Lauren Stokes ([email protected])

Received: by 10.221.44.10 with SMTP id ue10csp108913vcb;
Sat, 24 May 2014 11:18:29 -0700 (PDT)
X-Received: by 10.224.26.146 with SMTP id e18mr18284274qac.66.1400955478481;
Sat, 24 May 2014 11:17:58 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-qc0-x244.google.com (mail-qc0-x244.google.com [2607:f8b0:400d:c01::244])
by mx.google.com with ESMTPS id 110si7648565qgv.9.2014.05.24.11.17.58
for <(edited)@gmail.com>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Sat, 24 May 2014 11:17:58 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:400d:c01::244 as permitted sender) client-ip=2607:f8b0:400d:c01::244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:400d:c01::244 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-qc0-x244.google.com with SMTP id l6so3782053qcy.3
for <(edited)@gmail.com>; Sat, 24 May 2014 11:17:58 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.224.38.204 as permitted sender) client-ip=10.224.38.204
X-Received: from mr.google.com ([10.224.38.204])
by 10.224.38.204 with SMTP id c12mr17879870qae.1.1400955478012 (num_hops = 1);
Sat, 24 May 2014 11:17:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=dkM0AUpqAHu0A9VejvIQnU6S+QSKh9yQu2B6/tuydCE=;
b=qsy+h6dQGL5CNCcsINY/85hKAShG9ZWwZ/U00lRe049yBWiIsR1gvkW8G/Hi5Cz2n1
82Ny696FNjtjejV+WR76ppbJNuZ3/ZZ/egSrQze9cJvxheIcUbJR+laUoa3B7CXXWHLv
lLjhHC+pvnjEvyPi0UDWVoeC6Q2V4Kp/Cuq1O++Sc7mVpChJ2DXwufHV/rF6qCsL/wsi
gKq+pUtuDazbntofiZSS+zr9fIJ5547VnwK1itKq/otXistsKCfwPHeosrEix/7X8u3Y
RVwHIlUgJysV3g7Ut12/8gpnsSbmoUbZrtR2KMwOwKzQnKq3363qQT89o2KXk/IyzA1P
o5KQ==
MIME-Version: 1.0
X-Received: by 10.224.38.204 with SMTP id c12mr17879870qae.1.1400955478008;
Sat, 24 May 2014 11:17:58 -0700 (PDT)
Received: by 10.96.8.129 with HTTP; Sat, 24 May 2014 11:17:57 -0700 (PDT)
Date: Sat, 24 May 2014 11:17:57 -0700
Message-ID: <CAPZjAoeYdB7Eh8TmuUTGHBAKQxn0npjPrhSvTHFJArpaoz1JBA@mail.gmail.com>
Subject: Hi

Ok so this was her last email header from today. I can't tell heads or tails because of the new IP6 format. She claims she pays 250$ a month because of Menstrual Problems (drugs, panties, and other things). She has asked twice. I am right now just playing along until she proves herself to me by meeting up with me in real life. Anyway.. . . Is this a common scam or is this a twist of some other scam. I am pretty much sure she is trying to scam because she claims she has no job and trying to get her PHD, She claims she is a nurse and are looking into colleges right now! I want to shut down this scammer by posting this to see what type of responses I get from people who might fall victim to this!

Let's just say that you won't be meeting anyone in real life any time soon.

You aren't going to get anything from a gmail header. When the web interface is used (which is true the vast majority of the time) the headers won't show the true location.

As far as the scenario itself goes, it is a VERY common scam, right down to the "menstrual problems" which the scammers, who are more often male, use because many men are embarrassed or feel like this is not an appropriate topic for a man to discuss. The scammers have learned that this particular request is likely to be challenged or questioned as much as other money requests, so they use it quite often.

Is there a way to report gmail accounts that we suspect are being used to scam people? I would think Google would want to stop that being that they claim they are not evil!

[AlanJones]

We do not recommend the reporting of free email accounts as it takes the scammer only seconds to set up a new one and get back to his victims - and the new address won't appear in searches on sites like this, so victims researching the person writing to them will find nothing negative about them. It is far better to leave the email addresses active, so that anyone searching for the email address [email protected] knows that it is being used by a scammer.

Mod Note: All images are stolen by a scammer and used in his scams. The real person is not involved. (BW)

So if we are going to do make it easier to research this scammer. Let's also make sure there are pictures available for people to find: