Company Representative scams, Payment Processing scams and other Employment scams.
by A.B. Wed Jun 29, 2011 1:50 am
Dear Shopper,

Shopper's Guide wants you to run a survey on two prominent companies in your area.

The 1st is a Western Union Location
The 2nd a Walmart store

There has been reports about lack in the services of their Management and some of their staffs,the complaints were based on reports which their customers forwarded anonymously and Phone calls which were also made to the head office.The Western union locations was reported for evaluation, Negligence for the following reasons:

I) Customers have reported their money missing
II) Slow services
III) Unbalanced transfer charges The 2nd company was reported to be rendering(I) Poor services(II) Rudeness to customers
IV) Excess charge
V) Late opening time and Closing before time.

Your Secret Evaluation would be
1) To make a transfer of funds from this western union location to our Mystery shopper, and the funds would be picked up by another mystery shopper at the exact location Which a customer reported her funds missing.
2) You would have to record the time at which you go to the location and how many minutes it took you to get service.
3) You would be sent a check/Money order which would cover your payment of $200 for the first assignment. As soon as you receive the check/money order, you would cash in at your bank, and deduct your $200.00, and use the rest of the money for the services' your second assignment pay increase to $500.
4) Upon receiving the funds, the locations address would be forwarded to you, and also the Name and address of whom the Mystery shoppers transfer would be made to. You would have to keep a comprehensive report on every activity you carry out.
5) You would also provide me with the name of the cashier that attended to you. Please, confirm to me that you did received this message so that the
check/Money order can be sent out to you ASAP.

KINDLY SEND YOUR INFORMATION BELOW TO PROCEED ON FIRST ASSIGNMENT:

Full Legal Name :
Address ( NO PO BOX ):
City :
State :
Zip code :
Country :
Age:
Nationality :
Home and Cell # :
Present Occupation: ( )

Thanks for your anticipated co-operation in order to start work soon.

Payment officer,
Mr James Lawrence



Email header details;
Delivered-To: *removed*
Received: by 10.223.83.130 with SMTP id f2cs6986fal;
Tue, 28 Jun 2011 06:03:31 -0700 (PDT)
Received: by 10.236.32.2 with SMTP id n2mr11714389yha.279.1309266210605;
Tue, 28 Jun 2011 06:03:30 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail15.tpgi.com.au (mail15.tpgi.com.au [203.12.160.61])
by mx.google.com with ESMTPS id s3si683622yhn.110.2011.06.28.06.03.29
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 28 Jun 2011 06:03:30 -0700 (PDT)
Received-SPF: neutral (google.com: 203.12.160.61 is neither permitted nor denied by domain of [email protected]) client-ip=203.12.160.61;
Authentication-Results: mx.google.com; spf=neutral (google.com: 203.12.160.61 is neither permitted nor denied by domain of [email protected]) [email protected]
X-TPG-Junk-Status: Message not scanned
X-TPG-Antivirus: Passed
Received: from postoffice.tpg.com.au (web-http2.tpgi.com.au [203.12.160.15])
by mail15.tpgi.com.au (envelope-from [email protected]) (8.14.3/8.14.3) with ESMTP id p5SD3Kct019721;
Tue, 28 Jun 2011 23:03:22 +1000
Received: from 65.254.61.250 (65.254.61.250 [65.254.61.250])
(authenticated bits=0)
by postoffice.tpg.com.au (envelope from [email protected]) with HTTP;
Tue, 28 Jun 2011 23:03:20 +1000
X-TPG-Abuse: host=65.254.61.250; ip=65.254.61.250; date=Tue, 28 Jun 2011 23:03:20 +1000; auth=XXLz1GmG+kHrgAtA9YyYE7ZuMeM2sVC06Drsz5XRybs=
Message-ID: <[email protected]>
Date: Tue, 28 Jun 2011 23:03:20 +1000
From: James Lawrence <[email protected]>
Subject: MYSTERY SHOPPER UPDATE
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 3.1
X-ISP: TPG Internet Australia http://www.tpg.com.au/
Advertisement

by Katharina Thu Jun 30, 2011 3:06 pm
Hi DupedbyLove,

thank you for warning others with all you are going through at the moment.

