Company Representative scams, Payment Processing scams and other Employment scams.
#174937 by Diamond Sun Aug 25, 2013 1:48 pm
Looking through my Spam folder today, found a scam email which seemed worth posting here. Why - because this is one of the cases where the scam nature of the "job" offered is masked by several disguises, including a fake website. So I don't want people to fall for this one, even I thought it could be a legit job for a moment, until I read the "job" description. It's called "Financial Agent" and includes processing of payments using your account, which is a 100% sign of a money laundering scam. Of course, the email about the "job" also gives the scammer away - strange email address, no phone number and no exact position of the email's author are indicated, only vague wording like "HR Support". However, as I said, they have a site to make it look creditable, and even a "license" supposedly from Western Union, which looks like a fake to me, especially as the text looks strange ("This certifies that VBK Group Inc. as an authorized partner"). By the way, the phone number given on their site (855) 712-9825, when I entered it in Google, showed up as an Indian mobile number!

So here's the email itself (it came from vbkgroup@comcast.net), I kept the original formatting:

We analyzed your resume on CareerBuilder and see you as a potential candidate of our company. We'd like to offer you the

Financial Agent position.
Our company is expanding and currently searching an optimistic, responsible and self-motivated employee to join its dynamic team.

This is a rare opportunity to obtain a unique experience of working as a part of a professional group,as well as servicing major

clients and creating strong business relationships.

Please take a few minutes and complete an online interview on our website: http://vbkgroupinterview.com/interview.php

You may also learn about company business activity on our site: http://vbkgroupinterview.com

If you have any difficulties or extra questions, feel free to contact me.

Sincerely,
Eva Walton
HR Support


Here are the headers:

Delivered-To: xxxxxx@gmail.com
Received: by 10.76.27.233 with SMTP id w9csp144710oag;
Sun, 25 Aug 2013 08:36:04 -0700 (PDT)
X-Received: by 10.49.96.3 with SMTP id do3mr11901494qeb.15.1377444964566;
Sun, 25 Aug 2013 08:36:04 -0700 (PDT)
Return-Path: <ESC1114659352784_1114652662608_2471_r20@in.constantcontact.com>
Received: from ccm183.constantcontact.com (ccm183.constantcontact.com. [208.75.123.183])
by mx.google.com with ESMTP id k1si3864828qeo.52.1969.12.31.16.00.00;
Sun, 25 Aug 2013 08:36:04 -0700 (PDT)
Received-SPF: pass (google.com: domain of ESC1114659352784_1114652662608_2471_r20 ... ontact.com designates 208.75.123.183 as permitted sender) client-ip=208.75.123.183;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of ESC1114659352784_1114652662608_2471_r20 ... ontact.com designates 208.75.123.183 as permitted sender) smtp.mail=ESC1114659352784_111465266260 ... ontact.com;
dkim=pass header.i=@auth.ccsend.com
Received: from p2-jbsched06.ad.prodcc.net (p2-pen5.ad.prodcc.net [10.252.0.105])
by p2-mail204.ccm183.constantcontact.com (Postfix) with ESMTP id 38E51E2C788
for <xxxxxxxxx@gmail.com>; Sun, 25 Aug 2013 11:36:04 -0400 (EDT)
DKIM-Signature: v=1; q=dns/txt; a=rsa-sha256; c=relaxed/relaxed; s=1000073432; d=auth.ccsend.com; h=to:subject:mime-version:message-id:from:date:list-unsubscribe:reply-to; bh=Mu9JiBozKQ99Pj0tX6IZZ1ENC7s1eweCl4d/pNqSttQ=; b=GDIq56Y6Fd0uvLy8/8AtiS8XrSZnvXa5AvZ8YZ+4HNbPLOowHIB1I7nwFOR2nz5vJKrb+goXnr5rfChSSGLKStvo+mFASjgH6ni7cG00FV6KOK6y+S8bo+gR3grBAr+PdS9QrQRpmmnERJYOGhgbEx1ReHn1rYSy/MdBqkksmYk=
Message-ID: <1114659352784.1114652662608.2471.6.8113501@scheduler.constantcontact.com>
Date: Sun, 25 Aug 2013 11:36:04 -0400 (EDT)
From: VBK GROUP <vbkgroup@comcast.net>
Reply-To: vbkgroup@comcast.net
To: xxxxxxx@gmail.com
Subject: Invitation to Interview
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_16570615_941629305.1377444964224"
X-Mailer: Roving Constant Contact 2009 (http://www.constantcontact.com)
List-Unsubscribe: http://visitor.constantcontact.com/do?p ... =q9wthdoab
X-Return-Path-Hint: ESC1114659352784_1114652662608_2471_r20 ... ontact.com
X-Roving-ID: 1114652662608.2471
X-Lumos-SenderID: 1114652662608
X-Roving-CampaignId: 1114659352784
X-Roving-StreamId: 0

------=_Part_16570615_941629305.1377444964224
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit


So watch out, this is a scam!

