Scam invitations to non-existent conferences
#168676 by Eagletsam Wed Jun 12, 2013 12:55 pm
:?
An invitation on the above 'workshop' hit my mailbox on 19 May 2013. It was presumably posted by certain Mr. Manuel Carlos Nino Vera, for a group operating under the website:

http://europeinnovation.webs.com

announcing a workshop on 'INNOVATION ACCELERATION: EUROPE INNOVA2013', to be held at International Conference Centre (WICC) Lisbon, Portugal: 20 - 25 June 2013. The workshop brochure carried the logo of European Commission.
The brochure indicated that persons, from developing countries, wishing to participate in the workshop, can be assisted with round trip air-ticket if they can pay for their accommodation. Those who applied were requested to deposit 50% of the accommodation fee to the account of a certain Gama Youth Hostel, with the following details:

ACCOUNT NAME: GAMA HOSTEL
IBAN: PT50 0018 000328368561020 60
SWIFT CODE/BIC: TOTAPTPL
BANK NAME: SANTANDER TOTTA
ADDRESS: AV. FONTES PEREIRA DE MELO 88
CITY: LISBOA
POSTAL CODE: 1069-310
COUNTRY: PORTUGAL

But after making a payment of € 120 euro to the above account, I could not get an air-ticket. Instead, another set of demands was being made on me, to pay additional € 345 euro Visa Document Authentication Fee to a Visa Immigration Lawyer, at the following account:

ACCOUNT NAME: ANUEL ALFREDO JESUS DIAS
BANK NAME: SANTANDER TOTTA
IBAN: PT50 0018 000328401214020 02
SWIFT CODE: TOTAPTPL
ADDRESS: R. DO OURO, 88, LISBOA-1100-063, PORTUGAL

Meanwhile, I made every effort to locate Gama Youth Hostel in Lisbon Directory, without success. I begin to wonder if this is indeed an activity being organised by the European Commission.

Kindly assist to confirm if EUROPE INNOVATION is indeed organising INNOVA2013 in Lisbon from 20 to 25 June 2013.

Kind regards
Advertisement

#168682 by vonpaso xlura Wed Jun 12, 2013 1:41 pm
Gama Youth Hostel does not appear to exist. There is a Porto Youth Hostel on Rua Paulo da Gama, in Porto.

Webs.com is a free website building site. No real conference would have its website on webs.com. I'm calling this a scam conference.

Please post the emails about this conference, with full headers.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
#168725 by Eagletsam Thu Jun 13, 2013 7:44 am
:)
Thanks, Vonpaso Xlura,for the prompt reply!

As a complete newbie to this Forum, I am not so sure how to attach documents such as emails and email headers, to my posting. Is it just cut and paste, or there is a more technical way?

Kind regards
#168747 by Eagletsam Thu Jun 13, 2013 11:42 am
:D

Many many thanks, Vonpaso, the quoted website on Email Headers is most useful!

I reproduce below, a couple of the emails received, starting with the first one.

It seems that the 'Workshop Brochure' attached, which carries European Commission logo,
cannot be copied!

Most appreciative!

============================================================================================
FIRST EMAIL FROM EUROPE INNOVA2013 ORGANISERS (EMAIL + HEADER)
============================================================================================

x-store-info:fHNTDlzCF8Nxw6HwcfGQy+S7Ax/lqLSm0eBjyyDmyuUHdOhooDHp3lWWevjq4l82Pz98Yj5f5Nm5DE+VLd7kEJzzvb8LaRFupZqd/CSCZynjNVQvUC2VvgY5zpQUrvN8ZfeAF25yZ8E=
Authentication-Results: hotmail.com; spf=none (sender IP is 74.208.4.200) [email protected]; dkim=none header.d=europe.com; x-hmca=none [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: sF:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MjtHRD0yO1NDTD0w
X-Message-Info: 3c21WZ1hAlv3ZXT+yA1NLcrf/gH9covGY2mGPPg1v21F3pjcr0PstRr8skFB20MV8Us7KswYRYZSjnhNjD3FJ67+ajnTrSXXYR7XfwSQR12Ep2mEFNEsvZSTxTkABiqbzrDsPYqvon3YPmcqxwMXxGcbYtaZ7TXCnNTQTFYkpzA=
Received: from mout.gmx.net ([74.208.4.200]) by BAY0-MC2-F41.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sun, 19 May 2013 04:48:16 -0700
Received: from mailout-us.gmx.com ([172.19.198.48]) by mrigmx.server.lan
(mrigmxus001) with ESMTP (Nemesis) id 0MXZb8-1V1hTF31AU-00WYAd for
<XXXXXXXXXXXXXXXXXXXXXX>; Sun, 19 May 2013 13:48:15 +0200
Received: (qmail 27529 invoked by uid 0); 19 May 2013 11:48:15 -0000
Received: from 197.251.170.232 by rms-us022 with HTTP
Content-Type: multipart/mixed; boundary="========GMX261821368964093241122"
Date: Sun, 19 May 2013 07:48:12 -0400
From: "Innovation Acceleration (Europe INNOVA)" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Subject: We look forward to see you at the Europe INNOVA 2013
To: XXXXXXXXXXXXXXXXXXXXXXXXX
X-Flags: 0001
X-Mailer: GMX.com Web Mailer
x-registered: 0
X-GMX-UID: qt7qcSIH3zOl2qzMM3AhIa9+IGRvb4Cn
Return-Path: [email protected]
X-OriginalArrivalTime: 19 May 2013 11:48:16.0230 (UTC) FILETIME=[BFE79860:01CE5486]

--========GMX261821368964093241122
Content-Type: multipart/alternative;
boundary="========GMXBoundary261821368964093241350"

--========GMXBoundary261821368964093241350
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Workshop Now Open for Registration : -
International Cluster Cooperation for SMEs: Towards a European Approach" 2013

How to capitalize on the trans formative power of service innovation for structural change

Lisbon, Portugal :- 20th – 25th of June 2013

We welcome you to the Europe INNOVA 2013 conference, you are to join that will be taking place from: 20th – 25th of June 2013, in Lisbon, Portugal
...........................................................................................................................................................................................................( OMITTED PORTIONS REMOVED FOR SPACE!)
..................................................................................................................................
..................................................................................................................................

The registration deadline is on the 5th of June 2013

VISA: the organizing committees will facilitate the processing of visas for all participants that require visas to Portugal; the visas will be processed and authorized in Portugal by the Portuguese immigration department of Ministry of Foreign Consular Affairs, Participants’ registration certificate and visa support letter will be sending to the Portuguese Embassy in your resident country

ACCOMMODATION: Participants of the Europe INNOVA 2013 conference invitation, will be accommodate in the GAMA Youth Hostel at special discounted prices INNOVA 2013 group price Reference number is G:450536

**With the above reference number to secure group rates**

Following below are prices:
Single room: € 40 euro
Room for two people: € 32 euro / per person
Room for three people: € 28 euro / per person
Room for five person: € 24 euro / per person

The prices include full board.
You are to make direct contact with the Management of GAMA Youth Hostel,
While contact the GAMA Youth Hostel management, you are to quote yourself as a participant of the Europe INNOVA 2013 conference, as benefit from the special discounted prices, under Reference number is G:450536

Hostel Address : Av. Duque de Ávila 201 050-082 Lisboa – Portugal
E-mail: [email protected] http://service.mail.com/callgate-6.65.2 ... en&lang=en
Info Line: +351-910818438
Web site:http://hotelgama-lisbon.webs.com http://hotelgama-lisbon.webs.com&lang=e ... en&lang=en

You are not making booking with any other Hotel apart from Gama Youth Hostel that is fully recommended, as to facilitate participants’ pickup from their rooms to the conference center.

Participants are expected to arrive on Thursday 20th of June 2013 and depart on Tuesday 16th of June 2013

Check in: From 12:00 Am:- 20th of June 2013
Check out: Before 12:00 Am: - 25th of June 2013
Number of night: 6

CONFERENCE VENUE: The Europe INNOVA 2013 conference will be held at in Lisbon, Portugal international conference canter (WICC), Rua Professor Gomes Teixeira 1350 – 265, Lisbon, Portugal.
Contact the INNOVA 2013 Conference Secretariat:
Info line: +351-92-595-0401
Fax: +351-91-899-3834
Email: [email protected] http://service.mail.com/callgate-6.69.5 ... en&lang=en
Website: http://europeinnova.webs.com http://europeinnova.webs.com&lang=en&la ... en&lang=en
We look forward to see you at the Europe INNOVA 2013
Yours sincerely,
Mr, Manuel Carlos Nino Vera

=============================================================================================
EMAIL FROM GAMA YOUTH HOSTEL
=============================================================================================
GAMA YOUTH HOSTEL RESERVATION BOOKING INFORMATION
Hostel Address : Av. Duque de Ávila 201 050-082 Lisboa – Portugal
E-mail: [email protected]
Reservation Line: +351-910818438
Website: http://hotelgama-lisbon.webs.com

Dear XXXXXXXXXXXXXXXXXXXXXXXXX

Thanks for contacting our hotel, below are the available rooms and the official prices for participants, All rates are in Euro.
Single room: € 40 euro
Room for two people: € 32 euro / per person
Room for three people: € 28 euro / per person
Room for five person: € 24 euro / per person

Our hotel has the following modern services: Amenities for disabled; Bar; Cable TV; Coffee maker; Common room; Fitness center; In room microwave; In room refrigerator; Internet access; Iron & Board; Kiosks; Kitchen; Laundry; Lift; Lockers; Meals; Outdoor pool; Public phone; Safety deposit box. Your payment covers the use of any these services but damage of any facilities will be reimburse by the client before checking out of the hostel.

