[email protected] ordering scam

This scammer places an order, in this case a restaurant, asks for the bill as he appears to want to pay upfront, then sends a fake check or pays with a stolen creditcard. But the amount he pays is too much and the scammer will ask to transfer the balance with western union to him. Once that is done, the restaurant owner will discover that the check was fake, or the scammer had paid with a stolen credit card. Together with the food he had to buy, he will loose quite an amount. This is also happening to flowerists. Don't fall for these scams.

Delivered-To:
Received: by 10.204.72.1 with SMTP id k1cs64765bkj;
Wed, 9 Jun 2010 08:24:12 -0700 (PDT)
Received: by 10.101.189.31 with SMTP id r31mr18746696anp.37.1276097052158;
Wed, 09 Jun 2010 08:24:12 -0700 (PDT)
Return-Path: <[email protected]>
Received: from secure.hostpvt.com (secure.hostpvt.com [67.225.183.157])
by mx.google.com with ESMTP id w2si13101616ani.1.2010.06.09.08.24.11;
Wed, 09 Jun 2010 08:24:12 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 67.225.183.157 as permitted sender) client-ip=67.225.183.157;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 67.225.183.157 as permitted sender) [email protected]
Received: from eugccgat by secure.hostpvt.com with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1OMN8M-0000gP-F5
for ; Wed, 09 Jun 2010 18:24:02 +0300
To:
Subject: Wedding Flower Supply
From: Mr. Frank Kut <[email protected]>
Reply-To:
[email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Wed, 09 Jun 2010 18:24:02 +0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - secure.hostpvt.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [32570 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - secure.hostpvt.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/eugccgat/public_html/img/info.php
X-Source-Dir: eugccgateway.org:/public_html/img

Hello ,

I am Mr. Frank kut,Public Relation Officer(P.R.O) of Epoxy Energy PLC United Kingdom. I want to book dinner for our group of workers. They will all come for dinner in your place as from August 26th,27th and 28th,2010 by 7:00pm each day. They are 15 in number.
**NOTE THAT IT WILL BE THE SAME 15 GUESTS EACH NIGHT.
We will appreciate if you prepare a 3 course menu for my group
for the dinner.No special dietary.Also your suggestion will be appreciated since this is our first dinner in your restaurant.
Kindly provide estimate total cost of the dinner for the 15 persons for the 3 night dinner so as to provide my credit card details for full payment confirmation if there is availability in your restaurant.
Your Swift response will be appreciated.

Regards,

Mr. Frank kut

I am presently in the middle of a transaction with this scammer. His email sounded funny so i found the originating server, did a google search and came to your post. How to trap him?