Mystery Shopper. Marcus Anthony, [email protected]

Secret Shopper Inc.

This is an awareness to let the public know that we have a vacancy position of a Secret Shopper in our company and we would like to know your interest in working for Secret Shopper Inc. As a Secret Shopper you work and shop together for pleasure and the pay is $200 weekly on Part time basis,you only work 3-4hours twice in a week. If you are interested,Please do properly fill out the information below.

FULL NAME
DELIVERY ADDRESS(not p.o box)
CITY
STATE
POSTAL CODE
GENDER
CELL PHONE NUMBER
MARITAL STATUS
AGE
OCCUPATION

Pls reply to{[email protected]}

MARCUS ANTHONY.
Research Coordinator.
Tel- 469-941-2656

Service Monitor Group...
OBSESSED WITH BEING THE BEST.(R)

http://servicemonitor.50webs.com/



Email header details;

Received: from mail5.sea5.speakeasy.net (mail5.sea5.speakeasy.net [69.17.117.49])
by mtain-mg05.r1000.mx.aol.com (Internet Inbound) with ESMTP id 4488E3800028E
for <*removed*>; Tue, 23 Aug 2011 23:19:16 -0400 (EDT)
Received: (qmail 15227 invoked from network); 24 Aug 2011 03:19:01 -0000
Received: from unknown (HELO User) (remson@[131.247.250.98])
(envelope-sender <[email protected]>)
by mail5.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP
for <[email protected]>; 24 Aug 2011 03:19:01 -0000
Reply-To: <[email protected]>
From: "CareerBuilder Shopping Team"<[email protected]>
Subject: EARN $200 FOR EACH ASSIGNMENT AS A MYSTERY SHOPPER.
Date: Tue, 23 Aug 2011 23:18:55 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:155889248:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60cd4e546db41636
X-AOL-IP: 69.17.117.49
X-AOL-SPF: domain : igrin.co.nz SPF : none

Further scam script plus details on the western union pick up contact. Also, the scammer is using a different pseudonym and email address but the contact number is the same.

Dear Shopper,

Am happy to inform you that Payment has been mailed out for your first evaluation survey assignment and you will be evaluating a western union outlet in your neighborhood.This evaluation survey is been sponsored by "Western Union America Inc" To ascertain the value giving to customers at various outlet in different locations around the united states of America as well as the whole countries we can find western union. Please note that you are to act cool,calm and confident throughout the period which you will be carrying out your survey at the outlet in order not to make them suspect your mission as a mystery shopper.

Enclosed with this instructions is a payment for $1,900 which will be delivered to you Tomorrow morning via USPS courier service. You are to cash the payment at your bank then you deduct your $200 for the mystery shopper assignment, you would have $1,700 left, you will as well deduct the western union transfer charges and i want you to send the balance to the next secret shopper in another location via western union money transfer.Take note,we are evaluating WESTERN UNION all over the globe and money should be sent using WESTERN UNION MONEY TRANSFER.You need to act like a surveillance. Ensure that money is sent using the (Money Available in Minutes) procedure.

Below is the name of the shopper you will wire the funds to:

RECEIVER'S NAME - Melissa Coles
STREET - 2392 Glenover Way,
CITY - Marietta
STATE - GA
ZIP CODE: 30062

As soon as the fund is sent,you will kindly get back to us with the below evaluation reports:

1) How long it took you to get services.
2) Ambiance/Outlook of the Shop/Outlet.
3) Smartness of the attendant.
4) Customer service professionalism.
5) Reaction of personnel under pressure.
6) Information that you think would be helpful.
7) Your comments and impressions.

You are to send the following details after you have transferred the remaining funds through western union money transfer in minute immediately so as to notify the receiver to carry out her own evaluation survey at her own end.

* 10 Digit Western Union Money Transfer Control Number(MTCN):
* Total amount sent to the receiver after deducting transfer charges:
* Sender's Name:
* Sender's Contact Address :
* Text Question & Answer if applicable:

We will like this to be done as soon as you receive the payment package as the payment for the second evaluation assignment will be delivered asap first assignment is completed.Please send back a confirmation/acknowledgement as soon as you receive this message.

Regards and God bless.

JAMES WILLIAM.
Research Coordinator.
Tel: 1- 469-941-2656

Service Monitor Group...
OBSESSED WITH BEING THE BEST.(R)


Email header details;

