Fraud Payment. David Williams, [email protected]

This is a scam format that I've not seen before. IP 41.211.192.135 points to Lagos Nigeria.


Tenzel gift cards is a company that deals in gift cards. Right now we are looking for resellers all over the USA.

As a reseller, you don't need to go around searching for buyers with the help ofcraigslist.org (a well known classified ad website).
All the reseller has to do is to post and ad in your city at craigslist.org indicating that they have a specific gift card for sale (if you don't know how to post an ad we will put you through) when buyers respond to your ad, we then provide the reseller with the gift card... the reseller meets the buyer and makes the transaction. The buyers are already aware of the gift card and there is a high demand on them so it wont be difficult to get buyers.

The compensation of the reseller is %10 of the amount the gift card is sold for. You can sell as much gift cards as possible and make good money. for example you sell 2 pieces of gift cards for $750 (profit: 75 x 2 = $150) you make $150 in a just a day and 2 gift cards is just about the minimum because most of our resellers sell 5 - 12 gift cards per day.
The primary assignment of the reseller is to:

1. Post an ad on craigslist.org
2. when buyers respond, get back to us we will send the gift card to you via email.
3. You print out a copy of the gift card, meet the buyer and transact.
4. Deduct your %10 and then send the balance to us not later than 12 hours.

If you would like to work as a Tenzel gift card reseller, please get back to us with the following information to resume ASAP:


Full Name:

Address:

City:

zip code:

Phone Number:

Occupation:

Bank Name:

send the information to [email protected]

Once we receive the information listed above, we will process your application and get back to you withing 24 hours.
Thanks,

David Williams

MARKETING MANAGER,
TENZEL GIFT CARDS



Email header details;

Delivered-To: *removed*
Received: by 10.90.163.18 with SMTP id l18cs172240age;
Thu, 28 Jul 2011 16:29:26 -0700 (PDT)
Received: by 10.90.37.5 with SMTP id k5mr455167agk.168.1311895765929;
Thu, 28 Jul 2011 16:29:25 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-yi0-f66.google.com (mail-yi0-f66.google.com [209.85.218.66])
by mx.google.com with ESMTPS id e11si759982anf.166.2011.07.28.16.29.25
(version=TLSv1/SSLv3 cipher=OTHER);
Thu, 28 Jul 2011 16:29:25 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.218.66 as permitted sender) client-ip=209.85.218.66;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 209.85.218.66 as permitted sender) [email protected]
Received: by mail-yi0-f66.google.com with SMTP id 21so332296yie.1
for <*removed*>; Thu, 28 Jul 2011 16:29:25 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.151.57.13 with SMTP id j13mr115982ybk.176.1311895765729; Thu,
28 Jul 2011 16:29:25 -0700 (PDT)
Received: by 10.150.97.10 with HTTP; Thu, 28 Jul 2011 16:29:25 -0700 (PDT)
X-Originating-IP: [41.211.192.135]
Date: Thu, 28 Jul 2011 16:29:25 -0700
Message-ID: <CAP0bpUU0O7xcf2H3NsspcBT5=9ZJ6=qc-8AegZz2VOQ1rJD=gQ@mail.gmail.com>
Subject: PART-TIME JOB OPPORTUNITY
From: david william <[email protected]>
To: *removed*
Content-Type: multipart/alternative; boundary=00151750e2ea193fe504a9298924

If the moderators here are OK with it, I'll continue to post this scammers script. The IP is still 41.211.192.135.

Congratulations *****!, you are now a part-time employee of Tenzel gift cards

The gift card you are going to sell is a SOUTHWEST AIRLINE GIFT CARD

Balance on card you are going to sell: $1000

Price you are going to sell the card: $750

Here is the details of your first assignment, Read and follow them carefully:

1. Post an ad on craigslist.org under your city, under the folowing category:

For Sale- Tickets - Tickets by owner

Using the following description:

Posting Title: $900 SOUTHWEST AIRLINE GIFT CARD FOR SALE

Posting Description:

"I have a southwest airline gift card with $750 balance and i want to sell it at $750 (last price). The gift card cards does not expire, has no restricion and can be used to book flights to anywhere southwest flies.

Contact me if you are interested and please drop your phone number".

