Upwork-Part-time service assistant - Scam

[ScamInformation]

Hello
I haven fallen into this trap. i would explain my problem. could you suggest me some help? . I have received 4 packages i am in Germany and i have posted to italy now packages are returned to my address. I havent picked it from DHL shop.
Please suggest me solution I am looking forward for your help

[ScamInformation]

I haven fallen into this trap. i would explain my problem. could you suggest me some help? . I have received 4 packages i currently stay in Germany and i have post to italy now packages are returned to my address. I havent picked it from DHL shop.
Please suggest me solution I am looking forward for your help

Do you mean "I have fallen" (ich bin gefallen) or "I haven't fallen" (ich bin nicht gefallen)? Please explain what has happened in detail in your own language.

General advice until we know more specifics: Stop communicating with the scammers. Do not accept any more packages. Print out all messages from the scammers, show them to the police, and explain that you are a victim of a reshipping scam.

Also, if there's a new website or email-only domain involved, post the emails here, with complete headers, so that we can kill it.

[AlanJones]

[quote="]I haven fallen into this trap. i would explain my problem. could you suggest me some help? . I have received 4 packages i currently stay in Germany and i have post to italy now packages are returned to my address. I havent picked it from DHL shop.
Please suggest me solution I am looking forward for your help[/quote]

Contact your local police and advise them that you are the victim of a reshipping scam and that the items have been returned and are currently with DHL. Ask them what they advise you to do, as the packages contain items paid for with stolen credit cards.

[ScamInformation]

Hi Guys, I have been also a victim of this reshipping scam by the same guy Cojocaru Dragos. I have no idea whats going to follow. As of now I am going to the Police related to Postal service and asking them to stop all the DHL Packages which were sent from my postal address. Luckily i had noted down each and every tracking number of the package shipped. I have shipped post of my packages to Russia , and 90 % of them are still under customs. I wish and hope that the Police could stop the delivery from happening.

Any thoughts and suggestions would be really appreciated.

[ScamInformation]

Hi, i have also fallen for the Upwork scam and sent one parcel from Germany before coming to my senses.
Currently collecting every evidence i have before going to the police.

My question is: How did it go for other victims of this scam? How much were you legally liable?

The previous victims who posted here may no longer be active on the site, so you may not get answers from them.

There's really no advice we can give about legal liability, we are not lawyers nor can we give legal advice other than to tell you to make sure you take all your evidence to the police as soon as possible. Make sure you stress that you are also a VICTIM.

[ScamInformation]

I know this thread is a bit old, but I recently discovered that I also have gotten involved in this scam unknowingly.
This was the letter I was sent:

"My name is Paul, I received your reply to my invitation on Upwork.

I would like to open a freight forwarding company in Germany. The idea is to provide the customers outside European Union an opportunity to buy goods at the local European markets. The goods in Europe sometimes are cheaper and have better quality than in some other countries. Besides, some of the stores have a lot of restrictions that do not allow some of my clients place multiple and regular orders in Europe. I have private customers who order single items and want them ASAP and I have small companies that want to have an address in Germany to receive goods and ship them either to their addresses or split and ship to their clients too. My mission is to provide them a first class service that will include:

1. Payment assistance. I will pay for goods myself on their behalf and forward to them or their clients.
2. Shipping assistance. Different store and shipping companies provide their own terms of shipping goods and sometimes it is not acceptable for my clients. I have fedex, DHL and UPS accounts and I pay for shipping with huge discounts and without difficulties.
3. Gift wrapping, repacking, combining or splitting the orders. My assistants will receive, check goods, prepare them as gifts, split multiple orders or combine the orders from different stores in case they are all going to the same client. Sure, I will pay for these services myself and will receive compensation with my profit from my customers.
4. Market research. I am checking the market for better prices and would like my representatives to take part in this process as a part of the company..." it goes on with more details.

The name he's using is Paul Beard, his email being [email protected] and his address is 14 Kenwyn Road, Dartford, Kent DA1 2TH UK

Currently putting all of my documentation together, printing all communications, etc and bringing all the packages I haven't yet sent off (thank god) to bring to the police tomorrow.

[ScamInformation]

Hello!

I've just been contacted from someone on facebook, stating that Paul Beard gave her my address, and she also sent me the link that sent me to this website here.

