Company Representative scams, Payment Processing scams and other Employment scams.
by A.B. Thu Aug 04, 2011 3:34 am
You have been selected for an assignment as a Detective Shopper in your area, You will earn $200 been a detective shopper. Your employment packet will include funds for the shopping. A full job description will be sent to you before your assignment.

A cashier check or money order would be in a certain amount which you would be required to cash a your bank, deduct your salary, and have the rest used for the evaluation at the store that would be given to you to evaluate. We would like you to participate because it's fun and rewarding. After you sign up you will have access to training materials.

Note: You are to follow all instructions given to you to the fullest. Kindly send your information below to proceed on first assignment to ( [email protected] )

Your Full Name:
Age:
Your Address (NOT P.O Box):
City, State, Zip:
Occupation:
Phone Number(s):

As a Detective shopper you work and shop together for pleasure, & The pay is $200 weekly on Part time basis, You only work 2-3hours twice in a week.

Sincerely,
Smith Brandy
Head Of Recruitment



Email header details;
Received: from exprod5ob117.obsmtp.com (exprod5ob117.obsmtp.com [64.18.0.148])
by mtain-md08.r1000.mx.aol.com (Internet Inbound) with SMTP id 045D13800008E;
Thu, 4 Aug 2011 00:39:39 -0400 (EDT)
Received: from gcvxsmtp01.guilford.edu ([192.154.63.100]) by exprod5ob117.postini.com ([64.18.4.12]) with SMTP ID DSNKTjoiYjtyAl+DiBtPsVTBFBPkIL/[email protected]; Wed, 03 Aug 2011 21:39:38 PDT
Received: from User (unknown [172.20.191.162])
by gcvxsmtp01.guilford.edu (Postfix) with SMTP id AF9504C6EA;
Thu, 4 Aug 2011 00:38:32 -0400 (EDT)
Reply-To: <[email protected]>
From: "Team Recruitment"<[email protected]>
Subject: 1st Selection
Date: Wed, 3 Aug 2011 12:41:36 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 0:2:334364576:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d605c4e3a228b1644
X-AOL-IP: 64.18.0.148
X-AOL-SPF: domain : post.com SPF : none
Advertisement

by A.B. Sun Aug 07, 2011 1:56 am
Further scam script and details on the western union pick up contact.


Hello *removed*,

The funds for you to carry out the First Survey Assignment will be delivered to your doorstep today by FEDEX Courier Service. The FEDEX package contains 2 Pieces of Money Orders. You are required to follow this instructions carefully and get back to me asap with the results of the survey.

The Mail contains a total payment of $1,744 (2 pieces of $872). You are to cash the money orders at your Bank, deduct $250 as your salary/commission for the Survey Assignment, you will have $1,494 left. You are required to send a total of $1,400 to another Survey agent(Removed to protect victim. ~Bubbles) in another location via Western Union Money Transfer so he can carry out another survey on receiving.

I need you to follow the Instruction below to carry out the assignment.

Take the Money Orders to your Bank and have them Cashed. After Cashing the Money Orders at your Bank, deduct your $250 as your commission for the Survey assignment. Take the remaining $1,494 to the nearest Western Union Money Transfer Outlet to carry out the Survey assignment by wiring $1,400 to Removed to protect victim. ~Bubbles while carrying out the survey. Below is the Information of the other Survey Agent in another location which you would be sending the funds to:

NAME: Removed to protect victim. ~Bubbles
ADDRESS: 424 S BEAVER ST
CITY: FLAGSTAFF
STATE: AZ
ZIP CODE: 86001


YOUR FIRST ASSIGNMENT:
During this assignment which requires you to have the money orders cashed at your bank before proceeding to wire the remaining funds at any local Western Union Money Transfer location in your area ( USE A STORE THAT SENDS OUT WESTERN UNION, RATHER THAN A FINANCIAL INSTITUTION ), You are expected to secretly perform the following survey operation:

1. How fast and Efficient is the Western Union Money Transfer Service?
2. How long does it take you to have the funds wired?
3. How Close is the Western Union Money Transfer Location to your area?
4. Is the Senders Request Form too short or Long?

You are expected to have this done Today and email me back your results with the following information after you have wired the funds.

1. Exact Senders Name on the Western Union receipt
2. Money Transfer Control Number(10 digits)
3. Exact Amount Wired
4). Test Question and Answer ( If Available )

I will be waiting to read from you ASAP with the requested transfer details today. Note that, If your Bank does not Cash the Money Orders for you Instantly, You can have it deposited into your account and wait till the next day for the Money Orders to clear into your account, then proceed to Complete the assignment. If your Bank Cash the Money Orders for you Instantly, you should carry out the survey assignment immediately. Thanks for your usual co-operation.

