Company Representative scams, Payment Processing scams and other Employment scams.
by A.B. Tue Jun 07, 2011 10:35 pm
Hello Dear,

I run a small bill collection service as an independent contractor and would like to expand so I can provide more effective services to my clients to prevent any unwanted surprises.

Basically what we would be doing together is collect premium for insurance agents donations, debt settlements, etc from my client's customers,

The Payments are usually in checks and drafts and range from $2500 to $3500.
You will take the payment which would be issued on your name to the bank and cash it.Once it clears you take $350 and send the rest via money transfer to my client.

Outline
1 Receive mail-Payments in Checks, Money orders and Drafts at your address.
2 Have it processed at the bank.*cashed* and make funds available to the information be provided to you to facilitate the conclusion of this job offer if accepted,send us by e-mail the following:

(1) Your full names:
(2) Full contact address,city,state,postal code
(3) Home/office phone:
(4) Occupation:
(5) Age.

Thanks



Email header details;
Received: from host2.osmnetworks.net (host2.osmnetworks.net [209.239.34.243])
by mtain-ma04.r1000.mx.aol.com (Internet Inbound) with ESMTP id 3CFE6380000A5;
Mon, 6 Jun 2011 03:57:56 -0400 (EDT)
Received: from localhost.localdomain (localhost [127.0.0.1])
by host2.osmnetworks.net (8.14.3/8.12.10) with ESMTP id p567vXIi021474;
Mon, 6 Jun 2011 03:57:33 -0400
From: "gabriel Evans" <[email protected]>
Reply-To: [email protected]
Subject: ATTN- JOB OFFER
Date: Mon, 6 Jun 2011 03:57:33 -0400
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 82.128.80.54 (info)
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (host2.osmnetworks.net [0.0.0.0]); Mon, 06 Jun 2011 03:57:35 -0400 (EDT)
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 0:2:178079840:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d600c4dec8884449e
X-AOL-IP: 209.239.34.243
X-AOL-SPF: domain : info.net SPF : none
Advertisement

by A.B. Sat Jul 02, 2011 12:15 am
More of the scammers script and details of his mule which might help those searching the internet.



Good Morning ******,

Sorry for getting back to you late, I was away on a business trip, so bear with me.

As soon as you get the check cashed in your account, You are to deduct $350 for your service and take another $50 for running around .

As soon as you deduct the money stated,You are to send the rest by cash at western union money transfer to my associate.

Here is the information you are to get the money sent to via western union money transfer as soon as you deduct all the charges



Name: Candy Reynolds
Address: 1015 Tarnwood Dr
City:Villa Rica
State: GA
Zip Code: 30180


Note.....Due to the large amount of money you are to wire, You will have to split the money into 2 and make the 2 transaction at different western

union outlets. I think you understand this?

As soon as you get the money sent,you are to get back to me here with the following details ASAP

SENDERS FULL NAME...?
SENDERS FULL ADDRESS.....?
MTCN NUMBER(10 DIGIT NUMBER)..........?
AMOUNT SENT AFTER CHARGES........?

Thanks so much and will awaits your response.

Regard's



Email header details;
Delivered-To: *removed*
Received: by 10.236.95.1 with SMTP id o1cs39664yhf;
Wed, 29 Jun 2011 08:40:46 -0700 (PDT)
Received: by 10.150.244.1 with SMTP id r1mr782180ybh.439.1309362045678;
Wed, 29 Jun 2011 08:40:45 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm7-vm1.bullet.mail.ne1.yahoo.com (nm7-vm1.bullet.mail.ne1.yahoo.com [98.138.90.250])
by mx.google.com with SMTP id v4si4662600icy.55.2011.06.29.08.40.45;
Wed, 29 Jun 2011 08:40:45 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.90.250 as permitted sender) client-ip=98.138.90.250;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.90.250 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from [98.138.90.55] by nm7.bullet.mail.ne1.yahoo.com with NNFMP; 29 Jun 2011 15:40:45 -0000
Received: from [98.138.87.6] by tm8.bullet.mail.ne1.yahoo.com with NNFMP; 29 Jun 2011 15:40:45 -0000
Received: from [127.0.0.1] by omp1006.mail.ne1.yahoo.com with NNFMP; 29 Jun 2011 15:40:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 65699 invoked by uid 60001); 29 Jun 2011 15:40:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1309362044; bh=jLHUNT1z4is3zrTwtsSdC1lumvvpAFd27pBkWz1P7GU=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=28eNk9ZnJpBwLXsPV1Ppp9E3zUGZPG2mhymTaFxMxB7fmLqt2vstmR/85trm8GogJYzkVGNwOMsHpbHsoKSyThvfDwmMVUF9Fq930OZzZ8O6rYGp7ramfhgHjz5KbUdwjpeqwk5x3+ew82JgKrbn86mBMB9HVnabkrB5Q9DUA1o=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=oog3l0MKy75k5bkwmGn+0x+foLb+3XwbDDrZVkwcwmlcWrw+vwX/qu6PMO45F2Y7h1o8FA3cb1nRmt8XVJ5E1+q3bworHdvsp4Ju3mlAeV6HzZTqhDAWtF9GYmuqw9GVD6pkkxCyWFX5JNNOEuQQtl5n9VAG0mzbqewBwRjypK8=;
X-YMail-OSG: XVTxQV0VM1nxDc4JtlN_2MYJEb.QOv2w8u9rlpT5BIA2c6a
uFpmHPt2_UMo09.mUCpHzVqi_GIimOvMzDI1mmpDbYOKtGvSd7IZf_B3aCxa
mFozJbWJbLN7VyJ5Sf9FmmBvk7V61_fLeU1TQR2bh6e5jHlEtpm5OhiysdhB
R5oEWrFjVncQqwu8bQX1QU2RTgFHIcjwWkgTaMVDz2QXgBPvT7jGYnHs1P91
K1UBGgwkjfmNwQXUrAz_cbDImlsYVzDZQTJqOcPMVTaI0aUIPBoaCv5pee5D
rkoucJ8b4v4PR.t6Ys0Hcuf1neJrcT1bRRbcOrR6TJGpLFyo.kTv0V7YSjOi
90cPHCJHjPA--
Received: from [82.128.0.126] by web113618.mail.gq1.yahoo.com via HTTP; Wed, 29 Jun 2011 08:40:43 PDT
X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.307740
Message-ID: <[email protected]>
Date: Wed, 29 Jun 2011 08:40:43 -0700 (PDT)
From: Gabriel Evans <[email protected]>
Subject: ACT TO INSTRUCTION...............TRANSFER DETAILS NEEDED
To: ****** <*removed*>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-249423754-1309362043=:63310"

Who is online

Users browsing this forum: ClaudeBot and 6 guests