HAVE QUESTIONS? - ASK FOR HELP HERE -

Have you received an email you aren't sure about? Are you currently corresponding with someone you suspect is a scammer? Do you have questions about a scam? Post here for answers and advice.
#74127 by holacarola Mon Nov 14, 2011 6:10 pm
I have been searching for an apartment in Stockholm, Sweden. I found this really nice apartment on the web. BUT there is a few things that raise an eyebrow. I post here the first mail and bellow the second one.

Return-path: <r4downs@hotmail.com>
Received: from smtpin134.mac.com ([10.150.68.134])
by ms134.mac.com (Oracle Communications Messaging Server 7u4-23.01(7.0.4.23.0)
64bit (built Aug 10 2011)) with ESMTP id <0LUL00ARIRAH9961@ms134.mac.com> for
; Sun, 13 Nov 2011 14:08:41 +0000 (GMT)
Original-recipient:
Received: from snt0-omc2-s36.snt0.hotmail.com ([65.55.90.111])
by smtpin134.mac.com
(Oracle Communications Messaging Server 7u4-23.01(7.0.4.23.0) 64bit (built Aug
10 2011)) with ESMTP id <0LUL00LYSRAEIA30@smtpin134.mac.com> for
; Sun, 13 Nov 2011 06:08:41 -0800 (PST)
X-Proofpoint-Virus-Version: vendor=fsecure
engine=2.50.10432:5.5.7110,1.0.211,0.0.0000
definitions=2011-11-13_04:2011-11-12,2011-11-13,1970-01-01 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0
ipscore=0 suspectscore=3 phishscore=0 bulkscore=0 adultscore=0 classifier=spam
adjust=0 reason=mlx scancount=1 engine=6.0.2-1012030000
definitions=main-1111130102
Received: from SNT135-W31 ([65.55.90.72]) by snt0-omc2-s36.snt0.hotmail.com
with Microsoft SMTPSVC(6.0.3790.4675); Sun, 13 Nov 2011 06:08:37 -0800
Message-id: <SNT135-W318DF4FFD33FA7A7239DDAE8C30@phx.gbl>
Return-path: <r4downs@hotmail.com>
Content-type: multipart/alternative;
boundary=_de8fecb3-7674-422c-a3ce-82473fd593d6_
X-Originating-IP: [172.129.167.55]
From: Richard Downs <r4downs@hotmail.com>
To: Removed personal information. ~Bubbles
Subject: =?iso-8859-1?Q?RE:_Ang._R?= =?iso-8859-1?Q?ymlig_och_?=
=?iso-8859-1?Q?fr=E4sch_2a?=
Date: Sun, 13 Nov 2011 14:08:37 +0000
Importance: Normal
In-reply-to: <20111111135606.CE714B3D8E@s.blocket.se>
References: <20111111135606.CE714B3D8E@s.blocket.se>
MIME-version: 1.0
X-OriginalArrivalTime: 13 Nov 2011 14:08:37.0756 (UTC)
FILETIME=[BD16BBC0:01CCA20D]

--_de8fecb3-7674-422c-a3ce-82473fd593d6_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


Thank you for your interest.As you can see I have available the apartment located in Linnégatan 20, 114 47 Stockholm, with 2 bedrooms, 1 living room, 1 kitchen and 1 bathroom because I moved with my job in United Kingdom, London and I need money to pay the rent here.I purchased this nice apartment during a business trip to Sweden with the intention of renovating it to a luxury state, then reselling it, but due to the market blockage and the international crisis, it is impossible for me to sell it right now, so I've decided to rent it.I would be happy to rent it to somebody who likes keeping it clean and tidy.I can rent you the flat for 6 years, and, if after the six years you would like to stay more, then we can renew the contract.I can also rent it for short periods (2 months minimum).

The rent for 1 month is 7500SEK including all utilities (cold/hot water, electricity, wireless Internet, digital TV, 1 parking spot, dishwasher, microwave, refrigerator, washing machine).You can use my furniture, or you can use your own.You can move in the apt in the same day when you receive the keys. The only problem is that I `m the only person who have the keys but I hope that we will find a compromise.
Thank you for your interest and I will look forward to hearing from you soon.
Good luck,