Attached to this email is our booking form. You will have to fill the form and return it along with your reservation guarantee deposit payment details by email
This is necessary to avoid the significant number of Guests that, without payment, make reservations and either cancel late or do not show at all. In turn, this deposit provides you with the assurance that your room(s) is SAFELY RESERVED upon check-in.

TO COMPLETE YOUR RESERVATION PLEASE PROVIDE YOUR DEPOSIT PAYMENT INFORMATION

Bank account information
ACCOUNT NAME: GAMA HOSTEL
IBAN: PT50 0018 000328368561020 60
SWIFT CODE/BIC: TOTAPTPL
BANK NAME: SANTANDER TOTTA
ADDRESS: AV. FONTES PEREIRA DE MELO 88
CITY: LISBOA
POSTAL CODE: 1069-310
COUNTRY: PORTUGAL

Western Union or Money Gram Money Transfer, accepted also for your accommodation booking,
(1) Sender Name:
(2) Transaction Number:
(3) Text Question and Answer, if require:
(4) Sending Country:
(5) Amount Sent:
(6) Receiver name: WILSON GOMES

- The deposit payment is requiring to be 50% of your total bill. - Payment must be in Euro. - No booking will be guarantee without reservation guarantee deposit payment. - A copy of the transfer agent receipt should also be send together with the booking form.

CANCELLATIONS AND REFUND POLICY:
-Cancellation notice must be received 10 days before check in date as to make easy the refund of deposit payment and avoid charging of your
-Cancellations must be sent to us in writing via fax or e-mail.
-NB: If cancellation notice was not received 5 days to check-in date

If you have any special requests regarding your accommodation, please let us know. We will do our best to fulfill your preferences. Our staff will officially confirm your booking in two working days via email attachment or fax. If no confirmation is received, do not hesitate to contact us.

How to get to the hotel: The venue is conveniently located in downtown Lisbon and is easily accessible by public transportation. For more information on transportation to the Convention Center, a floor plan of the conference's location within the venue, parking options,

Location/Metro/GPS
Hotel's GPS coordinates re: Longitude » -9.151335 (º 9'94.55'' W Latitude » 38.734904 (8º 44'5.74'' N )
Ticket fare: 1.5€
20-minute City Travel card: 2.00€,
Single fare ticket: 1.00€
Travel time: about 30 min.

Hoping to hear from you soon.

Thanks for your patronage
Reservation manager
Mr, Antonio Costa

=============================================================================================HEADER FOR ABOVE EMAIL
=============================================================================================
From Gama Youth Hostel Fri May 24 10:45:42 2013
X-Apparently-To: XXXXXXXXXXXXXXXX via 46.228.37.119; Fri, 24 May 2013 02:45:44 -0700
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 209.85.215.66 as permitted sender)
X-Originating-IP: [209.85.215.66]
Authentication-Results: mta1025.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-la0-f66.google.com) (209.85.215.66)
by mta1025.mail.gq1.yahoo.com with SMTP; Fri, 24 May 2013 02:45:44 -0700
Received: by mail-la0-f66.google.com with SMTP id fo13so1093812lab.9
for <XXXXXXXXXXXXXXXX>; Fri, 24 May 2013 02:45:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=HU0D3tLhidxf2SfsS34VXw2XjNAnGVLhhb9BY2EOx2o=;
MIME-Version: 1.0
X-Received: by 10.152.23.102 with SMTP id l6mr5057734laf.54.1369388742819;
Fri, 24 May 2013 02:45:42 -0700 (PDT)
Received: by 10.112.159.195 with HTTP; Fri, 24 May 2013 02:45:42 -0700 (PDT)
Reply-To: [email protected]
Date: Fri, 24 May 2013 02:45:42 -0700
Message-ID: <CAECptenYOX+cHqi=ZHvtjHqKtvUubTR+i9Ycpruk3ndHOnCEqA@mail.gmail.com>
Subject: GAMA YOUTH HOSTEL RESERVATION BOOKING INFORMATION
From: Gama Youth Hostel <[email protected]>
To: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Content-Type: multipart/mixed; boundary=089e0160b6ee93446e04dd73a963
Content-Length: 92551
#168755 by vonpaso xlura Thu Jun 13, 2013 2:35 pm
The sender's IP address 197.251.170.232 is in Ghana. The address given for the hotel may not exist; the closest hotel to that address is Hotel Príncipe. No legitimate business asks for payment by Western Union or MoneyGram. The conference website is dead; the hotel website will be reported shortly.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
#168781 by Eagletsam Thu Jun 13, 2013 8:51 pm
:D
Very appreciative, Vonpaso, for the revealing info on the originating IP Address. Is it possible for Financial Crime Investigators to track the operators of the Bank Accounts used for fraud?

Warm regards

Who is online

Users browsing this forum: No registered users and 5 guests