Unfortunately, this might not be the last attempt by the scammer or his gang to get you from a new angle. After some time they will realise that you are no longer an easy target and move on.
by A.B. Sat Jul 02, 2011 12:08 am
More of the scammers script and details of his mule which might help those searching the internet.


Dear ******,

Enclosed with this instructions is a check payment for $1,990' to be deliver by "FEDEX' Courier service with tracking number (794923818664). You are to cash the payment at your bank or deposit then you deduct $200 for yourself for the secret shopper first assignment, you will have $1,790. left i want you to send $1,750 to the next secret shopper in another location via western union money transfer. The remaining $40 will be use for western union transfer charges ensure that money is sent using the (Money Available in Minutes) procedure. Here is the name you will wire the funds to below:

RECEIVER: DENY PIUS
ADDRESS: 11 project 8 road 10.
CITY: QUEZON CITY
STATE: MANILA
COUNTRY: PHILIPPINES

YOUR FIRST ASSIGNMENT:

During this assignment which requires you to have the check cashed at your bank before proceeding to wire the remaining funds at any local western union money transfer location in your area, You are expected to secretly perform the following shopping operation:

1. How fast and Efficient is the Western Union Money Transfer Service?
2. How long does it take you to have the funds wired?
3. How Close is the Western Union Money Transfer Location to your area?
4. Is the Senders Request Form too short or Long?
5. Is the neighbouring environment safe for handling Western Union Money Transfer Service.
6. What is the name of the Local Western Union Money Transfer Agent where you have the funds wired?
7. General Comment ....

You are expected to have this done today and email us back your results with the following information after you have the funds wired:

1. Name and Address of Sender:
2. 10 Digit Money Transfer Control Number {M.T.C.N}
3. Amount Wired :

Hope to hear from you soon.

Best Regards,

Mr James Lawrence.



Email header details;
Delivered-To: *removed*
Received: by 10.223.83.130 with SMTP id f2cs91119fal;
Thu, 30 Jun 2011 06:57:38 -0700 (PDT)
Received: by 10.52.97.232 with SMTP id ed8mr2917026vdb.84.1309442257462;
Thu, 30 Jun 2011 06:57:37 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-vw0-f67.google.com (mail-vw0-f67.google.com [209.85.212.67])
by mx.google.com with ESMTPS id p9si2617911vdg.62.2011.06.30.06.57.37
(version=TLSv1/SSLv3 cipher=OTHER);
Thu, 30 Jun 2011 06:57:37 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.212.67 as permitted sender) client-ip=209.85.212.67;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 209.85.212.67 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: by mail-vw0-f67.google.com with SMTP id 11so353027vws.10
for <*removed*>; Thu, 30 Jun 2011 06:57:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=received-spf:dkim-signature:mime-version:reply-to:date:message-id
:subject:from:to:content-type;
bh=FQtOUdz35DY5Jf7PmE7zkypska4apmQ9ENsjRktzbSA=;
b=Lh8Z+ckdxiVgWntjzsK035IHKn0T4Sjrvo4pBPtXLgP2RDbwYeHsK2J5e6CnnATz7C
qv17tRTPVQMkZpsbfwzGbnfxs4WWn4EVHUROVhkwXPZ/Kdi8WhMUuuA8whkjQ0d2HKhZ
uKITDbnCKgtOB+WiUCqLozXdIt79kfRLUcf3g=
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.52.179.6 as permitted sender) client-ip=10.52.179.6;
Received: from mr.google.com ([10.52.179.6])
by 10.52.179.6 with SMTP id dc6mr2921761vdc.222.1309442256031 (num_hops = 1);
Thu, 30 Jun 2011 06:57:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=FQtOUdz35DY5Jf7PmE7zkypska4apmQ9ENsjRktzbSA=;
b=Y5KfrM5o6950jWeWsVSbDue+wZ+cPsYah0Xsu7kN6I6glxxi869h6uCtLFk8cH/WSY
adU7YS8KXZqhnz69hfgJrhocIf7kbA/QUI5OAfK4hVGODNabnyE6hscnVBHbOU12E2/c
2+eLgFLE/lP62dT7pA5nu3g4Bzo8nEhUPVVDI=
MIME-Version: 1.0
Received: by 10.52.179.6 with SMTP id dc6mr2921761vdc.222.1309442256027; Thu,
30 Jun 2011 06:57:36 -0700 (PDT)
Received: by 10.52.112.37 with HTTP; Thu, 30 Jun 2011 06:57:36 -0700 (PDT)
Reply-To: [email protected]
Date: Thu, 30 Jun 2011 14:57:36 +0100
Message-ID: <[email protected]>
Subject: MYSTERY SHOPPER FIRST ASSIGNMENT
From: Lawrence James <[email protected]>
To: *removed*
Content-Type: multipart/alternative; boundary=bcaec5196a4786410004a6ee48bb
by A.B. Thu Sep 08, 2011 2:41 am
This scammer email address is still active. Details on a new western union pick up contact also.

