Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#30048 by David Jansen Mon Jun 07, 2010 2:33 am
Welcome here camflys.

What you're doing is what we call scambaiting. It can provide some extra info about the scammer, but keep in mind that scammers lie, always! You can find more information about scambaiting on our sister site: http://www.419eater.com/index.php

Being a victim doesn't mean you stand alone. We're here to help you.
Advertisement

#30075 by Lioness Mon Jun 07, 2010 11:30 am
Here is the header info he sent me this morning. Along with an email. What is the hotmail address he uses please? Also this is the email that was sent and received.

From Stephen Frank Mon Jun 7 08:45:46 2010
X-Apparently-To: via 68.180.196.148; Mon, 07 Jun 2010 01:45:47 -0700
Return-Path: [email protected]
Received-SPF: none (mta1073.sbc.mail.mud.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG: X-Originating-IP: [67.195.23.157]
Authentication-Results: mta1073.sbc.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 67.195.23.157 (EHLO flph262.prodigy.net) (207.115.20.47)
by mta1073.sbc.mail.mud.yahoo.com with SMTP; Mon, 07 Jun 2010 01:45:47 -0700
X-Originating-IP: [67.195.23.157]
Received: from n3-vm1.bullet.mail.gq1.yahoo.com (n3-vm1.bullet.mail.gq1.yahoo.com [67.195.23.157])
by flph262.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id o578ji2k027002
for <>; Mon, 7 Jun 2010 01:45:47 -0700
Received: from [67.195.9.81] by n3.bullet.mail.gq1.yahoo.com with NNFMP; 07 Jun 2010 08:45:46 -0000
Received: from [67.195.9.111] by t1.bullet.mail.gq1.yahoo.com with NNFMP; 07 Jun 2010 08:45:46 -0000
Received: from [127.0.0.1] by omp115.mail.gq1.yahoo.com with NNFMP; 07 Jun 2010 08:45:46 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 11943 invoked by uid 60001); 7 Jun 2010 08:45:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1275900346; bh=XGBggSRi6405SntcKpVpLUjW/y9zarqS0XPlKcz8cP8=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; bDomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=Message-ID: <[email protected]>
X-YMail-OSG:
Received: from [41.155.85.138] by web113004.mail.gq1.yahoo.com via HTTP; Mon, 07 Jun 2010 01:45:46 PDT
X-Mailer: YahooMailRC/397.8 YahooMailWebService/0.8.103.269680
References: <[email protected]>
Date: Mon, 7 Jun 2010 01:45:46 -0700 (PDT)
From: Stephen Frank [email protected]
Subject: Goodmorning love.
To: In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1662007347-1275900346=:5222"
Content-Length: 5689

Removed domain key - Ralph
#30076 by Lioness Mon Jun 07, 2010 11:33 am
The email that was with the header below:



--------------------------------------------------------------------------------

When i say I am rolling over my investment to the US what do you think i was talking about,I am a financial assistant for She but i am retired now just to be with you but i still help people with small scale business as part time job But i do it when ever i feel like,I also have some investment outside my job that i take care of-if you think i am lying to you will will see all the papers when i get home. ''Nene Dental Clinic'' own's the building where i am currently staying ,it is a small Clinic so they do not occupy all the building.i was in a hotel but i spend too much money weekly so shell oil had to get this appt for me until i am able to leave here.If you really love me like you say and want me home as soon as possible you have to trust me from the dept of your heart not just typing it,if you had trust me in the past i would have been home now spending quality times with you,that is the best way to build an healthy relationship,lying to people is not my way of life-like you already know i am a christian.If i were you i would just send the money and see if i will be home for real because you have nothing to loose,i have always been honest with you but it seems you are playing games with me when ever it comes to sending money money and that isn't the right thing to do to a man you truly love,well today is Monday, prove me wrong, i hope to hear from you if what i am thinking doesn't happen again,Have a wonderful day.


If God brings you to it - He will bring you through it.

"For I know the plans I have for you, declares the Lord, plans to prosper you and not to harm you plans to give you a Hope and a Future" Jer. 29:11





--------------------------------------------------------------------------------
From:
To: Stephen <[email protected]>
Sent: Sun, June 6, 2010 3:56:43 PM
Subject: RE:

I just have one little question. If you are supposed to be staying where you say to send the Western Union thing then why does it show this: Nene Dental Clinic
Address: 24, Allen Avenue, Ikeja, Lagos.
Phone: +234 1 4966727


I just need an explanation please.
Last edited by Lioness on Mon Jun 07, 2010 6:00 pm, edited 1 time in total.
#30078 by Crispy Duck Mon Jun 07, 2010 11:45 am
I just need an explanation please.


The explanation is that he is ONLY after your money!!

If i were you i would just send the money and see if i will be home for real because you have nothing to loose, i have always been honest with you but it seems you are playing games with me when ever it comes to sending money money and that isn't the right thing to do to a man you truly love....


He will NEVER arrive & you DO have something to lose.....your money!! He is trying the typical scammer trick of making you feel guilty for not sending money & accuses YOU of playing games.

From the headers:

Received: from [41.155.85.138]


WHOIS - 41.155.85.138

netname: STARCOMMS-20081218
descr: Dial pool subnet for Lagos subscribers.

The only truth in all this is that he is in Lagos, Nigeria - & wants you to send him money!
#30079 by Mavro Mon Jun 07, 2010 12:05 pm
It might be a good idea to edit your previous two messages and remove all lines with your email address in it. Otherwise, if the scammer is smart enough to Google your email address, he'll find your messages here.
Last edited by Mavro on Mon Jun 07, 2010 6:08 pm, edited 1 time in total.

#30080 by Lioness Mon Jun 07, 2010 12:21 pm
I just called Customer Care at Shell and reported him, and they wanted a picture of the ID. I hope maybe they will pursue this. I gave them the address, the phone numbers and all of the pictures.
#30124 by Jillian Mon Jun 07, 2010 9:53 pm
I received your PM and replied. Please get back in touch with me so that I can re-set your username for you. :D

Have you sent a payment to a scammer with Western Union and now realize it's a scam? If the payment has not been picked up, you can cancel it immediately! 1-800-448-1492

Follow ScamWarners on Twitter: http://twitter.com/ScamWarners
#30231 by jolly_roger Wed Jun 09, 2010 9:09 am
[quote="Lioness"] What is the hotmail address he uses please?

Hi Lioness
He's a very active and naughty scammer this one!
The email address i saw being; [email protected]

Goes under the names of Craig Lowell, Mark Paulson, Marvel George, Rick Parker, Samuel Wilson, Roger Johnson and Fred Clonel
#30233 by Dotti Wed Jun 09, 2010 10:26 am
Hi Jolly Roger,

The modeling site Focus Hawaii is one of the most popular among African scammers, and the older male models on that site are particularly popular, probably because the site has several photos of each model posted, and they aren't watermarked or otherwise immediately traceable.

All of those may link to scammers using photos of Rick, but most likely the same scammer is not behind all of those names and/or addresses--they most likely belong to multiple scammers.

Need to post photos? http://scamwarners.com/forum/viewtopic.php?f=28&t=3219
Are you a victim of a romance scam? Read here for advice and FAQ's.
#30236 by Lioness Wed Jun 09, 2010 12:02 pm
This guy Stephen Frank or whoever he is, is a busy boy. Do you think these people are all the same person? The ones I have without him airbrushed look like a real person would look like.

Who is online

Users browsing this forum: No registered users and 400 guests