Royal Mail concert ticket scam

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri Dec 03, 2010 8:24 pm

Hey radedi,

First, if the scammer has your RL contact details, just drop him/her. Just tell them you are no longer interested in the tickets (or whatever) and don't email them back.

Second, there is very little you can do with online scammers as far as getting them caught. Many times they aren't in the country they say they are in and even if they are, they are never using their real names and the such. Believe me, just getting the fake site shut down will cause the scammer problems and cost them money (they pay other scammers to make the fake sites), so you have done a good thing -- be happy about that!

The header is the part of the email that looks like this:

Quote:

Delivered-To: [email protected]
Received: by 10.151.51.2 with SMTP id d2cs19536ybk;
Fri, 3 Dec 2010 12:13:50 -0800 (PST)
Received: by 10.229.74.147 with SMTP id u19mr1604726qcj.214.1291407230305;
Fri, 03 Dec 2010 12:13:50 -0800 (PST)
Return-Path: <[email protected]>
Received: from imr-db02.mx.aol.com (imr-db02.mx.aol.com [205.188.91.96])
by mx.google.com with ESMTP id r36si4721575qcs.145.2010.12.03.12.13.50;
Fri, 03 Dec 2010 12:13:50 -0800 (PST)
Received-SPF: neutral (google.com: 205.188.91.96 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=205.188.91.96;
Authentication-Results: mx.google.com; spf=neutral (google.com: 205.188.91.96 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from imo-ma04.mx.aol.com (imo-ma04.mx.aol.com [64.12.78.139])
by imr-db02.mx.aol.com (8.14.1/8.14.1) with ESMTP id oB3KDZGr032155
for <[email protected]>; Fri, 3 Dec 2010 15:13:35 -0500
Received: from [email protected]
by imo-ma04.mx.aol.com (mail_out_v42.9.) id o.f7e.6990733 (43993)
for <[email protected]>; Fri, 3 Dec 2010 15:13:32 -0500 (EST)
Received: from smtprly-dc02.mx.aol.com (smtprly-dc02.mx.aol.com [205.188.170.2]) by cia-dd06.mx.aol.com (v129.7) with ESMTP id MAILCIADD062-d35b4cf94f6a169; Fri, 03 Dec 2010 15:13:31 -0500
Received: from web-mmc-m02 (web-mmc-m02.sim.aol.com [64.12.224.135]) by smtprly-dc02.mx.aol.com (v129.5) with ESMTP id MAILSMTPRLYDC024-d35b4cf94f6a169; Fri, 03 Dec 2010 15:13:30 -0500
References: <[email protected]>
To: [email protected]
Subject: Attn: XXXXXXX: Letter Of Notification: FROM EFCC OFFICE
Date: Fri, 03 Dec 2010 15:13:29 -0500
X-AOL-IP: 41.138.185.37
In-Reply-To: <[email protected]>
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: [email protected]
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8CD613DAFBB645A_1354_C173_web-mmc-m02.sysops.aol.com"
X-Mailer: Mail.com Webmail 32992-STANDARD
Received: from 41.138.185.37 by web-mmc-m02.sysops.aol.com (64.12.224.135) with HTTP (WebMailUI); Fri, 03 Dec 2010 15:13:29 -0500
Message-Id: <[email protected]>
X-Spam-Flag:NO
X-AOL-SENDER: [email protected]

You can see how I XXXX'd out any of my email addy information. Depending the the email provider you are using, you might have to click on 'See Original' or 'See Complete/Full Header' or something like that to get this information. With the header information you can usually tell where the email was actually sent from. (With gmail and a couple others you can't as they strip the sender's IP.)

In the above example, if you take that complete header, (copy) and then paste it here: http://www.iptrackeronline.com/header.php

You will see this:

ipTRACKERonline.com wrote:

Header Analysis Quick Report Originating IP: 41.138.185.37 Originating ISP: Visafone Communications Limited City: Lagos Country of Origin: Nigeria * For a complete report on this email header goto ipTRACKERonline

Which shows it was sent from Lagos. Not the UK like the scammer is tell me they are from. Wink

Hope this helps a bit. And you can see from this thread here: http://forum.419eater.com/forum/viewtopic.php?t=194959 , I am going to send a report to kill the fake site your scammer sent you. If you follow it, I will report when it is dead. Very Happy

Hello I'm New here! Joined: 07 Oct 2011 Posts: 1

okay so i'm new to this and know very little about catching a scammer. Yes and I notice this is a bit of an old scam but had I known better I could have saved my a$$. This scam is STILL going on, on craigslist. It sucks, but the emails that were posted by someone else are almost identical to the ones I got. I know almost nothing on this business but I could help you catch them so that someone else doesn't fall for it and lose their money like I did.

Posted: Fri Oct 07, 2011 1:41 pm

Hey sleep with one eye open, welcome to Eater!

Did you lose money to these scammers? If so, I am very sorry. Sad

Like previously posted, there is usually little we can do to get them caught -- many times they aren't in the country the emails were sent from or there isn't enough evidence.

If you still have any of the emails/contact details, please feel free to post them up here, with the headers preferably. You can also post them up over at our sister site, www.scamwarners.com. This will help others know it is a scam and might prevent other victims.

Royal Mail concert ticket scam	View next topic View previous topic