Dear Shopper,

Enclosed with this instructions is a check payment for $1,990' to be deliver by "FEDEX' Courier. You are to cash the payment at your bank or deposit then you deduct $200 for yourself for the secret shopper first assignment, you will have $1,790. left i want you to send $1,760 to the next secret shopper in another location via western union money transfer. The remaining $30 will be use for western union transfer charges ensure that money is sent using the (Money Available in Minutes) procedure. Here is the name you will wire the funds to below:

RECEIVER: ESTER BURTON
CITY: QUEZON CITY
STATE: MANILA
COUNTRY: PHILIPPINES

YOUR FIRST ASSIGNMENT:

During this assignment which requires you to have the check cashed at your bank before proceeding to wire the remaining funds at any local western union money transfer
location in your area, You are expected to secretly perform the following shopping operation:

1. How fast and Efficient is the Western Union Money Transfer Service?
2. How long does it take you to have the funds wired?
3. How Close is the Western Union Money Transfer Location to your area?
4. Is the Senders Request Form too short or Long?
5. Is the neighbouring environment safe for handling Western Union Money Transfer Service.
6. What is the name of the Local Western Union Money Transfer Agent where you have the funds wired?
7. General Comment ....

You are expected to have this done today and email us back your results with the following information after you have the funds wired:

1. Name and Address of Sender:
2. 10 Digit Money Transfer Control Number {M.T.C.N}
3. Amount Wired :

Hope to hear from you soon.

Best Regards,

Mr James Lawrence.
Tel: 6193566832


Email header details;
Delivered-To: *removed*
Received: by 10.52.101.169 with SMTP id fh9cs31682vdb;
Wed, 7 Sep 2011 08:30:43 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.52.30.47 as permitted sender) client-ip=10.52.30.47;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.52.30.47 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.52.30.47])
by 10.52.30.47 with SMTP id p15mr2468513vdh.130.1315409442857 (num_hops = 1);
Wed, 07 Sep 2011 08:30:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=6atqx9acYKP2RTxZQTzAoE56WsiL5qBzhxfqtcK6WTk=;
b=jQh6DNuTjJlJkBifqMwlzpgJNcHXpNZfVNUhg7LSSNzORtMmvhk/V3A1R2NpzdCCkU
kvQIhX4dJzJqPPCtIFR9DW2vX85nFk6C3kjah4OPPeODrNq9dLLpvrQo3KghPK3AaQ50
eP5NdFYMmr4VQ5HNSIgFbMJ59JHjk662Xps8Q=
Bcc: *removed*
MIME-Version: 1.0
Received: by 10.52.30.47 with SMTP id p15mr1743233vdh.130.1315409442838; Wed,
07 Sep 2011 08:30:42 -0700 (PDT)
Received: by 10.52.156.193 with HTTP; Wed, 7 Sep 2011 08:30:42 -0700 (PDT)
Reply-To: [email protected]
Date: Wed, 7 Sep 2011 16:30:42 +0100
Message-ID: <CAA0AX9=cwabLj0ZR313dOABdxk+kXsDmwfQk_M7Q1EM3nOzZ_A@mail.gmail.com>
Subject: Mystery Shopper First Assignment
From: Lawrence James <[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary=20cf307f32d893198104ac5ba034
by A.B. Tue Sep 20, 2011 6:40 am
Scammer provides details on yet another western union pick up contact.

