If you have been scammed, please post here and share your experience; it may help others avoid the same situation!
by embarrassedintx Fri Jan 11, 2013 1:28 pm
I am so sick over this situation. I lost $4,000 and want to share my pathetic story. Don't ask how I can be so stupid, I just never thought I would be a victim of a scam or thought a cashier's check could be counterfeit. From the beginning, I am a homeschooling mom of 2 teens and needed some help with a tutor for upper level subjects. I currently work about 5 hours a week doing some data entry for a business, but I needed to earn more money on my schedule. So I searched on jobs at craigslist. I found one that was looking for part time clerical work doing data entry using quickbooks and filing. I thought it was a physical location. I replied and was told this was an on line work at home position and to log into yahoo instant messenger for an interview. They asked questions about my skills and said I was hired. I was thrilled! Apparently a bit too thrilled since I didn't see what was coming. Anyway, I was emailed employment forms to sign and a confidentiality agreement. I was told I was working for Aigo group based out of China. I did take the time to look that up and it did show the same address on the forms they sent me and they had offices in the US and France. I was to log into instant messenger every morning for training. I had to type up 2 page reports on information on quickbooks and peachtree software. They gave me accounting questions to answer. No where in my mind did I think this was a scam. They told me that I would need equipment to set up my home office and I would meet with a rep at a local restaurant to make sure my equipment was set up. They were sending me a check for my signing bonus and hours worked and I was to wire the rest to the person who orders the company's office equipment. I get a fedex package from a person in CT with a check drawn on a daycare center in CA. I know a red flag should have gone up, but I was so hopeful it was an honest mistake and I still had a real job. I've had 2 surgeries in the past year for cancer, and my mind is not what it used to be. Sad excuse, I know, but why else could I have been so easily fooled? I was brave enough to ask about the strange check and was told it was a mistake in the accounting dept. and tear it up. I get another fed ex with another check that says cashiers check for $1,920 with the name Michael Roy, Jr. on it, also from CA. I was told he is the finance manager. I am to wire $1,600 to Michael Carter in Missouri and keep the rest for my paycheck. I thought since the money was in the US it wouldn't be a scam. What an idiot I am! Next week I do the same, but only wire $1,500 this time. Then I'm online with the person named Ty Mason who is training me, telling me that Michael was in a bad car accident and they can't find the money and I'll have to start all over again. Then I get the letter from my bank saying there is no such account and they debited my account the money and I'm broke! That's when I realized I was scammed. You can't explain the feeling you get when this happens to you. I am so ashamed that I have not told my family. I drained my kids college fund to cover this and I'm trying to sell my gold and silver and what ever else I can to make up for it. I tried to find someone to help me. I filled out the form on the FBI IC3 site and contacted my local branch Secret Service. I told them I am still on instant messenger can't they trace the the IP and catch him? I even have texts from him, can't you trace that? I was told no, and I'll never see the money again. They told me to mail them all the documents I had and I did. Now the scum bag has disconnected everything and we can't catch him. Maybe I watch too many NCIS and criminal minds TV shows, but shouldn't we be able to see when this Michael Carter picked up the money and if the ID was fake, wouldn't he be on a camera? couldn't we run facial recognition software to figure out who he is and catch him?
I get these constant emails and phone calls now since that Ty Mason had me fill that out on his form. I now know that all the emails are scams and I don't answer the phone. I cry myself to sleep every night and feel sick all the time. I feel like I'm the only idiot who fell for this. It just seemed pretty elaborate to be fake. I'd like to work for the FBI or Secret Service for free and respond to all these ads just so someone can catch them all! I don't know what else to do so I am not miserable all the time. Maybe venting on this board will help.
Advertisement

by vonpaso xlura Fri Jan 11, 2013 1:54 pm
You are not alone. I have several websites I'm trying to kill which are recruiting for the same scam. Could you post the emails, transcripts of chats, and any websites involved? Please include full headers in the emails.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
by Clair Fri Jan 11, 2013 4:51 pm
Hi, You might also want to report this to your local police department. Not that they can do anything to catch the scammers, but just to have it on record.

This sounds like a pretty sophisticated scam, so you certainly should not feel embarrassed. The other people that you mentioned, the person from CT who sent the package, the person in Missouri, etc. might also be victims. They might think that they are working for a legitimate company printing checks or processing mail. Has anybody else from the support team here been in contact with you?
by Jillian Fri Jan 11, 2013 4:56 pm
Welcome here. I'm so sorry to hear what you've been through. While I do understand your feelings of shame or embarrassment, I can also tell you that there's no need for you to feel that way. You were the victim of a crime. If you had been mugged, would you feel ashamed?
Lots of people fall for scams because some scammers are very good at what they do - they are professional con men.

As Clair, said, you should contact your local police.

Please do continue to participate here if it helps you to vent and heal. One thing that can sometimes help is to post the information the scammer was using for you. If that information is found by here another potential victim, it can help save them from being scammed.

You can't explain the feeling you get when this happens to you. I am so ashamed that I have not told my family.


Hopefully with a bit of time this feeling will lessen and you'll be able to get support from those around you. Good luck to you.

Have you sent a payment to a scammer with Western Union and now realize it's a scam? If the payment has not been picked up, you can cancel it immediately! 1-800-448-1492

Follow ScamWarners on Twitter: http://twitter.com/ScamWarners
by embarrassedintx Fri Jan 11, 2013 7:48 pm
I will try to post the emails, but I can't get a transcript of the yahoo or at least I don't know how to bring it up.
I did contact my local police dept. and they also said there was nothing they could do. They did not take any info from me. When I spoke with the Secret Service agent, he told me to try the local police and let the bank know to be on the lookout for other fraudulent checks. I did that, not sure that it did any good.
Here is one email that I got in response to applying for the position. Is this what you need, the entire contents of the message? If so, I'll post one that I got from Ty Mason after accepting the position. I have deleted my email address from the messages. Thank you all for caring!

From: <Removed> <>
To: Administrative Works <[email protected]>
Sent: Sunday, December 16, 2012 5:20 PM
Subject: Re: Clerical & Admin Vacancy (TX)

Thank you for your reply regarding this position. I am sorry to say that I am not available Monday morning at 8am. I will be at the hospital with my son while he has an out-patient procedure. I expect to be home by noon if we can re-schedule, I would greatly appreciate it. I will be available on Tuesday morning, it that will work into your schedule.
Thank you,
<Removed>

From: Administrative Works
Sent: Sunday, December 16, 2012 5:03 PM
To: <Removed>
Subject: Re: Clerical & Admin Vacancy (TX)

AIGO GROUP.
Job ID 3476043183
Company Name: AIGO.
Job Category: Accounting
Location: At Home Office
Position Type: Full-Time/ Part Time.

Experience: 0-1 Year Experience
Salary: $12/HR.
DATA ENTRY & ADMINISTRATIVE POSITION

POSITION SUMMARY:
Covering a full range of accounting
services in a prompt and professional manner, obtaining all information for resolution of transactions.

MAJOR DUTIES:
• Correct errors and discrepancies on customer billings as necessary.
• Target customer interests with a variety of product and service offerings.
• Prepare work orders for maintenance requests after determining if
field visits are required, and ensure appropriate follow-up procedures are met.
• Perform billing and posting of customer accounts. Resolve delinquent account balances.
• Obtain assistance from Coordinator or Supervisor for complex inquiries.
• Perform other related duties as required.

QUALIFICATIONS:
• High school diploma or the recognized equivalent in work experience
and self-study.
Previous experience on Quickbooks or Peachtree software is an addition.
• Personal computer knowledge necessary.
• Excellent written, oral, interpersonal communication and problem solving skills.

After the review of your Resume at http://www.craigslists.com. You have been considered and selected for the above job position. An Interview has been scheduled for you, it will hold Monday 12/17/2012. The Interview will be conducted on line through Yahoo Instant Messaging, you are required to download a yahoo messenger and add Mr. TY MASON (Personnel Manager) on this ID (aigohrmdesk1)

Interview Time: Starts at 8AM your Time. Make sure you're available for the interview at your earliest convenience.

This is an on line job so all your assignments would be forwarded to you and submitted back by either fax, regular mail,email, phone or IM, (instant messaging).
All activities and corresponding time are to be recorded in excel spreadsheet. That's how we access your work and process your pay.

Kind Regards,

Andrea Patton,
Human Resources Department,
AIGO GROUP.

--------------------------------------------------------------------------------
From: <Removed> <
To: [email protected]
Sent: Friday, December 14, 2012 8:59 AM
Subject: Clerical & Admin Vacancy (TX)

http://dallas.craigslist.org/dal/ofc/3476043183.html

Hi,
I am replying to your ad for clerical help. I wasn’t sure if this was at a physical location, or a telecommuting position. I am looking for part-time work that I can do from home, or in an office near McKinney. I have over 15 years experience in office administration and accounting. I have worked for larger companies such as JCPenney and TRW Credit Bureau. I have worked for several smaller companies entering their invoices in Quicken and creating commission reports using formulas, in an Excel spreadsheet. I’ve generated pie charts and bar graphs using the data that was entered in Excel. I am comfortable using MS Word 2007 and 2010 edition. I have extensive filing experience.
I graduated high school in Florida in 1984 and took word processing classes at Collin County Community College.
I am currently homeschooling my 2 children. I have a middle schooler and a high schooler. I am finding it difficult to teach them the upper level courses and have hired a teacher/tutor to come and help. I am looking for part time income to help pay for this. My schedule is flexible and I have high speed internet access and a color printer to work from home.
Please let me know if you need additional information.
Thank you for your kind consideration.
<Removed>

--------------------------------------------------------------------------------
Original craigslist post:
http://dallas.craigslist.org/dal/ofc/3476043183.html
If this email is a scam or spam please flag it now:
http://craigslist.org/mf/dbe04e97f112ed ... e197ba2a.1
--------------------------------------------------------------------------------

Removed personal information -- Mike W
by Clair Fri Jan 11, 2013 8:52 pm
Thanks for posting the emails! Please make sure that you remove all of your personal information when posting, not just your email address. Do you have any emails from the scammer? If so, we need to see the contents and the headers to the emails. The headers are usually hidden, so you will need to "show hidden" or "view original" to get the full headers to the emails. Here are some instructions on how to view headers. http://whatismyipaddress.com/find-headers and http://www.fraudaid.com/find_headers.htm

A full header looks something like this:
Received-SPF: pass (mx03.csee.siteprotect.com: domain of myway.com designates 207.159.120.60 as permitted sender) client-ip=207.159.120.60; [email protected]; helo=myway.com;
Received: from myway.com (nn6.excitenetwork.com [207.159.120.60])
by mx03.csee.siteprotect.com (Postfix) with ESMTP id 70DA0D80BE
for < [email protected] [email protected]>; Mon, 1 Jan 2007 22:14:11 -0600 (CST)
Received: by mprdmxin.myway.com (Postfix, from userid 110)
id 5276D233CF; Mon, 1 Jan 2007 23:14:22 -0500 (EST)
To:
Subject: ***SPAM***FAMILY BESINESS INVESTMENT (COMPLIMENT OF THE SEASON)
Received: from [196.1.186.22] by mprdmailfe9.nwk.myway.com via HTTP; Mon, 01 Jan 2007 23:14:22 EST
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: ID = b0d4916511ebd978decbebf5f7fa0f17
Reply-To: [email protected]
From: "Mathias Kobi Kabila" <[email protected]>
MIME-Version: 1.0
X-Sender: [email protected]
X-Mailer: PHP
Content-Type: multipart/alternative; boundary="MYWAYBOUNDARY_000__afaaf06d5e0a5d93a49f28ede842b7bd";
Content-Transfer-Encoding: 7bit
Message-Id: <[email protected]>
Date: Mon, 1 Jan 2007 23:14:22 -0500 (EST)
X-Virus-Scanned: CleanMail 2.5 at mf10
X-Spam-Status: Yes, hits=10.508 required=6 tests=[FORGED_RCVD_HELO=0.05,
HTML_MESSAGE=0.001, HTML_TAG_EXIST_TBODY=0.233, MILLION_USD=1.29,
NIGERIAN_BODY1=2.914, NIGERIAN_BODY2=0.489, RCVD_IN_BL_SPAMCOP_NET=1.832,
SARE_FRAUD_X3=1.667, SARE_FRAUD_X4=1.667, SUBJ_ALL_CAPS=0.365]
X-Spam-Level: 8/5
X-Spam-Flag: Yes
X-Spam-Report: CleanMail Spam detection software has identified this
incoming email as possible spam. Content analysis details: (10.5 points)
pts rule name description
---- ---------------------- ------------------------------------------
0.1 FORGED_RCVD_HELO Received: contains a forged HELO
0.4 SUBJ_ALL_CAPS Subject is all capitals
1.3 MILLION_USD BODY: Talks about millions of dollars
0.2 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?196.1.186.22>]
2.9 NIGERIAN_BODY1 Message body looks like a Nigerian spam message 1+
0.5 NIGERIAN_BODY2 Message body looks like a Nigerian spam message 2+
1.7 SARE_FRAUD_X3 Matches 3+ phrases commonly used in fraud spam
1.7 SARE_FRAUD_X4 Matches 4+ phrases commonly used in fraud spam

by 4X1X9 Sun Jan 13, 2013 6:19 am
You are not the first person to fall for this kind of scam and sadly you wont be the last either, scammers make millions of dollars a year pulling off this con trick. The scammer spun you a very believable story and if you weren't aware of this mass crime 'industry' of printing fake checks there would have been no way of you knowing what was going on.

The feelings you are going through are common for scam victims but the only person/people who should feel ashamed are the scumbag(s) who did this to a hardworking mum who was trying to earn more money by working hard to provide a better life for her kids.
by embarrassedintx Sun Jan 13, 2013 7:25 pm
Thanks for the helpful info. I think I removed all personal info from this. Thanks to whoever is double checking that I am not including personal information. This is what I pulled up:

Return-Path: <[email protected]>
Received: from cdptpa-mxlb.mail.rr.com ([10.127.255.88])
by cdptpa-imta02.mail.rr.com with ESMTP
id <[email protected]>
for <>; Fri, 21 Dec 2012 16:19:25 +0000
Return-Path: <[email protected]>
X-Cloudmark-Score:
X-RR-Connecting-IP: 98.138.91.184
Received: from [98.138.91.184] ([98.138.91.184:30179] helo=nm24-vm4.bullet.mail.ne1.yahoo.com)
by cdptpa-iedge07.mail.rr.com (envelope-from <[email protected]>)
(ecelerity 2.2.3.46 r()) with ESMTP
id 02/78-22802-C0C84D05; Fri, 21 Dec 2012 16:19:24 +0000
Received: from [98.138.90.52] by nm24.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 16:19:20 -0000
Received: from [98.138.226.165] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 16:19:20 -0000
Received: from [127.0.0.1] by omp1066.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 16:19:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 19161 invoked by uid 60001); 21 Dec 2012 16:19:20 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1356106760; bh=IEDc+u2PYqI3C3svOxUuosvNTt4TTJEDeDstrGi6Yxk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=j/C1KMElGFXNC3xX+ZdDsn8X6WZOnb+KfgwyzE5cJgb4HJL1MbbMWKqOby0qR3LMH5Luo4/uUoGdhYEhDtAqjFW/5208cw3lX7dqAa33+JIVrUKZqHb8xK3lVXJQjlzUEf76RbAzwrZkPfrXCIFtz0bieFKoMsVYRE44K37YTEE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=KSaYabbrjAp4dWgRUM6KPYCG1sNGzegMMrfGdNprvw4E9LgPCCYnfiR1uT1iv5qGd9tdx7Z9MO1jSdBt+2sFj5MsMW0gKAUldRXxRM6QPbOn1zbW5lLH3hR8bApEB7rAKNFKoaDbXVLeoPm8U8wyZ/nlag28RmFBAw4iRa9jIxs=;
X-YMail-OSG: 8XUcDYcVM1l66zxln4O7MM3Bxp7BGIHdw6Mi_tueJcX8y4L
prURd1W.c5_2y0Ml5sGJGxB9lkHbWmDYsQYaGW.8H9ElNqRlMxSj.ra0MVtp
LkSh4Yfr_m0.K8OFOJ3JIqXvPodRHdo8Tr1XAoEy7m2bD5gWfqI7Mhkf8LUz
MhtbNiWWLYnGM8wqTBuSGfzXF7Ulx_heAZzGhlKSgQtYkuteXwVMMzcp66Qg
JGSLqXEZ078IJURP1Ix.PKgFThGq7YfknJp.1xM0kB30NF5Swu0BIKeGNtuj
chr0BOiawvG6sj1J268HM3qN933St2xrIKYO3f_218I73qPb5lkDQ93ITd7n
4hN1EqxJFKKby92tZegIKWjX6q0QUiW.cWLzXO42RnV23HlMKhX_7DTr29J.
OfTFNM4WCYoKAhI1rKdvBeiDLQs8uwwqsy1yjOhuk0iyVQQlUURp0mQW.EAY
S8pDEDiMAxmqQiRa6IBQN08rj
Received: from [41.71.176.226] by web120102.mail.ne1.yahoo.com via HTTP; Fri, 21 Dec 2012 08:19:20 PST
X-Rocket-MIMEInfo: 001.001,WW91ciBUcmFpbmluZyBUYXNrIHRvZGF5IGludm9sdmVzIHlvdSBkZWFsaW5nIHdpdGggYcKgQmFuayBSZWNvbmNpbGlhdGlvbsKgYW5kIHN1Ym1pdCB0byBtZSBieSA5YW0gdG9tb3Jyb3cgbW9ybmluZy4NCkJBTksgUkVDT05DSUxJQVRJT05PbiBBdWcgMTR0aCwgT25lIG9mIG91ciBQYXJ0bmVyJ3MgKCBDb21wdXZpbGxlICkgY2FzaCBib29rIHNob3dlZCBhIGRlYml0IGJhbGFuY2Ugb2YgJDQsMDAwLjAwLkhpcyBiYW5rIHN0YXRlbWVudCBzaG93ZWQgYSBiYWxhbmNlIG9mICQ0LDI3MC4wMC5PbiBjb21wYXIBMAEBAQE-
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <[email protected]>
Date: Fri, 21 Dec 2012 08:19:20 -0800 (PST)
From: Ty Mason <[email protected]>
Subject: Task 3
To: >
In-Reply-To: <CA590C4DDC1641FBB4902C92F6839885@TammyPC>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1658718958-495649591-1356106760=:18422"
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Tracker: AAAAAA==

My teenage son is a computer nerd, and did a search on the IP address and it came back to a server in Nigeria. He explained to me that they are probably using a proxy server, which constantly changes your IP making you virtually invisible.
I'm starting to get over the initial shock and went back on craigslist and found more ads that were similar to the one I responded to, so I flagged them. What I noticed was that every box on the bottom was checked off. I want to thank everyone for their comments!
by Dotti Sun Jan 13, 2013 8:09 pm
If the IP is Nigeria, chances are it is not a proxy server. Many of these scammers do operate out of Nigeria.

But, even if it is a real IP, it will likely lead to an internet cafe or even a college computer facility used by many different people. Computers at internet cafes are used by hundreds of different people. These cafes don't have security equipment or video cameras that would help to pinpoint an individual user.

Need to post photos? http://scamwarners.com/forum/viewtopic.php?f=28&t=3219
Are you a victim of a romance scam? Read here for advice and FAQ's.
by vonpaso xlura Sun Jan 13, 2013 9:33 pm
The IP address belongs to Visafone in Nigeria. I've seen that ISP and phone company several times before in scams. The IP address has no reverse DNS, so we don't know whether it's a scammer's dialup line, an Internet café, or a mobile phone.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
by jolly_roger Mon Jan 14, 2013 5:02 am
Thank-you for posting the e-mail header. Won't divulge too much, but the trickster has attempted to forge part of the header. There are mistakes that simply should not be in a normal transmission. An email from a normal person would have no irregularities contained within. Much obliged embarrassedintx for the post because it will be seen by others and will be far less likely having their fingers burnt. Well done there.
by Missy123 Tue Jan 22, 2013 3:44 pm
I'm sorry that happen to you. I'm dealing with him at this second. I'm just messing with him because I know he is a scam. I will continue to warm others.
by embarrassedintx Wed Jan 23, 2013 2:53 pm
Hi Missy123,
Wow, I can't believe you found this jerk! Is he still using Ty Mason as his name? Some days his id comes up on my yahoo messenger and sometimes it doesn't. I didn't think he would be stupid enough to continue to use the same name and id. Apparently so.
Do be careful about using your real info. I hope you stick it to him!!!
Thanks!
by Clair Wed Jan 23, 2013 10:49 pm
Missy, if the scammer has any of your personal information it is best to just walk away and not play with him.

Who is online

Users browsing this forum: ClaudeBot and 4 guests