I Need some assistance regarding a scammer please

[David Jansen]

Welcome here camflys.

What you're doing is what we call scambaiting. It can provide some extra info about the scammer, but keep in mind that scammers lie, always! You can find more information about scambaiting on our sister site: http://www.419eater.com/index.php

[jolly_roger]

Hi
Just a quick note about this scammer. The subject uses two aliases, one being Curtis Brown and the other is James Owens.
Uses a hotmail address.

[Lioness]

Here is the header info he sent me this morning. Along with an email. What is the hotmail address he uses please? Also this is the email that was sent and received.

From Stephen Frank Mon Jun 7 08:45:46 2010
X-Apparently-To: via 68.180.196.148; Mon, 07 Jun 2010 01:45:47 -0700
Return-Path: [email protected]
Received-SPF: none (mta1073.sbc.mail.mud.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG: X-Originating-IP: [67.195.23.157]
Authentication-Results: mta1073.sbc.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 67.195.23.157 (EHLO flph262.prodigy.net) (207.115.20.47)
by mta1073.sbc.mail.mud.yahoo.com with SMTP; Mon, 07 Jun 2010 01:45:47 -0700
X-Originating-IP: [67.195.23.157]
Received: from n3-vm1.bullet.mail.gq1.yahoo.com (n3-vm1.bullet.mail.gq1.yahoo.com [67.195.23.157])
by flph262.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13. with SMTP id o578ji2k027002
for <>; Mon, 7 Jun 2010 01:45:47 -0700
Received: from [67.195.9.81] by n3.bullet.mail.gq1.yahoo.com with NNFMP; 07 Jun 2010 08:45:46 -0000
Received: from [67.195.9.111] by t1.bullet.mail.gq1.yahoo.com with NNFMP; 07 Jun 2010 08:45:46 -0000
Received: from [127.0.0.1] by omp115.mail.gq1.yahoo.com with NNFMP; 07 Jun 2010 08:45:46 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 11943 invoked by uid 60001); 7 Jun 2010 08:45:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1275900346; bh=XGBggSRi6405SntcKpVpLUjW/y9zarqS0XPlKcz8cP8=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; bDomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=Message-ID: <[email protected]>
X-YMail-OSG:
Received: from [41.155.85.138] by web113004.mail.gq1.yahoo.com via HTTP; Mon, 07 Jun 2010 01:45:46 PDT
X-Mailer: YahooMailRC/397.8 YahooMailWebService/0.8.103.269680
References: <[email protected]>
Date: Mon, 7 Jun 2010 01:45:46 -0700 (PDT)
From: Stephen Frank [email protected]
Subject: Goodmorning love.
To: In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1662007347-1275900346=:5222"
Content-Length: 5689

Removed domain key - Ralph

[Lioness]

The email that was with the header below:



--------------------------------------------------------------------------------

When i say I am rolling over my investment to the US what do you think i was talking about,I am a financial assistant for She but i am retired now just to be with you but i still help people with small scale business as part time job But i do it when ever i feel like,I also have some investment outside my job that i take care of-if you think i am lying to you will will see all the papers when i get home. ''Nene Dental Clinic'' own's the building where i am currently staying ,it is a small Clinic so they do not occupy all the building.i was in a hotel but i spend too much money weekly so shell oil had to get this appt for me until i am able to leave here.If you really love me like you say and want me home as soon as possible you have to trust me from the dept of your heart not just typing it,if you had trust me in the past i would have been home now spending quality times with you,that is the best way to build an healthy relationship,lying to people is not my way of life-like you already know i am a christian.If i were you i would just send the money and see if i will be home for real because you have nothing to loose,i have always been honest with you but it seems you are playing games with me when ever it comes to sending money money and that isn't the right thing to do to a man you truly love,well today is Monday, prove me wrong, i hope to hear from you if what i am thinking doesn't happen again,Have a wonderful day.


If God brings you to it - He will bring you through it.

"For I know the plans I have for you, declares the Lord, plans to prosper you and not to harm you plans to give you a Hope and a Future" Jer. 29:11





--------------------------------------------------------------------------------
From:
To: Stephen <[email protected]>
Sent: Sun, June 6, 2010 3:56:43 PM
Subject: RE:

I just have one little question. If you are supposed to be staying where you say to send the Western Union thing then why does it show this: Nene Dental Clinic
Address: 24, Allen Avenue, Ikeja, Lagos.
Phone: +234 1 4966727


I just need an explanation please.

[Crispy Duck]

I just need an explanation please.

The explanation is that he is ONLY after your money!!

If i were you i would just send the money and see if i will be home for real because you have nothing to loose, i have always been honest with you but it seems you are playing games with me when ever it comes to sending money money and that isn't the right thing to do to a man you truly love....

He will NEVER arrive & you DO have something to lose.....your money!! He is trying the typical scammer trick of making you feel guilty for not sending money & accuses YOU of playing games.

From the headers:

Received: from [41.155.85.138]

WHOIS - 41.155.85.138

netname: STARCOMMS-20081218
descr: Dial pool subnet for Lagos subscribers.

The only truth in all this is that he is in Lagos, Nigeria - & wants you to send him money!

[Mavro]

It might be a good idea to edit your previous two messages and remove all lines with your email address in it. Otherwise, if the scammer is smart enough to Google your email address, he'll find your messages here.

[Lioness]

I just called Customer Care at Shell and reported him, and they wanted a picture of the ID. I hope maybe they will pursue this. I gave them the address, the phone numbers and all of the pictures.

[Lioness]

I sam trying to change my user name so I can stay anonymous, but I am not sure how too. Can someone help me with it.

Thanks

[Mavro]

You can't do that yourself. I guess an admin has to do that for you. I suggest you PM Jillian for more info: http://www.scamwarners.com/forum/member ... ofile&u=79

[Ralph]

^^ Exactly right

When you PM Jillian with your request, include the name you would like to change to, it will save a little time.

[Lioness]

Thank you. I just did that.

[Jillian]

I received your PM and replied. Please get back in touch with me so that I can re-set your username for you.

[jolly_roger]

[quote="Lioness"] What is the hotmail address he uses please?

Hi Lioness
He's a very active and naughty scammer this one!
The email address i saw being; [email protected]

Goes under the names of Craig Lowell, Mark Paulson, Marvel George, Rick Parker, Samuel Wilson, Roger Johnson and Fred Clonel

[Dotti]

Hi Jolly Roger,

The modeling site Focus Hawaii is one of the most popular among African scammers, and the older male models on that site are particularly popular, probably because the site has several photos of each model posted, and they aren't watermarked or otherwise immediately traceable.

All of those may link to scammers using photos of Rick, but most likely the same scammer is not behind all of those names and/or addresses--they most likely belong to multiple scammers.

[Lioness]

This guy Stephen Frank or whoever he is, is a busy boy. Do you think these people are all the same person? The ones I have without him airbrushed look like a real person would look like.