NEED HELP!!

Hi all,
Im from Indonesia.
I have visited this site for a few days. I think I'm facing with scammers, we got to know each other from tagged.com, but I'm not too sure yet.
Please I need your help to track these two emails from different persons and locations.

1. Supposed to be in Mexico :
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: QdT36gUWLDvlvESGV1EkcVZDWAVso51T2gaOePPLzQ7nh3sk UfpIIXsQX70qRPloflkKtS5yMd.ltzlvbKh3DEGpMzqvomwx8iSSbLh908JG cyguudy26BhbMSygteQYDe3WoggvMxv3uchB6OAPl98IK.73M15vGTfrob9a 5KdtvgYxgoiVYIkgMWuSOpLRAOtQgfJRyOHOZmvioR.KAJXhanskNT84i04u c7egsA_ctHgfm5v9ZZ9x1LVTNU6koQ6IvSvS5js86s4hi8n62vOwA07s9Xqa JykJ9GgQl6aMSzhOxfNQeLFDBL7_nuD4CoPu2WQsRnnBOTZXgxa3OL9cHVZu i5ORJ7LLDTvM11xMvY1lAr80UqnhSA7VEYjkwX3Cjc9jrj_5eqOjGeDiSQFG E6BvGQezSltYVTHvZCAjjwuMG9IS1Tiexvx_4u6nfhNZCqYkXV1Hg30NHtTE bVmXbNoG_Wvxo7r_qtaUWkCb5bh7g7_NUilk0M_SSwa98OjlO_0SiAYFKy4h 1EzoIBVabqFrlhm3Rk.nWWRyjmW1SFNLxWOL1QfqenKHrjBMgtRDst2bZK8g uTFPtsipivfGlu3qX19VPc9Mt7nYD9y7O2XSbyQJ_4ZJLb2SkFJ9yjPgXu42 C6AKzedCfKysd82P1YwjmjXvGX4unjVTPODBYJYJatsw6tZ1wsFfTM5_88RG R5xKjWuwZh.6iQkhjSf5_c1X7JcyGIlq8Bw2_ozBiJ_XqTC0CdlsY5LLHdQs 4sS7llc3GX_BZhh5bpDlPVPfSgG8Azt83q0vZgYWEPnrGarC9udWDZQt9FxB 6sSf_3l.CbkIlSSHpJqIA8Id_rI34Bu1J2VwQQ2TuZtuOrop1am0rj9Dt0qg o9xjwVClQQvAbaDv7RBAnhaSU2G_MoO7HSt6gHcITBxYXFds42EBls5.kf9. LiJMXlAoKnuPF3GaJM6yovD0FbFZTrN0mlMvFfGeJGPzmmtcdCNIm.R54hMo rnTEkItPma1ox6zFou5c1hJNFWLiB1tGjxnRp.t47gpiufQyQQjUhjPdDI7Z luEzUNlFGXQjWYV.LgtK6Nis_goevjHmabU-
X-Originating-IP: [98.138.91.63]
Authentication-Results: mta1286.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm27-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.63) by mta1286.mail.mud.yahoo.com with SMTP; Wed, 03 Aug 2011 11:29:56 -0700
Received: from [98.138.90.56] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 03 Aug 2011 18:29:54 -0000
Received: from [98.138.89.244] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 03 Aug 2011 18:29:53 -0000
Received: from [127.0.0.1] by omp1058.mail.ne1.yahoo.com with NNFMP; 03 Aug 2011 18:29:53 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 19511 invoked by uid 60001); 3 Aug 2011 18:29:52 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1312396192; bh=CVQWFm5LbTnJJLb9ctWlLVNEx6FEcSbnpc0Lg0iBys4=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=F8AvBiYwcxatKAlyxR/IqU+JlJUsmKoSs2FEY9WjSWvcc54y2QtYWr2TwnkRW0Lf2qydJA9JM1sdcC3qidrxjRCWI5FMJHpSPAC7yDC9i2Gz3XOlDDV2nEDpAEaf3Dg45O4L2iyVSFClhwwoyz0i2/TCYnkvmETBT+7rEZDhO10=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Qo5w4uQg6Y/q4SE64jmAvL2Od6hCXzxyhPJGTbgC6z/0zYDZ+K2IXPYJzVfWycVqNDfQ2VM9HbUWBIbgjJ0m/QVNZeM9XSZJhhuhKVql4IZ09tIWzaK2TI8hMuvUyhq4WpYQRTEjpFw/aULjOjELBN1NlLrWcqqjjPOxKYfFfi4=;
X-YMail-OSG: Jvi19WAVM1nErG_2a50bP0sg6.xncnb5dlAnp01TPdKGVva 3ZRUYe49ZjUQ.L_izGPqtnu03YIvfN2I5aafSbnTUtABNM__15KrHM6GLOiK qp6TdyLhLA82YVj9NY.iavoi7aBgqjfpCHW.2b1UP6GbrZuESUdaI5oI0R0Z st7jRUg3zGq7_D7f74VWO_Tcbs7u5PXCPXKhG7PJ0_dIL_0qXVAvOkC90FH7 SmRjhdrh7rS4ubdkNDOXoCj_vOKCoHNn2nDmSXnsAMsStAZrtlDzbEwqNUIY Z5a8iDtEYqL1e5bZWq8ifativ93WsgZO5byAOUM_1cq.G6pwKQfsnk4LDZND GtHPRPtNROJyu8ta_ghlHus3GQyM6T9e8gpuxNrUcc6057flhZSCQtAik5VG Z
Received: from [120.141.199.92] by web121820.mail.ne1.yahoo.com via HTTP; Wed, 03 Aug 2011 11:29:52 PDT
X-Mailer: YahooMailWebService/0.8.113.313619
Message-ID: <[email protected]>


