SmartFeedSmartFeed          



WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 Need a baiter

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
bob_r0x0r
Hello I'm New here!


Joined: 01 Oct 2012
Posts: 4


PostPosted: Sat Oct 06, 2012 12:30 am Reply with quoteBack to top

Hello all of you smart vigilantes. I come to you with a story:

My 72 year old grandmother who was new to computers joined seniorpeoplemeet.com and got hit by not just 1, but 2 love scammers. At least I think. She has been chatting with them non-stop for over 8 months, and my family has over $5000 missing. She has borrowed from friends, family, and various accounts. At the moment she is trying to sell her house so that this "wonderful man" (ugh -_-) will giver $7,000,000.

Using my quick wits and background in Linux, I have obtained the scammer's IP, which is in lagos, and from the usernames I have located another scam of his. I am a busy mechanic and I would love to get this guy myself, but I am not a professional baiter. If you would like any information to bait him then please PM me, I do not want him to know I know this much.

The big issue I am having now is that my grandmother does not believe me no matter how much I show her, even when I make a new account and talk to the same guys. I am about to just steal her computer, I am not going to sit idly, and I don't care about what she thinks about me because I'd rather see her safe. She is senile and I just need some kind of idea on how to convince her. These guys have paid a couple of her bills and she thinks it's real. My mother is looking into getting power of attourney but that is looking like it will take about a month to get going.

I've gotten one of them to leave her alone; I made him think I was a scammer myself, and I 'hacked' into my grandmother's computer posing as the other scammer. Called him a mugu and that 'this one's mine' He tried a couple other times but every time he tried contact again I intercepted. -Case closed on that one.

The one she is talking to now is using a yahoo ID and a google search of the U/N leads to the worst site I have ever seen before in my life. Link will be provided if requested. I just have a feeling that this guy has been at it for quite some time and that the scammers might check this site.

This site is some kind of Nigerian construction company, and I think that it would be perfect to bait. I do not want this guy to disappear, I want to make him suffer, and if the only way I can do this is by simple annoyance then that's fine.

I'd like to get one or two of you more experienced baiters to help me out here, Unfortunately I am just a working student, so monetary help is out of the question completely. However I'd like to do some coding work to help out scambaiting as a whole, and I think that would be more than fair.l

Either reply to the thread, or PM, I'm at my wits end and have exhausted my 'toolbox' of ideas.
View user's profileSend private message
vonpaso xlura
Different and Distinctive


Joined: 10 Apr 2011
Posts: 12777
Location: Bertcad, Lojbanistan


PostPosted: Sat Oct 06, 2012 1:32 am Reply with quoteBack to top

Please ask the warners at Scamwarners; they know how to deal with victims. I don't have much experience with romance scammers.

If you get an original script out of him, post it in Surplus and the appropriate section of Scamwarners and post in Hints and Tips or Love and Dating. Love and Dating is accessible to outsiders, but Hints and Tips is not.

Do you have root access to your grandma's box, or an ordinary login account, or did you run Linux commands somewhere else?

_________________
Easter Egg 2012 United Kingdom×12 United States×3 Russia×3 CanadaNigeriaGermanyMalaysiaNetherlandsAustraliaTogo
United KingdomUnited KingdomCanada unwashed
Closed lad accounts×75
×110
Safari Accra - SH Cotonou
This is very frustrating ... their said they is know transaction ... I feel very ebasared right now ... I feel very dissapoited again
YOU CAN'T EVEN KEEP YOUR BULLSHIT SCAM STORIES STRAIGHT!! YOU AREN'T EVEN A SMART CRIMINAL!! YOU ARE GOING TO PRISON!!
E NO GO BETTER FOR YOUR MAMA NAA ME U DEY WYNE ABI GOD PUNISHED YOU AND YOUR GENERATION
you are a fake people so do not ever write to me again.
Am mad at you right now ... Am tired of your questions ... Am sick and tire you and your bank
Nigerian pig . go swallow a grenade idiot. Boko Haram will solve your problem idiot .
View user's profileSend private messageSend e-mail
bob_r0x0r
Hello I'm New here!


Joined: 01 Oct 2012
Posts: 4


PostPosted: Sat Oct 06, 2012 2:08 am Reply with quoteBack to top

It was a windows box, I built the machine for her. But had used metrepeter because it was available on Backtrack 5. Perfectly legal to use on machines you have permission, which I got from her. Using Reverse_TCP just installed RemoteVNC and a common keylogger. I also forwarded everything to my mother for her use to give to a lawyer.

