Craigslist, Ebay and other online buying/selling scams.
#147763 by Bellows Wed Jan 30, 2013 11:14 am
HI,
I am selling my Powered Parachute which is type of sport aircraft.I believed that this reply below was possibly a scammer because the format looked so familiar. I looked up his email address ( [email protected] )and what do you know? It led me to your site. I just post this as a warning to others.I have not proceeded beyond this point. I believe the fact that his address led me here is enough for me to not pursue this sale.Here is a copy of his reply. Does it sound familiar to you?

>Good to hear from you,i am still interested ,i am an oceanographer and am currently at sea at the >moment,am buying it for my son who sent me an email that he's in need of it,and why i said would pay with >pay pal is because of my current location,i don't have access to my bank account online as i don't have >internet banking,but i have my bank account attached to my pay pal account and this is why i insisted on >paying you through pay pal.after inspection and price agreed i will only need the e-mail address you use for >registration with PayPal so as to put the money through...Notice you don't need to bother your self about the >shipment,i have an pick-up agent that will come for pick-up,they will also determine and secure the >shipment,Hope to read from you soon,
>Regards.

Here are more details for scam hunters:
Return-Path: <[email protected]>
Received: from hrndva-mxlb.mail.rr.com ([10.128.255.122])
by hrndva-imta08.mail.rr.com with ESMTP
id <[email protected]>
for MY INFO DELETED; Wed, 30 Jan 2013 06:13:53 +0000
Return-Path: <[email protected]>
X-Cloudmark-Score: 0
X-RR-Connecting-IP: 209.85.215.180
Received: from [209.85.215.180] ([209.85.215.180:42817] helo=mail-ea0-f180.google.com)
by hrndva-iedge06.mail.rr.com (envelope-from <[email protected]>)
(ecelerity 2.2.3.46 r()) with ESMTP
id 1C/AA-19845-12AB8015; Wed, 30 Jan 2013 06:13:53 +0000
Received: by mail-ea0-f180.google.com with SMTP id c1so479737eaa.25
forMY INFO DELETED Tue, 29 Jan 2013 22:13:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:x-received:in-reply-to:references:date:message-id
:subject:from:to:content-type;
bh=YOVISXeTkx74NzxVnd02ejgGiXvZQVjKmNWLpAlnwcE=;
b=HW0giussHzBeTIKF6nZIltGeGwLTk7X32VppT+7DBsFg8YNaKS8Xe44S418QksX5fb
MyT4xbJ23pp1kYxZRu7nmzIl3mEGgTZS7HEiWu1OC6DtfWV2I/2Imzr3khIHOs9FWkUS
87A9kF6GPFOV2783b5yl857FQNnWkFmVq8Z4Ujz/4OCmhwwrW8Zv3NJc98CsyVpUbaVf
VmoARxk78+VTN//Or0PBb0faAF2sWSyM2hRK4fvoJcJiUF6VjrBmNiVX59UkbuLKljwa
X94xxbrsKH4xAihVtkGW85Et7EmTLKbXktCfxf3BEBGQEX9AEH+66Qz1Wez7MI1Je3Ve
UcZw==
MIME-Version: 1.0
X-Received: by 10.14.225.133 with SMTP id z5mr11709111eep.15.1359526430625;
Tue, 29 Jan 2013 22:13:50 -0800 (PST)
Received: by 10.223.143.19 with HTTP; Tue, 29 Jan 2013 22:13:50 -0800 (PST)
In-Reply-To: <[email protected]>
References: <[email protected]om>
<[email protected]>
Date: Wed, 30 Jan 2013 07:13:50 +0100
Message-ID: <[email protected]om>
Subject: Re:MY INFO DELETEDZ
From: terry david <[email protected]>
MY INFO DELETED
Content-Type: multipart/alternative; boundary=047d7b66f54df5ceb704d47b69b7
Advertisement

#147766 by TerranceBoyce Wed Jan 30, 2013 11:26 am
No doubt at all that it's a scammer.

There's a bit of a rash of oceanographer's buying presents unseen for their children if you believed it.

To think any parent would purchase kit like that as a present without wanting to look at it first just isn't credible.

CAR ADVERTS - If a car seller mentions escrow - he's scamming you Never ever for any reason pay anything until you have seen and inspected the vehicle
#147767 by jolly_roger Wed Jan 30, 2013 11:37 am
You are doing yourself a HUGE favour by not proceeding with the scammer. Good idea to simply walk away! Thankyou for posting the header because one part of it is strange. The message seems to have been sent via a relay point? No legitimate person would have such a header on their email. And oceanographer's buying presents being another tell-tale sign.
#147769 by vonpaso xlura Wed Jan 30, 2013 11:52 am
The first IP address is 209.85.215.180, which is a Google address, consistent with the From: address being Gmail. I don't see any relay point. If you mean the address beginning 10, that's a LAN address at Road Runner.

The writing looks like that of a West African. Those scammers don't care whether they're buying cars, planes, or hair. All they care about is converting a fake PayPal email into real cash sent through Western Union.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
#217795 by AgainstScams Fri Sep 05, 2014 2:00 pm
I, too, did a search for his name/oceanographer and this was the first post.

I received the same e-mail, nearly word for word:

Good to hear from you,i am still interested,my offer is $4300,i am an oceanographer currently on sea at the moment,am buying it for my wife,why i said i would be paying with pay pal is because of my current location,i don't have access to my bank account online and i don't have internet banking,but i have my bank account attached to my pay pal account,this is why i insisted on paying you through pay pal.i will only need the name and e-mail address you used for registration with PayPal to put the money through...Notice you don't need to bother your self about the shipment,i have an pick-up agent that will come for pick-up after payment,they will also determine and secure the shipment,
Regards

~~~~
Same e-mail: terry david<[email protected]>

Glad I found this post.

#terrydavid, #terrydavidoceanographer

Who is online

Users browsing this forum: No registered users and 19 guests