2. Supposed to be in Manchester :[color=#FF0000][color=#FF0000][/color][/color]

Received: by 10.143.5.4 with SMTP id h4cs25848wfi;
Fri, 5 Aug 2011 07:17:40 -0700 (PDT)
Received: by 10.231.84.130 with SMTP id j2mr1449392ibl.72.1312553859851;
Fri, 05 Aug 2011 07:17:39 -0700 (PDT)
Received: from nm8.bullet.mail.ne1.yahoo.com (nm8.bullet.mail.ne1.yahoo.com [98.138.90.71])
by mx.google.com with SMTP id x7si3396797ibx.48.2011.08.05.07.17.39;
Fri, 05 Aug 2011 07:17:39 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.90.71 as permitted sender) client-ip=98.138.90.71;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.90.71 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from [98.138.90.56] by nm8.bullet.mail.ne1.yahoo.com with NNFMP; 05 Aug 2011 14:17:38 -0000
Received: from [98.138.89.251] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 05 Aug 2011 14:17:38 -0000
Received: from [127.0.0.1] by omp1043.mail.ne1.yahoo.com with NNFMP; 05 Aug 2011 14:17:38 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 73250 invoked by uid 60001); 5 Aug 2011 14:17:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1312553857; bh=9nI5n5Vk5GnTwyt3Vm8m7GBAFCZxr9j37z8RezGq+EQ=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=vu2qUuLJ1znQaiztsGVKX7c1MPe6cb8ejrKSH/kapP2KK/VTHLFVYKndPWO3wWVgpJ59+goxmYy394dOT0PLOgq0DzeFDJrWJSe///qzbTHkeMjCxQ6z8Tke9ri4K9kKRLS1WxYqWVf7MBZdYYWgYgFpGuJkYCKy3gg4OTHYTyc=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=Ug/2/GfmU/3W25SzxTPfinHJBomt1u117Oz6RuR8l/PSlRNQ881TZreERoKgixJ3n+b0bE1yghpHeSVBQ2HauxT7WNAEqto3g2QJyCw+wCZzf/FmDu0WY9DCbDO+GJbUiQOY5xw5T8mgvz+U5GSHKCc/w70cAsY6kiTBR8aFVBg=;
X-YMail-OSG: Njnb2hIVM1n7Pa_dxqZQWXAcZrSryJv4K4iKtGleHHjvcvP
h5RwIFsw9_3OHT2KFvzHpdauVCdEuEnv3DxE8NIacIT2GRpLLRpXLhCyQaJV
iL9IUJ.UgsAgZeWzgqJ6e6dgQNY3AL2JaPH74sDwpRrdGgX8SxZ_oDWEQk1w
qMzTwDuqNbKg_WIrpC3.W86RzJ7TBQSIDHi1q2IiDbLEcQMu4Sv8T3J4iD7I
.5J10PCD5_qmxYtpS.tLDmq_ZI_MuFIyANd0UVctIrCGIVZwEXSw1ipGc.Ex
tXUhhwx6D_XelE_s1DIzGe5kkaRdjPJR7k9Ab6eZU4ecQhGUtH5I_nPBQJ8q
14p2ZFua0UTN4kzNxosw2Ot6RaDs6kU9eA2uO3tHVLs9Rp_SCFYydKh7vyqj
nvS4sk7Y3oc.C93o2ygheihItO6Jrghzs0BVWmVcNOHFxpDX2zBfMrPjU8rQ
WBiggPJWC1atU
Received: from [175.139.52.233] by web121208.mail.ne1.yahoo.com via HTTP; Fri, 05 Aug 2011 07:17:37 PDT
X-Mailer: YahooMailWebService/0.8.113.313619
References: <[email protected]>
Message-ID: <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-503350056-1312553857=:59480"