There wasn't anything stopping me from making this account, so I assume it it the same with them, I've already got the thread and all...

http://clark-jason54.wix.com/wwwskyscriper

This is the site. It's pretty bad. (-_-)
He is using the frank moore address to talk with her online, I was figuring making another email and 'applying' to have him build something, but I think I'd probably just mess that one up.

I've read a bunch of these forums in the last few days. I know the money's gone. I just want to see this guy squirm a little.
View user's profileSend private message
rattlesnake
Master of Master Baiters


Joined: 30 Mar 2012
Posts: 949


PostPosted: Sat Oct 06, 2012 2:20 am Reply with quoteBack to top

Sorry to hear about your grandmother. Thankfully you were able to catch it before she lost even more money.

_________________
Closed lad accounts x59 x5 Easter Egg 2013
Safari The Chairman's Xmas Parti 2012 Lagos-Natitingou w/Team Sley
Sand Timer William Brent Christian 8/2012 - present 'WE ARE STILL WAITING'
'i hate the fact that i come online everyday to send you emails and all i get is disappointment every time' - Silk
'keep your money ok. we dont need it. have a bless day' - Barrister Douglas Brown
'YOU ARE A BASTARD AND A FOOL' - Dr. Ugo Peters
'I WANT TO LET YOU KNOW THAT THE MAN IN THE WESTERN UNION IS A CRIMINAL AND A LOW LIFE CHEAT' - Dr. Ugo Peters
'tell your stupid prostitute step dauther never to play with the tail of a tigger' - Capt. Anita George (US Army)
View user's profileSend private messageSkype Name
the vampire
Baiting Guru


Joined: 27 Jul 2008
Posts: 3601
Location: playmobil land


PostPosted: Sat Oct 06, 2012 5:36 am Reply with quoteBack to top

Welcome here bob_r0x0r

As already said, please post the scam emails on our sister site http://www.scamwarners.com/forum/index.php and ask for help there.

_________________
www.scamwarners.com

I'm always right! - Branwen
GoatEaster Egg Penguin Pole Dancer Purple Flower Mc Fry
View user's profileSend private message
buried under 419 emails
Baiting Guru


Joined: 10 Oct 2003
Posts: 4104


PostPosted: Sat Oct 06, 2012 7:16 am Reply with quoteBack to top

She is getting a power of attorney? What kind? There is something called a “durable power of attorney”. Never, NEVER let her sign one of these things, unless everyone trusts them completely and with their life.

I know someone who signed one of these things and the people he gave it to, emptied a bank account, and stole 2 million in property, just because they wanted to. The only reason the victim was not penniless was his other banks question the power of attorney.

Finally if your in the USA, we have elder abuse programs (other countries probably have something like this), and they might be able to give you ideas on how you can help with your mom. Across the globe, is seems there are a million scammers who prey on people because they are easy targets.

_________________
"my dear,
you realy made me a fool which i dont expected from you" mr malambo

"Any money you send to Africa to receive your payment is at your own risk " David Mark


over 1,000 fakes deaded since Oct 2005. This is my current rampage! Mortar x6 Easter Egg 2011 Purple Flower
View user's profileSend private message
agnomen
Baiting Guru


Joined: 16 Apr 2012
Posts: 2265
Location: Staring at my slice of ocean


PostPosted: Sat Oct 06, 2012 10:53 am Reply with quoteBack to top

Hi bob_r0x0r I had a look at his poor website and sent a request for a quotation via his contact page, although it did say “sender email not sent” I will wait and see if I get a response.

I’m not an experienced baiter but if enough of us mail him we can take up a lot of and waste his time and money.

_________________
Closed lad accounts x44

Closed lad accounts x21 from 1st bait and counting Sand Timer Sand Timer Sand Timer Sand Timer Apr 2012 - present 4 years months (includes 3 month hiatus due to boredom) "circling in one circle over one year now something must be going wrong”
x5 Easter Egg 2013
Mortar x1
View user's profileSend private messageSkype Name
bob_r0x0r
Hello I'm New here!


Joined: 01 Oct 2012
Posts: 4


PostPosted: Sun Oct 07, 2012 12:01 am Reply with quoteBack to top

Yes. My mother, who is my grandmother's daughter, is seeking the power-of-attourney. My mother is handling the missing funds and all of that footwork.

I went against my better judgment and sent off a fake email, I did it from within yahoo email, never used the site. Figured it wouldn't even deliver properly Razz. No reply yet.

I've also locked-down her PC and gave her a printout of a post over here http://www.romancescam.com/forum/viewtopic.php?f=3&t=48326 , it's the same story and same pictures. That finally convinced her that he was a scammer. I will be going through her harddrive with a forensics kit, looking for any kind of info of a transaction.

Thanks for the assist agnomen, If you recieve anything then please pursue it with extreme prejudice, I will do the same.

Edit here are all the emails I have aquired, they're RAW and I am not removing her name.
Code:
Re: PAY IRS TAX OF $700,000
Hide Details
FROM:
IRS NEWYORK
TO:
Jxxxxxx
Message flagged
Saturday, September 29, 2012 8:07 AM
I have been busy with lot of international inflow. Here is the email and phone number for you to call.
[email protected]
+19173832220
 
On Sat, Sep 29, 2012 at 1:48 AM, Jxxxxx <[email protected]> wrote:
please send me a telephone number to contact you., thank you
 

From: IRS NEWYORK <[email protected]>
To: Jxxxx <[email protected]>
Sent: Thursday, September 27, 2012 10:55 AM
Subject: Re: PAY IRS TAX OF $700,000
 
BANK NAME::::::::SOCIETE GENERALE BANK NEWYORK ,ETATS UNIS NY.
SWIFT CODE:::::::::SOGEUS33.USA.
CREDIT TO::::::::ORA BANK
BANK ADDRESS::::::::NO.01 BP 2700
SWIFT CODE:::::::::: FIBBBJBJ
ACCOUNT NUMBER::::::.20058 01000 13518139640.
BENEFICIARY::::::::::. STE INTERNATIONALE EXCHANGES.
 
 
 
Reply to:
Send
 
 
 
=-=-==-=-=-=
 

From IRS NEWYORK Sat Sep 29 05:06:59 2012
X-Apparently-To: [email protected] via 98.138.211.180; Sat, 29 Sep 2012 05:07:00 -0700
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 209.85.220.42 as permitted sender)
 
X-Originating-IP: [209.85.220.42]
Authentication-Results: mta1054.mail.ac4.yahoo.com  from=gmail.com; domainkeys=neutral (no sig);  from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO mail-pa0-f42.google.com) (209.85.220.42)
  by mta1054.mail.ac4.yahoo.com with SMTP; Sat, 29 Sep 2012 05:06:59 -0700
Received: by padfa1 with SMTP id fa1so2412969pad.15
        for <[email protected]>; Sat, 29 Sep 2012 05:06:59 -0700 (PDT)

MIME-Version: 1.0
Received: by 10.66.77.168 with SMTP id t8mr24134659paw.28.1348920419043; Sat,
 29 Sep 2012 05:06:59 -0700 (PDT)
Received: by 10.68.51.163 with HTTP; Sat, 29 Sep 2012 05:06:59 -0700 (PDT)
In-Reply-To: <[email protected]>
References: <[email protected]om>
 <[email protected]>
 <[email protected]om>
 <[email protected]>
Date: Sat, 29 Sep 2012 13:06:59 +0100
Message-ID: <[email protected]om>
Subject: Re: PAY IRS TAX OF $700,000
From: IRS NEWYORK <[email protected]>
To: Jxxxxx <[email protected]>
Content-Type: multipart/alternative; boundary=f46d042f9c0668488904cad602b1
Content-Length: 4290
 
 
 
--=-=-=-=-
 

BANK NAME::::::::SOCIETE GENERALE BANK NEWYORK ,ETATS UNIS NY.
SWIFT CODE:::::::::SOGEUS33.USA.
CREDIT TO::::::::ORA BANK
BANK ADDRESS::::::::NO.01 BP 2700
SWIFT CODE:::::::::: FIBBBJBJ
ACCOUNT NUMBER::::::.20058 01000 13518139640.
BENEFICIARY::::::::::. STE INTERNATIONALE EXCHANGES.
 
 
 
-=-=-=--=-=
 
 
 
CORRESPONDENT BANK : CITIBANK NEWYORK,
 SWIFT CODE         : CITIUS33
ABA NO             : 021000089
FOR CREDIT OF      : GUARANTY TRUST BANK PLC LAGOS
 SWIFT CODE         : GTBINGLA,
ACCOUNT NUMBER     : 36129295
FOR FINAL CREDIT OF : KUJORE  AGBOOLA OLADAPO
BENEFICIARY ACCOUNT NUMBER : 09034422952210
 
 
 
 
 
From Gary Hutzel Thu Sep 20 15:04:35 2012
X-Apparently-To: [email protected] via 98.138.211.179; Thu, 20 Sep 2012 15:04:36 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
 
