Author |
Message |
bob_r0x0r
Hello I'm New here!
Joined: 01 Oct 2012
Posts: 4
|
Posted:
Sat Oct 06, 2012 12:30 am |
|
Hello all of you smart vigilantes. I come to you with a story:
My 72 year old grandmother who was new to computers joined seniorpeoplemeet.com and got hit by not just 1, but 2 love scammers. At least I think. She has been chatting with them non-stop for over 8 months, and my family has over $5000 missing. She has borrowed from friends, family, and various accounts. At the moment she is trying to sell her house so that this "wonderful man" (ugh -_-) will giver $7,000,000.
Using my quick wits and background in Linux, I have obtained the scammer's IP, which is in lagos, and from the usernames I have located another scam of his. I am a busy mechanic and I would love to get this guy myself, but I am not a professional baiter. If you would like any information to bait him then please PM me, I do not want him to know I know this much.
The big issue I am having now is that my grandmother does not believe me no matter how much I show her, even when I make a new account and talk to the same guys. I am about to just steal her computer, I am not going to sit idly, and I don't care about what she thinks about me because I'd rather see her safe. She is senile and I just need some kind of idea on how to convince her. These guys have paid a couple of her bills and she thinks it's real. My mother is looking into getting power of attourney but that is looking like it will take about a month to get going.
I've gotten one of them to leave her alone; I made him think I was a scammer myself, and I 'hacked' into my grandmother's computer posing as the other scammer. Called him a mugu and that 'this one's mine' He tried a couple other times but every time he tried contact again I intercepted. -Case closed on that one.
The one she is talking to now is using a yahoo ID and a google search of the U/N leads to the worst site I have ever seen before in my life. Link will be provided if requested. I just have a feeling that this guy has been at it for quite some time and that the scammers might check this site.
This site is some kind of Nigerian construction company, and I think that it would be perfect to bait. I do not want this guy to disappear, I want to make him suffer, and if the only way I can do this is by simple annoyance then that's fine.
I'd like to get one or two of you more experienced baiters to help me out here, Unfortunately I am just a working student, so monetary help is out of the question completely. However I'd like to do some coding work to help out scambaiting as a whole, and I think that would be more than fair.l
Either reply to the thread, or PM, I'm at my wits end and have exhausted my 'toolbox' of ideas. |
|
|
|
|
vonpaso xlura
Baiting Guru
Joined: 10 Apr 2011
Posts: 13781
Location: Bertcad, Lojbanistan
|
Posted:
Sat Oct 06, 2012 1:32 am |
|
Please ask the warners at Scamwarners; they know how to deal with victims. I don't have much experience with romance scammers.
If you get an original script out of him, post it in Surplus and the appropriate section of Scamwarners and post in Hints and Tips or Love and Dating. Love and Dating is accessible to outsiders, but Hints and Tips is not.
Do you have root access to your grandma's box, or an ordinary login account, or did you run Linux commands somewhere else? |
_________________ ×12 ×3 ×3
unwashed
×163
×186
Accra - SH Cotonou
you are a fake people so do not ever write to me again.
Am mad at you right now ... Am tired of your questions ... Am sick and tire you and your bank
Nigerian pig . go swallow a grenade idiot. Boko Haram will solve your problem idiot .
you are big fool by send a fake payment information and never you contact me again asshole .
your passgae bearing your ATM CATD ... Ant Terrorist Certificate ... legal verterbrate ... expartiate your meaning ... gets to your dwaignted address ... successful ofghw transfer |
|
|
|
bob_r0x0r
Hello I'm New here!
Joined: 01 Oct 2012
Posts: 4
|
Posted:
Sat Oct 06, 2012 2:08 am |
|
It was a windows box, I built the machine for her. But had used metrepeter because it was available on Backtrack 5. Perfectly legal to use on machines you have permission, which I got from her. Using Reverse_TCP just installed RemoteVNC and a common keylogger. I also forwarded everything to my mother for her use to give to a lawyer.
There wasn't anything stopping me from making this account, so I assume it it the same with them, I've already got the thread and all...
http://clark-jason54.wix.com/wwwskyscriper
This is the site. It's pretty bad. (-_-)
He is using the frank moore address to talk with her online, I was figuring making another email and 'applying' to have him build something, but I think I'd probably just mess that one up.