--0-503350056-1312553857=:59480
Content-Type: multipart/alternative; boundary="0-1745710526-1312553857=:59480"

--0-1745710526-1312553857=:59480
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable



Thank you so much. Looking forward to hear from you.
Regards.

120.141.199.92 Kuala Lumpur Malaysia

175.139.52.233 Malaysia


So both are in Malaysia, which has a very active cell of Nigerian scammers, and not in the claimed locations. Safe to say they are scams.

If you could post the actual emails they sent you, with the email addresses they used, it would help other potential victims to avoid being scammed.

Thank you so much for your help. Really appreciated it. Now i'm pretty sure they are scammers.

I cant post their email addresses yet because I want to ask them to have video call with me first.
If they refuse, I will post their email addresses.
Btw, i'm pretty sure they are one of what my country called "interstate-fraud".
They claimed sending me some valuables things like, a laptop, jewelry, and money.
But then someone in Malaysia called me that the packages were hold by the customs because they detected some currency in it. This courier agent called me to ask for 1,550 USD to get the packages from the customs and send it to Indonesia.
Hello??? I have a friend works at Fedex, she said there is no way some packages got stuck in other countries. It supposed to go straight to Indonesia. So that's how I found this website because I want to share this to others too and I have a very good idea to set them up from this site too.

These are the two website (courier services) they use after they said they've sent me packages and they want me to trace the tracking numbers. They look real :
1. http://www.fde-xpress.com
2. http://www.rapexcour.com


Regards

There is already no doubt that they are scammers. The latest information you provided confirms it beyond a doubt. While many scammers are not capable of it, video footage can be faked, and appearing on webcam is not proof that someone is a scammer.

We have a definite fake website here too. In fact, it was only registered last week. The other domain doesn't appear to exist--it may have been a fake that was already killed.

If you received any emails from the rapexcour.com domain, please post them here with headers, as they will help to get the fake domain/website killed.

Domain Name: RAPEXCOUR.COM
Registrar: TUCOWS.COM CO.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: PARKING1.MDNSSERVICE.COM
Name Server: PARKING2.MDNSSERVICE.COM
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 09-aug-2011
Creation Date: 03-aug-2011
Expiration Date: 03-aug-2012

YES INDEED. It IS A 419 SCAM. The parcels don't exist. There is nothing to release. Any payment made will be followed by another difficulty needing a further fee. I wouldn't bother with any chat, and maybe your cam picture could be used in further scams. You won't see anyone real , webcam can be faked. I wouldn't let the scammers have any further information, just get out and let them go away.

And looking at the email header, we see NNFMP contained within. That is a type of protocol seen in yahoo emails. (Not always) but usually indicates a fraudulant email sender is how it's been explained to me.
The header shows the origin coming from a different location stated, so yes it would be highly suspect.

Dear Dotti,
This is the email from the rapexcour, Malaysia.

Received: by 10.143.36.13 with SMTP id o13cs85577wfj;
Sun, 7 Aug 2011 19:29:24 -0700 (PDT)
Received: from mr.google.com ([10.231.12.201])
by 10.231.12.201 with SMTP id y9mr5742554iby.61.1312770564010 (num_hops = 1);
Sun, 07 Aug 2011 19:29:24 -0700 (PDT)
Received: by 10.231.12.201 with SMTP id y9mr4457306iby.61.1312770563636;
Sun, 07 Aug 2011 19:29:23 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mailout-us.gmx.com (mailout-us.gmx.com [74.208.5.67])
by mx.google.com with SMTP id b12si6285880ibi.111.2011.08.07.19.29.23;
Sun, 07 Aug 2011 19:29:23 -0700 (PDT)
Received-SPF: neutral (google.com: 74.208.5.67 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=74.208.5.67;
Authentication-Results: mx.google.com; spf=neutral (google.com: 74.208.5.67 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: (qmail 6369 invoked by uid 0); 8 Aug 2011 02:29:23 -0000
Received: from 175.142.230.195 by rms-us014.v300.gmx.net with HTTP
Content-Type: multipart/alternative;
boundary="========GMXBoundary261311312770561531166"
Date: Mon, 08 Aug 2011 02:29:21 +0000
From: [email protected]
Message-ID: <[email protected]>
MIME-Version: 1.0
Subject: Dear customer,

X-Authenticated: #121729715
X-Flags: 0001
X-Mailer: GMX.com Web Mailer
x-registered: 0
X-GMX-UID: ZSNaD30S23y00okoNmJocjFudmllcsXc

--========GMXBoundary261311312770561531166
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

RAPID-EX COURIERS LTD.
*Kuala Lumpur, Office
74 Jalan Doraisamy off
Jalan Sultan Ismail,50200
Kuala Lumpur, Malaysia
Contact Number:+6011-1231-7538*




/Our valued customer, thanks for using/Rapid-Ex couriers Ltd
/We are hereby to inform you that your parcel from Dxxxxx, ( United
Kingdom) has arrived here in our office in Malaysia and will be
dispatched to your
address but first, you have to pay for the local charges, which is USD 650 equivalent to Rm 1,955 (Ringgit Malaysia) once we receive it
your package will be process and deliver to you.
Please, make the payment today to facilitate the delivery of your package.

Charges Details:
Handling: RM455 (Ringgit Malaysia)
Forwarding/shipping: RM 500 (Ringgit Malaysia)
Local Tax: RM1000(Ringgit Malaysia)
Total : RM 1,955 (Ringgit Malaysia)


The following is the information details for payment.
Name; Banda Jonathan
Address: Kuala Lumpur Malaysia
Payment Amount: RM 1,955 Ringgit Malaysia

P/S: Please make payment through Western Union because is
faster and safer way to transfer money.

Thank you, as I hope I have made myself clear by this notice as directed by our management.

Please do not hesitate to contact us if you encounter any problem. Thank You

Best regard,
Dyana Firdaus,
Admin Head, Customer Propositions
Rapid-Exp couriers Ltd
Contact No. +6011-1231-7538/

--========GMXBoundary261311312770561531166
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<span style=3D'font-family:Verdana'><span style=3D'font-size:12px'><br />=
=20
<br />=20
<br />=20
<br />=20
<strong><span style=3D"color: rgb(0, 0, 255);"><span style=3D"font-size: 24=
px;">RAPID-EX COURIERS LTD.</span></span></strong><br />=20
<strong>Kuala Lumpur, Office<br />=20
74 Jalan Doraisamy off<br />=20
Jalan Sultan Ismail,50200<br />=20
Kuala Lumpur, Malaysia<br />=20
Contact Number:+6011-1231-7538</strong><br />=20
<br />=20
<br />=20
<br />=20
<br />=20

<br />=20
<br />=20
<br />=20
<strong><em>Our valued customer, thanks for using</em></strong><span style=
=3D"background-color: rgb(255, 255, 255);"> </span><span style=3D"color: rg=
b(0, 0, 255);"><strong><span style=3D"font-size: 18px;"><span style=3D"back=
ground-color: rgb(255, 255, 255);">Rapid-Ex couriers Ltd</span></span></str=
ong></span><br />=20
&nbsp;<strong><em>We are hereby to inform you that your parcel from Dxxxx ( United<br />=20
Kingdom) has arrived here in our office in Malaysia and will be<br />=20
dispatched to your<br />=20
address but first, you have to pay for the local charges,&nbsp; which is US=
D 650 equivalent to Rm 1,955 (Ringgit Malaysia) once we receive it<br />=20
&nbsp; your package will be process and deliver to you.<br />=20
Please, make the payment today to facilitate the delivery of your package.<=
br />=20
<br />=20
&nbsp;Charges Details:<br />=20
&nbsp; Handling:&nbsp; RM455 (Ringgit Malaysia)<br />=20
&nbsp; Forwarding/shipping: RM 500 (Ringgit Malaysia)<br />=20
&nbsp; Local Tax: RM1000(Ringgit Malaysia)<br />=20
&nbsp;Total :&nbsp;&nbsp; RM 1,955 (Ringgit Malaysia)<br />=20
<br />=20
<br />=20
The following is the information details for payment.<br />=20
Name;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Banda Jonathan<br />=20
Address:&nbsp; Kuala Lumpur Malaysia<br />=20
Payment Amount:&nbsp;&nbsp; RM 1,955 Ringgit Malaysia<br />=20
<br />=20
P/S:&nbsp; Please make payment through Western Union because is<br />=20
&nbsp; faster and safer way to transfer money.<br />=20
<br />=20
Thank you, as I hope I have made myself clear&nbsp; by this notice as direc=
ted by our management.<br />=20
<br />=20
&nbsp;Please do not hesitate to contact us if you encounter any problem. Th=
ank You<br />=20
<br />=20
Best regard,<br />=20
Dyana Firdaus,<br />=20
Admin Head, Customer Propositions<br />=20
<span style=3D"color: rgb(0, 0, 255);">Rapid-Exp couriers Ltd</span><br />=
=20
Contact No. +6011-1231-7538</em></strong><br />=20
<br />=20
<br />=20
<br />=20
<br />=20
<br />=20
<br />=20
<br />=20
<br />=20
<p style=3D"margin:0px; padding:0px;" >=20
=C2=A0</p>=20
<br />=20
<span id=3D"editor_signature"><span style=3D"font-family: Verdana; font-siz=
e: 12px;">&nbsp;</span></span></span></span>

--========GMXBoundary261311312770561531166--




and this one is from fde-express :


Welcome!

F & D Express Courier Service
3948, Tmn Setia Jaya, Jln
Chew Thein Moi, 91000 Tawau,
Sabah Malaysia.

Website: http://www.fde-xpress.com
Email: [email protected]
United Kingdom Tel: +44-7024028134
Malaysia Tel: +60102990729

8TH,August, 2011

Dear Madam,
With reference to the delivery of your package, we wish to bring to your notice that your package has been placed on hold by the Malaysian customs for some reasons which happened to violate the shipping policies. As the goods arrived Malaysia custom check point, the Malaysian custom officers detected that currency were included in your parcel. Thereby, certain commission must be paid as customs duty via us which is for the immediate clearance of your package.For the main time reference of tracking on the " status" of your package is pending , this is in accordance to the mode of operations in the Courier sector for financial delivery. We have already taken order number for this package from the custom.

You are required to follow all instructions giving to you to facilitate the release of your package. To do this, you are required to pay the required charges listed below for the immediate release of your package. Upon confirmation of payment, your package will be delivered to your designated address above under few hours .

Outstanding Charges:

Administrative ......................... $ 550

Clearance.............................. $ 1,000

TOTAL = $ 1,550 United States dolars)

A total of $ 1,550 (One thousand, five hundred and fifety Uniterd States dollar only) has been charged. In acknowledgement to this email, account details shall be provided to you for the payment as stated above for the release of your package) Thank you, as we hope we have made ourself clear to you by this notice as directed by the management.

Thank you so much for using F&D Express Courier Service for your delivery packages and for your business needs.



For more inquiry call: +60102990729
Email: [email protected]


Yours Faithfully.

Mr. Abdul Rahman.
South East Asia Regional Co-ordinator
F & D Express Courier Services Malaysia Branch.
Tel: +60102990729.

Sorry, forgot to put the header from fed-express, here we go :


