Craigslist, Ebay and other online buying/selling scams.
#48861 by carseller Wed Mar 16, 2011 9:53 pm
I received a scam email via autotrader.com. The email headers are not useful because the message is relayed through autotrader. Unfortunately, the IP address of the "buyer" is not provided by autotrader.

Although there are not many clues in the message to indicate that this is a scammer ("Seller" and "vehicle" were the ones that jumped out at me), I do know that this is a scammer. I hope someone at 419eater will bait them.

Hello Seller, I just want to find out if your vehicle is still available for sale??? Get back to me as soon as possible. Best Regards, Mike.
Advertisement

#48864 by Bubbles Wed Mar 16, 2011 10:50 pm
Can you please post up some more information regarding this situation. Did you actually have a vehicle listed for sale on autotrader?

You are correct, the sender's IP will not come through from an internal message system. Autotrader would be able to check the IP, or should be able to.

More information will be helpful regardless. Thank you!

Bubbles, former Scamwarners moderator.

Rest in Peace 24 June 2015.

Gone, but never forgotten.
#48975 by Bubbles Thu Mar 17, 2011 4:15 pm
Note: I did some research on this scammer. I do not recommend others do this. I wanted to make certain this email address was being used by a scammer. It Is!
I wrote:Yes Mike, my vehicle is still available. Let me know your interest and we can make a deal.


scammer Mike wrote:hi,
thanks for your mail and sorry for my late reply because am out of the country at the moment on a business trip (presently in London ,UK) and i don't know how soon am going to be back home and i really want to buy this vehicle for my business purpose when i return back home.
I can only pay for your vehicle via CHEQUE. If you're interested in order for me to proceed with payment immediately, kindly get back to me with your full details of how you want me to write the CHEQUE (your name, address, postcode, city/town, country, tel no & final price).
Also, could you please send me more pictures of the vehicle if they are available?
Many thanks,
Mike.


This is a check / cheque scam where the scammer sends a check for more than the price of the vehicle, instructs you to deposit the check and send them the difference. I will not be contacting this scammer any further.

Do notice, he offers to pay for a vehicle he has never seen and there is no price presented by me. These are hallmarks of a scammer. Offering something that is too good to be true.

Headers:
Received: by 10.229.43.17 with SMTP id u17cs56371qce;
Thu, 17 Mar 2011 06:19:14 -0700 (PDT)
Received: by 10.213.17.200 with SMTP id t8mr154748eba.3.1300367952833;
Thu, 17 Mar 2011 06:19:12 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm18-vm1.bullet.mail.ird.yahoo.com (nm18-vm1.bullet.mail.ird.yahoo.com [77.238.189.217])
by mx.google.com with SMTP id s28si4533488weq.184.2011.03.17.06.19.11;
Thu, 17 Mar 2011 06:19:11 -0700 (PDT)
Received-SPF: neutral (google.com: 77.238.189.217 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=77.238.189.217;
Authentication-Results: mx.google.com; spf=neutral (google.com: 77.238.189.217 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]; dkim=pass (test mode) [email protected]
Received: from [77.238.189.55] by nm18.bullet.mail.ird.yahoo.com with NNFMP; 17 Mar 2011 13:19:11 -0000
Received: from [212.82.108.123] by tm8.bullet.mail.ird.yahoo.com with NNFMP; 17 Mar 2011 13:19:11 -0000
Received: from [127.0.0.1] by omp1032.mail.ird.yahoo.com with NNFMP; 17 Mar 2011 13:19:11 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 98029 invoked by uid 60001); 17 Mar 2011 13:19:11 -0000
DKIM-Signature:
s=s1024; d=ymail.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=R2VqkJV6xB/l7YTC7jqk8zrXBCKuax0rJXYlrN3L54AP2hwyplP97CiM5l7UMJgpuCiNawIDLik+QVtU/+LkfReiU+a8kTd1AJ4NQN9yLMzTxH0J7B2xNL0eGl9P96HDOXLK3n67Sij3bVO7s3CIoCyhXR6/xT3yzQjpQGR5e/A=;
Message-ID: <[email protected]>
X-YMail-OSG:
Received: from [86.181.255.160] by web29115.mail.ird.yahoo.com via HTTP; Thu, 17 Mar 2011 13:19:11 GMT
X-Mailer: YahooMailRC/559 YahooMailWebService/0.8.109.295617
References: <[email protected]>
Date: Thu, 17 Mar 2011 13:19:11 +0000 (GMT)
From: Mike Adams <[email protected]>

Bubbles, former Scamwarners moderator.

Rest in Peace 24 June 2015.

Gone, but never forgotten.
#49038 by carseller Fri Mar 18, 2011 7:50 pm
Hi Bubbles,

Yes, I do have multiple vehicles posted on Auto-Trader. I received sufficient messages from this scammer to remove any doubt of his intent. If I had only received one query, I would have sent a message similar to the one you sent. I do get legitimate messages that ask if the vehicle is still available, but this was not one of those instances.

WRT Auto-Trader being helpful, that is extremely unlikely. I have lost all confidence in them since they were bought by Yellow Pages. They truly have no clue what they are doing. If you want specifics, send a PM.

Who is online

Users browsing this forum: No registered users and 14 guests