military scam

have been in contact with this guy for just over a month but even though he has indirectly asked me for money i haven't sent any but have been conned into sending a quad band phone via america to him, what a fool i've been!!
it started by him contacting me through Mate 1.com, a dating website, within a couple of messages he was declaring he loved me, and asking me to register for TS2 service, which apparantly is some sort of satelite service, the address is [email protected].
Luckily i have a friend who has a son who was in the US army in Iraq and she advised me not to.
Next it was asking me to write a letter to his general to request permission to change his vacation date so he can come and visit me in england, I did write the email and received a form to fill in, which very stupidly i did. Next day was a request for payment of £1100 to be sent to Brian ...(sorry cant remember full name), Las vegas, Nevade(spelt wrong on the form),i then wrote back and said i couldn't afford that and apologised for inconvience i may have caused. Have heard nothing from this supposed general since.
the guy's name is Sargent. Tim Kreiger who says he's in baghdad in Iraq, about to be sent to afghanistan, and that when he get's home he wants to retire and will get loads of money. However he also claims to only be in army 10 years, and after reaserching this he wouldn't get a pension unless he does 20 years. The form i filled in is actually elsewhere on this site and i am such a fool. The supposed general is Raymond T Odierno, according to wikipedia he does exist, and the supposed email is [email protected]

Hello pickle, and welcome to ScamWarners, though I'm sorry that it was this experience that brought you here.

Of course you are not a fool - scammers can be very convincing.

You may have already read the introduction to Scammers Impersonating Military Personnel:

viewtopic.php?f=3&t=6528

I'm glad that you didn't send the money, and that prompted you into doing some research. Thank you for posting this information about the scammer, which will help to warn other women about him.

Welcome Pickle,

I'm also glad you learned before you were in any deeper, and that you had a friend who was looking out for you!
If you haven't read the link Chris provided, please do.

For the benefits of visitors who may not read through the summary, I do want to make one point clear. There really is a TS2, but the address [email protected] is not associated with a legitimate satellite phone company. In this scam, victims are led to believe they are purchasing a satellite phone for an American soldier. In reality, they have never been in contact with a satellite phone company. The address is owned by the scammer (who is African, not American) and/or his accomplices, and the sole purpose of this address is to steal victims' money.

From Johnson Morelli Sun Apr 11 12:25:41 2010
X-Apparently-To: Removed via 209.191.84.218; Sun, 11 Apr 2010 05:25:43 -0700
Return-Path: [email protected]
X-YMailISG:
X-Originating-IP: [67.195.8.62]
Authentication-Results: mta114.sbc.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 12.102.248.84 (EHLO sccwmxc04.att.net) (12.102.248.84) by mta114.sbc.mail.gq1.yahoo.com with SMTP; Sun, 11 Apr 2010 05:25:43 -0700
Received: from n5-vm0.bullet.mail.gq1.yahoo.com ([67.195.8.62]) by att.net (sccwmxc04) with SMTP id <20100411122542s04003u69pe>; Sun, 11 Apr 2010 12:25:42 +0000
X-Originating-IP: [67.195.8.62]
Received: from [67.195.9.82] by n5.bullet.mail.gq1.yahoo.com with NNFMP; 11 Apr 2010 12:25:41 -0000
Received: from [67.195.9.111] by t2.bullet.mail.gq1.yahoo.com with NNFMP; 11 Apr 2010 12:25:41 -0000
Received: from [127.0.0.1] by omp115.mail.gq1.yahoo.com with NNFMP; 11 Apr 2010 12:25:41 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 56135 invoked by uid 60001); 11 Apr 2010 12:25:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1270988741; bh=C7hq82jR6/SledPKoYI5cdHH8awHxrzu9gTuo5NffhY=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=
Message-ID: <[email protected]>
X-YMail-OSG:
Received: from [12.193.76.3] by web113006.mail.gq1.yahoo.com via HTTP; Sun, 11 Apr 2010 05:25:41 PDT
X-Mailer: YahooMailRC/348.3 YahooMailWebService/0.8.100.260964
References: <EDE97B374D6940219A2F9D7FC5EC2354@OwnerPC>
Date: Sun, 11 Apr 2010 05:25:41 -0700 (PDT)
From: This sender is DomainKeys verified Johnson Morelli <[email protected]> View contact details
Subject: Re: hi sweetheart.