Return-Path: <[email protected]>
X-YahooFilteredBulk: 74.208.5.67
Received-SPF: none (domain of asia.com does not designate permitted sender hosts)
X-YMailISG: AieMqQIWLDtnkBGiO24kugaWSpV.eFA3707E_yE_f9bGY_N1 CkqFM6SVu40BQe_5sDbmOlr9IXnUBxVyTdw_GaORaTkjD9p5q.uNVClicit0 dgE380SzNFPwW0i.gqFvhtWtlvupKw53nKlMud7ldQB8IFzWyibi_vk1Z627 4E8KcnXQ2MsFMvg5JKZrsLJbYVdrsIEGm7kiQAt9H0RK2fKJwKdSwUXXJ5P9 NdTiB6fk71kS_VZcujeRmgd5nvB6SjXwydOscM46nlBmngiIU8nUAE1vlzDb 2FUWm5.aOXvJsqVIfUwnwUGfNjVtkauoRqc6k4WysU590zikhhYSHtcVE.FB XItGrHCPtOJokDGL3BEexs6T1nC8ZpDvwH2ur5GxaAR3125wMCXBvVstPDx8 sBLBx6lRTYlpGfQBxWkkJJzXpJ_XUURrrsX7pf6kN5RlxiyO1vLsvbo68666 tVnKPlGJz1qM4HANyVWXwzOG001GGcO2G5ZXsg9vsIi5BwoVwU.0ySrlDc4j _rEoavgA_UA7QPmbWwQdrGQCpF9DV.zLOlvpanRIEI2dvdkjZhmLLvPQ9WuV vKMP7VmvjlyyVnEdPlxeWGpLHRxFyBE3nujFRhVhYrRxH.RJCXG6SQhm7qwN MnSO68NgbjHKMnWMBFQWdZb8sVc8FlORzzOfgRyVaiuWJ5qPJJQPZsci.XQw e.nkg_BNRiIA.8YBJ4mQ9Bk2Ll_U5cSzt_kkoUsyLNIWSvBrCfg6tuvY_a7p Apkxk_RpkcA7R71fUoORDEZV_FDwR6j6BDComq3LKKptVYjcGKHT02zY5Nj9 hq2hFmOrv3wytsjhz4Wy1HIJVi4ZShVUowMRm1VpX9IMRwiNMBa1PKWvh_ts V_e7qJv3laxLl84e.TcJ.lyAKrg5SVfWAgzqloz0dMjVDt4fncWlPJCM0Vap ugzvrkhG_eTsdEdDnxNEpTA4lqLt1g7e_Qdmc3_YW1LZu7pvxIq8z_RlJc08 uw5r3_fsMteSD.DjZwDKvFcvdJXLCQurWwQO2xta9rvpft8ApTqJuFyGh2Dg i9jFg4t1y.6jX3aRApmx4Ylfn8zgrzZYxpSDAV3knIxQJ0RddtZERwLG.QKC QkC1pHaCD1r_6F2hhZOf.ZKng5bSoohBU6E2mDUCfo0J0tf7WKAgd8KvPX4o lCDeTr4L38xJnkmil49LfC_0swRXPJbVH3az6mcW2sCLBoPARSFR_xZlj7Ic t0RvZO4V31myGulWi6qS_QpuSlTBs46_wRP9
X-Originating-IP: [74.208.5.67]
Authentication-Results: mta1408.mail.mud.yahoo.com from=asia.com; domainkeys=neutral (no sig); from=asia.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mailout-us.mail.com) (74.208.5.67) by mta1408.mail.mud.yahoo.com with SMTP; Sun, 07 Aug 2011 18:30:24 -0700
Received: (qmail 17508 invoked by uid 0); 8 Aug 2011 01:30:20 -0000
Received: from 120.140.62.100 by rms-us003.v300.gmx.net with HTTP
Content-Type: text/plain; charset="utf-8"
Date: Mon, 08 Aug 2011 01:30:19 +0000
From: "F D" <[email protected]> Tambahkan Pengirim ke Kontak
Message-ID: <[email protected]>
MIME-Version: 1.0
Subject: ATTENTION MADAM!

X-Authenticated: #113285240
X-Flags: 0001
X-Mailer: GMX.com Web Mailer
x-registered: 0
Content-Transfer-Encoding: 8bit
X-GMX-UID: HAoMeikP62mhIQv8oWI5oG1CRzdyMkP0
Content-Length: 2292

Our site killers will see what they can do with the site. If you receive any other emails about the fake packages, please post them.


Please do post the other emails from the scammers when you get a chance.

Dear Dotti,
I cant post his email since we are only chat with yahoo messenger.
I just found out his fake ID on facebook : http://www.facebook.com/profile.php?id=100000112896255
his name on facebook is John Alex, i just googled his picture and found out he stole someone's picture named Michel Wilczynski he lives in France. i wrote Mr. Wilczynski a message and he hasn't return it yet.
John email address and ym is [email protected]. His tagged ID is John S. http://www.tagged.com/profile.html?uid=5453088232
He said he comes from Birmingham but works in Aberdeen, now he said he's still on duty in Mexico until next week. Please be aware of him.
I hope this is helpful.

We have this scammer marked in Tagged and will try to get it removed. The profile will be decorated with warnings.

Thank you so much for the help from everyone.
These are 3 mobile numbers that he gave me :
1. +447845052610
2. +447031896692
3. +447031829788

Anymore information I will post it again.

Aside from the AFrican speech in messages, the numbers are not UK and the +44703XXXXXX GO TO Africa via call forward service.

im not too sure if he's african, because he has British accent and he uses pretty good english when we're online on yahoo messenger.
so, i need your advise how to figure this out.
thanks.

http://www.scamwarners.com/main/guestupload/20110811003329_DSCF5273_red1.jpg?id=2d9ab96bff0550605f7e2f81a1b3c635



this is the fake picture of John Alex, beware of him.