Employment scam: Executive Assistant-Lukas Svensson

[Thesto]

in Calgary

Hahaha, I would like to know how many now have a new position as an EA with the same company. Well my laughing is rather black humor...... it would be funny if the economy wasn't that bad.

[MarryW]

it would be funny if the economy wasn't that bad

That's right. I'm unemployed over a year and Have really bad situation. I wish to have a chance to catch this guy.

[vonpaso xlura]

Can You explain me how they can steal money for us?

Three likely methods:
*Lukas gets hold of some bank accounts and wires money to your account or has a check printer send checks to you. He tells you to send money by Western Union to him.
*Lukas gets hold of some credit cards and buys stuff, having it shipped to you. He tells you to forward it to him.
*Lukas has someone send money to you. He tells you to buy office supplies (so it says in the job description) and send them to him.

The reports are just to make it seem like a real job.

thune.us is in the process of being reported for fraud.

[Thesto]

The reports are just to make it seem like a real job

...and that's another really impertinent part.... the task they are asking us to fulfil is not only time consuming but also embarrassing for us..... calling all these realtors for office space, checking it out, making pictures, making reports, negotiating and then not even get paid for your effort!

btw, please check out this website:

Removed (BW)

because in my initial e-mail though it showed "thune.no" this was the actual underlying link.

[Thesto]

Sorry, wasn't aware not to post links, but it was just a website showing some jewellery but it was not the original thune one, but one that was called degxxxxxxxxxx

[Bryon Williams]

Google and the other search bots pick us up quickly.

We do not want innocent people and businesses posted here.

[Thesto]

Well at least he is persistent.... I got an e-mail asking about my report

[GraceK]

They are also using the name Sven Larsson and Thor Ludvig Bareksten and even have a Linkedin profile for Thor Ludvig Bareksten claiming to work at Thune in Norway. These names were using emails using a .ca website that does not exist.

[vonpaso xlura]

By "website that does not exist", do you mean an email-only domain (there is no website or nothing on the website), or a nonexistent domain? What is the domain, and can you post the email with complete headers?

[Loanflounder167]

Hi,
I recently been in contact with HR thor Ludvig Bareksten and Sven Larsson for the EA position. I was offered the job today (with the same contractual agreement posted) and was really excited, but thought it was weird that they did not request for my references and that the money was going to be paid in USD currency. Has this scam been going on for a while now in Calgary or just recently when they posted the position on workopolis? Also, not sure if anyone sent them a picture of themself for their file, but I did which I thought was weird to ID me when they come to Canada. I have not signed the contract yet and will just tell them I decline their offer. Wish we can scam this scammer somehow.

[Mike Wilson]

Hello Loanflounder167,
No need to tell the scammer anything, just go silent and let him wonder what happened. Please post the email address used and any other contact information given to you.

If you have any additional questions please ask.

[Loanflounder167]

Here are there emails:
HR thor Ludvig Bareksten - [email protected]
Sven Larsson - [email protected]

They did not provide me their phone number.

[Bryon Williams]

^^^ Thank you for the update.

Wish we can scam this scammer somehow.

You and I are better people than these low life thieving scammers.

Ignore him. Make him think where did I go wrong.

[vonpaso xlura]

thune.ca, like thune.us, is an email-only domain. Please post the email from thune.ca with complete headers.

[t1mb0b]

Email headers from an email this morning:

Original-Recipient: rfc822;[email protected]
In-Reply-To: <[email protected]>
Return-Path: <[email protected]>
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2016-03-30_07:,, signatures=0
Organization: Thune
Mime-Version: 1.0
Authentication-Results: st11p00im-smtpin007.me.com; spf=pass (st11p00im-smtpin007.me.com: domain of [email protected] designates 91.224.22.6 as permitted sender) smtp.mailfrom=[email protected];
Authentication-Results: st11p00im-smtpin007.me.com; dkim=none reason="no signature"; dkim-adsp=none
X-Icloud-Spam-Score: 33002230 f=thune.ca;e=thune.ca;is=yes;ir=no;pp=ham;spf=pass;dkim=?;dmarc=?;wl=absent;pwl=absent;clxs=ham;clxl=absent
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 clxscore=1005 suspectscore=97 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1510270003 definitions=main-1603300203
X-Mantsh: 1TEIXWV4bG1oaGkdHB0tNT0ReQ0QYGBoYEQpMQxcbHQQbHRgEEhkEGxwQGx4aHxo RCkxZFxsaGh8RCllNF2RFXmBfREERCl9ZFx8YEQpZSRcdH3EbBhsfGncGBx4TBhoGGgYHGR4GG RpxGxAadwYaBhoGGRoGGgYaBhpxGhAadwYaEQpZXhdoY3kRCkNOF05+cmlcbHp/bWhaHBsFeWZ EQRNncHpheUZIeWNsZx1SEQpYXBcZBBoEGBIHTU4SHEwTTk8FGx0EGx0YBBIZBBscEBseGh8aE QpeWRdlZ3NoQhEKTVwXBxwTEQpMWhdCa2traxEKRVgXaBEKTEYXYmtrEQpDWhcTGwQYGB4EGBg EHBEKQl4XGxEKQkUXbB5uWXhlWxJda28RCkJOF3pbE2FbUHNnTn5eEQpCTBdobVBecx8YYnNNX hEKQmwXbWcTfRJrfV4FSGQRCkJAF20SRx1+Wk0YaR9kEQpCWBdofV9CY2ZwXBMFbBEKQngXbXB MS2NIZV4dWUkRCk1eFxsRCnBoF2UYbEl9YVhjXH9LEBkaEQpwaBdrZUtdRBxzXkx7QBAZGhEKc GgXZ14BbEdPSHhbUn0QGRoRCnBoF2l+GkxPGUIFGUdHEBkaEQpwaBdrGnlLQX1gG3pfZxAZGhE KcGMXaGFHa29DYG9ZQEQQGRoRCnBsF2kTf38ZE3NNYF4ZEBkaEQpwTBdnYRxDUAV5SWESeRAZG hEKcEMXa3xORX8bGVpEfmMQGRoRCm1+FxsRClhNF0sR
X-Priority: 3 (Normal)
X-Clx-Spam: false
Message-Id: <[email protected]>
X-Clx-Unspecialscore: 52
X-Clx-Score: 1005
References: <[email protected]>
X-Clx-Shades: NotJunk
X-No-Relay: not in my network
Content-Type: multipart/mixed; boundary=----------0CB0B517430FDD76E
X-Dmarc-Info: pass=?; dmarc-policy=(noPolicy); s=; d=
Received-Spf: pass (st11p00im-smtpin007.me.com: domain of [email protected] designates 91.224.22.6 as permitted sender) receiver=st11p00im-smtpin023.me.com; client-ip=91.224.22.6; helo=msk-cx.193.komtet.ru; envelope-from=[email protected];
Received: from st11p00im-smtpin007.me.com ([17.172.80.56]) by ms06562.mac.com (Oracle Communications Messaging Server 7.0.5.36.0 64bit (built Sep 8 2015)) with ESMTP id <[email protected]> for [email protected]; Wed, 30 Mar 2016 13:59:37 +0000 (GMT)
Received: from msk-cx.193.komtet.ru (msk-cx.193.komtet.ru [91.224.22.6]) by st11p00im-smtpin007.me.com (Oracle Communications Messaging Server 7.0.5.36.0 64bit (built Sep 8 2015)) with ESMTP id <[email protected]> for [email protected] (ORCPT [email protected]); Wed, 30 Mar 2016 13:59:36 +0000 (GMT)
Received: from localhost.localdomain (ip4da15d05.direct-adsl.nl [77.161.93.5]) by msk-c15.193.komtet.ru (Postfix) with ESMTPSA id 69DAB11E2FF for <[email protected]>; Wed, 30 Mar 2016 16:59:04 +0300 (MSK)
So today is your first day!