If you have been scammed, please post here and share your experience; it may help others avoid the same situation!
by luckyone Fri Apr 20, 2012 4:10 pm
I posted a dining room set for sale in Craigslist and got a very fast reply with poor grammar and some questions about the set. I answered and got another response asking for some more photos and an indication that they would pay with PayPal and they wanted my email. I provided the email and photos. I then received a BUNCH of obviously flaky "PayPal" messages saying that not only did the initial person want to pay full price but that he had 'authorized' additional payments for someone in North Carolina [the furniture is in Chicago!] to be paid $650 to pick it up, and that if I authorized that payment using Western Union he had added another $100 in for the Western Union fee. At this point I forwarded the whole set to [email protected] and received a very fast response [would you believe 25 minutes!] that it was a scam and thanking me for the inquiry. I've copied all the emails into a single document and it is below. I displayed the full email addresses used and included them FYI.
The fake paypal emails had correct headers, icons and photos and look legit. The whole thing felt greasy. Anyway, hopefully others will find this useful before they get suckered. It is a long post from here on out with the copies of the emails.



Delivered-To: [email protected] MY EMAIL OBVIOUSLY REMOVED AND REPLACED
Received: by 10.231.61.76 with SMTP id s12csp25983ibh;
Fri, 20 Apr 2012 10:56:10 -0700 (PDT)
Received: by 10.213.15.148 with SMTP id k20mr591354eba.231.1334944569510;
Fri, 20 Apr 2012 10:56:09 -0700 (PDT)
Return-Path: <[email protected]> THE BAD GUY
Received: from mail-ey0-f196.google.com (mail-ey0-f196.google.com [209.85.215.196])
by mx.google.com with ESMTPS id e12si2034348eec.53.2012.04.20.10.56.09
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 20 Apr 2012 10:56:09 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.215.196 as permitted sender) client-ip=209.85.215.196;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 209.85.215.196 as permitted sender) [email protected]; dkim=pass [email protected]
Received: by eaac11 with SMTP id c11so896476eaa.7
for <[email protected]>; Fri, 20 Apr 2012 10:56:09 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.14.198.8 as permitted sender) client-ip=10.14.198.8;
Received: from mr.google.com ([10.14.198.8])
by 10.14.198.8 with SMTP id u8mr1253927een.58.1334944568484 (num_hops = 1);
Fri, 20 Apr 2012 10:56:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=0orXXrQk2uS7nommTp3Md2PSyHNMOjduaaIve9q0I6Y=;
b=wmKl9niTCVpco/HpGbspU0hqqbrutkqYMLS8vQjmWPxcKNKn8gMWRzWtTLP0STy+O8
gbTPQHSksa7u5dLy5QJ6Am4fg82pouGRgISqSDCpXGEnf2ZsoI19v+LL/NjIdLSojWGb
RpcjNWOyUd/agRNsaJcRAiFaP+hmhPkv2gfy6GuBA1TFM9EAu68tYH2c03Z/I3t9n1pq
PGaFqmXICqMhbjl0pML18gwGBAvZpKr2tmZAWOL/ZWHdcxxNBOg6O99OcHdTDgKcVw9E
Tzd15eVOKBZX4XKhRTY4xbOKeLUBpCE3N8lGg6LYV0qf/EU/H4uNbt8FM1eKd9NdR7DD
I3cQ==
MIME-Version: 1.0
Received: by 10.14.198.8 with SMTP id u8mr1253927een.58.1334944568472; Fri, 20
Apr 2012 10:56:08 -0700 (PDT)
Received: by 10.14.1.2 with HTTP; Fri, 20 Apr 2012 10:56:08 -0700 (PDT)
In-Reply-To: <CAHV0-gUGNpXm5joG2RU693_yAH2O4bR8HO=dBGYL8xAj199RCw@mail.gmail.com>
References: <CAHRkAyTw=RC5JknmjRO4VE35mj4bzOxtXT9Mtqx2+C_i-qwZVQ@mail.gmail.com>
<CAHV0-gWDSV6nVfXWhsobVRT0zS+SwhtCfSu6ebP-CKYt5_Aikw@mail.gmail.com>
<CANqwcDHMASs6dyT6VksscGE5VJxvoMHTiw1F_5=BGOrgwUXE_w@mail.gmail.com>
<CAHV0-gUGNpXm5joG2RU693_yAH2O4bR8HO=dBGYL8xAj199RCw@mail.gmail.com>
Date: Fri, 20 Apr 2012 18:56:08 +0100
Message-ID: <CANqwcDE=7n1C19n7dp4bumc4B14ASb7tJkt4mGG3_sj_eZJezw@mail.gmail.com>
Subject: Re: Broyhill 9 piece dining room set - $1500 (Lincolnshire)
From: mike taylor <[email protected]>
To: [email protected]>
Content-Type: multipart/alternative; boundary=047d7b3440bacc732504be2000c4

--047d7b3440bacc732504be2000c4
Content-Type: text/plain; charset=ISO-8859-1

Thanks for the mail, i will proceed with the payment now and will write
back to you as soon as the payment is been sent okay..

many thanks

1st EMAIL FROM ‘PAYPAL’
Delivered-To: [email protected]
Received: by 10.231.61.76 with SMTP id s12csp26216ibh;
Fri, 20 Apr 2012 11:00:26 -0700 (PDT)
Return-Path: <[email protected]> ANOTHER BAD GUY
Received-SPF: pass (google.com: domain of [email protected] designates 10.216.139.67 as permitted sender) client-ip=10.216.139.67;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.216.139.67 as permitted sender) [email protected]; dkim=pass [email protected]
Notification Of An Instant Payment Received From Mike Taylor (:Transaction Id 1D953250MY990893T)
service®paypal.com [email protected]
12:58 PM (1 hour ago)

Hello NOTASUCKER,
You have an Instant Payment of $2,250.00 USD from Mike Taylor ([email protected])
It may take a few moments for this transaction to appear in the Recent Activity list on your Account Overview and you need to do as instructed.
Payment Details
Purchased From: NOTASUCKER
Transaction ID:1D953250MY990893T

Item # Item Title Quantity Price Subtotal
N/A
Broyhill 9 Piece Dining Room Set
-
$1,500.00 USD $1,500.00 USD

Pick up fee:
(includes any seller handling fees)
$650.00 USD
Seller Discounts (-) or Charges (+) and Insurance:
(seller discounts, services, etc.)
$100.00 USD
Total: $2,250.00 USD
Payment Route Code: C826-L003-Q999-T5365
Transaction ID: 1D953250MY990893T
Transaction Date: April 20, 2012
Auction Details
Item Number: N/A
Transaction Status: Confirmed
Buyer's ID:
Please Follow Procedure:
We wish to inform you that Mike Taylor has made his intentions known to PayPal® that he will like $650.00 USD to be sent to the recipient's address below.You are required to send the $650.00 USD via Western Union Money Transfer.
All you have to do is reply directly to this email with the MTCN Number#(10 digit) and the Sender's Name and Address used when sending the money through Western Union Money Transfer. You will receive a "Confirmation Email" from PayPal® Service informing you that your PayPal® account has been credited with $2,250.00 USD as soon as the above information's has been received and verified by us.
This payment has been deducted from the buyer's account and has been "APPROVED" but will not be credited into your account until the MTCN Number#(10 digit) is sent to us for verification, so as to secure both the buyer and the seller.
Click Here to locate nearest Western Union Agent in your area or send money online.
Pick up Information
Below is the address where the money is to be sent to:

Agent's Info: Name:Daniel HilliardANOTHER BAD GUY
Address:202 Rolling Road,Burlington,N.C.27217,
Alamance County
United State

Address Status: Confirmed

Questions Please reply directly to this email to contact PayPal® Customer Service Department concerning this Transaction.
Note: As this transaction was done via our e-mail payments service, any inquiries and necessary information should be sent to us by directly replying to this message because of the status of this transaction, it has not been passed on to our customer care phone service section,and all inquiries should be directed back to this e-mail as it is the being monitored for this transaction.
Please, understand that this is a security measure intended to help protect both the Buyer and the Seller.We apologize for the inconvenience that has caused you.PayPal® will be responsible for any loss incurred during the course of this transaction.
With more than 149 million accounts worldwide, we are a leading online payment method you can trust!
Thank you for using PayPal®!
The PayPal® Team