Received: from [98.138.88.239] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 20 Sep 2012 22:04:35 -0000
Received: from [127.0.0.1] by omp1039.mail.ne1.yahoo.com with NNFMP; 20 Sep 2012 22:04:35 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 25578 invoked by uid 60001); 20 Sep 2012 22:04:35 -0000
To:Subject:To:In-Reply-To:MIME-Version:Content-Type;


Received: from [41.220.69.82] by web121101.mail.ne1.yahoo.com via HTTP; Thu, 20 Sep 2012 15:04:35 PDT
X-Mailer: YahooMailWebService/0.8.121.416
References: <[email protected]om> <[email protected]>
Message-ID: <1348178675.99801.YahooMailNe[email protected]>
Date: Thu, 20 Sep 2012 15:04:35 -0700 (PDT)
From: Gary Hutzel <[email protected]>
Reply-To: Gary Hutzel <[email protected]>
Subject: send $10,000 to this account
To: Jxxxxxx <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-876742037-1844674648-1348178675=:99801"
Content-Length: 3466
 
 
 
-=-=-=-=-=-=-=-
 

 
Guaranty Trust Bank eLectronic Notification Service (GeNS)
 
Please be informed that outward transfer(s) of 70,000,000.00 US Dollar just occured with the following details/charges;;
 
Account Number  : 901-44541520-2-1-0
Beneficiary  : JOHANNA S. DABICA
Total FX Comm : 700,000.00 US Dollar
 Total FX Vat : 35,000 US Dollar
 Swift/Telex charge : 18.77 US Dollar
 Value Date : 19/09/2012
 Purpose Of Transfer : GOLD PAYMENT- GARY HUTZEL
 
Thank you for choosing Guaranty Trust Bank plc
 
 
   
 
 
NB:
Our notification service sent this mail to you using a default setting and the information  supplied to us.
 
 
 
From Guaranty Trust Bank Wed Sep 19 10:53:53 2012
X-Apparently-To: [email protected] via 98.138.211.180; Wed, 19 Sep 2012 10:53:54 -0700
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 209.85.214.53 as permitted sender)

X-Originating-IP: [209.85.214.53]
Authentication-Results: mta1323.mail.bf1.yahoo.com  from=gmail.com; domainkeys=neutral (no sig);  from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO mail-bk0-f53.google.com) (209.85.214.53)
  by mta1323.mail.bf1.yahoo.com with SMTP; Wed, 19 Sep 2012 10:53:54 -0700
Received: by mail-bk0-f53.google.com with SMTP id j4so648777bkw.40
        for <[email protected]>; Wed, 19 Sep 2012 10:53:53 -0700 (PDT)

         
MIME-Version: 1.0
Received: by 10.204.7.136 with SMTP id d8mr524727bkd.85.1348077233574; Wed, 19
 Sep 2012 10:53:53 -0700 (PDT)
Reply-To: [email protected]
Sender: [email protected]
Received: by 10.204.170.5 with HTTP; Wed, 19 Sep 2012 10:53:53 -0700 (PDT)
Date: Wed, 19 Sep 2012 18:53:53 +0100
X-Google-Sender-Auth: 1Jf6c8ZqQuMBYLnR5iJM5sPSgkU
Message-ID: <[email protected]om>
Subject: OUTWARD TRANSFER TRANSACTIONS NOTIFICATION
From: Guaranty Trust Bank <[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary=00151758a768a3114204ca11b09b
Content-Length: 6264
 

-=-==-=-=-=-=-
 

From Frank Moore Thu Aug 30 17:22:37 2012
X-Apparently-To: [email protected] via 98.138.211.179; Thu, 30 Aug 2012 17:23:25 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
 
 Z2UvanBlZwMDMjQy

X-Originating-IP: [98.138.91.103]
Authentication-Results: mta1386.mail.mud.yahoo.com  from=yahoo.com; domainkeys=pass (ok);  from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1  (HELO nm10-vm6.bullet.mail.ne1.yahoo.com) (98.138.91.103)
  by mta1386.mail.mud.yahoo.com with SMTP; Thu, 30 Aug 2012 17:23:24 -0700
Received: from [98.138.90.56] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 31 Aug 2012 00:22:38 -0000
Received: from [98.138.89.234] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 31 Aug 2012 00:22:38 -0000
Received: from [127.0.0.1] by omp1049.mail.ne1.yahoo.com with NNFMP; 31 Aug 2012 00:22:38 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 31478 invoked by uid 60001); 31 Aug 2012 00:22:38 -0000

  s=s1024; d=yahoo.com;
  h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
 
Message-ID: <[email protected]>
Date: Thu, 30 Aug 2012 17:22:37 -0700 (PDT)
From: Frank Moore <[email protected]>
Reply-To: Frank Moore <[email protected]>
Subject: My Drivers Lincence
To: "[email protected]" <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="1517483800-185154927-1346372557=:28345"
Content-Length: 248271


