Need a baiter

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 01 Oct 2012 Posts: 4

Hello all of you smart vigilantes. I come to you with a story:

My 72 year old grandmother who was new to computers joined seniorpeoplemeet.com and got hit by not just 1, but 2 love scammers. At least I think. She has been chatting with them non-stop for over 8 months, and my family has over $5000 missing. She has borrowed from friends, family, and various accounts. At the moment she is trying to sell her house so that this "wonderful man" (ugh -_-) will giver $7,000,000.

Using my quick wits and background in Linux, I have obtained the scammer's IP, which is in lagos, and from the usernames I have located another scam of his. I am a busy mechanic and I would love to get this guy myself, but I am not a professional baiter. If you would like any information to bait him then please PM me, I do not want him to know I know this much.

The big issue I am having now is that my grandmother does not believe me no matter how much I show her, even when I make a new account and talk to the same guys. I am about to just steal her computer, I am not going to sit idly, and I don't care about what she thinks about me because I'd rather see her safe. She is senile and I just need some kind of idea on how to convince her. These guys have paid a couple of her bills and she thinks it's real. My mother is looking into getting power of attourney but that is looking like it will take about a month to get going.

I've gotten one of them to leave her alone; I made him think I was a scammer myself, and I 'hacked' into my grandmother's computer posing as the other scammer. Called him a mugu and that 'this one's mine' He tried a couple other times but every time he tried contact again I intercepted. -Case closed on that one.

The one she is talking to now is using a yahoo ID and a google search of the U/N leads to the worst site I have ever seen before in my life. Link will be provided if requested. I just have a feeling that this guy has been at it for quite some time and that the scammers might check this site.

This site is some kind of Nigerian construction company, and I think that it would be perfect to bait. I do not want this guy to disappear, I want to make him suffer, and if the only way I can do this is by simple annoyance then that's fine.

I'd like to get one or two of you more experienced baiters to help me out here, Unfortunately I am just a working student, so monetary help is out of the question completely. However I'd like to do some coding work to help out scambaiting as a whole, and I think that would be more than fair.l

Either reply to the thread, or PM, I'm at my wits end and have exhausted my 'toolbox' of ideas.

Posted: Sat Oct 06, 2012 1:32 am

Please ask the warners at Scamwarners; they know how to deal with victims. I don't have much experience with romance scammers.

If you get an original script out of him, post it in Surplus and the appropriate section of Scamwarners and post in Hints and Tips or Love and Dating. Love and Dating is accessible to outsiders, but Hints and Tips is not.

Do you have root access to your grandma's box, or an ordinary login account, or did you run Linux commands somewhere else?

Hello I'm New here! Joined: 01 Oct 2012 Posts: 4

It was a windows box, I built the machine for her. But had used metrepeter because it was available on Backtrack 5. Perfectly legal to use on machines you have permission, which I got from her. Using Reverse_TCP just installed RemoteVNC and a common keylogger. I also forwarded everything to my mother for her use to give to a lawyer.

There wasn't anything stopping me from making this account, so I assume it it the same with them, I've already got the thread and all...

http://clark-jason54.wix.com/wwwskyscriper

This is the site. It's pretty bad. (-_-)
He is using the frank moore address to talk with her online, I was figuring making another email and 'applying' to have him build something, but I think I'd probably just mess that one up.

I've read a bunch of these forums in the last few days. I know the money's gone. I just want to see this guy squirm a little.

Master of Master Baiters Joined: 30 Mar 2012 Posts: 949

Sorry to hear about your grandmother. Thankfully you were able to catch it before she lost even more money.

Posted: Sat Oct 06, 2012 5:36 am

Welcome here bob_r0x0r

As already said, please post the scam emails on our sister site http://www.scamwarners.com/forum/index.php and ask for help there.

Baiting Guru Joined: 10 Oct 2003 Posts: 4747

She is getting a power of attorney? What kind? There is something called a “durable power of attorney”. Never, NEVER let her sign one of these things, unless everyone trusts them completely and with their life.

I know someone who signed one of these things and the people he gave it to, emptied a bank account, and stole 2 million in property, just because they wanted to. The only reason the victim was not penniless was his other banks question the power of attorney.

