[email protected]

[Heartbroken35]

Beware of mark Davidson [email protected], He's still active out there. He's known to be in Tagged, Netlog, Syhtle.fm and FB. Claims to be in UK but in actual fact he's in Malaysia right now. Known to be in connections with Dani yusup (Fellow scammer).

[David Jansen]

Could you please post the scam emails fom this scammer? Preferably with full headers. Posting the emails will help in warning others, and we need to see wether this is about a real scammer.

[jolly_roger]

Hi Heartbroken
There is a Mark Davidson mentioned elsewhere in the forums.
Could this be the same person, maybe?
Have a look here: http://www.scamwarners.org/forum/viewto ... w=previous

[Heartbroken35]

Thk u jolly_roger. But I think its not the same person cos this Mark Davidson is in Malaysia now. Its just coincident that they both use the same name. But one thing that i found out abt the scammers which I've come in contact so far. Most of them usually uses names of photographers.

David, see header below.

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MDtTQ0w9MA==
X-Message-Status: n
X-SID-PRA: Davidson Mark <[email protected]>
X-AUTH-Result: NONE
X-Message-Info: JGTYoYF78jFWD/cTXKi9CTOf6uqXgd8j06ebAw7+zr+ff7QXbTqj8H5VtKRMI5tdv134aH/w3WouyYzCeanrSkmqPGOW1FHGEssPagsbokE=
Received: from n29.bullet.mail.ukl.yahoo.com ([87.248.110.146]) by SNT0-MC3-F25.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 5 Oct 2010 20:37:38 -0700
Received: from [217.146.182.179] by n29.bullet.mail.ukl.yahoo.com with NNFMP; 06 Oct 2010 03:37:37 -0000
Received: from [87.248.111.148] by t5.bullet.ukl.yahoo.com with NNFMP; 06 Oct 2010 03:37:37 -0000
Received: from [127.0.0.1] by omp205.mail.ukl.yahoo.com with NNFMP; 06 Oct 2010 03:37:37 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 51871 invoked by uid 60001); 6 Oct 2010 03:37:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1286336257; bh=YQKSFH7cBLZHahtmyEzQjaHnzd4xlcooWKYyb8jiaBU=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=J6VLL8Kk5zHUUrfsRFt49ujHJ1TqNT4hNVtcLvuJqSbbG9WMeq+GEh7UeZvawmUZUyNpOued45ZLL0LVUNRG3wcF7t6zLXeARAyJgfnGwVQZBd2A/DbZ7OvJb3FyyO6wM3txdiZHMePfEmAt8NbHrBD85k9/0u0psYPZruzXkN0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.co.uk;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=hVc+vmfW+f1YBr5LtzkTNlV/TXjB7aRBdOUZ2vq3YVgQxr5MJWJFNcIIhUZZiFL1NEPbgbYqrQVLGxrvt7roNxUZdj6s+7Gdu1+bZGsKwB+VL23Ys43hUVuIfY1P69ixKWZa/zDqNlQwDBghLIfLxC2GgWWsbAs4WXyDPx0aulY=;
Message-ID: <[email protected]>
X-YMail-OSG: 9j2KHKUVM1nFtV0.A12pClyM1eEafGaYQ2XlC0qci2vqf6v
RsesxgI_Uf_D1u.U8ducozjeHqyTd6ZFpmX4GPP_mYlzGVea7CmTYx8B15Me
a3v509xTw45fKdsAuGPhCX0AoY2BXmDglUNwh9c2W8b2cH_ykAULNxPD2_E1
aj2DID2Vj8lW0S3YnVCw_89xyGaPdG8fg67k2imCecE6HPVPd1xbu5xYFcwb
tPUK0BZJ2q8mz
Received: from [120.141.68.190] by web24615.mail.ird.yahoo.com via HTTP; Wed, 06 Oct 2010 03:37:37 GMT
X-Mailer: YahooMailClassic/11.4.9 YahooMailWebService/0.8.105.279950
Date: Wed, 6 Oct 2010 03:37:37 +0000 (GMT)
From: Davidson Mark <[email protected]>
Subject: RE: Pls tell me....
To: Daddys Gerl <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1736676908-1286336257=:51657"
Return-Path: [email protected]
X-OriginalArrivalTime: 06 Oct 2010 03:37:38.0795 (UTC) FILETIME=[D2EA7BB0:01CB6507]

[Heartbroken35]

I just went through my text messages and saw one that I still have which was not deleted. This guy wants me to transfer money to him to this account no 14210077030527 SWIFT CD CIBBMYKL Taman Tun Dr Ismail Branch, I'm not sure if its Western Union or some other money transferring Institute. He told me to direct the money to 'Alisa Mariana Bt. Mohamed Yusuf'.

[Heartbroken35]

I did a little research on Google and understood the meaning. SWIFT CD is actually Swift Code. CIBB is the bank's code, CIBBMYKL = CIMB Bank, Malaysia, Kuala Lumpur Branch. With this info can I actually find the actual person who is behind all these? cos as I know to open a bank account one have to produce the actual documents to identify the actual person who is applying.

[jolly_roger]

And just a quick note... From the email header we see NNFMP.
(Not always) Usually means the email is a scam.