Black pork for the taking

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed Jul 22, 2015 2:35 pm

Okay, pork farmers, here's another CC scammer who appeared in my RL business account:

Quote:

Delivered-To: xxxxxxxxxxx
Received: by 10.60.48.3 with SMTP id h3csp2344495oen;
Wed, 22 Jul 2015 05:25:03 -0700 (PDT)
X-Received: by 10.50.128.169 with SMTP id
Wed, 22 Jul 2015 05:25:02 -0700 (PDT)
Return-Path: <[email protected]>
Received: from p3plsmtp02-02.prod.phx3.secureserver.net (p3plsmtp02-02.prod.phx3.secureserver.net. [72.167.218.32])
by mx.google.com with ESMTP id 34si1239283ior.53.2015.07.22.05.25.02
for <xxxxxxxxxxxx>;
Wed, 22 Jul 2015 05:25:02 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 72.167.218.32 as permitted sender) client-ip=72.167.218.32;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 72.167.218.32 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: (qmail 7191 invoked from network); 22 Jul 2015 12:25:02 -0000
Delivered-To:xxxxxxx
Received: (qmail 7188 invoked by uid 30297); 22 Jul 2015 12:25:02 -0000
Received: from unknown (HELO p3plibsmtp01-03.prod.phx3.secureserver.net) ([72.167.238.53])
(envelope-sender <[email protected]>)
by p3plsmtp02-02.prod.phx3.secureserver.net (qmail-1.03) with SMTP
for <xxxxx>; 22 Jul 2015 12:25:02 -0000
Received: from mail.lelik.kiev.ua ([178.20.157.128])
by p3plibsmtp01-03.prod.phx3.secureserver.net with bizsmtp Wed, 22 Jul 2015 05:25:02 -0700
X-IP-SPAM: Suspect
Received: from www by mail.lelik.kiev.ua with local (Exim 4.85 (FreeBSD))
(envelope-from <[email protected]>)
id 1ZHt4N-000HLA-GN
for xxxxxxxxxxxx; Wed, 22 Jul 2015 15:24:19 +0300
To:xxxxxx
Subject: Email Order

Quote:

How are you today, my name is Johnson Yang the owner of Globe Silk Store. I will like to order for some items in your store,but before i proceed i will like to know if you can supply and ship to Malaysia and if you accept CREDIT CARDS as payment.

Kindly advise me ASAP, so i can proceed with the list of needed items.

Kind Regards,

Johnson Yang.

Globe Silk Store

3st Floor Ikano Power Centre,6 Jalan PJU 10/4

Mutiara Damansara, Petaling,Malaysia

Tel:+60 (0)3 3726 9540 [email protected]

ipTRACKERonline.com wrote:

Header Analysis Quick Report
Originating IP: 178.20.157.128
Originating ISP: Pe Freehost
City: n/a
Country of Origin: Ukraine
* For a complete report on this email header go to ipTRACKERonline

Posted: Wed Jul 22, 2015 2:43 pm

Offer for oil on it's way...

Posted: Wed Jul 22, 2015 4:59 pm

Email sent. I hope he has plenty of cards on hand; our bulk industrial construction equipment is on sale.

Posted: Mon Jul 27, 2015 10:37 am

Got an order for ten each of four different items.

Posted: Mon Jul 27, 2015 2:59 pm

^^ You go! I have not heard back from this lad yet...

Posted: Mon Jul 27, 2015 11:13 pm

Sent the request for sheeping quote to the sheeper.

Posted: Tue Jul 28, 2015 7:00 pm

The sheeper responded with his quote, which is the same that the lad told me, knowing only the price of the items and not the volume or weight. Rolling Eyes

Posted: Wed Jul 29, 2015 10:09 pm

Last night, the lad asked "ARE YOU ON SEAT READY TO SEND PAYMENT" shortly after I'd finished working. (In RL I was at the chiropractor's, who works evenings, and returned about the time my character gets off work. The lad had not emailed me yet.) This morning, after starting some jobs on the machines, I answered yes. He hasn't sent me his card yet.

Posted: Thu Jul 30, 2015 6:12 am

Email sent. Hope he wants dye...

Posted: Thu Jul 30, 2015 4:06 pm

Sent me the cards at 3:30 this morning. This lad has no sense of time of day.