Delivered-To: *removed*
Received: by 10.231.138.201 with SMTP id b9cs297365ibu;
Thu, 22 Sep 2011 16:08:21 -0700 (PDT)
Received: by 10.236.186.35 with SMTP id v23mr17793062yhm.80.1316732900707;
Thu, 22 Sep 2011 16:08:20 -0700 (PDT)
Return-Path: <[email protected]>
Received: from linux19.domainnameservers.net (linux19.domainnameservers.net. [67.19.242.98])
by mx.google.com with ESMTPS id b41si11183691yhn.59.2011.09.22.16.08.20
(version=TLSv1/SSLv3 cipher=OTHER);
Thu, 22 Sep 2011 16:08:20 -0700 (PDT)
Received-SPF: neutral (google.com: 67.19.242.98 is neither permitted nor denied by domain of [email protected]) client-ip=67.19.242.98;
Authentication-Results: mx.google.com; spf=neutral (google.com: 67.19.242.98 is neither permitted nor denied by domain of [email protected]) [email protected]
Received: from victo18 by linux19.domainnameservers.net with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1R6sNR-0004Nf-KB; Thu, 22 Sep 2011 19:08:21 -0400
Received: from 41.155.85.193 ([41.155.85.193])
(SquirrelMail authenticated user [email protected])
by victoriatackett.com with HTTP;
Thu, 22 Sep 2011 19:08:21 -0400
Message-ID: <[email protected]>
Date: Thu, 22 Sep 2011 19:08:21 -0400
Subject: Secret Shopper Payment And Instructions... Get Back Asap.
From: "William James." <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Buzix-MailScanner-Information: Please contact the ISP for more information
X-Buzix-MailScanner-ID: 1R6sNR-0004Nf-KB
X-Buzix-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-Buzix-MailScanner-SpamCheck:
X-Buzix-MailScanner-From: [email protected]
X-Spam-Status: No
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - linux19.domainnameservers.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [32114 32114] / [47 12]
X-AntiAbuse: Sender Address Domain - aol.com

Thanks for highlighting this scam!

I work for the Service Monitor Group (a legitimate company) based in Hertfordshire UK and our name is being used in the US for this scam.

They have used other European research agencies for this same scam before and obviously just change the company name once it gets too well known.

Basically any reseearch activity involving Western Union should be avoided.

We have registered the scam information with the Fraud Division of the London Metropolitan Police but there is very little they can do.

I hope no one gets caught out by this.

Cheers

Barry
BDD - Service Monitor Group

Nice website Barry!

I've noticed that scammers of the mystery shopper variety are all too happy to use genuine websites as props in their criminal pursuits.

One way for legitimate Mystery Shopper organizations to protect themselves from this type of identity theft is to include a warning on their websites to inform potential and even experienced mystery shopper applicants of the fraudulent nature of the "up front payment" style of mystery shopper scams.

Thanks,
A.B.

Scammer provides another western union pick up contact.

Attn: Shopper,


Secret Shopper payment has been delivered to you, you are to get back as
with your report as soon as possible.

Enclosed with this instructions is a payment for $1,996 which has been
delivered to you via USPS. USPS.COM. You are to cash the payment at your
bank as instructed then you deduct your $200 for the mystery shopper
assignment, you would have $1,796 left, you will as well deduct the
western union transfer charges and i want you to send the balance to the
next secret shopper in another location via western union money transfer.
Take note,we are evaluating WESTERN UNION all over the globe and money
should be sent using WESTERN UNION MONEY TRANSFER.You need to act like a
surveillance. Ensure that money is sent using the (Money Available in
Minutes)procedure.

Below is the name of the next shopper you will wire the funds to:

RECEIVER'S NAME - Ann Smith
ADDRESS - 56 ADEON AVE
CITY - MANILA
COUNTRY - PHILIPPINES

As soon as the fund is sent,you will kindly get back to us with the below
evaluation reports:

1) How long it took you to get services.
2) Ambiance/Outlook of the Shop/Outlet.
3) Smartness of the attendant.
4) Customer service professionalism.
5) Reaction of personnel under pressure.
6) Information that you think would be helpful.
7) Your comments and impressions.


You are to send the following details after you have transferred the
remaining funds through western union money transfer in minute immediately
so as to notify the receiver (Ann Smith) to carry out her own
evaluation survey at her own end.

* 10 Digit Western Union Money Transfer Control Number(MTCN):
* Total amount sent to the receiver after deducting transfer charges:
* Sender's Name:
* Sender's Contact Address :
* Text Question & Answer if applicable:

We will like this to be done as soon as you receive the payment package,
as the payment for the second evaluation assignment will be delivered asap
first assignment is completed. Please send back a
confirmation/acknowledgement as soon as you receive this message.

Regards and God bless.

JAMES WILLIAM.
Research Coordinator.
Tel: 1- 469-941-2656

Service Monitor Group...
OBSESSED WITH BEING THE BEST.(R)


Email header details;

