Company Representative scams, Payment Processing scams and other Employment scams.
by Tim Atem Fri Nov 06, 2015 8:50 am
This is a Money Mule Scam!

These scammers are using the name of a legitimate company for their scam, the real Smerud Medical Research did not send this email and even on the real company's website http://www.smerud.com/index.php/employment you can see there is no such thing as a Payment Representative.


ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.145.24.41
Originating ISP: Telkom Internet
City: Centurion
Country of Origin: South Africa
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.55.25.146 with SMTP id 18csp431696qkz;
Thu, 5 Nov 2015 07:52:26 -0800 (PST)
X-Received: by 10.13.237.4 with SMTP id w4mr6644035ywe.110.1446738746924;
Thu, 05 Nov 2015 07:52:26 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.adc1.com (mail.adc1.com. [24.129.209.20])
by mx.google.com with ESMTP id n129si2191777ywn.145.2015.11.05.07.52.26;
Thu, 05 Nov 2015 07:52:26 -0800 (PST)
Received-SPF: neutral (google.com: 24.129.209.20 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=24.129.209.20;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 24.129.209.20 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by mail.adc1.com (Postfix, from userid 99)
id 44833700745; Thu, 5 Nov 2015 09:52:26 -0600 (CST)
Received: from 41.145.24.41
(SquirrelMail authenticated user kdewrell)
by webmail.adc1.com with HTTP;
Thu, 5 Nov 2015 09:52:26 -0600 (CST)
Message-ID: <[email protected]>
Date: Thu, 5 Nov 2015 09:52:26 -0600 (CST)
Subject: Recruitment Opportunity.
From: "Smerud Medical Research" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.4
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal


Dear Sir/Ma,

Smerud Medical Research is a contract research organisation (CRO)
specializing in proof of concept clinical trials and pivotal regulatory
trials (phase IIb and III). We help our clients to run cost-efficient
clinical development programs. Smerud excels in all services required to
develop a product; from strategy planning, to processing marketing
authorization. We are highly competitive in quality, time and cost
particularly as we can provide clients with reliable and documented
feasibility information before costly drug development can begin.


See below Vacancy/Contract Request for our ongoing marketing research
program. We require part time representatives who will act as
intermediaries between us and customers in their country of residence. We
would like to offer you a part time job as our payment representative in
your region and you can earn between $4,000 - $5,000 USD in a month
depending on your speed, accuracy and devotion to your work.

Our clients make payments for our products and services every week.
Payments are made mainly through Prepaid card, Credit card payment or a
Required Bank in the United states Of America. Your job will be to receive
payment sent to us, deduct your work commission of (USD $350 for your
services and logistics from every payment processed) and forward the
balance to us or any of our various branches as you will be instructed to
do in our further emails.

REMEMBER THE MORE PAYMENT PROCESSED, THE MORE YOU EARN.

We would want to know if you would like to work online from home and get
paid weekly without leaving or affecting your present job. You are not
required to pay any registration fee or pay for any application form
before you get employed.

Interested applicants should send the following details, and direct all
enquiries to our representative consultancy department for more
information.

Your Full Name:
Home Address:
City:
State:
Zip Code:
Your Mobile Phone Number:
Age:
Current Occupation:
Email:

(Note that the above provided details is correct as your pay check will be
mailed to the address you provide)

Regards, Micheal Hilton
Recruitment Manager

Smerud Medical Research

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

by Tim Atem Sun Nov 15, 2015 8:32 am
Delivered-To: <snipped>
Received: by 10.55.209.196 with SMTP id o65csp1509526qkl;
Sat, 14 Nov 2015 09:14:27 -0800 (PST)
X-Received: by 10.25.21.70 with SMTP id l67mr12793435lfi.27.1447521267132;
Sat, 14 Nov 2015 09:14:27 -0800 (PST)
Return-Path: <[email protected]>
Received: from forward12m.cmail.yandex.net (forward12m.cmail.yandex.net. [5.255.216.143])
by mx.google.com with ESMTPS id e8si11784771lfb.177.2015.11.14.09.14.26
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 14 Nov 2015 09:14:27 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 5.255.216.143 as permitted sender) client-ip=5.255.216.143;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 5.255.216.143 as permitted sender) [email protected];
dkim=pass [email protected]
Received: from web1m.yandex.ru (web1m.yandex.ru [IPv6:2a02:6b8:0:2519::201])
by forward12m.cmail.yandex.net (Yandex) with ESMTP id 688A6215BF
for <<snipped>>; Sat, 14 Nov 2015 20:14:26 +0300 (MSK)
Received: from 127.0.0.1 (localhost [127.0.0.1])
by web1m.yandex.ru (Yandex) with ESMTP id F034FC0940;
Sat, 14 Nov 2015 20:14:25 +0300 (MSK)
DKIM-Signature: <snipped>
Received: by web1m.yandex.ru with HTTP;
Sat, 14 Nov 2015 20:14:25 +0300
From: Micheal Hilton <[email protected]>
To: <<snipped>>
Subject: Re: Recruitment Opportunity.
MIME-Version: 1.0
Message-Id: <[email protected]>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Sat, 14 Nov 2015 19:14:25 +0200


Dear Prospective Representative,

We acknowledged the receipt of your email as well note the content. You are the representative to process the payment you are to receive that why your bank account should be used, This is legal we have our good name to protect too.

Thanks for considering our job offer and we hope to develop a good working relationship with you.

Regards, Micheal Hilton
Recruitment Manager
Smerud Medical Research.

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
by Mortal Sun Nov 15, 2015 8:56 am
[email protected] and [email protected]
Delivered-To:
Received: by 10.64.206.200 with SMTP id lq8csp134628iec;
Sat, 14 Nov 2015 06:49:14 -0800 (PST)
X-Received: by 10.66.160.106 with SMTP id xj10mr40164484pab.153.1447512554249;
Sat, 14 Nov 2015 06:49:14 -0800 (PST)
Return-Path: <[email protected]>
Received: from ns502-vm1.bullet.mail.kks.yahoo.co.jp (ns502-vm1.bullet.mail.kks.yahoo.co.jp. [183.79.57.56])
by mx.google.com with ESMTP id ks7si35510508pab.109.2015.11.14.06.49.13
for < >;
Sat, 14 Nov 2015 06:49:14 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 183.79.57.56 as permitted sender) client-ip=183.79.57.56;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 183.79.57.56 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from [183.79.100.139] by ns502.bullet.mail.kks.yahoo.co.jp with NNFMP; 14 Nov 2015 14:49:13 -0000
Received: from [183.79.100.132] by t502.bullet.mail.kks.yahoo.co.jp with NNFMP; 14 Nov 2015 14:49:13 -0000
Received: from [127.0.0.1] by omp501.mail.kks.yahoo.co.jp with NNFMP; 14 Nov 2015 14:49:13 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 58242 invoked by uid 60001); 14 Nov 2015 14:49:12 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=yj20050223; d=yahoo.co.jp;
h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:X-YMail-JAS:Sender:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=g3iIrh3sjKI3gtUAvw2UDVrugg/MXpVyHURAZdsVEfujI1yJqo9s4fMfBl5xZ6gqbGTdWNA06V+bLwiBYu0De7lSv6GSHO+F+0jPJFkw+xw9Gh0ja7r9aOn/MXbMNx6u ;
Message-ID: <[email protected]>
Received: from [41.216.50.66] by web102008.mail.ssk.yahoo.co.jp via HTTP; Sat, 14 Nov 2015 23:49:12 JST
X-RocketYMMF: arimura_takahiro
X-Mailer: YahooMailWebService/0.8.111_67
X-YMail-JAS: OIZiwJ8VM1lfgEYlnIevoNhClPW7sd.mZYUCsAkmu9SPtABDm.zXvrjcrAAJcUArPlUVcxmtBIwzt6AohjJklpa1E4dMNVd2bTs593FGMmid_zobRhHmW0qeQEpC9cHj0Zfs
Sender: [email protected]
Date: Sat, 14 Nov 2015 23:49:11 +0900 (JST)
From: Isa Williams <[email protected]>
Reply-To: Isa Williams <[email protected]>
Subject: Greetings,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1825253032-379337802-1447512552=:43968"

---1825253032-379337802-1447512552=:43968
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Your ATM Visa Card Was Discovered In Post Office.

Greetings,

I’m Mr.Felix Nelson,the new appointed Postman of Regular Mail Post Office branched at Cotonou Benin. I assumed this office on 12th, jun, 2015. On going through the files of the previous records of this office, I discovered that there are six parcels containing ATM cards each one attached with an email address of the owner on it. The former appointee of this office (Alhaji Ahmed Musa Jr.) failed to carry out the delivery as it was instructed and programmed. Probably, one of his reasons for not carrying out the delivery was that you have not provided your postal address to him for the completion of the delivery as he remarked.

According to the content recorded in each file, the ATM card was deposited by one Senior Evangelist Mathew Peterson who died two year back as a charity foundation parcel to each of the six of you. On the statement he wrote on the list, he stated that each of the aforementioned ATM cards contains the sum of US$5,550,000.00 and he found your email contacts as reputable and capable persons that can use the charity awarded ATM Cards to change the lives of people.

Meanwhile, I've made the arrangement of posting the six parcels through Regular Mail Post Office to the six of you to your respective mailing addresses.

Am also sending the same message of the same content to six of you that own the six abandoned ATM CARDS each at the same time. If found in spam folder, it could be due to your Internet Service Provider, ISP. So move to your inbox before your reply.

I went to our head office at Cotonou Benin and reported the issue of the discovered six ATM cards in my office and they verified it and gave me the veto order to carry out the delivery immediately you reconfirm your mailing address to this office in order for us to mail the ATM CARD directly to you after Postal Stamp of the parcel. Note, below information is officially needed for posting of the ATM CARD ASAP.

Full name:
Full mailing info:
Your cell phone line:
Country:
Nearest Airport:

We shall post your ATM Card once you update us with the above info and you shall be given a tracking number, that is, the Track and Trace number of your parcel once it is posted to your mailing address, so as to enable you track your parcel to know exactly when it will arrive to your mailing address.

Remain blessed as I'll be looking forward to receiving your immediate response.

Regards,
MR.felix Nelson
Postman, Regular Mail Post Office Cotonou Benin.

Never tell scammer he is listed on this site.

If you find out person you are communicating with is listed here: stop all contact with the scammer

Need help? Contact me at mortimer.allen @ scamwarners.com (remove the spaces)
by Tim Atem Sat Nov 21, 2015 10:17 am
No legitimate employer would require access to YOUR personal banking information!

Delivered-To: <snipped>
Received: by 10.55.209.196 with SMTP id o65csp232768qkl;
Thu, 19 Nov 2015 17:29:53 -0800 (PST)
X-Received: by 10.112.170.167 with SMTP id an7mr4556964lbc.37.1447982993813;
Thu, 19 Nov 2015 17:29:53 -0800 (PST)
Return-Path: <[email protected]>
Received: from forward17h.cmail.yandex.net (forward17h.cmail.yandex.net. [87.250.230.159])
by mx.google.com with ESMTPS id z77si7330384lfd.36.2015.11.19.17.29.53
for <<snipped>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 19 Nov 2015 17:29:53 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 87.250.230.159 as permitted sender) client-ip=87.250.230.159;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 87.250.230.159 as permitted sender) [email protected];
dkim=pass [email protected]
Received: from web23h.yandex.ru (web23h.yandex.ru [84.201.187.157])
by forward17h.cmail.yandex.net (Yandex) with ESMTP id 2DD2421043
for <<snipped>>; Fri, 20 Nov 2015 04:29:53 +0300 (MSK)
Received: from 127.0.0.1 (localhost [127.0.0.1])
by web23h.yandex.ru (Yandex) with ESMTP id C3155E62A59;
Fri, 20 Nov 2015 04:29:52 +0300 (MSK)
DKIM-Signature: <snipped>
Received: by web23h.yandex.ru with HTTP;
Fri, 20 Nov 2015 04:29:52 +0300
From: Micheal Hilton <[email protected]>
To: <<snipped>>
Subject: Re: Recruitment Opportunity.
MIME-Version: 1.0
Message-Id: <[email protected]>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Fri, 20 Nov 2015 03:29:52 +0200
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=utf-8


Dear Prospective Representative,

We acknowledged the receipt of your email as well note the content. The online banking access will be needed for payment confirmation before goods is shipped out of store, Below are the online banking access needed.

Online Banking Username:
Online Banking Password:
Online Banking Security Questions:
Online Banking Security Answers:

Thanks for considering our job offer and we hope to develop a good working relationship with you.

Regards,
Micheal Hilton
Recruitment Manager
Smerud Medical Research.

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
by Tim Atem Sat Nov 21, 2015 10:20 am
No legitimate employer would require access to YOUR personal banking information!

Delivered-To: <snipped>
Received: by 10.55.209.196 with SMTP id o65csp419479qkl;
Fri, 20 Nov 2015 02:48:44 -0800 (PST)
X-Received: by 10.25.148.202 with SMTP id w193mr5651752lfd.130.1448016524329;
Fri, 20 Nov 2015 02:48:44 -0800 (PST)
Return-Path: <[email protected]>
Received: from forward14p.cmail.yandex.net (forward14p.cmail.yandex.net. [87.250.241.142])
by mx.google.com with ESMTPS id p15si8458784lfe.235.2015.11.20.02.48.43
for <<snipped>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 20 Nov 2015 02:48:44 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 87.250.241.142 as permitted sender) client-ip=87.250.241.142;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 87.250.241.142 as permitted sender) [email protected];
dkim=pass [email protected]
Received: from web13g.yandex.ru (web13g.yandex.ru [IPv6:2a02:6b8:0:1402::23])
by forward14p.cmail.yandex.net (Yandex) with ESMTP id 8EA112103F
for <<snipped>>; Fri, 20 Nov 2015 13:48:43 +0300 (MSK)
Received: from 127.0.0.1 (localhost [127.0.0.1])
by web13g.yandex.ru (Yandex) with ESMTP id 0AC46330267F;
Fri, 20 Nov 2015 13:48:42 +0300 (MSK)
DKIM-Signature: <snipped>
Received: by web13g.yandex.ru with HTTP;
Fri, 20 Nov 2015 13:48:42 +0300
From: Micheal Hilton <[email protected]>
To: <<snipped>>
Subject: Re: Recruitment Opportunity.
MIME-Version: 1.0
Message-Id: <[email protected]>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Fri, 20 Nov 2015 12:48:42 +0200


Dear Prospective Representative,

We acknowledged the receipt of your email as well note the content. There is one thing we want you to understand about the online banking access request this is to protect both of us and to avoid argument or doubt when our customer pay into your bank accounts, as we have had issue with representatives in the past whereby a customer pays into there bank account and keep saying the payment didn't reflect until we are forced to tell the customer to recall back the money paid into the account which bring lot of trust issues between us and the customer. We don't want to face similar issues again that why we request for online banking access from our representative, The online banking access is needed for payment verification and confirmation before goods paid for is shipped out of store.

Your online banking access is needed for nothing but confirmation of payment when our customer pay into your account before goods are shipped out, I hope this help you understand why your online banking access is needed. One more thing you can always count on us with any of your information as it will not be share with third party for any reason.

Thanks for considering our job offer and we hope to develop a good working relationship with you.

Yours sincerely,
Micheal Hilton Project Manager
Smerud Medical Research.

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: ClaudeBot and 14 guests