Yours Sincerely
Smith Brandy
MSP
(267) 329 9678



Email header details;
Delivered-To: *removed*
Received: by 10.223.154.204 with SMTP id p12cs36407faw;
Sat, 6 Aug 2011 05:32:23 -0700 (PDT)
Received: from mr.google.com ([10.151.5.12])
by 10.151.5.12 with SMTP id h12mr5958467ybi.94.1312633943148 (num_hops = 1);
Sat, 06 Aug 2011 05:32:23 -0700 (PDT)
Received: by 10.151.5.12 with SMTP id h12mr4069027ybi.94.1312633942366;
Sat, 06 Aug 2011 05:32:22 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mailout-us.gmx.com (mailout-us.gmx.com [74.208.5.67])
by mx.google.com with SMTP id uk1si10399204icb.14.2011.08.06.05.32.21;
Sat, 06 Aug 2011 05:32:22 -0700 (PDT)
Received-SPF: neutral (google.com: 74.208.5.67 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=74.208.5.67;
Authentication-Results: mx.google.com; spf=neutral (google.com: 74.208.5.67 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: (qmail 27350 invoked by uid 0); 6 Aug 2011 12:32:21 -0000
Received: from 71.14.47.82 by rms-us018 with HTTP
Content-Type: multipart/alternative;
boundary="========GMXBoundary23741312633941216657"
Date: Sat, 06 Aug 2011 12:32:20 +0000
From: "Smith Brandy" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Subject: Re: 1st Selection
To: *removed*
X-Authenticated: #121418014
X-Flags: 0001
X-Mailer: GMX.com Web Mailer
x-registered: 0
X-GMX-UID: YwEPdnE6mCvxeSuFCjI2f287MTE2NUl4
by A.B. Tue Aug 09, 2011 2:21 am
Scammer provides details on another western union pick up contact.


Ok... Great! But due to the delays you are now sending out to our second agent in Philadelphia. Make sure you get this done tomorrow You have another task on Wednesday.

Name: Rosalind Clark
Address: 2201 S. 16th St.
City: Philadelphia,
State: PA
Zipcode: 19145

Get back to me with the complete evaluation details immediately

Smith



Email header details;
Delivered-To: *removed*
Received: by 10.142.141.10 with SMTP id o10cs98580wfd;
Mon, 8 Aug 2011 19:17:07 -0700 (PDT)
Received: from mr.google.com ([10.223.32.67])
by 10.223.32.67 with SMTP id b3mr4683470fad.25.1312856226111 (num_hops = 1);
Mon, 08 Aug 2011 19:17:06 -0700 (PDT)
Received: by 10.223.32.67 with SMTP id b3mr3745233fad.25.1312856226092;
Mon, 08 Aug 2011 19:17:06 -0700 (PDT)
Delivered-To: *removed*
Received: by 10.223.70.142 with SMTP id d14cs3751faj;
Mon, 8 Aug 2011 19:17:05 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.231.43.142 as permitted sender) client-ip=10.231.43.142;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.231.43.142 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.231.43.142])
by 10.231.43.142 with SMTP id w14mr6694457ibe.45.1312856224192 (num_hops = 1);
Mon, 08 Aug 2011 19:17:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=eNcopUatcnIM7ytJZ+izVRZUsa2Evh7i3a3Wqryn70A=;
b=bTrVzx/fKVf1t0on8MZk0Hl4B83PKbXf4g+83JIjLYp8zcggifFaoXyMro+O8GhwTE
9jiLEolfsN+IpMNRybiM6cilM8a8r0LHqSlrL5v7h3SqSZCQWACjicMpKHCWV3pEWSNo
o5LYqXlf5kGqfRGcaIJDfUPIVdt/OYEYGr8/c=
MIME-Version: 1.0
Received: by 10.231.43.142 with SMTP id w14mr6694457ibe.45.1312856224186; Mon,
08 Aug 2011 19:17:04 -0700 (PDT)
Received: by 10.231.50.204 with HTTP; Mon, 8 Aug 2011 19:17:04 -0700 (PDT)
In-Reply-To: <CAG9Skh+t_QwhzzjD0J5fOg7rsfx6i-cAxE9Qnppk2g8DOKqoCw@mail.gmail.com>
References: <[email protected]>
<CAG9Skh+t_QwhzzjD0J5fOg7rsfx6i-cAxE9Qnppk2g8DOKqoCw@mail.gmail.com>
Date: Mon, 8 Aug 2011 21:17:04 -0500
Message-ID: <CAAbTK=PQaWSiUx=GEMR6TxX7GSS4vz5jCQYM4gfFxoA3sTNNuQ@mail.gmail.com>
Subject: Re: 1st Selection
From: Smith Brandy <[email protected]>
To: *removed*
Content-Type: multipart/alternative; boundary=00221534c8e3e242eb04aa092871
by nbelock Sat Dec 01, 2012 2:14 pm
My name is Removed for privacy. ~Bubbles and I was a victim of this scam :-(

I was contacted by a man--whom in this case I think is Smith Brandy--who sent me the mystery shopper job offer. As a starving college student, I was desperate for money to pay my rent so I took the "job" and long story short, I ended up losing about $3000.

I am afraid that having my name on this website could really hurt my chances at future job opportunities so I am asking to whomever posted this to please, please remove my name from the post.

Thank you.
by Bubbles Sun Dec 02, 2012 2:46 am
Welcome to ScamWarners nbelock, I am sorry you were scammed. I am concerned that you posted your name on this site, asking that your name be removed. I am concerned that you used much of your name as your User ID.

I have removed your actual name from the earlier post and your post. I suggest that you contact an Administrator to have your User ID changed so that cannot be found by friends or foe.

I am going to encourage you to be careful where you post your name on the internet. I realize a scammer is using your name in his scams and YOU are not a scammer. Sadly if any personal information is found by a scammer, they will use it in a scam. If you have your photos or your name on any social networking sites that you make the privacy settings as tight as possible.

If you have questions feel free to contact me by PM --------------->

Bubbles, former Scamwarners moderator.

Rest in Peace 24 June 2015.

Gone, but never forgotten.

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 17 guests