Company Representative scams, Payment Processing scams and other Employment scams.
by lowdown Fri Apr 20, 2012 2:50 pm
I have received an email which purports to be from the United Nations seeking student interns. The DN of the email address where application details are asked to be sent is un-uncrd.org. The corresponding web-site is "under construction". Whois gives a registrant address of 11400 W. Olympic Blvd. Suite 200, LA - an address that has previously been associated with scams at scamwarners in "wefeminist.com , Uses stolen Credit Card Numbers" (viewtopic.php?f=10&t=24523).
If this is a scam, the purpose is not immediately clear beyond collecting personal information from students who might hope for internships with the UN. One might suspect that they will then be asked for application charges or similar.
I have also seen this email re-published at reputable university sites, such as Michigan State (http://edwp.educ.msu.edu/ead/hale-happe ... d-nations/). I think we can suspect that they have fallen for this scam and re-published the information as a misdirected service for their student population.
I have requested confirmation from the United Nations Headquarters Internship Programme that they have no affiliation with the given email address. I shall follow up if and when I receive their reply

The email is reproduced here:
Date: Sun, 15 Apr 2012 05:20:44 +0900
Subject: United Nations Internship
From: "United Nations Intern Services" <[email protected]>
Reply-To: [email protected]
X-Confirm-Reading-To: [email protected]
Disposition-Notification-To: [email protected]
To: undisclosed-recipients:;

The United Nations provides opportunities for students enrolled in a
graduate programme to undertake an internship at its Headquarters in New
York, Geneva, Vienna, Nairobi, Addis Ababa, Bangkok,
Beirut,Santiago,Arusha and The Hague.

Eligible candidates interested in doing an internship at the United
Nations Headquarters in New York or any of the mentioned countries can
apply.

The objective of the Internship Programme is threefold:

To provide a framework by which graduate and under graduate students from
diverse academic backgrounds may be assigned to United Nations Offices
where their educational experience can be enhanced through practical work
assignments.

To expose them to the work of the United Nations.

To provide UN offices with the assistance of highly qualified students
specialized in various professional fields.

The United Nations Headquarters Internship Programme is offered on a
two-month basis three times a year:
• Mid January to mid March (Spring Session): The vacancy announcement is
posted mid May, the deadline for applications is end of September.
• Early June to early August (Summer Session): The vacancy announcement is
posted mid September, the deadline for applications is end of April.
• Mid September to mid November (Fall Session): The vacancy announcement
is posted end of January, the deadline for applications is mid May.

To qualify for the United Nations Headquarters Internship Programme, the
following conditions must be met:

1. Applicants must be enrolled in a degree programme in a graduate school
(second university degree or higher) at the time of application and during
the internship; or

2. Applicants pursuing their studies in countries where higher education
is not divided into undergraduate and graduate stages must have completed
at least four years of full-time studies at a university or equivalent
institution towards the completion of a degree.

3. Development-related fields such as economics, international relations,
anthropology, sociology, public or business administration, or
environmental studies. Other fields of study may be considered depending
on the type of assignment;

Any work produced by interns during their internship within the framework
of the duties assigned to them should be used for academic purposes
exclusively. All economic and moral rights (copyright) pertaining to such
work will remain the exclusive property of the United Nations.


Interested undergraduate or graduate students should write via EMAIL ONLY
to the :

Ad Hoc Internship Coordinator,
Human Resources Operations Section,
Human Resources Management Service,
United Nations Office

enclosing:

Applications (in English) should include the following:

a) A covering letter stating the grounds for their application;
b) Recent curriculum vitae (CV);
c) Copies of their university degrees or a list of courses attended or
attending;
d) Abstracts of academic papers they have written if any.


All applicants must be currently enrolled in undergraduate or graduate
programs. No phone calls, please.

After careful consideration of all documents submitted, only successful
candidates will be notified of their selection.

Kindly send the requested applications documents to the following email
address: [email protected]
.
Advertisement

by lowdown Fri Apr 20, 2012 4:41 pm
I now have backing from the UN that this is more than likely a scam:

Thank you for your email.

Please note that our recruiting procedures are processed -exclusively- through our career portal, which is http://careers.un.org.

In the career website, we have clearly stated that according to our regulation, we do not ask any money from applicants or interns
[...]
We are sorry to tell you that such emails, advertising job offers are most probably fraud and not sent by the United Nations.

Best Regards


Outreach Unit
380 Madison Avenue
Room M09031B
Email: [email protected]
by vonpaso xlura Fri Apr 20, 2012 9:05 pm
A site killer is working on adding it to the fake site database so that it can be killed.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
by Justin Fri Apr 20, 2012 9:38 pm
Hi lowdown ,

As you suspect it's a scam. In fact there is warning about it on the UN's website here http://www.uncrd.or.jp/au/vacancy_alert.htm very proactive of them I'm glad to see it.
All the info in the email was stollen from here http://www.uncrd.or.jp/au/internship.htm everything is the same EXCEPT where to send the application which is via mail not an email on the legitimate site.
More than likely the scammer would ask for fees for aplication/travel/visa.

As vonpasp said its been reported and out site killers will work on getting the email only domain killed.

Thanks for posting this will help others avoid the scam!

Justin

by daft007 Mon Apr 23, 2012 12:31 pm
Hey guys, it looks like I was also caught in this scam. Thanks for the heads up.

Also, they contacted me today requesting me to fill out a medical form (see below). They are now using the following email address: [email protected]


Dear Intern,

Here is to acknowledge the receipt of your signed Intern Allegiance form
as directed.

Find further doc relating to the concluding stage of your internship
processes with us and you are advised to read through it very carefully,
and fill same as correctly as possible.

One of the purposes of medical clearance is to ensure candidates for
recruitment as interns are physically and mentally fit for internship and
that staff members continue to maintain such fitness in a manner that
enables them to perform the functions assigned to them at a particular
duty station, as well as to travel to, or work at, other duty stations.

As soon as the medical form is received,we would give you further
instructions regarding your visa procurement,accommodation during your
internship,local travels and other matters relating to your internship.

Best Regards,

Jennifer
by daft007 Mon Apr 23, 2012 2:39 pm
Open Folder
Open Folder

Inbox
Inbox
Empty Trash
Empty Trash
New Message
New Message
Folders
Folders
Search
Search
Fetch Mail
Fetch Mail
Address Book
Address Book
Options
Options
Help
Help
Log out
Log out

Quota status: 413.69 MB / 488.28 MB (84.72%)
Inbox: Re: Offer of Internship-UNCRD (3 of 1753) Personal

Move
Copy

Back to Inbox < >

Delete
Reply
Forward
Redirect
View Thread
Block
Accept
Message Source
Save as
Print
Headers

Content-Type: multipart/mixed; boundary="33022739-809441552-1335187028=:87637"
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1335187029; bh=NWHxVt/L8xCNw7Nisi8sDAxV5mNpFHPGDzuvaVROGxg=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=lQ9C3K8TjxnFCIcFGWn6Io1GYxvaGRSS/jko87eckLo/dbwgLcyC4NaUBSj4dlwwz84HposMmJJWo7aUiHIxx4+m42CA/GTTIZQAu8un43WmqM+prB0LdJYuyPRs4mf0RoBAZHBu1GllVMhOSF4BUpOQaMWcX1h51xgGZCgxteA=
Date: Mon, 23 Apr 2012 06:17:08 -0700 [10:17:08 ADT]
From: UNCRD <[email protected]>Add [email protected] to my Address Book
MIME-Version: 1.0
Message-ID: <[email protected]>
Received:

from lmtpproxyd (kil-imap-13.UCIS.Dal.Ca [129.173.0.21]) by kil-imap-21.UCIS.Dal.Ca (Cyrus v2.3.14) with LMTPA; Mon, 23 Apr 2012 10:22:08 -0300
from kil-imap-13.ucis.dal.ca ([unix socket]) by kil-imap-13.ucis.dal.ca (Cyrus v2.3.12p2) with LMTPA; Mon, 23 Apr 2012 10:22:07 -0300
from sxt-sm-1.ucis.dal.ca (SXT-SM-1.UCIS.Dal.Ca [129.173.5.72]) by kil-imap-13.ucis.dal.ca (8.13.8/8.13.8) with ESMTP id q3NDLRp9007421 for <[email protected]>; Mon, 23 Apr 2012 10:21:27 -0300
from kil-av-4.ucis.dal.ca (KIL-AV-4.UCIS.Dal.Ca [129.173.1.223]) by sxt-sm-1.ucis.dal.ca (8.14.2+Sun/8.14.2) with SMTP id q3NDL8Se002131 for <[email protected]>; Mon, 23 Apr 2012 10:21:08 -0300 (ADT)
from (KIL-MX-2.UCIS.Dal.Ca [129.173.1.136]) by kil-av-4.ucis.dal.ca with smtp id 22a4_2733_2f8fc0c8_8d47_11e1_ab71_a4badbdfb301; Mon, 23 Apr 2012 10:21:06 -0300
from nm16.bullet.mail.sp2.yahoo.com (nm16.bullet.mail.sp2.yahoo.com [98.139.91.86]) by kil-mx-2.ucis.dal.ca (8.14.2+Sun/8.14.2) with SMTP id q3NDKSHt017775 for <[email protected]>; Mon, 23 Apr 2012 10:20:28 -0300 (ADT)
from [98.139.91.68] by nm16.bullet.mail.sp2.yahoo.com with NNFMP; 23 Apr 2012 13:17:09 -0000
from [98.139.91.26] by tm8.bullet.mail.sp2.yahoo.com with NNFMP; 23 Apr 2012 13:17:09 -0000
from [127.0.0.1] by omp1026.mail.sp2.yahoo.com with NNFMP; 23 Apr 2012 13:17:09 -0000
(qmail 19166 invoked by uid 60001); 23 Apr 2012 13:17:09 -0000
from [204.45.71.60] by web114020.mail.gq1.yahoo.com via HTTP; Mon, 23 Apr 2012 06:17:08 PDT

Reply-To: [email protected] [email protected] to my Address Book
Return-Path: <[email protected]>
Subject: Re: Offer of Internship-UNCRD

X-Dal-Submitter-IP: 98.139.91.86
X-Greylist: delayed for 00:03:18 at (kil-mx-2.ucis.dal.ca [129.173.1.136]) by smf-grey v2.1.0 - http://smfs.sf.net/
X-Is-Scanned: yes
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
X-NAI-Spam-Flag: NO
X-NAI-Spam-Level: *
X-NAI-Spam-Score: 1.5
X-NAI-Spam-Threshold: 3
X-NAI-Spam-Version: 2.2.0.9309 : core <4200> : streams <749432> : uri <1102664>
X-RocketYMMF: briggsgoodluck
X-Sieve: CMU Sieve 2.3
X-YMail-OSG: rDu4wn4VM1mOqOMRJyUwwbUdXGLFLcvZKVcrSEyTk6PudxC g6V9W8CPFBfUg6zPoBJGkqX.ORoEBHp4uqH2Yd0JN6PRliFnHQatlRmNkzzy 6dWy3vpv8ZMWcAEDBXXqfkPL_9DnU_BQHfEpYp0abNoCSY31HhFbwJ6G_1td k6Q.Av5i5Ovct4GxR1MSjJ655cwaqMME38SFb6ALqOzzwbnpxuhDaeH8C7IT NaXcaddfddtO4ItfIWL8v_4YrgjaqsWG9uiOwaYYa2sa5Yi4F83Hn4rl8nMT pvlWf2hCREJ__5c28f4ud3ZeXn4Dh4Jczu3qpnYySlFuW2OXRpN5ApTtOOop RV.iQyJe.lBkQZYZGgx6a2FZUMXxBiUk544_K22hg050o8VvqLbSLDyJm.1A yyY7MUZMKTX7kPGC92RXW4zSxFiDbmbYbEg--
X-Yahoo-Newman-Id: [email protected]
X-Yahoo-Newman-Property: ymail-3
Part(s):
2 Medical History Form.pdf 12 KB Strip Attachment
Download All Attachments (in .zip file) Download All Attachments (in .zip file)
Strip All Attachments Strip Attachments
1 unnamed 4.28 KB Strip Attachment
Show this HTML in a new window?
Dear Intern,

Here is to acknowledge the receipt of your signed Intern Allegiance form
as directed.

Find further doc relating to the concluding stage of your internship
processes with us and you are advised to read through it very carefully,
and fill same as correctly as possible.

One of the purposes of medical clearance is to ensure candidates for
recruitment as interns are physically and mentally fit for internship and
that staff members continue to maintain such fitness in a manner that
enables them to perform the functions assigned to them at a particular
duty station, as well as to travel to, or work at, other duty stations.

As soon as the medical form is received,we would give you further
instructions regarding your visa procurement,accommodation during your
internship,local travels and other matters relating to your internship.

Best Regards,

Jennifer
by daft007 Mon Apr 23, 2012 6:53 pm
Awesome, thanks a lot Justin. I'll post again if I receive another email from them.

You guys at ScamWarners are doing a great job! Keep up the good work.
by daft007 Fri Apr 27, 2012 6:39 am
Here are the headers:





Open Folder

Inbox

Empty Trash

New Message

Folders

Search

Fetch Mail

Address Book

Options

Help

Log out
Quota status: 415.33 MB / 488.28 MB (85.06%)
Inbox: Re: Offer of Internship-UNCRD (3 of 1773)

MoveCopyBack to Inbox
DeleteReply Forward RedirectView ThreadBlockAcceptMessage SourceSave asPrintHeaders
Content-Type: multipart/mixed; boundary="152758528-62476564-1335467244=:34984"
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1335467247; bh=GDFpp/iq1WC+Ht3KVXnL/Mf/SCmvqt6VUeHBCPrYqyE=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tCJ8fB7Y6DsEXK8Ao0mF+XmzvIzwGbymjDXhezkWppbtjTkwhzbHzN4SAYZaXV8DD4Hvg9coKnpNCm3uGJEJ6pao4ue0fub1ud5Rf6lN8yVhWk1qso5Zq3NDKlgARLQEOsuZ5IN3GmS5/6OprCoAjz5zKAy8xfA4GjNNLSBeXuk=
Date: Thu, 26 Apr 2012 12:07:24 -0700 [04/26/12 16:07:24 ADT]
From: UNCRD <[email protected]>
MIME-Version: 1.0
Message-ID: <[email protected]>
Received:
from lmtpproxyd (kil-imap-10.UCIS.Dal.Ca [129.173.0.19]) by kil-imap-21.UCIS.Dal.Ca (Cyrus v2.3.14) with LMTPA; Thu, 26 Apr 2012 16:10:45 -0300
from kil-imap-10.ucis.dal.ca ([unix socket]) by kil-imap-10.ucis.dal.ca (Cyrus v2.3.12p2) with LMTPA; Thu, 26 Apr 2012 16:10:44 -0300
from sxt-sm-1.ucis.dal.ca (SXT-SM-1.UCIS.Dal.Ca [129.173.5.72]) by kil-imap-10.ucis.dal.ca (8.13.8/8.13.8) with ESMTP id q3QJAVRs025700 for <[email protected]>; Thu, 26 Apr 2012 16:10:32 -0300
from kil-av-3.ucis.dal.ca (KIL-AV-3.UCIS.Dal.Ca [129.173.1.208]) by sxt-sm-1.ucis.dal.ca (8.14.2+Sun/8.14.2) with SMTP id q3QJAErX004193 for <[email protected]>; Thu, 26 Apr 2012 16:10:15 -0300 (ADT)
from (KIL-MX-1.UCIS.Dal.Ca [129.173.1.129]) by kil-av-3.ucis.dal.ca with smtp id 27c1_a088_73f9200e_8fd3_11e1_ae62_a4badbdfb24a; Thu, 26 Apr 2012 16:10:13 -0300
from nm22-vm0.bullet.mail.sp2.yahoo.com (nm22-vm0.bullet.mail.sp2.yahoo.com [98.139.91.222]) by kil-mx-1.ucis.dal.ca (8.14.2+Sun/8.14.2) with SMTP id q3QJ9OsS004748 for <xxxxxxxxxx>; Thu, 26 Apr 2012 16:09:24 -0300 (ADT)
from [98.139.91.63] by nm22.bullet.mail.sp2.yahoo.com with NNFMP; 26 Apr 2012 19:07:27 -0000
from [98.139.91.29] by tm3.bullet.mail.sp2.yahoo.com with NNFMP; 26 Apr 2012 19:07:27 -0000
from [127.0.0.1] by omp1029.mail.sp2.yahoo.com with NNFMP; 26 Apr 2012 19:07:27 -0000
(qmail 36884 invoked by uid 60001); 26 Apr 2012 19:07:27 -0000
from [204.45.71.60] by web114001.mail.gq1.yahoo.com via HTTP; Thu, 26 Apr 2012 12:07:24 PDT
Reply-To: [email protected]
Return-Path: <[email protected]>
Subject: Re: Offer of Internship-UNCRD
To: xxxxxxxxxxxx
X-Dal-Submitter-IP: 98.139.91.222
X-Greylist: delayed for 00:01:56 at (kil-mx-1.ucis.dal.ca [129.173.1.129]) by smf-grey v2.1.0 - http://smfs.sf.net/
X-Is-Scanned: yes
X-Mailer: YahooMailClassic/15.0.6 YahooMailWebService/0.8.118.349524
X-NAI-Spam-Flag: NO
X-NAI-Spam-Level: *
X-NAI-Spam-Score: 1.5
X-NAI-Spam-Threshold: 3
X-NAI-Spam-Version: 2.2.0.9309 : core <4204> : streams <750402> : uri <1103979>
X-RocketYMMF: briggsgoodluck
X-Sieve: CMU Sieve 2.3
X-YMail-OSG: N8s740EVM1lCp29MTNwD5nxAoY2WMIU5F915DOmDEJ.Ogqg mmdPyNfwyqp6PBn3nmDfK9_kvv2Bi0abQYR5QWqrVA6tD53URd_hiNeULdqp FgMAb19_maHll4XnfmDe4UD5ydu4_o8iE.VNLl5_qMxHwiVbVK91LGmJ_A4z gy7wcGxKhfPWG9c5sLyW5S3lgRTKwjnJh8UQfb5aLSdGFqHTfLy8I1M2Wdu8 zwz1m9KSGVMTPDgZq5tDO45GTPJvel0NFZdadd07vyDg.1UUjul7aqCUe4gj gZnS6VFQio7XyyCFaOLoo5rHc7mhlglGFpyk88VjBqHZ8IX9C4W10w81yCJe 537oKMr7nRFZTzjLJjMIu6dQ7sSxAWMAmGLAmqve_ojivUp7wqyKbBsA1JiR Dpzznx8jAFMbNZdQAa83rxVdkfz92wDO4Qge5NY.ZQo.JfrewXND2EvB_ilb yYw--
X-Yahoo-Newman-Id: [email protected]
X-Yahoo-Newman-Property: ymail-3
Part(s):
2 Medical History Form.pdf 12 KB
Download All Attachments (in .zip file)
Strip All Attachments
1 unnamed 5.09 KB
Show this HTML in a new window?
Dear Intern,

Here is to acknowledge the receipt of your signed Intern Allegiance form as directed.

Find further doc relating to the concluding stage of your internship processes with us and you are advised to read through it very carefully,and fill same as correctly as possible.

One of the purposes of medical clearance is to ensure candidates for recruitment as interns are physically and mentally fit for internship and that staff members continue to maintain such fitness in a manner that enables them to perform the functions assigned to them at a particular duty station, as well as to travel to, or work at, other duty stations.

As soon as the medical form is received,we would give you further instructions regarding your visa procurement,accommodation during your internship,local travels and other matters relating to your internship.

Meanwhile,we are having issues with out email interface system and so,we can send mails out but cannot receive at this time.

However,our Engineers are working round the clock to restore the mail delivery/receipt software.

Please bear with us as we would get to you as soon as this is sorted out. Your intern processes are still very much on course.

Kindly bear with us and thank you for your patience and understanding.

Regards,

Jennifer




1.1 unnamed 2.25 KB
DeleteReply Forward RedirectView ThreadBlockAcceptMessage SourceSave asPrintHeaders

MoveCopyBack to Inbox
by AlanJones Fri Apr 27, 2012 6:44 am
The reason that they can send emails but not receive them is that their domain un-uncrd.org has been shut down by the hosts.

Let us know if they start writing to you from a different domain.

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
by Jillian Fri Apr 27, 2012 12:47 pm
^^^ Or if they indicate that the problem has been fixed. (it would mean they re-hosted the same domain).

It looks like the scammer may be using Yahoo to "send as" the email address at the now-suspended domain.

Have you sent a payment to a scammer with Western Union and now realize it's a scam? If the payment has not been picked up, you can cancel it immediately! 1-800-448-1492

Follow ScamWarners on Twitter: http://twitter.com/ScamWarners

Who is online

Users browsing this forum: ClaudeBot and 3 guests