Scandinavian Star Human Resources Solutions

That is no surprise, it is pretty much the standard format used by these scammers, the cheques are fake and any money you draw on them will be your responsibility.

The cheques will be very good fakes that are likely to make it past the provisional clearance and you will have access to the funds, please note that provisional clearance does not mean the cheque is good, it can take months in some cases to know that and regardless of how long it takes, the person who deposited the cheque will always be responsible

I almost fell for this one, and I am normally "on the ball". Hope nobody else gets hurt by this.




Dear Yvette,

In order to start your work, please hurry up to finish the last stages.

1. Fill in your data in the the pages of the Employment Agreement
2. Sign pages of the Employment Agreement
3. Prepare the scanned image of your Driver’s License or Passport
4. Send everything to email or fax.


Note: Please, fill in the forms accurately and double check filled data. After your approval by manager you can start your work.

You will like working with us. We take our cooperation seriously and will inform you about all events in time.

I am here to help you and I will do my best to help you get along with this.

--
Best regards, Daniel Cossentino
Scandinavian Star Logistics
FAX : +44 800 471 5354 (UK Toll Free)

Hi ymg666, welcome to Scamwarners

I am glad to hear you avoided being scammed, even if it was narrowly, well done for checking it out.

Thank you for posting about your experience, if you have any questions please ask

I came across the Scamwarners site after receiving an e-mail that I thought was dodgy. I looked up the name of who the e-mail was supposedly from (Daniel Cossentino)and thankfully found a link to Scamwarners. Today I received another similar one so thought I would share with all as another name to avoid :

Hi!

We have a vacancy for everyone who has a few free hours a day.

Location : UK

If you are interested, please reply to : [email protected] with your contact details.

Best wishes.
Starling Business Group

Welcome here boardman.

Thanks for posting this, but could you also post the full headers of that email? If you don't know how to get the headers, just ask one of the support team members.

I received the same email, don't know if this is any use but this is the header details of the email.

Current Open Position (id : 57X9)? (Message Title)

From: chafe Link ([email protected])
You may not know this sender.Mark as safe|Mark as junk
Sent: 08 July 2010 03:54:07

To: [email protected] (This is obviously not my email address)

Hi!

We have a vacant position for anyone who has a few spare hours a day.

Location : United Kingdom

If you are interested, please reply to : [email protected] with your contact details.

Best regards.
Starling Business Group

Welcome trueparisblue,

I'm glad you weren't scammed!

Can you post the full (extended) headers for the email? It might help to pinpoint a location. If you don't know how to get extended headers, just tell us how you are checking your email (e.g. outlook express, yahoo online, google, etc.) and we hopefully can help.

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==
X-Message-Status: n:0
X-SID-PRA: chafe Link <[email protected]>
X-SID-Result: Pass
X-AUTH-Result: PASS
X-Message-Info: 9P4r4dq6Pdu4jLFcXbL51uIV5zypFaGSUU9qSCHFdFN9Qtof/B++Nn3qa1M3n9DWcfnRvcC3/9XFF0nWM3to7BUQCXzZ09kNaCqQhZJ7BRQ=
Received: from blu0-omc2-s29.blu0.hotmail.com ([65.55.111.104]) by bay0-hmmc2-f23.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 7 Jul 2010 19:54:06 -0700
Received: from BLU140-W8 ([65.55.111.73]) by blu0-omc2-s29.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 7 Jul 2010 19:54:05 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_5cc1c68f-80fd-41b8-9503-335c0b729ffe_"
X-Originating-IP: [174.106.126.21]
From: chafe Link <[email protected]>
To: <[email protected]>
Subject: Current Open Position (id : 57X9)
Date: Wed, 7 Jul 2010 21:54:06 -0500
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 08 Jul 2010 02:54:05.0634 (UTC) FILETIME=[D42C4220:01CB1E48]

--_5cc1c68f-80fd-41b8-9503-335c0b729ffe_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


Hi!We have a vacant position for anyone who has a few spare hours a day.Loc=
ation : United KingdomIf you are interested=2C please reply to :=
[email protected] with your contact details. Best regards.Starli=
ng Business Group38-fo-9 3-m x c-3i9e41 =
eh-5 00-tz-6- 2t 18- d=
o-68-m xr 8o10-i q-8-3d =
49 11mmmmmrrrr
=20

The e-mail originates from USA (North Carolina)

Hi David
I have deleted the previous e-mails so cannot now copy the header. However, I received another one today - and the header is pretty much the same 'Job Offer' followed by a reference number. This latest one doesn't even try to dress it up with any spin, it's pretty hopeless...but very galling for people like me who are looking for work.


Header : Work opportunity (8193B)?
thorn Cortez thorn [email protected]

Add to contactsTo [email protected]
From: thorn Cortez ([email protected])
Sent: 12 July 2010 06:20:16
To: [email protected]

Attachments, pictures and links in this message have been blocked for your safety. Show content | Always show content from this sender
Hi.

We are happy to offer you a part time vacancy.

Requirements :

- Location : United Kingdom
- Adult age

If you are interested, please reply to : [email protected] with your short resume.



Take care,
Leader Trade

20- do-05-mo c- 7 q1 r 8
1oj- 4
0 7-iz- 4- 2
5
15- d z-7 3-m xv
1v
00-t q-6-3
5 440101
nnnrrrr

Do the string of numbers and letters mean anything ?
Regards, Boardman

Welcome here boardman.

Thanks for posting this, but could you also post the full headers of that email? If you don't know how to get the headers, just ask one of the support team members.

Hi all,

I got an email from a scam like this with a job offer so i decided to google the fax number and it led me to this website! only my email was from a group called the SWEDEN CARGO GROUP and was sent by a guy called Billy Govern.

I find that the biggest giveaway in most scams is the "from address".

Lottery managers for "UK electronic" lottery don't use yahoo, hotmail or gmail addresses!

Personnel Officers for big corps also don't use free email addresses!

Even if a bank official really DOES have an "unclaimed" account, he's very unlikely to rely on a stranger to claim the money and return his 25% "share" of the proceeds!

Google, Yahoo and/or Microsoft are very unlikely to be working in cooperation (!) and even if they were, they'd not throw money at you for passing on their spam emails - they have perfectly adequate methods of seding emails to all of their customers without your help!

An email from your bank does not direct you to "Barclays dot scamsite dot com"!!! (the bank name should always be immediately before the "dot com" - but don't rely on this alone

If an email address looks even slightly genuine, check "properties" and you will probably find that it is "spoofed", and the address that shows under "properties" reverts back to an unknown domain or a free one.

Financial offers (jobs, etc) - "If it looks too good to be true, it certainly is"

Bank, eBay, PayPal - if at all uncertain, ask bank/eBay/Paypal (through your account login - not as a direct reply to the email)