Finally if your in the USA, we have elder abuse programs (other countries probably have something like this), and they might be able to give you ideas on how you can help with your mom. Across the globe, is seems there are a million scammers who prey on people because they are easy targets.

Posted: Sat Oct 06, 2012 10:53 am

Hi bob_r0x0r I had a look at his poor website and sent a request for a quotation via his contact page, although it did say “sender email not sent” I will wait and see if I get a response.

I’m not an experienced baiter but if enough of us mail him we can take up a lot of and waste his time and money.

Hello I'm New here! Joined: 01 Oct 2012 Posts: 4

Yes. My mother, who is my grandmother's daughter, is seeking the power-of-attourney. My mother is handling the missing funds and all of that footwork.

I went against my better judgment and sent off a fake email, I did it from within yahoo email, never used the site. Figured it wouldn't even deliver properly Razz

. No reply yet.

I've also locked-down her PC and gave her a printout of a post over here http://www.romancescam.com/forum/viewtopic.php?f=3&t=48326 , it's the same story and same pictures. That finally convinced her that he was a scammer. I will be going through her harddrive with a forensics kit, looking for any kind of info of a transaction.

Thanks for the assist agnomen, If you recieve anything then please pursue it with extreme prejudice, I will do the same.

Edit here are all the emails I have aquired, they're RAW and I am not removing her name.

Code:

Re: PAY IRS TAX OF $700,000
Hide Details
FROM:
IRS NEWYORK
TO:
Jxxxxxx
Message flagged
Saturday, September 29, 2012 8:07 AM
I have been busy with lot of international inflow. Here is the email and phone number for you to call.
[email protected]
+19173832220

On Sat, Sep 29, 2012 at 1:48 AM, Jxxxxx <[email protected]> wrote:
please send me a telephone number to contact you., thank you

From: IRS NEWYORK <[email protected]>
To: Jxxxx <[email protected]>
Sent: Thursday, September 27, 2012 10:55 AM
Subject: Re: PAY IRS TAX OF $700,000

BANK NAME::::::::SOCIETE GENERALE BANK NEWYORK ,ETATS UNIS NY.
SWIFT CODE:::::::::SOGEUS33.USA.
CREDIT TO::::::::ORA BANK
BANK ADDRESS::::::::NO.01 BP 2700
SWIFT CODE:::::::::: FIBBBJBJ
ACCOUNT NUMBER::::::.20058 01000 13518139640.
BENEFICIARY::::::::::. STE INTERNATIONALE EXCHANGES.

Reply to:
Send

=-=-==-=-=-=

From IRS NEWYORK Sat Sep 29 05:06:59 2012
X-Apparently-To: [email protected] via 98.138.211.180; Sat, 29 Sep 2012 05:07:00 -0700
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 209.85.220.42 as permitted sender)

X-Originating-IP: [209.85.220.42]
Authentication-Results: mta1054.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-pa0-f42.google.com) (209.85.220.42)
by mta1054.mail.ac4.yahoo.com with SMTP; Sat, 29 Sep 2012 05:06:59 -0700
Received: by padfa1 with SMTP id fa1so2412969pad.15
for <[email protected]>; Sat, 29 Sep 2012 05:06:59 -0700 (PDT)

MIME-Version: 1.0
Received: by 10.66.77.168 with SMTP id t8mr24134659paw.28.1348920419043; Sat,
29 Sep 2012 05:06:59 -0700 (PDT)
Received: by 10.68.51.163 with HTTP; Sat, 29 Sep 2012 05:06:59 -0700 (PDT)
In-Reply-To: <[email protected]>
References: <CAOV+riF=BdJhLKv8CRmvRUaMXY_a9zCwkVP=LuiTq+qOvnoOtw@mail.gmail.com>
<[email protected]>
<CAOV+riGLQteck1jSjL+Do2RF8-Ru-8swZX4xhhnt6V8m4+YsyA@mail.gmail.com>
<[email protected]>
Date: Sat, 29 Sep 2012 13:06:59 +0100
Message-ID: <CAOV+riG1V4rZS_+W9382yb2hAUq+mMXGv9dULoXmQrqKwF9S=g@mail.gmail.com>
Subject: Re: PAY IRS TAX OF $700,000
From: IRS NEWYORK <[email protected]>
To: Jxxxxx <[email protected]>
Content-Type: multipart/alternative; boundary=f46d042f9c0668488904cad602b1
Content-Length: 4290