To: Removed
In-Reply-To: <EDE97B374D6940219A2F9D7FC5EC2354@OwnerPC>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1512508019-1270988741=:55641"
Content-Length: 1758

Compact Headers
i missed you too babe, i've been busy here... i will chat as soon as i can i love you so much babe



dottie this a header he sent from a mesasge this morning.. i'll send more stuff later

Thank you Castello

i am short on time but I am sure sombody else will give you a better explanation than I will.

The header actually points to teh US but that does not mean the sender was in the US when he sent that email.

If you take a look you will find the letters "NNFMP" in that header, to put it very simply, Yahoo have denoted that IP as being associated with scams and/or spams, this also indicates that there is a high probability that the scammer has manipulated his IP address which I have no doubt he has in this instance.

One tip I need to pass on, when posting headers and or emails, please be sure to remove your own details from the header, it will save you getting more emails from bad people and keep your identity hidden. I have removed teh details in the header above but for next time

Hi Guys sorry to butt in but got me one of those too.

Delivered-To:
Received: by 10.103.192.6 with SMTP id u6cs140913mup;
Sat, 3 Apr 2010 04:49:21 -0700 (PDT)
Received: by 10.101.186.8 with SMTP id n8mr7954465anp.229.1270295361026;
Sat, 03 Apr 2010 04:49:21 -0700 (PDT)
Return-Path: <[email protected]>
Received: from webhost05.samartebiz.com ([203.149.62.161])
by mx.google.com with ESMTP id 34si11144898iwn.21.2010.04.03.04.49.19;
Sat, 03 Apr 2010 04:49:21 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 203.149.62.161 as permitted sender) client-ip=203.149.62.161;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning [email protected] does not designate 203.149.62.161 as permitted sender) [email protected]
Received: (qmail 13998 invoked by uid 48); 3 Apr 2010 08:47:34 +0700
Cc: recipient list not shown: ;
Received: from 41.138.187.43
(SquirrelMail authenticated user [email protected])
by webhost2.samartebiz.com with HTTP;
Sat, 3 Apr 2010 08:47:34 +0700 (ICT)
Message-ID: <[email protected]>
Date: Sat, 3 Apr 2010 08:47:34 +0700 (ICT)
Subject: Please Respond
From: "Sgt Perry Rice." <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-5.el5.centos.7
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal

41.138.187.43 Nigeria (Lagos)*

Sgt Perry Rice. <[email protected]>
[email protected]
todate3 April 2010 02:47

I'm an Army engineer, here in Ba'qubah in Iraq,We have some money we need
to get out  of the country.  We need your help to do it, and we're willing
to give you a good percentage of 40% in exchange for your help if you're
up to the job, do get back to me asap.
Thanks,
Sgt Perry Rice.

Next email showed

209.85.218.163 United States (Mountain View)*

So knew he was playing with some sort of proxy or disguise.

Dear

Thank you for your response. There is no risk what so ever, as regards
this money. But the most important thing is that I do not want this
money to go through the bank around here, It will not be safe for us,
I have a very good, trusted and reliable diplomatic courier contact
used mostly by our forces in Jordan, that can send goods easily
through diplomatic and private military way, to anywhere in the world,
without them being checked at any port of entry.They can deliver this
money for you easily, to any address of your choice.

 The baggage will be tagged diplomatic documents, and the courier
company, are not going to know the contents of the box. A few friends
have used this means to convey goods, without being checked because of
the diplomatic immunity they enjoy. Their charges are very high, but I
will negotiate a way out from this end, till it gets to your door step
anywhere and I will follow up immediately and meet with you for
disbursement after you have received it.

I am very sure you will know the best way to handle this money for us,
when it gets to your base. Please let me have an address where you
want them to deliver the goods to you. It could be a bank address or
your Company address. As soon as I get it, I will start making
arrangements as to sending the merchandise to you.

Your Direct Phone number is needed, so you can be contacted as soon as
Shipment is in Motion. I will send the total since I can not take any
chances by keeping cash on me. Your percentage still stands at 40%.
What do you do for a living? Are you married with kids? Can you handle
these funds? I will also want to see your passport copy or id/,
driver’s License so I know who I am dealing with ok .We need to build
trust ok!It is only me and my partners that know about the transaction
from this end. Please if you know that you are not capable of handling
this huge sum, please don’t allow me to send it, I can always find
other means of dealing with this.

You know that the security is very important, you can not trust
anybody therefore note that this transaction is not safe on the phone,
remember to keep secret secret. I cannot call you on the phone or
receive fax. The total sum amount's to $25,000,000 MILLIONS US DOLLARS
and I hope that you can handle it?I hope you are ok with this?

 Everything must be done by email. Will you still help? I need your
urgent reply in this regard.

Your Partner,

Sgt Perry Rice

Bit later we find another party introduced, the shipping agent.

The package has been airlifted  by the United Nations task force handling all recovered properties to the United Kingdom.There was a bomb scare at the depot this morning and all properties deposited for airlifting has been evacuted to London from where they will be sorted out and sent to their destinations.
 
It was an unexpected developement. The agent has assured me that every item evacuated will get to their respective destinations as long as they where duly entered into the data system at the joint military depot here in Iraq.It is from London that you will be contacted for verification of the package and delivery information granted to you. the agent informed me that you will be contacted by the dispatch department by mail or phone call.
 The handling company has it's headquater's located in Egypt but you will be contacted via their agent at the branch office in London. Keep me informed of all communication and dealings with anybody as long as it has to do with the package.
Please when you are contacted be rest assured that there is nothing to worry about. It will be a normal verification procedure. Please my friend, everything depends on you to have the package delivered to you safely. It is documented in your name,address and phone numbers. If for any reason there is need to re-confirm the content of the consignment, you are to inform the handling company that the consignment contains family valuebles as recorded here in Iraq.
 
Most importantly, you must let the company know that the package is needed urgently at your location and must be shipped to you as soon as possible. You know we cannot afford to leave the package with them for too long. I expect to hear from you soon.
Tag Number: ASF/006/UK/XXZ006
Thanks for your commitment towards this transaction, 

41.138.191.102Nigeria (Lagos)*

[email protected]
date7 April 2010 07:00

Snr. Dipl. Sule Mohammed.
Arab Securities and Finance Company
London release office.
To :,
 
Good day from my humble office. As you should be aware already I am Senior Diplomat Sule Mohammed of the Arab Securities and Finance Company branch office in London, United Kingdom and Head
Office in Cairo Egypt.
 
In our possession at the moment is a package consisting of one metallic box registered in your initials and ready to be delivered to your location.
Please confirm the above and also kindly inform this office if you would wish that your package be delivered to your location directly or you would wish to pick them up from our Head Office in Egypt.
 
Both option’s above have charges but the delivery option has been handled by the sender of your package from Iraq. I will be needing the following information’s from you as soon as possible as your package
must be claimed or delivered to your location within the next 7 working day’s from today or they will be returned to it’s original location:
 
-your full names.
-your Delivering contact address.
-your direct telephone/fax number(s).
-a copy of any form of valid identification sent via email as an attachment.
 
I would also require you to provide this office with the identification tag number of your package as well as a brief description of the content’s of your package.Expecting your response as soon as possible,
 
Snr. Dipl. Sule Mohammed.
Arab Securities and Finance Company
London release office.
Email:[email protected]
Tel: +447035946113

Now Geography is no my thing BUT Lagos Nigeria is NOT in London UK AND the famous +44703 for a UK redirect number!

Well...I have been talking to this guy for a whole 11 days...he loves me and wants to marry me. He is a widower and has a 13 year old son. The son has contacted me that he wants to marry his dad, etc. He wanted me to submit a leave request to the Army Commander at [email protected] saying that I am his fiancee and what to request his leave. Then I got an email from the LT. Col Robert requesting me to fill out a form and send $625 to Elizabeth Smith in UK. I thought that was weird and did a search and found ur web site. Can you check into it for me to see if it is a scam? Tell me what you want to see.

Hi NAV, welcome to Scamwarners.

I am glad you found us before losing any money, yes, the person you have been contacted by is also a scammer.

Simply put, The US army (or any other army for that matter) does not ask persons other than the actual person applying for leave to fill in forms and there is no payment to be made for a leave request, it is all lies designed to try to steal your money.

Please take a look through this page http://scamwarners.com/forum/viewtopic.php?f=13&t=6527 where you can see a lot more information on Military romance scams.

If you have any other questions, please dont hesitate to ask, meanwhile, please do not reply to any of these people, the best thing to do now is to completely ignore them and eventually they will go away.

Welcome from me, too NAV

That same email address ([email protected] - same names etc) is posted here: http://scamwarners.com/forum/viewtopic.php?f=4&p=27730

So well done for being suspicious.

Here is some additional information....can you help me? Here is some emails that I received....can you see where the IP is from?