2. When you get responses from buyers, get back to me and let me know how many responses you have recieced, at thesame time Reply all the buyers and let them know that you have the gift card available, insist on $750 to those who offer lower prices. in the same email, also Let them know that the southwest gift card you have is just a print out on a paper with a card number and security pin (this is all that is required to book your flight with the card) and is not a plastic card

4. When the buyers have agreed with the price and conditions, book an appointment with them in an open place, e.g a coffee shop or a restaurant to meet them for the transaction.

5. when you have done all these, get back to me and I will email you a copy of the card so that you can meet the buyer, confirm the card balance and take your money.

Please do update me on every step you have successfully taken and dont fail to contact me if you have any question.

We hope you work with us with honesty and sincerity

Thank you,

David william.

Tenzel Gift cards



Email header details;

Delivered-To: *removed*
Received: by 10.142.127.20 with SMTP id z20cs267291wfc;
Fri, 29 Jul 2011 01:08:49 -0700 (PDT)
Received: from mr.google.com ([10.91.202.38])
by 10.91.202.38 with SMTP id e38mr1247606agq.196.1311926927122 (num_hops = 1);
Fri, 29 Jul 2011 01:08:47 -0700 (PDT)
Received: by 10.91.202.38 with SMTP id e38mr814019agq.196.1311926927102;
Fri, 29 Jul 2011 01:08:47 -0700 (PDT)
Delivered-To: *removed*
Received: by 10.90.163.18 with SMTP id l18cs179027age;
Fri, 29 Jul 2011 01:08:46 -0700 (PDT)
Received: by 10.151.20.6 with SMTP id x6mr595686ybi.409.1311926926114;
Fri, 29 Jul 2011 01:08:46 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-gy0-f174.google.com (mail-gy0-f174.google.com [209.85.160.174])
by mx.google.com with ESMTPS id u3si8555368ybm.47.2011.07.29.01.08.45
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 29 Jul 2011 01:08:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.160.174 as permitted sender) client-ip=209.85.160.174;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 209.85.160.174 as permitted sender) [email protected]
Received: by mail-gy0-f174.google.com with SMTP id 3so2364752gyh.19
for <*removed*>; Fri, 29 Jul 2011 01:08:45 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.151.103.18 with SMTP id f18mr795690ybm.347.1311926925847; Fri,
29 Jul 2011 01:08:45 -0700 (PDT)
Received: by 10.150.97.10 with HTTP; Fri, 29 Jul 2011 01:08:45 -0700 (PDT)
X-Originating-IP: [41.211.192.135]
In-Reply-To: <CAG9SkhJZA+OR92ce2fOMV-dGjGdJ3Bt42g5EckPtuVEZ6ozkFw@mail.gmail.com>
References: <CAG9SkhJZA+OR92ce2fOMV-dGjGdJ3Bt42g5EckPtuVEZ6ozkFw@mail.gmail.com>
Date: Fri, 29 Jul 2011 01:08:45 -0700
Message-ID: <CAP0bpUXjBG15Q1k3tp=UL14eL4pGMJ+E7QNfZezK-+TYqsPmeg@mail.gmail.com>
Subject: Re: PART-TIME JOB OPPORTUNITY
From: david william <[email protected]>
To: *removed*
Content-Type: multipart/alternative; boundary=0015174c1d7462edea04a930ca53

Scammer has revealed the mode of the scam. He sent me a valid Southwest Airlines gift card worth $1,000 which will be reported to the relevant authorities. Presumably the gift card was purchased with a compromised credit card. This is credit card fraud. As a bonus he also reveals his western union pick up contact.


Good ******. Now you can see how wonderful craigslist is, You are going to deal with the most serious person first, if you carry out the transaction well then we will continue with the others.

Next Steps:

1. Did you explain to them that the southwest gift card you have is just a print out on a paper with a card number and security pin (this is all that is required to book your flight with the card) and is not a plastic card? If you did not please do that now.

2. Has the person agreed with the price ($750)?

3. Have you arranged an appointment with him/her for the transaction and do you have his/her phone number?.. if not please do arrange an appointment with him today.

4. Once you have arranged an appointment, get back to me and let me know the time of the meeting and I will email you the copy of the card immediately.

Thanks for your cooperation,

David william.
Tenzel Gift cards


Email header details;

Delivered-To: *removed*
Received: by 10.142.141.10 with SMTP id o10cs149885wfd;
Tue, 2 Aug 2011 22:18:37 -0700 (PDT)
Received: from mr.google.com ([10.101.42.12])
by 10.101.42.12 with SMTP id u12mr7176521anj.156.1312348716860 (num_hops = 1);
Tue, 02 Aug 2011 22:18:36 -0700 (PDT)
Received: by 10.101.42.12 with SMTP id u12mr4729769anj.156.1312348716826;
Tue, 02 Aug 2011 22:18:36 -0700 (PDT)
Delivered-To: *removed*
Received: by 10.100.5.8 with SMTP id 8cs4323ane;
Tue, 2 Aug 2011 22:18:35 -0700 (PDT)
Received: by 10.236.144.232 with SMTP id n68mr5276233yhj.451.1312348715463;
Tue, 02 Aug 2011 22:18:35 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-gy0-f174.google.com (mail-gy0-f174.google.com [209.85.160.174])
by mx.google.com with ESMTPS id c45si1164274yhm.144.2011.08.02.22.18.35
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 02 Aug 2011 22:18:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.160.174 as permitted sender) client-ip=209.85.160.174;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 209.85.160.174 as permitted sender) [email protected]
Received: by mail-gy0-f174.google.com with SMTP id 3so378149gyh.33
for <*removed*>; Tue, 02 Aug 2011 22:18:35 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.151.107.21 with SMTP id j21mr220920ybm.150.1312348715247; Tue,
02 Aug 2011 22:18:35 -0700 (PDT)
Received: by 10.150.148.5 with HTTP; Tue, 2 Aug 2011 22:18:35 -0700 (PDT)
X-Originating-IP: [41.211.192.135]
In-Reply-To: <CAG9SkhKqW+iSSBskm4COqDiQu+F70ZhaYbb77V9tn9f-4_5XZw@mail.gmail.com>
References: <CAG9SkhJZA+OR92ce2fOMV-dGjGdJ3Bt42g5EckPtuVEZ6ozkFw@mail.gmail.com>
<CAP0bpUXjBG15Q1k3tp=UL14eL4pGMJ+E7QNfZezK-+TYqsPmeg@mail.gmail.com>
<CAG9SkhJ_xnTZHtDsT1Px4g5ALpGE+gNSz1PzbhbEyQR4bApVPg@mail.gmail.com>
<CAP0bpUWZQwhB1J-L9y4R59pdHaHNm5HNd01-x2SfrsejnF8FtA@mail.gmail.com>
<CAG9SkhKqW+iSSBskm4COqDiQu+F70ZhaYbb77V9tn9f-4_5XZw@mail.gmail.com>
Date: Tue, 2 Aug 2011 22:18:35 -0700
Message-ID: <CAP0bpUVaanx9w3kKdYOUgcaZdReerAjEiRwa2prnWpJFDGJ8QQ@mail.gmail.com>
Subject: Re: PART-TIME JOB OPPORTUNITY
From: david william <[email protected]>
To: *removed*
Content-Type: multipart/alternative; boundary=00151750e57efe699c04a992fec8

Next Email

Hello ******,

I have forwarded the card details to you in the first email.

1. Print out the card on a paper and take it along to meet the buyer

2. On meeting him, provide the card information, you might have to confirm the card balance and in other to do so, you will need Internet access ( I don't know how you are going to do it maybe you will take a laptop along with you or go to a business center)

3. To confirm the card balance, simply follow this link at southwest:

https://www.southwest.com/gift-card/che ... LS-VIEW-GC

Put in the card number and security code without spaces, click continue and the balance will be displayed.

4. After collecting the money ($750) you are to deduct 75$ (10%) and then send balance of $675 the money to our accountant at our head office in SULLIVAN, WI via Western Union Money transfer using the info below:

Name: JOHN BREECHER
City: SULLIVAN WI
State:Wisconsin
Zip-Code:53178-9660
Text Question: What Colour
Answer: Black

Your are to deduct the western union transfer chargers from the $675 balance.

After sending the money, provide information below:

Total Amount sent after deducting the western union transfer chargers:........................

Money transfer Control Number (MTCN) Which will be given to you:..............................

If You don't know where to find a western union outlet, simply visit westernunion.com and navigate to find a location.

Note: We buy this cards from other people who are in urgent need of Cash for a lower price and then sell it at a higher price.

*Please after collecting the money head straight to a western union outlet and wire the money, you said the appointment is by 11 am so i expect the money to be sent on or before 1pm.

If you perform well and deliver on time, I will them email you 3 card copies to transact with the other buyers.

we will not fail to report to the necessary authorities if you do not send the money.

David William
Marketing Manager
TENZEL GIFT CARDS.


Email header details;

Delivered-To: *removed*
Received: by 10.142.141.10 with SMTP id o10cs263200wfd;
Fri, 5 Aug 2011 09:24:25 -0700 (PDT)
Received: from mr.google.com ([10.220.182.197])
by 10.220.182.197 with SMTP id cd5mr753850vcb.145.1312561464631 (num_hops = 1);
Fri, 05 Aug 2011 09:24:24 -0700 (PDT)
Received: by 10.220.182.197 with SMTP id cd5mr575409vcb.145.1312561464615;
Fri, 05 Aug 2011 09:24:24 -0700 (PDT)
Delivered-To: *removed*
Received: by 10.220.184.77 with SMTP id cj13cs22713vcb;
Fri, 5 Aug 2011 09:24:24 -0700 (PDT)
Received: by 10.236.180.98 with SMTP id i62mr2979609yhm.403.1312561463804;
Fri, 05 Aug 2011 09:24:23 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-gw0-f46.google.com (mail-gw0-f46.google.com [74.125.83.46])
by mx.google.com with ESMTPS id i64si9179106yhk.35.2011.08.05.09.24.23
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 05 Aug 2011 09:24:23 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 74.125.83.46 as permitted sender) client-ip=74.125.83.46;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 74.125.83.46 as permitted sender) [email protected]
Received: by mail-gw0-f46.google.com with SMTP id a12so2379017gwa.33
for <*removed*>; Fri, 05 Aug 2011 09:24:23 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.151.5.2 with SMTP id h2mr3203696ybi.127.1312561462271; Fri, 05
Aug 2011 09:24:22 -0700 (PDT)
Received: by 10.151.45.19 with HTTP; Fri, 5 Aug 2011 09:24:22 -0700 (PDT)
X-Originating-IP: [41.184.17.142]
In-Reply-To: <CAP0bpUXkuLx+PzUftnD5pVztCV+56+7_edou8h0xgp5Eb6rekg@mail.gmail.com>
References: <CAG9SkhJZA+OR92ce2fOMV-dGjGdJ3Bt42g5EckPtuVEZ6ozkFw@mail.gmail.com>
<CAP0bpUXjBG15Q1k3tp=UL14eL4pGMJ+E7QNfZezK-+TYqsPmeg@mail.gmail.com>
<CAG9SkhJ_xnTZHtDsT1Px4g5ALpGE+gNSz1PzbhbEyQR4bApVPg@mail.gmail.com>
<CAP0bpUWZQwhB1J-L9y4R59pdHaHNm5HNd01-x2SfrsejnF8FtA@mail.gmail.com>
<CAG9SkhKqW+iSSBskm4COqDiQu+F70ZhaYbb77V9tn9f-4_5XZw@mail.gmail.com>
<CAP0bpUVaanx9w3kKdYOUgcaZdReerAjEiRwa2prnWpJFDGJ8QQ@mail.gmail.com>
<CAG9SkhL-5rMyD=me1dT59JF414V=PLGB=Bb9cr-Cri6sm2eLpA@mail.gmail.com>
<CAP0bpUXjOFrARXWz0keaswOgzdSfEBhcDv4+U86vgfp6PxokCQ@mail.gmail.com>
<CAG9SkhKTVx9MPnKPe8yZUxJFDZ9omCPFEEKhJToMVwE36m4Byw@mail.gmail.com>
<CAP0bpUXkuLx+PzUftnD5pVztCV+56+7_edou8h0xgp5Eb6rekg@mail.gmail.com>
Date: Fri, 5 Aug 2011 17:24:22 +0100
Message-ID: <CAP0bpUUceT21q8XyLqd1i6gKX_ihE6Dkg=7dDZj=TtPAxfHA6Q@mail.gmail.com>
Subject: Re: PART-TIME JOB OPPORTUNITY
From: david william <[email protected]>
To: *removed*
Content-Type: multipart/alternative; boundary=000e0cd29382b460bd04a9c487a1