I'm really shocked, as I thought it was all legit, seeing as there were actually packages arriving and the labels he sent were paid and all.
I live in Germany and I've been contacted by him via Upwork (same message as GillyFish) and I've been working with him for about two weeks now, and so far, I've forwarded 27 packages, to different addresses, mostly Russia but also UK and Poland.
He gave me the login for his website http://paul-logistics.net/panel/ and told me to enter what was in the packages and the costs, together with a scanned invoice.
He regularly sents me e-mails with links to track the packages that will be delivered.
Fortunately I kept everything regarding this, like the scanned invoices, where I sent the packages etc.

I'm really nervous about this and I'm afraid of what's going to follow. I'll go to the police and report everything to them, then contact the online stores, as you all mentioned in your previous posts. I just hope I'll get out of this without too much trouble.

I'll make sure to update you on how the police reacted in Germany.

Address lookup

canonical name paul-logistics.net.
aliases
addresses 89.40.181.44


Domain Whois record

Queried whois.internic.net with "dom paul-logistics.net"...
Domain Name: PAUL-LOGISTICS.NET
Registrar: ERANET INTERNATIONAL LIMITED
Sponsoring Registrar IANA ID: 1868
Whois Server: whois.eranet.com
Referral URL: http://www.eranet.com
Name Server: DARL.NS.CLOUDFLARE.COM
Name Server: TRICIA.NS.CLOUDFLARE.COM
Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Updated Date: 12-apr-2016
Creation Date: 30-mar-2016
Expiration Date: 30-mar-2017

>>> Last update of whois database: Mon, 25 Apr 2016 15:52:30 GMT <<<

For more information on Whois status codes, please visit https://icann.org/epp


Queried whois.eranet.com with "paul-logistics.net"...
Domain name: paul-logistics.net
Registry Domain ID: 77428276_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.eranet.com
Registrar URL: http://www.tnet.hk/
Update Date: 2016-04-11T16:00:00Z
Creation Date: 2016-03-30T07:54:02Z
Registrar Registration Expiration Date: 2017-03-29T16:00:00Z
Registrar: ERANET INTERNATIONAL LIMITED
Registrar IANA ID: 1868
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +852.35685366
Reseller:
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Richard R. Landa
Registrant Organization: Raleigh\'s
Registrant Street: 3679 Joes Road
Registrant City: Albany
Registrant Province/state: NY
Registrant Postal Code: 12207
Registrant Country: US
Registrant Phone: +1.5187142942
Registrant Phone EXT:
Registrant Fax: +1.5187142942
Registrant Fax EXT:
Registrant Email: [email protected]

http://foren.germany.ru/arch/jobs/f/29898902.html

Germany.ru → Форумы → Архив Досок → Ищу/предлагаю работу

Предлагаю работу-подработку
781 просмотров |

pbeard (прохожий)


30.03.16 21:51 Предлагаю работу-подработку



Предлагаю работу помощника в транспортную компанию связанную с упаковкой товаров и обработкой документации. На начальном этапе предлагаю частичную занятость с последующим переходом на полный рабочий график. За более подробной информацией:



электроннуй адрес: [email protected] или личное сообщение.

Please post the email that told you to log into paul-logistics.net, with complete headers. Redact the user name and password and your name and email address. This will help us kill the website. If there are other websites or email-only domains involved in the scam, post them too.

[ScamInformation]

Hello,

so I just came back from the police station (Germany).
It was a normal station, but apparently the criminal investigation department needs to hear me again in detail about this case. They'll message me for an appointment, so I'll update you guys on that, too.
I'm also told to bring the remaining packages to the CID department with me, along with any kind of document regarding this (e-mail communication, contract, notes you took etc.)

So since nobody was damaged yet (neither me for needing to pay anything, nor people whose credit cards might have been stolen) nothing is happening, but they recorded the case.

However, IF someone was to notify their credit card as stolen, a legal proceeding AGAINST ME will be held, for money laundering.

Even so, reporting to the police was a better choice than waiting and hoping for the best. And if it was to come to said legal proceeding, it'll be a positive thing that I already went to the police to state what happened.

----

As asked, here's the mail header:

Received: by 10.182.153.136 with SMTP id vg8csp144826obb;
Thu, 7 Apr 2016 01:18:28 -0700 (PDT)
X-Received: by 10.50.66.141 with SMTP id f13mr27917818igt.60.1460017108716;
Thu, 07 Apr 2016 01:18:28 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-ig0-x244.google.com (mail-ig0-x244.google.com. [2607:f8b0:4001:c05::244])
by mx.google.com with ESMTPS id w96si585955ioe.0.2016.04.07.01.18.28
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 07 Apr 2016 01:18:28 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::244 as permitted sender) client-ip=2607:f8b0:4001:c05::244;
Authentication-Results: mx.google.com;
dkim=pass [email protected];
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::244 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-ig0-x244.google.com with SMTP id qu10so11039346igc.1
for <>; Thu, 07 Apr 2016 01:18:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to;
bh=IAUaSShF5uJ9ShVCyCIPAhhf/ktuGQj055eAdgNrwR4=;
b=0nDUhTq/h+mDzmM39dxwuwCLJzJB27KC15pwYjaMCIAh3hswSBMwgHevmbWi1Hv5OO
CdYwHJ8Qg7YlAny6agWcG3ZoyDFyuNRFwzCJ7ip5OgDBSugNOs/gX2xZBqMCORXikiuD
GDqkCC5AjquQnRfwZy60zEylnYP7YQR5UibyUwAY+7ka5+b1X1j03Af5GdMaxPpeS9DW
/QE5Qtfu822q5DEkDnrVPW7rBJ16Vp+kaaCYNEyxl3N/wolpKs755QF/vtaFqM3Wii0F
An1w2Ge6XwG8Y9WLoXVTw+rkcYkzsGKTLIVKPyc2hbywve1qdoDFXQA08JzvLi3BRY+C
hXjQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:in-reply-to:references:date
:message-id:subject:from:to;
bh=IAUaSShF5uJ9ShVCyCIPAhhf/ktuGQj055eAdgNrwR4=;
b=TqQyrfuo7pVjcdmiRkR/FYc25yUxauFS6nilLfdHiDQrZhvMEZR/7n3heCsmlAmYHe
fauiw1zDX8TiHRs7VIwhhRONfvdZXa1Czc63BPlHFqJPNLcVNhUdFcDsbninGMHj3MKS
fblyWbFopYOpWRXVxaK2vgSnFYPafLJntMugFNNqUuanZ8txMFmWt5cKGqr1SPLeKsHE
jjuRhsinWBJNWlx5T3lsMSWgyXPuHV/fa4YdlHmt4zQubmV71gtv1pBNNGdmdJ+sz6oV
Eg520YreYCgeuQaRQ5vUs2Z5S7G8HqjNWTUWbR3qymmS4w+QKbmd9TD5mwQA+VIT9Y3L
sJSg==
X-Gm-Message-State: AD7BkJJs2wadh08QJzjME0VZQlAaHr01HEy4hWrALgnpkHGKmVuxsR8qWR0gWVjiTIPLDgOUJMwdMgaEBlLsbg==
MIME-Version: 1.0
X-Received: by 10.50.90.180 with SMTP id bx20mr2160079igb.6.1460017108261;
Thu, 07 Apr 2016 01:18:28 -0700 (PDT)
Received: by 10.107.50.81 with HTTP; Thu, 7 Apr 2016 01:18:28 -0700 (PDT)
In-Reply-To: <CABPNd1H+PBcK-0NfdTdb3kJXrGohsWW1rfYDNjyF0_RAB3tpow@mail.gmail.com>
References: <CAK2iLE-UH1GsJcBrnFhMcBzDbeG1g=87M5V=b7ESPtkWvPBHTQ@mail.gmail.com>
<CABPNd1G7KdR57u_M4d5tBibe_Y4usEjbkpWh1jTsgcpfFjjTXQ@mail.gmail.com>
<CAK2iLE8ie=Bb3=7soO_4sj7diuoUt-93+qnsS+3tHgcL55n91w@mail.gmail.com>
<CABPNd1E62i=k2NGFMstXYFP=h4DWz1pkiHg3XhhKxAkp054zQw@mail.gmail.com>
<CAK2iLE_ww_wnj846vYfd6o7NRV+vOgbfxd2LqkH9ms4h34dZrQ@mail.gmail.com>
<CABPNd1H+PBcK-0NfdTdb3kJXrGohsWW1rfYDNjyF0_RAB3tpow@mail.gmail.com>
Date: Thu, 7 Apr 2016 11:18:28 +0300
Message-ID: <CABPNd1EXUKo72eKz7V2NHM2benDKi_OVBaT9b2eG4_h0nDuQBA@mail.gmail.com>
Subject: Re: Personal Assistant application
From: Paul Beard <[email protected]>
Content-Type: multipart/alternative; boundary=047d7bea3d281ac3eb052fe0b971

--047d7bea3d281ac3eb052fe0b971
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Well its a good thing you found this site and were warned early on and reported it right away . Its unfortunate that many people are tricked into this fake employment . We maintain this blog in effort to warn people .

Thanks for posting to Scamwarners . Your post will help warn other potential victims of this reshipping scam .

We still need the body of the email. We can't kill a site where the only visible part is a login page without evidence that it's used in a scam.