I've read a bunch of these forums in the last few days. I know the money's gone. I just want to see this guy squirm a little. |
|
|
|
|
rattlesnake
Master of Master Baiters
Joined: 30 Mar 2012
Posts: 949
|
Posted:
Sat Oct 06, 2012 2:20 am |
|
Sorry to hear about your grandmother. Thankfully you were able to catch it before she lost even more money. |
_________________ x59 x5
The Chairman's Xmas Parti 2012 Lagos-Natitingou w/Team Sley
'WE ARE STILL WAITING'
'i hate the fact that i come online everyday to send you emails and all i get is disappointment every time' - Silk
'keep your money ok. we dont need it. have a bless day' - Barrister Douglas Brown
'YOU ARE A BASTARD AND A FOOL' - Dr. Ugo Peters
'I WANT TO LET YOU KNOW THAT THE MAN IN THE WESTERN UNION IS A CRIMINAL AND A LOW LIFE CHEAT' - Dr. Ugo Peters
'tell your stupid prostitute step dauther never to play with the tail of a tigger' - Capt. Anita George (US Army) |
|
|
|
the vampire
Baiting Guru
Joined: 27 Jul 2008
Posts: 3601
Location: playmobil land
|
Posted:
Sat Oct 06, 2012 5:36 am |
|
|
|
|
buried under 419 emails
Baiting Guru
Joined: 10 Oct 2003
Posts: 4747
|
Posted:
Sat Oct 06, 2012 7:16 am |
|
She is getting a power of attorney? What kind? There is something called a “durable power of attorney”. Never, NEVER let her sign one of these things, unless everyone trusts them completely and with their life.
I know someone who signed one of these things and the people he gave it to, emptied a bank account, and stole 2 million in property, just because they wanted to. The only reason the victim was not penniless was his other banks question the power of attorney.
Finally if your in the USA, we have elder abuse programs (other countries probably have something like this), and they might be able to give you ideas on how you can help with your mom. Across the globe, is seems there are a million scammers who prey on people because they are easy targets. |
_________________ "my dear,
you realy made me a fool which i dont expected from you" mr malambo
"Any money you send to Africa to receive your payment is at your own risk " David Mark
over 1,000 fakes deaded since Oct 2005. This is my current rampage! x6 |
|
|
|
agnomen
Baiting Guru
Joined: 16 Apr 2012
Posts: 2270
Location: Staring at my slice of ocean
|
Posted:
Sat Oct 06, 2012 10:53 am |
|
Hi bob_r0x0r I had a look at his poor website and sent a request for a quotation via his contact page, although it did say “sender email not sent” I will wait and see if I get a response.
I’m not an experienced baiter but if enough of us mail him we can take up a lot of and waste his time and money. |
_________________ x44
x21 from 1st bait and counting Apr 2012 - present 4 years months (includes 3 month hiatus due to boredom) "circling in one circle over one year now something must be going wrong”
x5
x1 |
|
|
|
bob_r0x0r
Hello I'm New here!
Joined: 01 Oct 2012
Posts: 4
|
Posted:
Sun Oct 07, 2012 12:01 am |
|
Yes. My mother, who is my grandmother's daughter, is seeking the power-of-attourney. My mother is handling the missing funds and all of that footwork.
I went against my better judgment and sent off a fake email, I did it from within yahoo email, never used the site. Figured it wouldn't even deliver properly . No reply yet.
I've also locked-down her PC and gave her a printout of a post over here http://www.romancescam.com/forum/viewtopic.php?f=3&t=48326 , it's the same story and same pictures. That finally convinced her that he was a scammer. I will be going through her harddrive with a forensics kit, looking for any kind of info of a transaction.
Thanks for the assist agnomen, If you recieve anything then please pursue it with extreme prejudice, I will do the same.
Edit here are all the emails I have aquired, they're RAW and I am not removing her name.
Code: |
Re: PAY IRS TAX OF $700,000
Hide Details
FROM:
IRS NEWYORK
TO:
Jxxxxxx
Message flagged
Saturday, September 29, 2012 8:07 AM
I have been busy with lot of international inflow. Here is the email and phone number for you to call.
[email protected]
+19173832220
On Sat, Sep 29, 2012 at 1:48 AM, Jxxxxx <[email protected]> wrote:
please send me a telephone number to contact you., thank you
From: IRS NEWYORK <[email protected]>
To: Jxxxx <[email protected]>
Sent: Thursday, September 27, 2012 10:55 AM
Subject: Re: PAY IRS TAX OF $700,000
BANK NAME::::::::SOCIETE GENERALE BANK NEWYORK ,ETATS UNIS NY.
SWIFT CODE:::::::::SOGEUS33.USA.
CREDIT TO::::::::ORA BANK
BANK ADDRESS::::::::NO.01 BP 2700
SWIFT CODE:::::::::: FIBBBJBJ
ACCOUNT NUMBER::::::.20058 01000 13518139640.
BENEFICIARY::::::::::. STE INTERNATIONALE EXCHANGES.
Reply to:
Send
=-=-==-=-=-=
From IRS NEWYORK Sat Sep 29 05:06:59 2012
X-Apparently-To: [email protected] via 98.138.211.180; Sat, 29 Sep 2012 05:07:00 -0700
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 209.85.220.42 as permitted sender)
X-Originating-IP: [209.85.220.42]
Authentication-Results: mta1054.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-pa0-f42.google.com) (209.85.220.42)
by mta1054.mail.ac4.yahoo.com with SMTP; Sat, 29 Sep 2012 05:06:59 -0700
Received: by padfa1 with SMTP id fa1so2412969pad.15
for <[email protected]>; Sat, 29 Sep 2012 05:06:59 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.66.77.168 with SMTP id t8mr24134659paw.28.1348920419043; Sat,
29 Sep 2012 05:06:59 -0700 (PDT)
Received: by 10.68.51.163 with HTTP; Sat, 29 Sep 2012 05:06:59 -0700 (PDT)
In-Reply-To: <[email protected]>
References: <CAOV+riF=BdJhLKv8CRmvRUaMXY_a9zCwkVP=LuiTq+qOvnoOtw@mail.gmail.com>
<[email protected]>
<CAOV+riGLQteck1jSjL+Do2RF8-Ru-8swZX4xhhnt6V8m4+YsyA@mail.gmail.com>
<[email protected]>
Date: Sat, 29 Sep 2012 13:06:59 +0100
Message-ID: <CAOV+riG1V4rZS_+W9382yb2hAUq+mMXGv9dULoXmQrqKwF9S=g@mail.gmail.com>
Subject: Re: PAY IRS TAX OF $700,000
From: IRS NEWYORK <[email protected]>
To: Jxxxxx <[email protected]>
Content-Type: multipart/alternative; boundary=f46d042f9c0668488904cad602b1
Content-Length: 4290
--=-=-=-=-
BANK NAME::::::::SOCIETE GENERALE BANK NEWYORK ,ETATS UNIS NY.
SWIFT CODE:::::::::SOGEUS33.USA.
CREDIT TO::::::::ORA BANK
BANK ADDRESS::::::::NO.01 BP 2700
SWIFT CODE:::::::::: FIBBBJBJ
ACCOUNT NUMBER::::::.20058 01000 13518139640.
BENEFICIARY::::::::::. STE INTERNATIONALE EXCHANGES.
