Author |
Message |
scsiguy
Not quite a Newb
Joined: 12 Jun 2008
Posts: 50
|
Posted:
Tue Jun 24, 2008 8:32 pm |
|
My scammer is close to meeting with me and I want to get him on Camera. He claims to live in Atlanta and works out of the airport area, so I am looking to "Meet" him in a cafe (with a webcam)
Maybe even something an hour away to make him drive to meet with me
Anyone know of one? |
|
|
|
|
Scam Patroller
Baiting Guru
Joined: 08 Jul 2004
Posts: 11857
Location: UK
|
Posted:
Tue Jun 24, 2008 8:34 pm |
|
|
|
|
scsiguy
Not quite a Newb
Joined: 12 Jun 2008
Posts: 50
|
Posted:
Tue Jun 24, 2008 8:43 pm |
|
No this one is not a standard 419
I am sure I have a lad on the line, but his scam is to try and buy large lots of Electronics and gives me 3 or 4 differant CC numbers to charge. The product is all drop shipped to an Atlanta GA warehouse.
As the bait goes on he is getting farther from script and now he is looking to "date" me |
|
|
|
|
scsiguy
Not quite a Newb
Joined: 12 Jun 2008
Posts: 50
|
Posted:
Tue Jun 24, 2008 8:46 pm |
|
Here is the full header:
Return-Path: <[email protected]>
Received: from noehlo.host ([127.0.0.1])
by mx-stork.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1k6PJT1wp3Nl34c0; Thu, 12 Jun 2008 12:33:29 -0400 (EDT)
Received: from qb-out-0506.google.com ([72.14.204.236])
by mx-stork.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1k6PJT6NX3Nl34c0
for <[email protected]>; Thu, 12 Jun 2008 12:33:29 -0400 (EDT)
Received: by qb-out-0506.google.com with SMTP id o12so1406845qba.45
for <[email protected]>; Thu, 12 Jun 2008 09:33:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received:received:message-id:date:from:to
:subject:mime-version:content-type;
bh=vir0dNYnePQixH/jOe5gDZlxdTtc71K2yUP9sVv8Xj8=;
b=taCQyvrmR68cx0+68HE0+iHg4kmJMTKLkD1UwmacCAbzFqO84p8YyfsBkX9pqTjfJg
fZjhYVqltceJPRR/p1fQpHmIQq8anDNLMKOtRcuJQgw7iLT+Esw61uLvHINDfbHDLOMB
Sh/9qkw5qXQcH3WLh85JUM3uH05hiHIkmki4U=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=message-id:date:from:to:subject:mime-version:content-type;
b=wQkbPmoYiu8LpNWvNwflhdVdOt2Y6CO1vXnHvgh1y6XRN57ZVOnjNZMw3dxZ0y+1s8
ct3RmQLtXDQNoolum14hD+o3woCPIQ08ig2OpwlZCYxF7o/rQsEFVf1wcRqFBp67e1o0
Zb0ik84x5hs0QzJzVjWfWsIjoQrmZAyQ2WBh0=
Received: by 10.142.239.11 with SMTP id m11mr598061wfh.283.1213288409119;
Thu, 12 Jun 2008 09:33:29 -0700 (PDT)
Received: by 10.142.148.14 with HTTP; Thu, 12 Jun 2008 09:33:29 -0700 (PDT)
Message-ID: <[email protected]>
Date: Thu, 12 Jun 2008 17:33:29 +0100
From: "Morris Poem" <[email protected]>
To: "Katie XXXX" <[email protected]>
Subject: PAYMENT DETAILS...........
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_25632_6444048.1213288409117"
X-ELNK-Received-Info: spv=0;
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
Write Message ( Plain | Color and Graphics )
Email Addresses from Address Book or enter nicknames (separated by commas)
To
Cc
Bcc
Subject
Save a copy to your 'Sent' folder. Spell Check Message
Attachment
(10MB message size limit) |
Last edited by scsiguy on Mon Aug 11, 2008 4:26 pm; edited 1 time in total |
|
|
|
Scam Patroller
Baiting Guru
Joined: 08 Jul 2004
Posts: 11857
Location: UK
|
Posted:
Tue Jun 24, 2008 8:53 pm |
|
Unfortunatley, the scammer is using a Gmail email address, which replaces the senders IP address with that of the Gmail server IP, which is why a lot of baiters also use Gmail
Tell them you are having problems receiving their emails from Gmail, say they are coming out blank or garbled, ask them to try using something like Yahoo, then you can get their true IP address next time.
The type of scam you are describing is something that is mostly done by Eastern European scammers (what we call Vlads) from Russia and Romania, placs like that, chances are that they have innocent mules who will make the collection from the warehouse and then re-ship the goods to the scammers safe address.
Alternatively, they make an order with the stolen credit card, then cancel the order and ask you to refund them via Western Union.
One last thing before I forget, as you are running some sort of business, you are using your real details, so it would be ebst if you were to drop the scammer completely, it's not safe to piss these people off when they know who you are, only ever bait with fake details. |
_________________
40x 4x 2x 2x 10x 34x 17x 9x 1x 1x 6x 4x 1x 6x 1x 23x
YMCA Summer Holdiay + Bus Hijack
www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery |
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|