SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 Royal Mail concert ticket scam

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
DoraTheExplorer
Anonymous


Joined: 18 Nov 2008
Posts: 9264
Location: Magnolia, Mississippi


PostPosted: Fri Dec 03, 2010 8:24 pm Reply with quoteBack to top

Hey radedi,

First, if the scammer has your RL contact details, just drop him/her. Just tell them you are no longer interested in the tickets (or whatever) and don't email them back.

Second, there is very little you can do with online scammers as far as getting them caught. Many times they aren't in the country they say they are in and even if they are, they are never using their real names and the such. Believe me, just getting the fake site shut down will cause the scammer problems and cost them money (they pay other scammers to make the fake sites), so you have done a good thing -- be happy about that!

The header is the part of the email that looks like this:

Quote:
Delivered-To: [email protected]
Received: by 10.151.51.2 with SMTP id d2cs19536ybk;
Fri, 3 Dec 2010 12:13:50 -0800 (PST)
Received: by 10.229.74.147 with SMTP id u19mr1604726qcj.214.1291407230305;
Fri, 03 Dec 2010 12:13:50 -0800 (PST)
Return-Path: <[email protected]>
Received: from imr-db02.mx.aol.com (imr-db02.mx.aol.com [205.188.91.96])
by mx.google.com with ESMTP id r36si4721575qcs.145.2010.12.03.12.13.50;
Fri, 03 Dec 2010 12:13:50 -0800 (PST)
Received-SPF: neutral (google.com: 205.188.91.96 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=205.188.91.96;
Authentication-Results: mx.google.com; spf=neutral (google.com: 205.188.91.96 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from imo-ma04.mx.aol.com (imo-ma04.mx.aol.com [64.12.78.139])
by imr-db02.mx.aol.com (8.14.1/8.14.1) with ESMTP id oB3KDZGr032155
for <[email protected]>; Fri, 3 Dec 2010 15:13:35 -0500
Received: from [email protected]
by imo-ma04.mx.aol.com (mail_out_v42.9.) id o.f7e.6990733 (43993)
for <[email protected]>; Fri, 3 Dec 2010 15:13:32 -0500 (EST)
Received: from smtprly-dc02.mx.aol.com (smtprly-dc02.mx.aol.com [205.188.170.2]) by cia-dd06.mx.aol.com (v129.7) with ESMTP id MAILCIADD062-d35b4cf94f6a169; Fri, 03 Dec 2010 15:13:31 -0500
Received: from web-mmc-m02 (web-mmc-m02.sim.aol.com [64.12.224.135]) by smtprly-dc02.mx.aol.com (v129.5) with ESMTP id MAILSMTPRLYDC024-d35b4cf94f6a169; Fri, 03 Dec 2010 15:13:30 -0500
References: <[email protected]>
To: [email protected]
Subject: Attn: XXXXXXX: Letter Of Notification: FROM EFCC OFFICE
Date: Fri, 03 Dec 2010 15:13:29 -0500
X-AOL-IP: 41.138.185.37
In-Reply-To: <[email protected]>
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: [email protected]ices.com
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8CD613DAFBB645A_1354_C173_web-mmc-m02.sysops.aol.com"
X-Mailer: Mail.com Webmail 32992-STANDARD
Received: from 41.138.185.37 by web-mmc-m02.sysops.aol.com (64.12.224.135) with HTTP (WebMailUI); Fri, 03 Dec 2010 15:13:29 -0500
Message-Id: <[email protected]>
X-Spam-Flag:NO
X-AOL-SENDER: [email protected]


You can see how I XXXX'd out any of my email addy information. Depending the the email provider you are using, you might have to click on 'See Original' or 'See Complete/Full Header' or something like that to get this information. With the header information you can usually tell where the email was actually sent from. (With gmail and a couple others you can't as they strip the sender's IP.)

In the above example, if you take that complete header, (copy) and then paste it here: http://www.iptrackeronline.com/header.php

You will see this:

ipTRACKERonline.com wrote:
Header Analysis Quick Report<br>Originating IP: 41.138.185.37<br>Originating ISP: Visafone Communications Limited<br> City: Lagos<br>Country of Origin: Nigeria<br>* For a complete report on this email header goto ipTRACKERonline


Which shows it was sent from Lagos. Not the UK like the scammer is tell me they are from. Wink

Hope this helps a bit. And you can see from this thread here: http://forum.419eater.com/forum/viewtopic.php?t=194959 , I am going to send a report to kill the fake site your scammer sent you. If you follow it, I will report when it is dead. Very Happy

_________________
United StatesCanadaUnited KingdomNigeriaGhanaBeninMalaysiaSouth AfricaSwitzerlandTogoChinaSpainMadagascar FlagBulgeriaUnited Arab EmiratesUkraineUnited NationsItalyLibya FlagCzech Republic
NetherlandsNew ZealandRussiaSaudi ArabiaAustraliaBahamas, TheIvory CoastDenmarkBelgiumHong KongFranceGermanyRomaniaBahamas, TheNew ZealandcameroonBurkina Faso x 2714
Easter Egg 2012 Cellphone Closed lad accounts Mortar pony pony Nurse Nastys Audi TT Nurse Nastys Audi TT Goat Tattoo Mc Fry Elite Ninja Team Member
Safari Vcamera Paga John Safari Vcamera Paga Willie Safari Vcamera Paga Kingsley Safari James

Safari The Dynamic Duo Travels! Vcamera Sand Timer
View user's profileSend private message
sleep with one eye open
Hello I'm New here!


Joined: 07 Oct 2011
Posts: 1


PostPosted: Fri Oct 07, 2011 12:19 am Reply with quoteBack to top

okay so i'm new to this and know very little about catching a scammer. Yes and I notice this is a bit of an old scam but had I known better I could have saved my a$$. This scam is STILL going on, on craigslist. It sucks, but the emails that were posted by someone else are almost identical to the ones I got. I know almost nothing on this business but I could help you catch them so that someone else doesn't fall for it and lose their money like I did.
View user's profileSend private message
DoraTheExplorer
Anonymous


Joined: 18 Nov 2008
Posts: 9264
Location: Magnolia, Mississippi


PostPosted: Fri Oct 07, 2011 1:41 pm Reply with quoteBack to top

Hey sleep with one eye open, welcome to Eater!

Did you lose money to these scammers? If so, I am very sorry. Sad

Like previously posted, there is usually little we can do to get them caught -- many times they aren't in the country the emails were sent from or there isn't enough evidence.

If you still have any of the emails/contact details, please feel free to post them up here, with the headers preferably. You can also post them up over at our sister site, www.scamwarners.com. This will help others know it is a scam and might prevent other victims.

_________________
United StatesCanadaUnited KingdomNigeriaGhanaBeninMalaysiaSouth AfricaSwitzerlandTogoChinaSpainMadagascar FlagBulgeriaUnited Arab EmiratesUkraineUnited NationsItalyLibya FlagCzech Republic
NetherlandsNew ZealandRussiaSaudi ArabiaAustraliaBahamas, TheIvory CoastDenmarkBelgiumHong KongFranceGermanyRomaniaBahamas, TheNew ZealandcameroonBurkina Faso x 2714
Easter Egg 2012 Cellphone Closed lad accounts Mortar pony pony Nurse Nastys Audi TT Nurse Nastys Audi TT Goat Tattoo Mc Fry Elite Ninja Team Member
Safari Vcamera Paga John Safari Vcamera Paga Willie Safari Vcamera Paga Kingsley Safari James

Safari The Dynamic Duo Travels! Vcamera Sand Timer
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



** Find out information about your IP address **


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT