Craigslist Overpayment Scam (Larry Moore/John Brewer)

I believe there was a scam against me from a "potential buyer" on CraigsList.

Larry Moore had agreed to purchase a Dryer online from CraigsList posting I had listed. The agreed amount was for $300. He had sent me a certified check. But, according to Larry, his secretary had "accidentally" sent $2100. He had requested that I deposit the check and wire back the difference from money made from the sale. Money was wired via WalMart Moneygram for $1654 ($2100 minus the cost of the dryer and moneygram fee). He said the money was to be wired to his mover, John Brewer, who would pick up the washer. The Moneygram was sent to John Brewer. Moneygram confirms the money was picked up at local Walmart approx 1700 CST on 7/5/13.

When the certified check was initially deposited it was available according to my account activity. But, I guess the new thing I learned is that the bank takes some time to clear it with the originating bank. So, a few days later, after the Moneygram was sent, my bank bounced the check and charge me a fee for it.

In retrospect, somethings did not add up for me, which in hindsight I should have picked up on before.
- Larry Moore had Overnight FedEx the certified check from the following address: Magic Forest LLC
18001 Cowan, Irvine, CA 92614
- Larry Moore's e-mail address is: Larry Moore [email protected] and [email protected]
- Two phone numbers are associated with Larry Moore: (786) 250-1453 and (619) 387-8329
- His mover, John Brewer, had the following address: 2304 s Jefferson Ave Tacoma, WA 98402
- He has been texting me from the above numbers which I still have a saved onto my phone

Is there anyway I can track this guy down and get my money back? Can he be caught so he doesn't do this to someone else?

Thanks!
- MyName


E-mail thread follows (with headers):
Content-Type: text/plain;
charset=iso-8859-1
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
Subject: Re: Kenmore Elite Oasis Electric Dryer - $300
X-Universally-Unique-Identifier: 913f731b-790d-4311-a271-0857eb013628
From: MyName MyName <[email protected]>
In-Reply-To: <CAGNxRF_BdkOEEavgNS11FO0nuswWhexMbhi0fiAvwYtMdHqeXQ@mail.gmail.com>
Date: Fri, 5 Jul 2013 10:46:00 -0500
Content-Transfer-Encoding: quoted-printable
X-Smtp-Server: box391.123.com:[email protected]
Message-Id: <[email protected]>
References: <kti5hHrNXByVoWSIq9nv_vrCtFqbSmgRjZawfY0QPY5yb_8Z506bGSRfOdRWqJ9i@v1.cl.com> <[email protected]> <CAGNxRF9VwD7fDNNpvGeAg5Ef4rrsegb3g_PzPO5GxpjRTaDxbw@mail.gmail.com> <[email protected]> <CAGNxRF_BdkOEEavgNS11FO0nuswWhexMbhi0fiAvwYtMdHqeXQ@mail.gmail.com>
To: Larry Moore <[email protected]>

Good morning Larry,

The Certified Check arrived this morning. Could you give me the money =
transfer information so that I can get that rolling for you as soon as =
possible?

- MyName



On Jul 2, 2013, at 3:31 PM, Larry Moore <[email protected]> wrote:

> I have since receive the confirmation from my secretary and a
> certified check which i believe is easier and faster has been issued
> to your name and address as provided and would be delivered via FedEx
> ,but to my greatest surprise the payment was issued out to the sum of
> $2100 instead of the actual cost of my purchase . She claimed that I
> requested for that amount to be issued out to you but am very sure I
> only made a request for just the cost of my purchase.This is a
> terrible mistake and I was just informed about this so please once the
> check is delivered please take it to your Bank and have it cashed.
>=20
> You will then deduct the cost of my purchase plus an extra $100 to
> offset the cost of your run around expenses.The rest of the fund
> should be sent to my mover via western union money transfer/money gram
> money transfer which is available in every Walmart or K-Mart store
> around you the same day so that my mover can make the trip over for
> the pick up at once. *I will need your response via email assuring me
> that I can trust you to handle this with utmost care and have the
> remaining fund returned appropriately as requested and will hope that
> your intentions remains noble though out the duration of this
> transaction
>=20
> On 7/2/13, MyName MyName <[email protected]> wrote:
>> Good morning Larry,
>>=20
>> I can agree to a check with your suggested arrangement. Did you want =
to come
>> by to look at the dyer sometime? My address is XXXXXXX =
XXXXX
>> XXXXX, IL XXXXX. My phone number is (XXX) XXX-XXXX. I was hoping to =
sell for
>> $300, but I'll consider your best offer.
>>=20
>> Thanks!
>> - MyName
>>=20
>> On Jul 1, 2013, at 6:54 PM, Larry Moore <[email protected]> wrote:
>>=20
>>> Hello how are you doing? Is Check a fine form of payment, then after =
it
>>> clears your Bank i'll arrange for a mover to come over for the pick =
up?
>>> If you are OK with it, let me have your name and address to send the
>>> payment
>>> to and a mobile number to contact you at. What is your final price?
>>> Larry
>>>=20
>>> On 7/1/13, MyName MyName <[email protected]> wrote:
>>>> Hi Larry,
>>>>=20
>>>> The dryer is in great condition! Looks nearly as good as the day I =
bought
>>>> it
>>>> and has been working well since then. If want to come by to look at =
it,
>>>> I'd
>>>> be happy to set up a time with you.
>>>>=20
>>>> - MyName
>>>>=20
>>>>=20
>>>> On Jul 1, 2013, at 8:18 AM, "Larry Moore"
>>>> <[email protected]> wrote:
>>>>=20
>>>>> Hello I'm interested, I hope it's in good condition,kindly send me =
an
>>>>> email at [email protected]. Thank you.
>>>>> Original craigslist post:
>>>>> http://chicago.craigslist.org/nwc/app/3905626333.html
>>>>> About craigslist mail:
>>>>> http://craigslist.org/about/help/email-relay
>>>>> Please flag unwanted messages (spam, scam, other):
>>>>> =
http://craigslist.org/mf/f9717e5eca37d4 ... 3719fb7a.1
>>>>=20
>>>>=20
>>=20
>>=20

Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Fri, 05 Jul 2013 13:29:39 -0600
Received: from [64.18.2.125] (port=42499 helo=psmtp.com)
by box391.123.com with smtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1UvBhL-0002j0-8j
for [email protected]; Fri, 05 Jul 2013 13:29:39 -0600
Received: from mail-ie0-f174.google.com ([209.85.223.174]) (using TLSv1) by exprod7mx167.postini.com ([64.18.6.10]) with SMTP;
Fri, 05 Jul 2013 15:29:39 EDT
Received: by mail-ie0-f174.google.com with SMTP id 9so5947729iec.5
for <[email protected]>; Fri, 05 Jul 2013 12:29:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=hcbq0t8BzQ+4AV14EK2ypO3ICdrrNXOttNqshqGdeXE=;
b=OQ7noWTi0eNbuFUzBJXJPLf1/i0a/WMT6Qa9sDLdDJJ9Mv/e2N0RwwJNqYAcqzkWZl
DwA2dYGIbzluzrTNSCeAf8M7R0BpDJdR53+w+l15wZWlxNYDzo/Q84qncwzxn7iS6Dum
HblNcD+QGKKwdklRs0sOwC31+K69wmwfMjUeK48aHQedYI38tnKapjIL+FSmteqKse3G
6awRGr/dV6LI2gHcPGGZKGBUjDrDxND2ut+IsB834RelA2VO3yaxNubryENa6hbugPYe
v+T9SKd+izyzvKh0qC0Vd3nDYDi29z0PUzwP1ueHIMf0WAW4kyFVrGXxR8SwqqZBmWrD
5zCA==
MIME-Version: 1.0
X-Received: by 10.50.65.99 with SMTP id w3mr5062584igs.37.1373052578355; Fri,
05 Jul 2013 12:29:38 -0700 (PDT)
Received: by 10.50.62.35 with HTTP; Fri, 5 Jul 2013 12:29:38 -0700 (PDT)
In-Reply-To: <[email protected]>
References: <kti5hHrNXByVoWSIq9nv_vrCtFqbSmgRjZawfY0QPY5yb_8Z506bGSRfOdRWqJ9i@v1.cl.com>
<[email protected]>
<CAGNxRF9VwD7fDNNpvGeAg5Ef4rrsegb3g_PzPO5GxpjRTaDxbw@mail.gmail.com>
<[email protected]>
<CAGNxRF_BdkOEEavgNS11FO0nuswWhexMbhi0fiAvwYtMdHqeXQ@mail.gmail.com>
<[email protected]>
Date: Fri, 5 Jul 2013 20:29:38 +0100
Message-ID: <CAGNxRF-cZuLbddAM5jEnG5smp5jxO6cS1EOzhd-iCCNbL1umDg@mail.gmail.com>
Subject: Re: Kenmore Elite Oasis Electric Dryer - $300 - (Buffalo Grove IL)
From: Larry Moore <[email protected]>
To: MyName MyName <[email protected]>
Content-Type: multipart/alternative; boundary=047d7b3a994c30dfdb04e0c8b735
X-pstn-neptune: 0/0/0.00/0
X-pstn-levels: (S:42.84497/99.90000 CV:99.9000 FC:95.5390 LC:95.5390 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-dkim: 1 skipped:not-enabled
X-pstn-settings: 5 (2.0000:0.0200) s cv gt4 GT3 gt2 gt1 r p m c
X-pstn-addresses: from <[email protected]> [66/4]