CC# *4446
CC exp date: 07/17
CC cvv 317
ZIPCODE: 951*
Succeeded once

CC# *8883
CC exp date: 03/19
CC cvv 432
ZIPCODE: 460*
Lost or stolen

Posted: Thu Jul 30, 2015 9:12 pm

He's sent a pink pig. I've verified that the routing number is correct, but the account number ends in "S1.1", which I've never heard of in an American account number. It is at a credit union. He wants me to send the money to the sheeper before he's paid for the order anywhere near in full, which I refuse to do.

He wants to send the rest of the money to my bank account. I have a bank account, with well-formed SWIFT code and account number and a routing number of the right length, but if he tries to send to it, it will fail because there is no such bank. Should I give him it? Is he going to try to send money to it?

Posted: Fri Jul 31, 2015 6:03 am

I've never heard of a scammer really giving a victim money. It's possible that he intends to pay a fake check into your account to try and get you to send him the money before it shows up as fake.

On my side - I've sent him the invoice total for his chosen dyes. Now I'm awaiting the sheeper details...

Posted: Fri Jul 31, 2015 6:56 pm

I sent him the account info. I'll see what happens.

Posted: Fri Jul 31, 2015 10:20 pm

He sent a transfer email from what has the name of a real bank, but from a Hotmail address. I'm going to post it in HH&T, since I need help deciphering it. I'll let him know on Monday that I'll wait until the money appears in my account. The real bank he's impersonating is in Malaysia, so it'll take a few days to cross the Pacific.

Posted: Sat Aug 01, 2015 8:03 pm

AQ takes credit cards. Replied. Very Happy

Posted: Mon Aug 03, 2015 5:07 am

He sent me the same credit card details as vonpaso xlura:
Card number: **** 8883
CCV: 432
Expiry: 03/19.
Declined the card as lost/stolen as well.

Posted: Mon Aug 03, 2015 5:41 pm

About midnight he said "Have stop the transfer this morning" and asked if I'm ready to take a CC payment. I said yes. He hasn't sent me the CC yet.

Posted: Mon Aug 03, 2015 10:32 pm

He sent the cards three hours later, when I had left, then wrote less than an hour later asking impatiently.

CC# *0202
CC exp date: 03/16
CC cvv 489
CC type: Visa Card
ZIPCODE: 560*
Succeeded

CC# *2285
CC exp date: 02/19
CC cvv 783
CC type: Visa Card
ZIPCODE: 731*
Not valid in CA

Posted: Tue Aug 04, 2015 5:39 pm

CC# *7008 .............................
CC exp date: 11/17
CC cvv 227
CC type: Visa card
ZIPCODE: 482*
Over the limit (about $1400)

CC# *3862....................................
CC exp date: 12/17
CC cvv 031
CC type: Visa card
ZIPCODE: 505*
Call the bank

Posted: Wed Aug 05, 2015 1:32 am

He attempted to repeat payments he's already done using cards he's already used. I already told him that doesn't work.

Posted: Wed Aug 05, 2015 4:37 am

He gave me the same piggies as vonpaso. I replied and declined the cards for the same reason. I really hope he gives me a brand spanking new black piggy so that I can get at least one transaction through - at the moment he isn't invested in my bait at all.

Posted: Wed Aug 05, 2015 3:58 pm

No response from him yet. Either he's twigged, or he's waiting for the dealer to give him some more cards.

Posted: Thu Aug 06, 2015 6:15 am

He's gone silent on me as well. I'll send him a poke a little later.

Posted: Thu Aug 06, 2015 8:17 pm

CC# *0328
CC exp date: 11/17
CC cvv 326
CC type: Master card
ZIPCODE: 797*
Zip code mismatch

CC# *7996
CC exp date: 11/15
CC cvv 465
CC name: Johnson Yang
CC type: Master card
ZIPCODE: 785*
Succeeded

For some odd reason, he divided the remaining balance by 3, but sent me only 2 cards.

Posted: Fri Aug 07, 2015 4:10 pm

Ohio gozimus!

CC# *4460
CC exp date: 05/18
CC cvv 328
CC type: Master card
ZIPCODE: 451*

CC# *7159
CC exp date: 08/18
CC cvv 769
CC type: Master card
ZIPCODE: 441*
Both succeeded; paid in full with one cent over.

Black pork for the taking	View next topic View previous topic