2ND ‘PAYPAL’ EMAIL
Delivered-To: [email protected]
Received: by 10.231.61.76 with SMTP id s12csp26216ibh;
Fri, 20 Apr 2012 11:00:26 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.216.139.67 as permitted sender) client-ip=10.216.139.67;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.216.139.67 as permitted sender) [email protected]; dkim=pass [email protected]
***PayPal Payment Confirmation***Please Follow The Procedure***
service®paypal.com [email protected]
1:00 PM (1 hour ago)
to NOTASUCKER
Hello NOTASUCKER,
This is to inform you that we have received your payment of $2,250.00 USD from Mike Taylor and the money will only reflect in your account after all due measures have taken place.
We need the MTCN Number#, sender's name and address used to make the transfer of the $650.00 USD from you to complete this transaction. We Advise you to send the $650.00 USD to the given info so that we can credit your account. Kindly provide the MTCN Number#, so all procedures in checking the correctness of funds into your account can be completed. We are working together with Western Union on this transaction.
The money has now been deducted from the buyer account and is ready to be deposited into your PayPal® account. The MTCN Number#, is to be sent to us at [email protected]
This is due to new policies at PayPal® to protect both the buyer and the seller in the face of the growing number of fraudulent activities perpetrated via the internet. Your payment is intact. You are Advised to complete this transaction.
Your query will be answered promptly.
Here at PayPal® you can be assured that your security and safety is our topmost concern.
We hope to read from you soon.
Thank you for using PayPal® !
The PayPal® Team
3RD ‘PAYPAL’ EMAIL
PayLast Step On How To Complete Your Recent Transaction
service®paypal.com [email protected]
1:01 PM (1 hour ago)
Received: by 10.231.61.76 with SMTP id s12csp26311ibh;
Fri, 20 Apr 2012 11:01:46 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.180.81.135 as permitted sender) client-ip=10.180.81.135;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.180.81.135 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.180.81.135])
by 10.180.81.135 with SMTP id a7mr12490188wiy.16.1334944905607 (num_hops = 1);
Fri, 20 Apr 2012 11:01:45 -0700 (PDT)
Hello NOTASUCKER,
Thank you for using PayPal, this is a notification email about the transaction involving you and Mike Taylor. Be informed that you are 100% safe with PayPal and you do not need to worry about anything therefore you are to go ahead with the transaction for your account to be credited as soon as you email us with the receipt given to you at the western union outlet, we are sorry that we cannot be reached via phone due to many transaction initiated everyday via PayPal, we are sorry for any inconvenience this might cause you.
The money has been deducted from the buyer's account and will be credited into your PayPal account as soon as you send to us the payment receipt hereby confirming that the excess money has been sent out to the bearer via Western Union money transfer only as requested by the buyer.
The transaction has been screened and has proven to be 100% legal and real. You are hereby advised to go ahead with the transaction and wire out the said fee to the bearer, For security reasons email the Western Union payment receipt to PayPal only and wait till your account is being credited before emailing the receipt to the buyer, therefore you can go ahead with the transaction.
This is a step by step way of sending the money to the bearer:
1. Go to any western union outlet /warlmart store close to your home.
2. Ask for a Western Union money transfer form.
3. Fill the form with the details provided by the buyer.
4. Tender the cash and you will be issued a receipt after the money has been sent.
5. Attach and email to PayPal a scanned copy of the receipt.
If you don't have a scanner, You can email PayPal with the following details written on the receipt:
1. MTCN Number (which is the 10digit number)
2. Sender's full name and address.
3. Secret Question And Answer.
Please be rest assured the information you give us will not be disclosed to Mike Taylor or his agent until you account is credited.We will give you a grace period to complete the transaction and get back to us with the Reference Number (10digit) which has been paid out by your buyer so we can credit your account without any further delays.
We are assuring of you a 100% safety, and as soon as the payment details is been emailed to us, a total funds will be credited into your account.Pal® Email ID: PP1307
Advertisement

by dwo Wed May 23, 2012 4:47 pm
got this within an hour of my post on Craigs list- I was selling bedroom furniture for $425- I knew it was a scam as soon as I googled her name it brought me to this page with numerous posts and the exact same email

Hello,
?
It is me Laura? thanks for getting back to me I want to buy this but the only way i can pay you is via a Bank Certified Check that i would mail to you using the FedEx overnight delivery,
?
To make sure that everything goes smoothly i would wait for the check to clear before the pickup is done, I would be responsible for the pickup and it would be done by the movers and their payment would be included in the check i mail to you and this is all due to my disability (am deaf) and it makes it hard for me deal with this and it makes the transaction better and quicker.
?
I know you were not expecting this and I would have loved to come for the viewing but i cant I really want it and am offering an extra $50 for you to delete the posting to show i want it as i am just settling into my new house i want good deals to furnish the apartment i stay in.
?
if you are okay with this please send me extra pictures and get back to me with the following
?
Your Full name
Your Physical address (as FedEx does not deliver to P.oboxes)
?
?
I await your response . thank you and stay blessed


Laura Mccray

Who is online

Users browsing this forum: ClaudeBot and 3 guests