Mystery Shopper Scam. [email protected]

The email attachment;

Mystery Shopper needed asap...

We are company that conducts surveys & evaluates other organizations. We are hired to set out other companies and act like customers in order to rate their service in relation to their customers. Once we have the contract, you will be directed to the company or outlet, & you would be given funds to either purchase items/services, after which you would write comments on the staff's activities & give a detailed record of your experience.

We turn down the info to the company executives, so improvement in their service will be present. Most organizations employ us when they experience a high volume of customer dissatisfaction,Your identity will be kept confidential.

You will be paid USD200 for every survey you complete and receive a bonus that can be used for transportation costs.

No commitment is required or this job, your hours will be flexible.

If you are interested, kindly sign up by filling the form below:

Name:
Address No P O Box:
City,State,Zip Code:
Phone #:
Occupation:
Age:

Regards.
Hernandez Pascal

Email header details;

Received: from mtain-de02.r1000.mx.aol.com (mtain-de02.r1000.mx.aol.com [172.29.64.202])
by imd-mb04.r1000.mx.aol.com (Inbound Mail Deferral) with ESMTP id 68AE4700000A1;
Mon, 12 Sep 2011 22:18:14 -0400 (EDT)
Received: from mout8.freenet.de (mout8.freenet.de [195.4.92.98])
by mtain-de02.r1000.mx.aol.com (Internet Inbound) with ESMTP id E586438000094;
Mon, 12 Sep 2011 22:18:07 -0400 (EDT)
Received: from [195.4.92.17] (helo=7.mx.freenet.de)
by mout8.freenet.de with esmtpa (ID [email protected]) (port 25) (Exim 4.76 #5)
id 1R3IPG-00008W-Jw; Tue, 13 Sep 2011 04:07:26 +0200
Received: from [46.166.129.170] (port=1271 helo=User)
by 7.mx.freenet.de with esmtpa (ID [email protected]) (port 587) (Exim 4.76 #1)
id 1R3IPG-00071a-De; Tue, 13 Sep 2011 04:07:26 +0200
Reply-To: <[email protected]>
From: "Hernandez Pascal"<[email protected]>
Subject: Mystery Shopper needed asap/View your e-mail
Date: Tue, 13 Sep 2011 02:07:26 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00F5_01C2A9A6.12B5242E"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
x-aol-global-disposition: S
X-AOL-VSS-INFO: 5400.1158/74300
X-AOL-VSS-CODE: scan_error
X-AOL-SCOLL-SCORE: 0:2:107617040:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d40ca4e6ebd5f65b4
X-AOL-IP: 195.4.92.98
X-AOL-SPF: domain : mail.com SPF : none

Further scam script plus details on the western union pick up contact.

Hello,

I want to notify you about the delivery of the payment to you when you receive the check (3,100$)I would like you to proceed to deduct your weekly salary which is $200 from the total amount and then withdraw the remaining funds. I have placed some artworks order from an art gallery in philippines and I will want you to help me transfer the rest of the funds to them through western union money transfer and also I have also placed an order with a local art gallery close to you but as soon as the order is in stock I will give you the address and the item numbers of what you need to get. Here is the art gallery official whom I will want you to transfer the FUNDS to the following information below:

Name:Benjamin Jones
Address: 25 ADB Avenue, Ortigas Center,Pasig
city;Manila
country;Philippines

As soon as you have sent the money to her I will want you to provide me with the following western union transfer details:

Sender's Name and Address..
Money Transfer Control Number:
Actual Amount Sent including charges.

I will want you to email me this information as soon as the transfer is done so I can forward it to them.
I will await your urgent reply
Thanks

Pascal Hernandez
[email protected]


Email header details;

Delivered-To: *removed*
Received: by 10.231.138.201 with SMTP id b9cs261512ibu;
Wed, 21 Sep 2011 12:55:35 -0700 (PDT)
Received: by 10.224.184.66 with SMTP id cj2mr47446qab.305.1316634934250;
Wed, 21 Sep 2011 12:55:34 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ims-d11.mx.aol.com (ims-d11.mx.aol.com. [205.188.249.148])
by mx.google.com with ESMTP id ee9si4709030qab.95.2011.09.21.12.55.34;
Wed, 21 Sep 2011 12:55:34 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 205.188.249.148 as permitted sender) client-ip=205.188.249.148;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 205.188.249.148 as permitted sender) [email protected]
Received: from oms-da02.r1000.mx.aol.com (oms-da02.r1000.mx.aol.com [205.188.255.12])
by ims-d11.mx.aol.com (8.14.1/8.14.1) with ESMTP id p8LJtK5a010117
for <*removed*>; Wed, 21 Sep 2011 15:55:21 -0400
Received: from mtaomg-da06.r1000.mx.aol.com (mtaomg-da06.r1000.mx.aol.com [172.29.51.142])
by oms-da02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 0C99338000082
for <*removed*>; Wed, 21 Sep 2011 15:55:21 -0400 (EDT)
Received: from core-dua004c.r1000.mail.aol.com (core-dua004.r1000.mail.aol.com [172.29.164.13])
by mtaomg-da06.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id D1352E0000A3;
Wed, 21 Sep 2011 15:55:20 -0400 (EDT)
References: <CAG9SkhKpW81-U79Z156nyWapM-1Sf5W2EDegQ=Q5Yp7-r3ALzw@mail.gmail.com>
To: *removed*
Subject: =?utf-8?Q?INSTRUCTIONS_ON_WHAT_?=
=?utf-8?Q?TO_DO_NEXT=E2=80=8F?=
In-Reply-To: <CAG9SkhKpW81-U79Z156nyWapM-1Sf5W2EDegQ=Q5Yp7-r3ALzw@mail.gmail.com>
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: Pascal Hernandez <[email protected]>
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8CE46AF86FD378F_182C_F117D_webmail-d062.sysops.aol.com"
X-Mailer: AOL Webmail 34122-STANDARD
Received: from 41.155.28.116 by webmail-d062.sysops.aol.com (205.188.91.211) with HTTP (WebMailUI); Wed, 21 Sep 2011 15:55:20 -0400
Message-Id: <[email protected]>
X-Originating-IP: [41.155.28.116]
Date: Wed, 21 Sep 2011 15:55:20 -0400 (EDT)
x-aol-global-disposition: S
X-SPAM-FLAG:YES
X-AOL-SCOLL-SCORE: 0:2:473244928:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d338e4e7a41287fa2