Delivered-To: *removed*
Received: by 10.231.138.201 with SMTP id b9cs32715ibu;
Sat, 1 Oct 2011 01:10:59 -0700 (PDT)
Received: by 10.236.176.166 with SMTP id b26mr75851087yhm.60.1317456658315;
Sat, 01 Oct 2011 01:10:58 -0700 (PDT)
Return-Path: <[email protected]>
Received: from linux19.domainnameservers.net (linux19.domainnameservers.net. [67.19.242.98])
by mx.google.com with ESMTPS id i27si8061440yhm.15.2011.10.01.01.10.57
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 01 Oct 2011 01:10:58 -0700 (PDT)
Received-SPF: neutral (google.com: 67.19.242.98 is neither permitted nor denied by domain of [email protected]) client-ip=67.19.242.98;
Authentication-Results: mx.google.com; spf=neutral (google.com: 67.19.242.98 is neither permitted nor denied by domain of [email protected]) [email protected]
Received: from victo18 by linux19.domainnameservers.net with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1R9uek-0000Op-P7; Sat, 01 Oct 2011 04:10:47 -0400
Received: from 41.155.0.64 ([41.155.0.64])
(SquirrelMail authenticated user [email protected])
by http://www.victoriatackett.com with HTTP;
Sat, 1 Oct 2011 04:10:46 -0400
Message-ID: <d1afe91f132a2bef68412d9e429c0fe3.squirrel@www.victoriatackett.com>
Date: Sat, 1 Oct 2011 04:10:46 -0400
Subject: ATTENTION SHOPPER!!! PAYMENT DELIVERED TO YOU... GET BACK.
From: "William James." <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Buzix-MailScanner-Information: Please contact the ISP for more information
X-Buzix-MailScanner-ID: 1R9uek-0000Op-P7
X-Buzix-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-Buzix-MailScanner-SpamCheck:
X-Buzix-MailScanner-From: [email protected]
X-Spam-Status: No
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - linux19.domainnameservers.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [32114 32114] / [47 12]
X-AntiAbuse: Sender Address Domain - aol.com

Scammer supplies yet another western union pick up contact.

Hello *removed*,

Thanks for your email. the receiver is a secret shopper in another location, all information gathered will be forwarded to the personnel the department for further scrutiny and receiver will use it to carry out his assignment on the other end. below is the information of another shopper in CA.

Take note,we are evaluating WESTERN UNION all over the globe and money should be sent using WESTERN UNION MONEY TRANSFER.You need to act like a surveillance. Ensure that money is sent using the (Money Available in Minutes procedure.

Below is the name of the next shopper you will wire the funds to:

Name: Cameron Stokes
Address: 6229 Damask Avenue
City: Los Angeles,
State: CA
Zip: 90056

As soon as the fund is sent,you will kindly get back to us with the below
evaluation reports:

1) How long it took you to get services.
2) Ambiance/Outlook of the Shop/Outlet.
3) Smartness of the attendant.
4) Customer service professionalism.
5) Reaction of personnel under pressure.
6) Information that you think would be helpful.
7) Your comments and impressions.


You are to send the following details after you have transferred the
remaining funds through western union money transfer in minute immediately
so as to notify the receiver (Cameron Stokes) to carry out her own
evaluation survey at her own end.

* 10 Digit Western Union Money Transfer Control Number(MTCN):
* Total amount sent to the receiver after deducting transfer charges:
* Sender's Name:
* Sender's Contact Address :
* Text Question & Answer if applicable:

We will like this to be done as soon as you receive the payment package, as the payment for the second evaluation assignment will be delivered asap first assignment is completed. Please send back a confirmation/acknowledgement as soon as you receive this message.

Regards and God bless.

JAMES WILLIAM.
Research Coordinator.


Email header details;

Delivered-To: *removed*
Received: by 10.231.138.201 with SMTP id b9cs81338ibu;
Tue, 4 Oct 2011 06:13:27 -0700 (PDT)
Received: by 10.229.181.144 with SMTP id by16mr964989qcb.148.1317734006154;
Tue, 04 Oct 2011 06:13:26 -0700 (PDT)
Return-Path: <[email protected]>
Received: from imr-da03.mx.aol.com (imr-da03.mx.aol.com. [205.188.105.145])
by mx.google.com with ESMTP id x4si4343846qct.41.2011.10.04.06.13.25;
Tue, 04 Oct 2011 06:13:26 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 205.188.105.145 as permitted sender) client-ip=205.188.105.145;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 205.188.105.145 as permitted sender) [email protected]
Received: from mtaomg-da06.r1000.mx.aol.com (mtaomg-da06.r1000.mx.aol.com [172.29.51.142])
by imr-da03.mx.aol.com (8.14.1/8.14.1) with ESMTP id p94DDF5d029479
for <*removed*>; Tue, 4 Oct 2011 09:13:15 -0400
Received: from core-mhb004b.r1000.mail.aol.com (core-mhb004.r1000.mail.aol.com [172.29.187.196])
by mtaomg-da06.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 09FCCE000090
for <*removed*>; Tue, 4 Oct 2011 09:13:15 -0400 (EDT)
To: *removed*
Subject: Re: ATTENTION SHOPPER!!! PAYMENT DELIVERED TO YOU... GET BACK.
X-MB-Message-Source: WebUI
X-MB-Message-Type: User
MIME-Version: 1.0
From: William James <[email protected]>
Content-Type: multipart/alternative;
boundary="--------MB_8CE50AE826A2A00_2FA4_80DD_webmail-d126.sysops.aol.com"
X-Mailer: AOL Webmail 34188-STANDARD
Received: from 82.128.62.73 by webmail-d126.sysops.aol.com (149.174.18.16) with HTTP (WebMailUI); Tue, 04 Oct 2011 09:13:14 -0400
Message-Id: <[email protected]>
X-Originating-IP: [82.128.62.73]
Date: Tue, 4 Oct 2011 09:13:14 -0400 (EDT)
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:438032672:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d338e4e8b066b081a