-=-=-=--=-=
CORRESPONDENT BANK : CITIBANK NEWYORK,
SWIFT CODE : CITIUS33
ABA NO : 021000089
FOR CREDIT OF : GUARANTY TRUST BANK PLC LAGOS
SWIFT CODE : GTBINGLA,
ACCOUNT NUMBER : 36129295
FOR FINAL CREDIT OF : KUJORE AGBOOLA OLADAPO
BENEFICIARY ACCOUNT NUMBER : 09034422952210
From Gary Hutzel Thu Sep 20 15:04:35 2012
X-Apparently-To: [email protected] via 98.138.211.179; Thu, 20 Sep 2012 15:04:36 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
Received: from [98.138.88.239] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 20 Sep 2012 22:04:35 -0000
Received: from [127.0.0.1] by omp1039.mail.ne1.yahoo.com with NNFMP; 20 Sep 2012 22:04:35 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 25578 invoked by uid 60001); 20 Sep 2012 22:04:35 -0000
To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
Received: from [41.220.69.82] by web121101.mail.ne1.yahoo.com via HTTP; Thu, 20 Sep 2012 15:04:35 PDT
X-Mailer: YahooMailWebService/0.8.121.416
References: <CAN2uqFdHoiC7jADKjv63Npw9TgiWgFsBqehFuGOaM9oQZWgGDA@mail.gmail.com> <[email protected]>
Message-ID: <[email protected]>
Date: Thu, 20 Sep 2012 15:04:35 -0700 (PDT)
From: Gary Hutzel <[email protected]>
Reply-To: Gary Hutzel <[email protected]>
Subject: send $10,000 to this account
To: Jxxxxxx <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-876742037-1844674648-1348178675=:99801"
Content-Length: 3466
-=-=-=-=-=-=-=-
Guaranty Trust Bank eLectronic Notification Service (GeNS)
Please be informed that outward transfer(s) of 70,000,000.00 US Dollar just occured with the following details/charges;;
Account Number : 901-44541520-2-1-0
Beneficiary : JOHANNA S. DABICA
Total FX Comm : 700,000.00 US Dollar
Total FX Vat : 35,000 US Dollar
Swift/Telex charge : 18.77 US Dollar
Value Date : 19/09/2012
Purpose Of Transfer : GOLD PAYMENT- GARY HUTZEL
Thank you for choosing Guaranty Trust Bank plc
NB:
Our notification service sent this mail to you using a default setting and the information supplied to us.
From Guaranty Trust Bank Wed Sep 19 10:53:53 2012
X-Apparently-To: [email protected] via 98.138.211.180; Wed, 19 Sep 2012 10:53:54 -0700
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 209.85.214.53 as permitted sender)
X-Originating-IP: [209.85.214.53]
Authentication-Results: mta1323.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-bk0-f53.google.com) (209.85.214.53)
by mta1323.mail.bf1.yahoo.com with SMTP; Wed, 19 Sep 2012 10:53:54 -0700
Received: by mail-bk0-f53.google.com with SMTP id j4so648777bkw.40
for <[email protected]>; Wed, 19 Sep 2012 10:53:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.204.7.136 with SMTP id d8mr524727bkd.85.1348077233574; Wed, 19
Sep 2012 10:53:53 -0700 (PDT)
Reply-To: [email protected]
Sender: [email protected]
Received: by 10.204.170.5 with HTTP; Wed, 19 Sep 2012 10:53:53 -0700 (PDT)
Date: Wed, 19 Sep 2012 18:53:53 +0100
X-Google-Sender-Auth: 1Jf6c8ZqQuMBYLnR5iJM5sPSgkU
Message-ID: <CAN2uqFdHoiC7jADKjv63Npw9TgiWgFsBqehFuGOaM9oQZWgGDA@mail.gmail.com>
Subject: OUTWARD TRANSFER TRANSACTIONS NOTIFICATION
From: Guaranty Trust Bank <[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary=00151758a768a3114204ca11b09b
Content-Length: 6264
-=-==-=-=-=-=-
From Frank Moore Thu Aug 30 17:22:37 2012
X-Apparently-To: [email protected] via 98.138.211.179; Thu, 30 Aug 2012 17:23:25 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
Z2UvanBlZwMDMjQy
X-Originating-IP: [98.138.91.103]
Authentication-Results: mta1386.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm10-vm6.bullet.mail.ne1.yahoo.com) (98.138.91.103)
by mta1386.mail.mud.yahoo.com with SMTP; Thu, 30 Aug 2012 17:23:24 -0700
Received: from [98.138.90.56] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 31 Aug 2012 00:22:38 -0000
Received: from [98.138.89.234] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 31 Aug 2012 00:22:38 -0000
Received: from [127.0.0.1] by omp1049.mail.ne1.yahoo.com with NNFMP; 31 Aug 2012 00:22:38 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 31478 invoked by uid 60001); 31 Aug 2012 00:22:38 -0000
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
Message-ID: <[email protected]>
Date: Thu, 30 Aug 2012 17:22:37 -0700 (PDT)
From: Frank Moore <[email protected]>
Reply-To: Frank Moore <[email protected]>
Subject: My Drivers Lincence
To: "[email protected]" <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="1517483800-185154927-1346372557=:28345"
Content-Length: 248271 |
Header redacted to prevent forum blowout, and victim details removed. We do not allow the posting of such personal information on this site. For one thing you are just posting your grans details so that any passing lad can try his luck!!-MM |
|
|
|
|
buried under 419 emails
Baiting Guru
Joined: 10 Oct 2003
Posts: 4747
|
Posted:
Sun Oct 07, 2012 7:09 am |
|
I was reading your post and the name “SOCIETE GENERALE BANK” stood out we have a bank in the fake bank database with that name (it might not be tied to this scammer though). It has been impossible to kill. Most hosters are great, and remove offending sites relatively quickly.