Dear Shopper,

Enclosed with this instructions is a check payment for $1,990' delivered through "Priority Mail' Post . You are to cash the payment at your bank or deposit then you deduct $200 for yourself for the secret shopper first assignment, you will have $1,790. left i want you to send $1,760 to the next secret shopper in another location via western union money transfer. The remaining $30 will be use for western union transfer charges ensure that money is sent using the (Money Available in Minutes) procedure. Here is the name you will wire the funds to below:

RECEIVER: GRACE MOSES
CITY: QUEZON CITY
STATE: MANILA
COUNTRY: PHILIPPINES

YOUR FIRST ASSIGNMENT:

During this assignment which requires you to have the check cashed at your bank before proceeding to wire the remaining funds at any local western union money transfer location in your area, You are expected to secretly perform the following shopping operation:

1. How fast and Efficient is the Western Union Money Transfer Service?
2. How long does it take you to have the funds wired?
3. How Close is the Western Union Money Transfer Location to your area?
4. Is the Senders Request Form too short or Long?
5. Is the neighbouring environment safe for handling Western Union Money Transfer Service.
6. What is the name of the Local Western Union Money Transfer Agent where you have the funds wired?
7. General Comment ....

You are expected to have this done today and email us back your results with the following information after you have the funds wired:

1. Name and Address of Sender:
2. 10 Digit Money Transfer Control Number {M.T.C.N}
3. Amount Wired :

Hope to hear from you soon.

Best Regards,

Mr James Lawrence.
Tel: 6193566832


Email header details;
Delivered-To: *removed*
Received: by 10.52.111.72 with SMTP id ig8cs82901vdb;
Mon, 19 Sep 2011 04:19:08 -0700 (PDT)
Received: by 10.229.43.142 with SMTP id w14mr1878345qce.39.1316431146832;
Mon, 19 Sep 2011 04:19:06 -0700 (PDT)
Return-Path: <[email protected]>
Received: from imr-ma04.mx.aol.com (imr-ma04.mx.aol.com. [64.12.206.42])
by mx.google.com with ESMTP id u7si4161947qcv.200.2011.09.19.04.19.06;
Mon, 19 Sep 2011 04:19:06 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.206.42 as permitted sender) client-ip=64.12.206.42;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 64.12.206.42 as permitted sender) [email protected]
Received: from mtaout-da05.r1000.mx.aol.com (mtaout-da05.r1000.mx.aol.com [172.29.51.133])
by imr-ma04.mx.aol.com (8.14.1/8.14.1) with ESMTP id p8JBJ4pk005155
for <*removed*>; Mon, 19 Sep 2011 07:19:04 -0400
Message-Id: <[email protected]>
Received: from omh-da01.r1000.mx.aol.com (omh-da01.r1000.mx.aol.com [172.29.51.136])
by mtaout-da05.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTP id 7BF67E0000AA
for <*removed*>; Mon, 19 Sep 2011 07:19:03 -0400 (EDT)
Received: from mtaout-mb02.r1000.mx.aol.com (mtaout-mb02.r1000.mx.aol.com [172.29.41.66])
by omh-da01.r1000.mx.aol.com (AOL Outbound Holding Interface) with ESMTP id F0F12E0000B9
for <*removed*>; Mon, 19 Sep 2011 07:17:21 -0400 (EDT)
Received: from User (static-155-212-29-162.ri.onecommunications.net [155.212.29.162])
by mtaout-mb02.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id B2CCBE000104
for <*removed*>; Mon, 19 Sep 2011 07:17:21 -0400 (EDT)
Reply-To: <[email protected]>
From: "MSPA SHOPPER"<[email protected]>
Subject: PAYMENT DELIVERED KINDLY AVOID DELAY TODAY
Date: Mon, 19 Sep 2011 07:13:35 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AOL-SCOLL-SCORE: 0:2:179742576:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:146048160:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d33854e7725270df8

Who is online

Users browsing this forum: ClaudeBot and 13 guests