#177570 by pjshirrel Mon Sep 30, 2013 12:33 am
I received a similar email on 9/30/2013. they changed the company name to G?K Group INC.
Here is the email:
---
We analyzed your resume on CareerBuilder and see you as a potential candidate of our company. We'd like to offer you the Financial Agent position.
Our company is expanding and currently searching an optimistic, responsible and self-motivated employee to join itsdynamic team. This is a rare opportunity to obtain a unique experience of working as a part of a professional group,as well as servicing major clients and creating strong business relationships.

Please take a few minutes and complete an online interview on our website: http://gtkinterview.com/interview

You may also learn about company business activity on our site: http://gtkinterview.com/

If you have any difficulties or extra questions, feel free to contact me.

Sincerely,
Eva Walton
HR Department
----
they changed the company name, this is what is says on website and can't even spell online correctly.
google this and found this scan site so I added additional info.
Thanks, Peggy
-----------------------
Oline Interview
Company: G?K Group INC
Location:USA, Statewide
Availability: currently available
Employment type: Part-time employment
Number of employees required: 3

CANDIDATE REQUIREMENTS.
? not less than 18 years old
? internet access to reply emails promptly
? availability by phone (1-2 hours a day)
? a bank account to process payments
? good credit history with your bank (new bank account is an option)
? no criminal offense or convictions
? experience in the field of finance is preferred

SALARY
During the probationary period we offer USD 1,800 monthly salary plus 5% commission for each payment processing operation.
------------------------------
#177571 by TerranceBoyce Mon Sep 30, 2013 3:45 am
It's not possible to stress enough that these job offers are from organised criminal gangs who want to get the use of your bank account to receive stolen funds.

The first time you receive a stolen payment it'll be reported to the police and the bank that YOu are a criminal. It may not even receive a payment at all as there are scam baiters and others seeking out these accounts which will be reported to the authorities as being involved in crime, the result being that your account will be closed. You could face further prosecution and being unable to open an account with anyone. In the modern world, not being able to use a bank account will make life very difficult as regards getting a job or paying for anything.

No one in their right mind would agree to this if they knew what they were doing and what would happen.

The criminals are happy to steal money and ruin your life by using your bank account to do it. The number of these scam websites being produced is phenomenal and the criminals won't let up in their efforts to recruit victims. The criminals are also opening fraudulent bank accounts themselves, but it's useful if they can recruit innocent victims as cover for these accounts. Unfortunately, the likelihood is that any bank account used to receive stolen money will be shut and you will face the risks mentioned.

Online date asks for a gift or money ? - scammer.Never use Western Union to pay money to a stranger. Never make any payment by Wuxfer to a buyer of your goods - it's a scam. Receiving and paying on money through your bank account is money laundering
#177582 by HannahsDad Mon Sep 30, 2013 5:06 am
There is an identical site here: http://stkinterview.com
Looks like the same text as Audit Cash

Oline Interview

Company: S?K Group INC
Location:USA, Statewide
Availability: currently available
Employment type: Part-time employment
Number of employees required: 3

CANDIDATE REQUIREMENTS.
? not less than 18 years old
? internet access to reply emails promptly
? availability by phone (1-2 hours a day)
? a bank account to process payments
? good credit history with your bank (new bank account is an option)
? no criminal offense or convictions
? experience in the field of finance is preferred

SALARY
During the probationary period we offer USD 1,800 monthly salary plus 5% commission for each payment processing operation.

! PLEASE NOTE THAT OUR COMPANY IS NOT REQUESTING ANY FEE TO OBTAIN A JOB POSITION IN OUR COMPANY AND IS NOT DEALING WITH TRANSACTIONS THAT INVOLVE CHECKS.

#177597 by vonpaso xlura Mon Sep 30, 2013 9:01 am
gtkinterview.com and stkinterview.com are in the process of being reported for fraud.

No one serving as a soldier gets tangled up in affairs of life. He wants to please his enlisting officer. 2 Tim. 2:4
Online
#177824 by @CBSiteSecurity Wed Oct 02, 2013 4:40 pm
Thank you for helping spread a word of caution about these types of messages! Based on the information listed within your original post, the email in question does appear to be a spoof message designed to appear as if it came from a legitimate source or 3rd party company in order to lend its credibility. We recommend such messages be disregarded and any current or future correspondence attempts related to the message be ignored.

Do you mind forwarding a copy of the email in question to us? We would like to review the emails you've received.

To forward the emails or for more information about Online Fraud, we do offer a Fraud Page for Jobseekers:
http://www.careerbuilder.com/JobSeeker/Info/Fraud.aspx

Thank you.
CareerBuilder’s Trust and Site Security Team
@CBSiteSecurity

Who is online

Users browsing this forum: No registered users and 9 guests