Baiting is one aspect of this game.. We also have killing domains and scamwarners both are effective.
If you have scam emails with headers, remove the personal information. Then post them on scam warners. I’ve numerous responses on even the most simplistic scams asking “is this a scam”. I few days back I got one on a yahoo lottery, asking is it a scam.
I mentioned site killing it cost mugu money, time and if it happens enough it erodes their credibility. Credibility is important, it saves a few people. Our kill rate is not 100 percent, but its still good.
I am hoping the proper authorities have also been notified, Law Enforcement hold more power than all of us. That could help too.
Well these are the best ways to screw with scammers. The story of your families problems, make me realize that my goals of driving mugus insane or have them in jail isn’t crazy at all, |
_________________ "my dear,
you realy made me a fool which i dont expected from you" mr malambo
"Any money you send to Africa to receive your payment is at your own risk " David Mark
over 1,000 fakes deaded since Oct 2005. This is my current rampage! x6 |
|
|
|
bob_r0x0r
Hello I'm New here!
Joined: 01 Oct 2012
Posts: 4
|
Posted:
Sat Oct 13, 2012 6:54 pm |
|
The mugu has left her alone, but the second one has been a problem lately, she is *still* talking to him, however, She is now aware and I believe she's just wasting his time and enjoying someone to talk to I guess.
I'm still keeping an eye.
But I have got a reply!
Quote: |
Thanks for your message.. You said you want me to come dawn there for a contract right ?? But why don't you come dawn here so we discus the business .. |
Header I.P. 41.71.171.8 Lagos!
I'll figure something out... anyone have any good ideas for a fake business deal/major waste of time? |
|
|
|
|
BearSeason
Elite Baiter
Joined: 19 Jun 2011
Posts: 1066
|
Posted:
Sun Oct 21, 2012 3:55 am |
|
^PM sent. |
_________________ THIS IS TO INFORM YOU THAT WE ARE DONE WITH ALL THIS YOUR CHILD'S PLAY...PLEASE IT IS ENOUGH. - Jeff
i can believe that all this will be happened to me why me why me / all my future had scatted - Rechel
you are a man that did not go to the four wall of any school at all. - Attorney Sarah Nan
U 2 go fuck yourself ! I don't need the money and stop emailing me please / BASTARD!!!! / fuck ur family
<a href="/forum/donate.php">Where all the cool kids are.</a>
x 47 x 2 x 2 |
|
|
|
Captain Jack Sparrow
Master Baiter
Joined: 14 Jul 2012
Posts: 247
|
Posted:
Sun Oct 21, 2012 7:31 am |
|
Could you send me a link to the offending website, please? |
_________________
Quote: |
Am very great to hear from you and your continuous question asking. |
Quote: |
i will send my boys to fulk your family up |
|
|
|
|
Joker
*** BANNED ***
Joined: 26 Jul 2012
Posts: 1123
|
Posted:
Mon Oct 22, 2012 2:07 pm |
|
Can I play? |
_________________ All warfare is based on deception - Sun Tzu, The Art of War
لئيم كافر |
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|