Microsoft Mail Internet Headers Version 2.0
Received: from naeapaxreb03v.nadsusea.nads.navy.mil ([10.31.224.86]) by naeapaxrez03v.nadsusea.nads.navy.mil with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 7 May 2010 08:41:35 -0400
Received: from nawesdnieb09v.nadsuswe.nads.navy.mil ([10.0.10.26]) by naeapaxreb03v.nadsusea.nads.navy.mil with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 7 May 2010 05:08:06 -0400
Received: from nawesdnieg08v.nadsuswe.nads.navy.mil ([10.0.10.59]) by nawesdnieb09v.nadsuswe.nads.navy.mil with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 7 May 2010 02:04:32 -0700
Received: from NAWESDNIAX01.NADSUSWE.NADS.NAVY.MIL ([10.0.0.41]) by nawesdnieg08v.nadsuswe.nads.navy.mil with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 7 May 2010 01:20:37 -0700
X-AuditID: 8aa30147-ac64bbb000000eca-61-4be3cd564c2e
Received: from web114415.mail.gq1.yahoo.com (web114415.mail.gq1.yahoo.com [98.136.183.78])
by NAWESDNIAX01.NADSUSWE.NADS.NAVY.MIL (By accessing this system, you are consenting to this monitoring.) with SMTP id C3774514004
for Fri, 7 May 2010 08:20:38 +0000 (GMT)
Received: (qmail 3887 invoked by uid 60001); 7 May 2010 08:20:38 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1273220438; bh=gTVlNuip7a8yS1brHphQCmaJQpr328WjMUJeSQsIji0=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=eFLmLH2v32APAyD9w6OQAmlrYEhzbH+rslfxFisJut8GReaxHZBV14E6eEfV4oRitVWzZI+tUQNY9mxM6x26elV6TNildFFS63WMn7Ve3saoQay6jI5+TSsGXfWplg3UPpNVX9sc97b4r1ZJhYv8VgBG6COjtu52V1z2DYz1x28=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=qbQElp6/8CIhE7UHXZyFT5H75A2B7Z0mCnzzzlAWJ3RlExhCs+YxoWxepS+pTnZiZRxzOjQrHp757OqSLo6Z8rxn16+kdIUgMc7J5aDBmUBfFOOKdIZyPO/AZ9v3RReHrqiTvHqHw4OFdYlv3A68gwZ7TBtVDTD9MNhSX1h+CFg=;
Message-ID: <[email protected]>
X-YMail-OSG: TrBe_BIVM1lhO4E8F7wBaeAh5UqntLzXGKajSek4OMX3v0g
2n.Vf5dYhkalRLhvZ.ILpOC7ufLS10nN_569oxQ11Pw0M7SphkH8hadtfDr6
z0dC_HC51_XLEuK4ZGKF9DtlIUtlvFq23txckkHo9JTJVOb9357IhnFRLrMD
rUxuZj5SEZGudckkjYAtcuVB19wl4adHFxEVfEYs.XblB4TmfLXXOQdHxaR5
AE1P_Ypr.c_0aMM9rssQ_wddUiLcqOV2.hBfC1Q62eXIEpmCCcO.BTm8yvqp
zwyHVL7k4wWAlyWJWj1J7lyfu24NxTWqearO2ayQYn4NZPWdJ6hfxtACv3nw
gXLzKPQa917DVqIELoEiS1D7phqk0tvrDF5Jpxir4jQcMcN8fwAY9LRonxFd
lzKbfk7_RdzgZdK4qZj76aghHBBO1g3afVMovl8SI0CdmYcbNGIZbc8fR_Fl
H9YWbiKPAWTHx6x7vWcgOB2bkm_C0ovguzhwxZM4OklT3K0YtuYgELUSR6b8
__vi4glgXttrF5kuhX6e60iBCTND99i6cjWenyxsFafTkXaRv3lDQ1CNpLss
y6ZFJs035ZVIs6gn4Sk1EoGfnkrFcB2TISfE1VkxkQTDLro6L_XMCz3ihVaX
4GE8qBVsiFBNdXEXixCy1qlYeWVU9FqBqpmtD_AZNy56hQWdHG0ngpaPvAWY
C2BZhHtHiDGj1.d_Sb16LyHeqsC0btcUq2sFyoeTiukjB15_p7FSWKPuzJK_
o3BhvuaKmGQasLQrwTDIfGlmEhHeeXeleNvs-
Received: from [93.91.80.1] by web114415.mail.gq1.yahoo.com via HTTP; Fri, 07 May 2010 01:20:38 PDT
X-Mailer: YahooMailClassic/11.0.8 YahooMailWebService/0.8.103.269680
Date: Fri, 7 May 2010 01:20:38 -0700 (PDT)
From: Donald Cox <[email protected]>
Subject: RE: thoughts
To
In-Reply-To: <FDF969311EC11647A6981AF3F89CA2CA0485C8E8@naeapaxrez03v.nadsusea.nads.navy.mil>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-674067534-1273220438=:99833"
X-Brightmail-Tracker: AAAABAzExQIUDNcxFAz58RQNAes=
Return-Path: [email protected]
X-OriginalArrivalTime: 07 May 2010 08:20:37.0593 (UTC) FILETIME=[2C477490:01CAEDBE]

--0-674067534-1273220438=:99833
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

--0-674067534-1273220438=:99833
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable


--0-674067534-1273220438=:99833—

My love
How are you doing this morning,Babe i only let him know our present state of things babe...i love you so much and i don't really have any other person i can talk to except Philips..honey i really love you so much babe..i couldn't sleep last night babe, i was thinking all bout you babe..i am getting sick babe..i was down all day babe...

honey.i love you so much babe..and i will say that again and again babe...babe i explain the present situation to philips and he promise to talk to you babe..you are my heart, my love. my queen, my hearbeat, my one in all, my tressure, my life..and no one wil ever take your place in my heart babe..i love you babe...

Some of his addresses/alias are:

[email protected]
[email protected]
He is located on myspace as Donald.

How do I load the pictures?

Any additional information that you could provide me to verify that this is a scammer would be greatly appreciated. I want to give all the information out so that someone else won't be hurt.

NAV

Hi Nav

thank you for posting.

there is an informational post on how to post pictures here viewtopic.php?f=28&t=3219

If you get stuck you need only ask

Unfortunately, we can't get a location on that IP--it is a satellite provider in Germany, but the provider covers much of the world (not surprisingly including Africa).

As we already said, there is absolutely no doubt it is a scam based on the fact that the US military does not charge for leave, and they do not allow others to apply for leave for soldiers! (The military is also not going to use Western Union, or have individuals receiving money on their behalf anywhere!)

But if I didn't know what type of scam this was or that he was claiming to be a soldier, I would still be telling you that it is a scam based on the email you just posted. It was definitely not written by an American. The language of the email itself screams African, and the excessive use of "babe" is textbook scammer! It is also typical for the scammers to not recognize popular American names, and to pick obscure, rarely used names for the characters such as "Philips" (I myself have never encountered a Philips, and there are none in my work directory of 20,000 people).

At this point, I am quite comfortable saying that you are indeed dealing with an African.

Here is the letter from his commander granting his leave....

TO WHOM IS MAY CONCERN:



THIS OFFICE WILL LIKE TO NOTIFY YOU THAT WE RECEIVED SGT.DONAL COX LEAVE REQUEST AND IT HAS BEEN APPROVED


WE ARE HAPPY TO TREAT YOUR MESSAGE BUT DUE TO A MILITARY PROTOCOL, A FORM WILL BE COMPLETED CORRECTLY IN BLOCK LETTER AND YOU CAN FIND THE ATTACH FORM IN THIS MESSAGE. ONCE THIS FORM HAS BEEN COMPLETED A PROCESSING FEE HAS TO BE PAID ALONG WITH THE FORM COMPLETED AND SENT TO OUR U.K WHILE THE PROCESSING FEE OF $625.00 USD SHOULD BE SENT TO THE FINANCIAL SECRETARY TO THE BELOW ADDRESS:

NAME : ELIZABETH JANE SMITH
CITY : CHATHAM, KENT
COUNTRY : UNITED KINGDOM

ONCE WE CONFIRM THE RECEIPT OF THE PAYMENT A MESSAGE WILL REACH THE SAID OFFICER AND FLIGHT SCHEDULE WILL BE SENT TO THE COMMANDANT IN-CHARGE TO ANY DESTINATION, THE SAID OFFICER WILL BE ALLOWED TO LEAVE THE CAMP IMMEDIATELY. IF YOU HAVE ANY QUESTION TO ASK, PLEASE DO NOT HESITATE TO CONTACT ME.

WE LOOK FORWARD TO WORK ON YOUR RESPONSE.

CONTACT: LT. COL. ROBERT

I know it is a scam, but you want to believe that someone is being sincere in their thoughts and feelings. Who would have ever thought that someone who spend some much time talking to just get money? I lied to him and told I contacted the Army HR department and that they said he was the only one that could request leave. He almost came undone and begged me not to do that again. I thought it was funny! Then, he quit talking because I wasn't available to talk. Imagine that! He didn't wish me a Happy Mother's Day because he probably don't know what that day is in Africa.... I am so thankful for your web site. It saved me alot of money and future heart ache. What I feel that I was fooled is enough of the heart ache. Thanks!
NAV

Hi Nav

Thank you for posting the details of this scam, it will help others to avoid it in the future which is the reason we ask people to post their accounts.

Seeing as this scammer has your real details, please do not reply any further, it is not advisable to do so.

If you do like the idea of writing to scammers and having the upper hand, there are communities devoted to safely writing to scammers in order to waste their time and gather their scripts and basically make it as hard as possible for them to scam while having some fun.

If this is something that interest you, please take a look at www.419eater.com they have a romance section as well there where they specialise in the love scammers.