOKING ENQUIRE
To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-790307010-1192761980=:60448"
Content-Transfer-Encoding: 8bit
Message-ID: <[email protected]>
X-Antivirus: avast! (VPS 000782-2, 18/10/2007), Inbound message
X-Antivirus-Status: Clean
--0-790307010-1192761980=:60448
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Good day,
My name is Joanna Sheldon,further to our wedding preparations between i and my fiance David in (Glasgow/scotland)in the month of November 22th - 24th -2007.We are looking for a good photographer who will come and snapshoot our proposed event.We were highly impreSsed on your webpage and we hope to have the best of your services.
We would require to have the list of your available dates between 22th - 24th November 2007.Let me know your charges for your services including transportation charges if you are to work for at most Six Hours on that day.we require the below.
:250 copies of photographs
:All colored
:5 x 7 in size
:Albums required
The 250 copies covers the bride and the bridegroom, their parents,the officiating ministers and our guests.If you can out of the state,we will pay the transportation charges to this venue address:
Shettleston Methodist Church
,1104 Shettleston Road,
Glasgow,G32 7PH
Scotland
And from the party venue.Please indicate in your email if you can out of the state ,what it will costs either via plane or through Car transport to (Glasgow/scotland) and what amount you will receive working for the budgeted hours at the occasion.
Moreso,should you be out of state,the Hotel accomodation will be provided you for by us.Waiting to read from you soon as possible.
Best regards,
Sheldon...
my own +44 703****658
my fiance +44 7024****23 |
|
|
|
|
Scam Patroller
Baiting Guru
Joined: 08 Jul 2004
Posts: 11857
Location: UK
|
Posted:
Wed Oct 31, 2007 3:21 pm |
|
Yes, there are 2 IP addresses in the headers, the first one is the Yahoo.com server in the US, IP 68.142.236.185 = United States, but the winner of the country of origin for the sender of the email is, drum roll..............
IP 41.211.229.2 = Nigeria
Who would have thought that
The phone numbers are UK numbers, but they are not mobiles, they are called "personal numbers", scammers use those 0703 and 0704 numbers regularly, because it gives the victim the impression they arein the UK, when in fact those numbers redirect to the scammers mobile phone in whatever part of the world he lives in, in this case, Nigeria.
Can you post the full phone numbers that you ***** out above, it will help other potential victims if they Google them, as they will see a link to this topic, cheers |
_________________
40x 4x 2x 2x 10x 34x 17x 9x 1x 1x 6x 4x 1x 6x 1x 23x
YMCA Summer Holdiay + Bus Hijack
www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
Last edited by Scam Patroller on Thu Nov 01, 2007 7:21 pm; edited 6 times in total |
|
|
|
Dark Spirit
Master of Master Baiters
Joined: 18 Mar 2007
Posts: 660
Location: In the Darkness
|
Posted:
Wed Oct 31, 2007 3:23 pm |
|
I got this one 41.211.229.2 showing as nigeria,,, now there's a surprise
EDIT, damn u just beat me SP |
_________________ DARKNESS IS A PLACE WHERE ONLY FEAR LIVES. Oh and me too
God himself wii judge you for trying to delay and make someones life a waste, Mother felicia, April 30th 2007
Thanks very much for fooling me ok and i dont have any other thing to say, Helimina Bright, May 1st 2007
Pleasantly, that we have understanding and continue intercourse, Elena USSR vlad, May 1st 2007
"read the stickies and the faqs." Newbie forum
|
|
|
|
sekhmet29
Master Baiter
Joined: 31 Oct 2007
Posts: 226
Location: Leading myself astray
|
Posted:
Wed Oct 31, 2007 3:35 pm |
|
Brilliant! Thanks for that... I'll stop answering emails then, cos they've got some of my info. Tried not to give them too much, but there's only so much you can do in a business...
Thanks again,
Sekhmet |
|
|
|
|
spot
Moderator
Joined: 25 Aug 2005
Posts: 9149
Location: Criminal Disruption Department.
|
Posted:
Thu Nov 01, 2007 1:48 pm |
|
I'm no photographer ...but it doesn't matter what I say ....a good scammer will always write back if there is the smell of money.
Quote: |
Hi there Joanna,
I can accommodate all the things you require and I can get to Glasgow without any problem but I might need hotel accommodation if you require my services after the ceremony.
The requirements that you have requested will cost you around �750 including VAT
Please let me know how you want to proceed.
Kind Regards
Tracey |
If you come back and read your post sekhmet29 I'll try to remember to post any replies. .... its about time I got myself another fake GBP check |
_________________ x32
|
|
|
|
sekhmet29
Master Baiter
Joined: 31 Oct 2007
Posts: 226
Location: Leading myself astray
|
Posted:
Thu Nov 01, 2007 6:51 pm |
|
Woo hoo!!
Have fun with it Spot - she'll accept anything you tell her! I've had loads of scammers looking for photographers - I might see if I can put any in the letters forum - I haven't actually tried baiting any of them as yet, since they all seem like the dodgy cheque scam, but I'm sure someone else could have some fun with it.
Please keep my updated! |
|
|
|
|
sekhmet29
Master Baiter
Joined: 31 Oct 2007
Posts: 226
Location: Leading myself astray
|
Posted:
Fri Nov 02, 2007 2:35 pm |
|
Hi, sorry missed the bit about the phone numbers - they are +44 7031861658 and +44 7024070123. Hope someone can do something with this! |
|
|
|
|
spot
Moderator
Joined: 25 Aug 2005
Posts: 9149
Location: Criminal Disruption Department.
|
Posted:
Fri Nov 02, 2007 3:55 pm |
|
^^^^^
both numbers failed with my skype phone ...even though they look like UK mobile numbers they aren't ..they are redirect numbers that can be picked up anywhere in the world
was the letter you posted above the first mail you received, or was it in reply to another one ??.
It would help me if I could see the mail and headers from the very first mail so I can reply to the origional ...I haven't had an answer to the first one just yet. |
_________________ x32
Last edited by spot on Fri Nov 02, 2007 3:59 pm; edited 1 time in total |
|
|
|
sekhmet29
Master Baiter
Joined: 31 Oct 2007
Posts: 226
Location: Leading myself astray
|
Posted:
Fri Nov 02, 2007 3:59 pm |
|
^^^^^ That was the first mail I got from them, including headers I could get from Outlook. I have a couple of others if you want to try them. Not the same people, but almost the same scam.
Sekhmet |
|
|
|
|
spot
Moderator
Joined: 25 Aug 2005
Posts: 9149
Location: Criminal Disruption Department.
|
Posted:
Fri Nov 02, 2007 4:12 pm |
|
sekhmet29
Go and open yourself a Gmail account in a fictitious name that you are prepared to share the password with me ...nothing too silly and then PM me.
I'll walk you through a fake cheque bait ....there's nothing like reverse scamming someone who has been scamming you, with a little help from someone who [sort of) knows what they are doing.
https://www.google.com/accounts/ServiceLogin?service=mail<mpl=yj_tlsosm
sign up for gmail |
_________________ x32
|
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|