Fraudulent Payment. Bogus Redcross Job

I will update this thread when the scammer provides an email address.


Are you interested in working directly from your computer and spend more time with your family? Do you want an adventurous, challenging, and rewarding experience? - REDCROSS/ CHILDCARE part time job offer is the best for you with an excellent salary. If interested, please fill out the employment form below http://www.childcarestl.org/joom/err/re ... index.html



Email header details;

Received: from relay.batelco.jo (relay.batelco.jo [212.118.0.26])
by mtain-dh01.r1000.mx.aol.com (Internet Inbound) with ESMTP id BAC5238000113;
Tue, 16 Aug 2011 15:20:32 -0400 (EDT)
Received: from batelco.jo (mail.batelco.jo [212.118.0.7])
by relay.batelco.jo (Postfix) with ESMTP id 40FC71CF160;
Tue, 16 Aug 2011 21:01:21 +0300 (EEST)
Received: from [204.188.226.66] (account juana HELO User)
by batelco.jo (CommuniGate Pro SMTP 4.1.
with ESMTP id 99787196; Tue, 16 Aug 2011 20:18:16 +0300
From: "RED CROSS ORG."<[email protected]>
Subject: Job Offer & Employment
Date: Tue, 16 Aug 2011 13:11:20 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: undisclosed-recipients:;
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 0:2:101820432:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d41154e4ac300155d
X-AOL-IP: 212.118.0.26
X-AOL-SPF: domain : redcross.com SPF : temperror

Scammer kindly supplies more useful details.


Red Cross Job Approval Letter
Thanks for your application and we have complete the process job application with us. You will be working as a "Donation Officer" with Red Cross Donation department within your region.
The American Red Cross helps prepare communities for emergencies and keep people safe every day thanks to caring people who support our work. Please support Red Cross by working with us as DONATION OFFICER to helps vulnerable people and communities around the world prepare for, respond to, and recover from natural disasters, humanitarian emergencies and health crises by mobilizing the power of the world's largest humanitarian network.
Your starting monthly salary is $5,000.00USD monthly and your first salary will be paid by September. 19, 2011 while you will have additional $200.00 on every task you fully complete according to the instructions given to you by the customer service department. You are required to start working with us asap and you have to check your email messages twice daily.
Finally, you will receive donations from clients through bank cheque payment, direct deposit and money order. You will have to get back to us with all the information below:

** Your Full Name:
** Your Full Address:
** Your Post/Zip Code:
** Home Phone Numbers:
** Mobile Numbers:
** Yahoo Messenger Email:
** MSN Messenger Email:

Kindly get back to us with all the details requested above and we will be waiting to hear from you asap.

Kelly Mullen
Customer Service
American Red Cross
2025 E Street, NW
Washington, DC 20006
The American National Red Cross



Email header details;

Delivered-To: *removed*
Received: by 10.52.115.36 with SMTP id jl4cs195180vdb;
Wed, 17 Aug 2011 13:22:00 -0700 (PDT)
Received: by 10.236.155.73 with SMTP id i49mr4816378yhk.45.1313612519808;
Wed, 17 Aug 2011 13:21:59 -0700 (PDT)
Return-Path: <[email protected]>
Received: from col0-omc3-s10.col0.hotmail.com (col0-omc3-s10.col0.hotmail.com [65.55.34.148])
by mx.google.com with ESMTP id n2si352609wfg.32.2011.08.17.13.21.58;
Wed, 17 Aug 2011 13:21:59 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.148 as permitted sender) client-ip=65.55.34.148;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.34.148 as permitted sender) [email protected]
Received: from COL118-W57 ([65.55.34.136]) by col0-omc3-s10.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 17 Aug 2011 13:21:51 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_befef8d7-5bb4-43f4-a1df-03116127c489_"
X-Originating-IP: [41.184.112.91]
From: American Red Cross <[email protected]>
Sender: <[email protected]>
To: <[email protected]>
Subject: Job Approval Letter
Date: Wed, 17 Aug 2011 14:21:50 -0600
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 17 Aug 2011 20:21:51.0765 (UTC) FILETIME=[4C9B5450:01CC5D1B]

Further scam script plus details on the western union pick up contact.

Dear American Red Cross Donation Agent,

We understand that the Donation check payment has been delivered to you at your address but we have some little mistake on the instruction letter that you receive with the donation check payment. Please read below and follow this instruction for the money transfer to our office and please do not send any money through Money Pak Green Dot anymore because we have closed our account there.

We believe you have receive donation check assignment and your first assignment is to evaluate at your Bank and your second assignment is to evaluate any western union outlets closer to you. You are to go straight to your Bank and cash the Donation Check, we want to know how fast and efficient services are rendered in your Bank Cashing the Donation Checks Payment and do get back to us with a concrete report of the entire experience and also the duration it took you to cash the Donation Check Payment. Then you are to deduct $200 from the total amount received and proceed to any nearest Western Union outlet to wire remaining funds across to the details below.

• Receiver: CHEERY ANDERSON
• Address: American Red Cross, 145 Amazonas Ave.
• City, State: Quito City, Pichincha
• Country: Ecuador

YOU WILL GET BACK WITH THE DETAILS OF THE MONEY BY EMAIL:
1) Senders Full Name and Complete Address as appear on receipt from western union.
2) 10 Digit Money Transfer Control Number {MTCN}.
3) The amount transferred after deducting western union charges.
P: You should use your full name and address when sending the money.

You should please make sure you Execute all the Assignment today and get back to us with details as requested above.
* PLEASE SEND THE DETAILED REPORT TO OUR EMAIL: [email protected] and please confirm this message receive by replying.

Mr. Kelly Mullen
American Red Cross Donation Department
Please support Red Cross by working with us as DONATION OFFICER to help people safe every day.


Email header details;

Delivered-To: *removed*
Received: by 10.52.159.6 with SMTP id wy6cs44587vdb;
Mon, 5 Sep 2011 07:38:39 -0700 (PDT)
Received: by 10.68.0.232 with SMTP id 8mr7251740pbh.406.1315233518744;
Mon, 05 Sep 2011 07:38:38 -0700 (PDT)
Return-Path: <[email protected]>
Received: from col0-omc3-s3.col0.hotmail.com (col0-omc3-s3.col0.hotmail.com. [65.55.34.141])
by mx.google.com with ESMTP id k2si7398615pbd.5.2011.09.05.07.38.37;
Mon, 05 Sep 2011 07:38:38 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.141 as permitted sender) client-ip=65.55.34.141;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.34.141 as permitted sender) [email protected]
Received: from COL118-W60 ([65.55.34.137]) by col0-omc3-s3.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 5 Sep 2011 07:38:14 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_ea7aa47c-194e-4ad4-b440-115d4925ecc2_"
X-Originating-IP: [41.184.112.91]
From: American Red Cross <[email protected]>
Sender: <[email protected]>
To: <[email protected]>
Subject: DONATION REPORT
Date: Mon, 5 Sep 2011 08:38:13 -0600
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 05 Sep 2011 14:38:14.0671 (UTC) FILETIME=[71B5B1F0:01CC6BD9]