--047d7b3a994c30dfdb04e0c8b735
Content-Type: text/plain; charset=ISO-8859-1

Now that you have the check take it to your bank and deposit it for cash
afterwards send the balance to my mover via western union Money transfer or
Money Gram Money Transfer, here is the name and address western union money
transfer/ money gram will be sent to

Name:John brewer
Address.. 2304 s Jefferson ave
Tacoma wa 98402


As soon as the money is sent, send me an email with the details so we can
proceed

--047d7b3a994c30dfdb04e0c8b735
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Now that you have the check take it to your bank and depos=
it it for cash afterwards send the balance to my mover via western union Mo=
ney transfer or Money Gram Money Transfer, here is the name and address wes=
tern union money transfer/ money gram will be sent to<br>
<br>Name:John brewer<br>Address.. 2304 s Jefferson ave<br>=A0=A0=A0=A0=A0=
=A0=A0=A0=A0 Tacoma wa 98402<br><br><br>As soon as the money is sent, send =
me an email with the details so we can proceed</div>

--047d7b3a994c30dfdb04e0c8b735--

Unfortunately there is no way for you to get the monies back. Scammers prefer Western Union and Moneygram because they're untraceable once they've picked up the money. All infos they used in 'purchase' with you are made up.

For the future, I recommend that you only deal locally, in person, let the buyer see the goods, and only accept cash.

I am so very thankful that somebody alerted me to this scam! At first I thought, "No, this guy won't do that," and I really have never heard about this scam before. But here I am just a few days later looking at a check mailed to me...an honestly REAL looking check for almost ten times the amount of my asking price. Then an email followed..."You are to deposit this check...and send me back the difference in a moneygram...but keep an extra $50 dollars for your trouble...blah blah blah." Even if I hadn't been tipped off by a stranger wanting to legitimately buy my item (for less than the asking price), I still would not have fallen for it in the end, but it probably would have taken me a few days to research it and figure it out.
Is there anything we can do to stop these scammers before they rip off one of our neighbors...our more naive neighbors and friends? And what should I do with the check he sent? Is there someone I can send this evidence to?
I did promptly email the guy back asking if he thought I was stupid, and I told him to go to hell. Hmmm no reply from the scummer.

Larry Moore responded to a post I had in Craigslist which started like this.

8/19 Hello i will like to know if the posted AD is still available for sale. Contact me via email at [email protected]

I responded: Yes, the products for $600.00 are still available....

8/24 He responds: Hello how are you doing? Is Check a fine form of payment, then after it
clears your Bank i'll arrange for a mover to come over for the pick up?
If you are OK with it, let me have your name and address to send the payment
to and a mobile number to contact you at. What is your final price? Larry

8/26 I respond: Larry, sorry pretty firm on the price. My name is Tom at XXXXXX You can reach me at 206-xxx-xxx for pick-up arrangements. The products are safe and are yours under your
proposal. This is still great deal

8/27 He responds: I have since receive the confirmation from my secretary and a
certified check which i believe is easier and faster has been issued
to your name and address as provided and would be delivered via FedEx
,but to my greatest surprise the payment was issued out to the sum of
$4000 instead of the actual cost of my purchase . She claimed that I
requested for that amount to be issued out to you but am very sure I
only made a request for just the cost of my purchase.This is a
terrible mistake and I was just informed about this so please once the
check is delivered please take it to your Bank and have it cashed.

You will then deduct the cost of my purchase plus an extra $100 to
offset the cost of your run around expenses.The rest of the fund
should be sent to my mover via western union money transfer/money gram
money transfer which is available in every Walmart or K-Mart store
around you the same day so that my mover can make the trip over for
the pick up at once. *I will need your response via email assuring me
that I can trust you to handle this with utmost care and have the
remaining fund returned appropriately as requested and will hope that
your intentions remains noble though out the duration of this

I respond: Not a chance in HELL I'll be doing that. No further correspondence. Guess he's having a hard time managing all of these scams. Lessons learned. Google any e-mail address in response to your Craigslist post first.....

Just wanted to say I went through the whole process of registering with scamwarners just so I could say thank you for this post! I'm selling an item on Craigslist and was contacted by this person. Your information helped me avoid a major headache. Thank you.

Just received an email from this person regarding a painting that I had just put up for sale in Illinois:

"Hello i will like to know if the posted AD is still available for sale. Contact me via email at disturbplc( at ) gmail DOT com"

I explicitly asked for phone numbers from serious buyers and since his email did not include his name, I googled it and this thread was first on the list. Thanks for saving me the headache dealing with this scumbag.




Craigslist Overpayment Scam (Larry Moore/John Brewer)
Craigslist Overpayment Scam (Larry Moore/John Brewer)
Craigslist Overpayment Scam (Larry Moore/John Brewer)
Craigslist Overpayment Scam (Larry Moore/John Brewer)
[email protected]
[email protected]
[email protected]
[email protected]