Return-path: <r4downs@hotmail.com>
Received: from smtpin123.mac.com ([10.150.68.123])
by ms134.mac.com (Oracle Communications Messaging Server 7u4-23.01(7.0.4.23.0)
64bit (built Aug 10 2011)) with ESMTP id <0LUN00A9LQI7EG40@ms134.mac.com> for
Mon, 14 Nov 2011 15:46:55 +0000 (GMT)
Original-recipient:
Received: from snt0-omc2-s44.snt0.hotmail.com ([65.54.61.95])
by smtpin123.mac.com
(Oracle Communications Messaging Server 7u4-23.01(7.0.4.23.0) 64bit (built Aug
10 2011)) with ESMTP id <0LUN00CCZQI6LHG0@smtpin123.mac.com> for
; Mon, 14 Nov 2011 07:46:55 -0800 (PST)
X-Proofpoint-Virus-Version: vendor=fsecure
engine=2.50.10432:5.5.7110,1.0.211,0.0.0000
definitions=2011-11-14_01:2011-11-14,2011-11-13,1970-01-01 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=24 spamscore=24
ipscore=0 suspectscore=3 phishscore=0 bulkscore=0 adultscore=0 classifier=spam
adjust=0 reason=mlx scancount=1 engine=6.0.2-1012030000
definitions=main-1111140148
Received: from SNT135-W33 ([65.55.90.73]) by snt0-omc2-s44.snt0.hotmail.com
with Microsoft SMTPSVC(6.0.3790.4675); Mon, 14 Nov 2011 07:46:54 -0800
Message-id: <SNT135-W334DDF7C5F79BBCC32E29CE8C00@phx.gbl>
Return-path: <r4downs@hotmail.com>
Content-type: multipart/alternative;
boundary=_028e1257-df2c-4a7b-bd7d-46d919b56176_
X-Originating-IP: [172.131.133.62]
From: Richard Downs <r4downs@hotmail.com>
To: Remove personal information. ~Bubbles
Subject: =?iso-8859-1?Q?RE:_Ang._R?= =?iso-8859-1?Q?ymlig_och_?=
=?iso-8859-1?Q?fr=E4sch_2a?=
Date: Mon, 14 Nov 2011 15:46:53 +0000
Importance: Normal
In-reply-to: <C17CBB40-C7F4-4BC0-A994-3458CA8A95F4@me.com>
References: <20111111135606.CE714B3D8E@s.blocket.se>
<SNT135-W318DF4FFD33FA7A7239DDAE8C30@phx.gbl>
<C17CBB40-C7F4-4BC0-A994-3458CA8A95F4@me.com>
MIME-version: 1.0
X-OriginalArrivalTime: 14 Nov 2011 15:46:54.0201 (UTC)
FILETIME=[A20E9690:01CCA2E4]

--_028e1257-df2c-4a7b-bd7d-46d919b56176_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


Hi,

Thank you for your reply but the matter is that I'm in London already. Like I have inform you before, the price you shall pay for one month of rent will be 7500SEK, with no extra taxes to pay. The money, I want to revive it monthly to my bank account, so I hope it will be no problem for you to wire the money to my bank account. The apartment is ready for you, you will need only to receive the keys and the contract to check it, and see if you like it.

Obviously we need a way to complete this deal, that will allow us to make sure we receive what we are after. In order of that I have found a way for us to complete the deal safely and fast, and in this way you will receive the Keys in less than 3 days, if you move fast as well. The solution is provided by a company called TNT which is similar to FedEx, DHL or UPS, which will handle both payment and delivery of the Keys.

I have found a procedure that will allow you to pay for the rent of the apt only after you will receive the keys of it and through this way you will see it and decide if you will stay in the apt or not before I receive my payment.Please click on the link bellow to the TNT website to see how we can complete the deal safely and fast directly from the website of the company where the procedure is explained: http://www.tnt.com/express/en_gb/site/h ... ivery.html

Let me know if you are interested please because I really need to take care of this matter by the end of this week or the beginning of the next one.

#74128 by Con Warner Mon Nov 14, 2011 6:27 pm
^^^ 100% scam!
You can see one example here... viewtopic.php?f=39&t=17204

If you google the phrase
"Thank you for your reply but the matter is that I'm in London already. Like I have inform you before, the price you shall pay for one month of rent will be"
you will see this script used by the scammer time and time again.

This person asks for a deposit payment via Western Union or MoneyGram with a promise that he will send the keys through a courier company.

Sounds safe. It's not!

At other times, he will ask for proof that you are able to pay the deposit and rent due to a string of time wasters.
This proof is in the form of a Western Union or MoneyGram payment to a lawyer,a friend or family member.

In either case, if payment is made and you give this person the details, they will collect the money.
You will not hear from them again.

If you are reading this because you are looking for property to rent, and you are in contact with this thief you are probably searching Craigslist, Gumtree or similar listing sites. If you receive any requests from 'Landlords' asking for some kind of payment before viewing, then it will also be a scam. Please forward the mail to me at the address in my signature line and I will investigate and list them if necessary.

Email: conwarner@scamwarners.com
Latest updates regarding Internet Fraud: http://www.antifraudnews.com
#74129 by Justin Mon Nov 14, 2011 6:29 pm
Hello holacarola!

This is 100% a scam. I'm glad you got suspicious. The website the scammer is referring to has been referenced by several scammers. The site is legit but the company does not offer escrow services as being described by the scammer.

Justin

#74133 by holacarola Mon Nov 14, 2011 7:09 pm
Thank you very much everybody! I was not sure about it. Never thought of internet scams mixed with rentals of apartment. Luckily I got on the web and checked it out. Once again, thank you. This could have been a pain the @ss for me.

=O)
#74172 by jolly_roger Tue Nov 15, 2011 10:17 am
The second email header looks like it could have been forged. The first Received: line is incorrect from what I can see. Which means the others should be viewed with suspicion I'd suggest.
Thankyou for posting the story holacarola. It will make it easy for others to find about this scammer when conducting a search.
#74246 by Bubbles Wed Nov 16, 2011 1:44 am
Welcome to ScamWarners rick07, yes scammers are like carbon monoxide, they show up everywhere.

Learn how to post photos http://scamwarners.com/forum/viewtopic.php?f=28&t=3219
Click here to find headers: http://www.ip-adress.com/faq/view_email_header/
Use this site to track IPs http://www.iptrackeronline.com/index.php

saynotoscams @ gmail.com

Who is online

Users browsing this forum: No registered users and 7 guests