--=-=-=-=-

BANK NAME::::::::SOCIETE GENERALE BANK NEWYORK ,ETATS UNIS NY.
SWIFT CODE:::::::::SOGEUS33.USA.
CREDIT TO::::::::ORA BANK
BANK ADDRESS::::::::NO.01 BP 2700
SWIFT CODE:::::::::: FIBBBJBJ
ACCOUNT NUMBER::::::.20058 01000 13518139640.
BENEFICIARY::::::::::. STE INTERNATIONALE EXCHANGES.

-=-=-=--=-=

CORRESPONDENT BANK : CITIBANK NEWYORK,
SWIFT CODE : CITIUS33
ABA NO : 021000089
FOR CREDIT OF : GUARANTY TRUST BANK PLC LAGOS
SWIFT CODE : GTBINGLA,
ACCOUNT NUMBER : 36129295
FOR FINAL CREDIT OF : KUJORE AGBOOLA OLADAPO
BENEFICIARY ACCOUNT NUMBER : 09034422952210

From Gary Hutzel Thu Sep 20 15:04:35 2012
X-Apparently-To: [email protected] via 98.138.211.179; Thu, 20 Sep 2012 15:04:36 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)

Received: from [98.138.88.239] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 20 Sep 2012 22:04:35 -0000
Received: from [127.0.0.1] by omp1039.mail.ne1.yahoo.com with NNFMP; 20 Sep 2012 22:04:35 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 25578 invoked by uid 60001); 20 Sep 2012 22:04:35 -0000
To:Subject:To:In-Reply-To:MIME-Version:Content-Type;

Received: from [41.220.69.82] by web121101.mail.ne1.yahoo.com via HTTP; Thu, 20 Sep 2012 15:04:35 PDT
X-Mailer: YahooMailWebService/0.8.121.416
References: <CAN2uqFdHoiC7jADKjv63Npw9TgiWgFsBqehFuGOaM9oQZWgGDA@mail.gmail.com> <[email protected]>
Message-ID: <[email protected]>
Date: Thu, 20 Sep 2012 15:04:35 -0700 (PDT)
From: Gary Hutzel <[email protected]>
Reply-To: Gary Hutzel <[email protected]>
Subject: send $10,000 to this account
To: Jxxxxxx <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-876742037-1844674648-1348178675=:99801"
Content-Length: 3466

-=-=-=-=-=-=-=-

Guaranty Trust Bank eLectronic Notification Service (GeNS)

Please be informed that outward transfer(s) of 70,000,000.00 US Dollar just occured with the following details/charges;;

Account Number : 901-44541520-2-1-0
Beneficiary : JOHANNA S. DABICA
Total FX Comm : 700,000.00 US Dollar
Total FX Vat : 35,000 US Dollar
Swift/Telex charge : 18.77 US Dollar
Value Date : 19/09/2012
Purpose Of Transfer : GOLD PAYMENT- GARY HUTZEL

Thank you for choosing Guaranty Trust Bank plc

NB:
Our notification service sent this mail to you using a default setting and the information supplied to us.

From Guaranty Trust Bank Wed Sep 19 10:53:53 2012
X-Apparently-To: [email protected] via 98.138.211.180; Wed, 19 Sep 2012 10:53:54 -0700
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 209.85.214.53 as permitted sender)

X-Originating-IP: [209.85.214.53]
Authentication-Results: mta1323.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-bk0-f53.google.com) (209.85.214.53)
by mta1323.mail.bf1.yahoo.com with SMTP; Wed, 19 Sep 2012 10:53:54 -0700
Received: by mail-bk0-f53.google.com with SMTP id j4so648777bkw.40
for <[email protected]>; Wed, 19 Sep 2012 10:53:53 -0700 (PDT)

MIME-Version: 1.0
Received: by 10.204.7.136 with SMTP id d8mr524727bkd.85.1348077233574; Wed, 19
Sep 2012 10:53:53 -0700 (PDT)
Reply-To: [email protected]
Sender: [email protected]
Received: by 10.204.170.5 with HTTP; Wed, 19 Sep 2012 10:53:53 -0700 (PDT)
Date: Wed, 19 Sep 2012 18:53:53 +0100
X-Google-Sender-Auth: 1Jf6c8ZqQuMBYLnR5iJM5sPSgkU
Message-ID: <CAN2uqFdHoiC7jADKjv63Npw9TgiWgFsBqehFuGOaM9oQZWgGDA@mail.gmail.com>
Subject: OUTWARD TRANSFER TRANSACTIONS NOTIFICATION
From: Guaranty Trust Bank <[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary=00151758a768a3114204ca11b09b
Content-Length: 6264

-=-==-=-=-=-=-

From Frank Moore Thu Aug 30 17:22:37 2012
X-Apparently-To: [email protected] via 98.138.211.179; Thu, 30 Aug 2012 17:23:25 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)

Z2UvanBlZwMDMjQy

X-Originating-IP: [98.138.91.103]
Authentication-Results: mta1386.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm10-vm6.bullet.mail.ne1.yahoo.com) (98.138.91.103)
by mta1386.mail.mud.yahoo.com with SMTP; Thu, 30 Aug 2012 17:23:24 -0700
Received: from [98.138.90.56] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 31 Aug 2012 00:22:38 -0000
Received: from [98.138.89.234] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 31 Aug 2012 00:22:38 -0000
Received: from [127.0.0.1] by omp1049.mail.ne1.yahoo.com with NNFMP; 31 Aug 2012 00:22:38 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 31478 invoked by uid 60001); 31 Aug 2012 00:22:38 -0000

s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;

Message-ID: <[email protected]>
Date: Thu, 30 Aug 2012 17:22:37 -0700 (PDT)
From: Frank Moore <[email protected]>
Reply-To: Frank Moore <[email protected]>
Subject: My Drivers Lincence
To: "[email protected]" <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="1517483800-185154927-1346372557=:28345"
Content-Length: 248271

Header redacted to prevent forum blowout, and victim details removed. We do not allow the posting of such personal information on this site. For one thing you are just posting your grans details so that any passing lad can try his luck!!-MM

Baiting Guru Joined: 10 Oct 2003 Posts: 4747

I was reading your post and the name “SOCIETE GENERALE BANK” stood out we have a bank in the fake bank database with that name (it might not be tied to this scammer though). It has been impossible to kill. Most hosters are great, and remove offending sites relatively quickly.

Baiting is one aspect of this game.. We also have killing domains and scamwarners both are effective.

If you have scam emails with headers, remove the personal information. Then post them on scam warners. I’ve numerous responses on even the most simplistic scams asking “is this a scam”. I few days back I got one on a yahoo lottery, asking is it a scam.

I mentioned site killing it cost mugu money, time and if it happens enough it erodes their credibility. Credibility is important, it saves a few people. Our kill rate is not 100 percent, but its still good.

I am hoping the proper authorities have also been notified, Law Enforcement hold more power than all of us. That could help too.

Well these are the best ways to screw with scammers. The story of your families problems, make me realize that my goals of driving mugus insane or have them in jail isn’t crazy at all,

Hello I'm New here! Joined: 01 Oct 2012 Posts: 4

The mugu has left her alone, but the second one has been a problem lately, she is *still* talking to him, however, She is now aware and I believe she's just wasting his time and enjoying someone to talk to I guess.

I'm still keeping an eye.

But I have got a reply!

Quote:

Thanks for your message.. You said you want me to come dawn there for a contract right ?? But why don't you come dawn here so we discus the business ..

Header I.P. 41.71.171.8 Lagos!

I'll figure something out... anyone have any good ideas for a fake business deal/major waste of time?

Elite Baiter Joined: 19 Jun 2011 Posts: 1066

^PM sent.

Master Baiter Joined: 14 Jul 2012 Posts: 247

Could you send me a link to the offending website, please?

*** BANNED *** Joined: 26 Jul 2012 Posts: 1123

Can I play? Twisted Evil