Header redacted to prevent forum blowout, and victim details removed. We do not allow the posting of such personal information on this site. For one thing you are just posting your grans details so that any passing lad can try his luck!!-MM
View user's profileSend private message
buried under 419 emails
Baiting Guru


Joined: 10 Oct 2003
Posts: 4104


PostPosted: Sun Oct 07, 2012 7:09 am Reply with quoteBack to top

I was reading your post and the name “SOCIETE GENERALE BANK” stood out we have a bank in the fake bank database with that name (it might not be tied to this scammer though). It has been impossible to kill. Most hosters are great, and remove offending sites relatively quickly.

Baiting is one aspect of this game.. We also have killing domains and scamwarners both are effective.

If you have scam emails with headers, remove the personal information. Then post them on scam warners. I’ve numerous responses on even the most simplistic scams asking “is this a scam”. I few days back I got one on a yahoo lottery, asking is it a scam.

I mentioned site killing it cost mugu money, time and if it happens enough it erodes their credibility. Credibility is important, it saves a few people. Our kill rate is not 100 percent, but its still good.

I am hoping the proper authorities have also been notified, Law Enforcement hold more power than all of us. That could help too.

Well these are the best ways to screw with scammers. The story of your families problems, make me realize that my goals of driving mugus insane or have them in jail isn’t crazy at all,

_________________
"my dear,
you realy made me a fool which i dont expected from you" mr malambo

"Any money you send to Africa to receive your payment is at your own risk " David Mark


over 1,000 fakes deaded since Oct 2005. This is my current rampage! Mortar x6 Easter Egg 2011 Purple Flower
View user's profileSend private message
bob_r0x0r
Hello I'm New here!


Joined: 01 Oct 2012
Posts: 4


PostPosted: Sat Oct 13, 2012 6:54 pm Reply with quoteBack to top

The mugu has left her alone, but the second one has been a problem lately, she is *still* talking to him, however, She is now aware and I believe she's just wasting his time and enjoying someone to talk to I guess.

I'm still keeping an eye.

But I have got a reply!

Quote:
Thanks for your message.. You said you want me to come dawn there for a contract right ?? But why don't you come dawn here so we discus the business ..


Header I.P. 41.71.171.8 Lagos!

I'll figure something out... anyone have any good ideas for a fake business deal/major waste of time?
View user's profileSend private message
BearSeason
Elite Baiter


Joined: 19 Jun 2011
Posts: 1066


PostPosted: Sun Oct 21, 2012 3:55 am Reply with quoteBack to top

^PM sent.

_________________
THIS IS TO INFORM YOU THAT WE ARE DONE WITH ALL THIS YOUR CHILD'S PLAY...PLEASE IT IS ENOUGH. - Jeff
i can believe that all this will be happened to me why me why me / all my future had scatted - Rechel
you are a man that did not go to the four wall of any school at all. - Attorney Sarah Nan
U 2 go fuck yourself ! I don't need the money and stop emailing me please / BASTARD!!!! / fuck ur family
<a href="/forum/donate.php">Where all the cool kids are.</a>
Closed lad accounts x 47 Mortar x 2 x 2 Easter Egg 2013
View user's profileSend private messageSkype Name
Captain Jack Sparrow
Master Baiter


Joined: 14 Jul 2012
Posts: 247


PostPosted: Sun Oct 21, 2012 7:31 am Reply with quoteBack to top

Could you send me a link to the offending website, please?

_________________
SpainUnited KingdomUnited KingdomUnited KingdomBeninBeninTogoTogoGhanaCambodia FlagCambodia FlagCayman IslandsBahamas, TheBahamas, TheUnited States
Closed lad accountsClosed lad accountsClosed lad accountsClosed lad accountsClosed lad accountsClosed lad accountsClosed lad accounts
pyramid
Quote:
Am very great to hear from you and your continuous question asking.

Quote:
i will send my boys to fulk your family up
View user's profileSend private message
Joker
*** BANNED ***


Joined: 26 Jul 2012
Posts: 1123


PostPosted: Mon Oct 22, 2012 2:07 pm Reply with quoteBack to top

Can I play? Twisted Evil

_________________
All warfare is based on deception - Sun Tzu, The Art of War
لئيم كافر
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



** Find out information about your IP address **


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT