Mystery Shopper Scam. [email protected]

The email attachment;

MYSTERY SHOPPER WANTED

Dear Candidate,

We are actually looking for a Mystery Shopper who will be working for our company.

Due to the economic down turn and credit crunch a lot of retail outlets have been trying to downsize and one of the the ways to evaluate the services and performance of their outlets is through mystery shoppers.

Working with us won't affect your present job.

* EARN NO LESS THAN USD150.00 USD
* NEED EXTRA INCOME!
* BECOME OUR [ MYSTERY SHOPPER]: Earn [ NO LESS THAN USD150.00 ] PER VENTURE:
* IT IS VERY EASY AND VERY SIMPLE:
* NO APPLICATION FEES:

Job Salary : 10% of check to conduct the Mystery Shopping
Start Date : 2 - 5 days after application is received.

Job Description : We need mystery shoppers all over United States.

***Our Major Secret Shopping is carried out on Money Transfer Service & Major Stores.***

To participate in our mystery shopping exercise, you can email me and send in the following details:

ENCLOSE YOUR:
Full Legal Name :
Address : (P.O Box not allowed)
City :
State :
Zip code :
Country :
Age:
Sex:
Present occupation:
Home # :
Cell # :

Warm Regards,

Andy Macaulay.
General Manager,
Oak Furniture Land

Email header details;

Received: from mout4.freenet.de (mout4.freenet.de [195.4.92.94])
by mtain-dg03.r1000.mx.aol.com (Internet Inbound) with ESMTP id 8305F380000BE;
Fri, 16 Sep 2011 08:19:16 -0400 (EDT)
Received: from [195.4.92.22] (helo=12.mx.freenet.de)
by mout4.freenet.de with esmtpa (ID [email protected]) (port 25) (Exim 4.76 #5)
id 1R4XNv-0000VM-4W; Fri, 16 Sep 2011 14:19:11 +0200
Received: from [46.166.129.170] (port=1087 helo=User)
by 12.mx.freenet.de with esmtpa (ID [email protected]) (port 587) (Exim 4.76 #1)
id 1R4XNu-0002jU-S9; Fri, 16 Sep 2011 14:19:11 +0200
Reply-To: <[email protected]>
From: "Andy Macaulay"<[email protected]>
Subject: MYSTERY SHOPPER WANTED/View your e-mail
Date: Fri, 16 Sep 2011 13:19:15 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_000C_01C2A9A6.3ACEB27E"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
x-aol-global-disposition: S
X-AOL-VSS-INFO: 5400.1158/74403
X-AOL-VSS-CODE: scan_error
X-AOL-SCOLL-SCORE: 0:2:109773160:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d410b4e733ec4647f
X-AOL-IP: 195.4.92.94
X-AOL-SPF: domain : mail.com SPF : none

Further scam script plus details on the western union pick up contact.

Dear Shopper,

This is a notification to keep you informed that information concerning payment and instructions for your first assignment are provided below, Once you receive the payment go to your bank, deposit and cash it.

Payment is being mailed to you It is a sum of $3250

YOUR 1ST MYSTERY SHOPPER ASSIGNMENT/ READ CAREFULLY.

You will be evaluating any store of your choice and a Western union outlet in your City. The Payment sent to you ($3250) covers all expenditures including evaluation, shopping, transport and your compensation which is $300.00 for this survey.

You are to purchase Goods of your Choice for your own Use at any store in your City which you are evaluating

Also as regards Western union, we will be using our company feed-back mechanism; therefore you will be sending funds through Western union outlet in your City to our receiving agent.

You will take a total of $2950 to the western union outlet you are evaluating; you will have to pay the western union transfer charges from the $2950 you are sending out.

TRANSFER THE REST OF THE FUNDS THROUGH WESTERN UNION MONEY TRANSFER TO THE BELOW INFORMATION:

Receiver's Name: Mikel Song
City: Kuala Lumpur
Country: Malaysia
Zip code : 47610

Below are details you need to send once funds has been transferred to the Agent's Name and Address Which is above .

- Sender's Full Name and Address
- Western Union transfer charges
- Actual Amount sent
- Money Transfer Control number ( MTCN )

After Evaluation, ensure that you send back email via [email protected] the western union transfer code [10 digits ] and store reports as it is required for Company feedback purposes on service delivery.

You are expected to report the following:-

Name & Address of Outlet visited
Cleanliness of Environment
How long it took the Rep to attend to you
Smartness of the attendant
Information that you think would be helpful
Your comments and impressions.

This project shouldn't take you more than a couple of hours to execute and the time limit matters to us, with that we can also determine your efficiency and the commitment you show towards working with us which will be seriously considered when reviewing you . Do get back to me with the detailed reports, including breakdown of expenses and transfer information.

Looking forward to working with you on this project and remember to pretend to be a client who wants to send money so they won't detect you are a secret shopper. Should you have any other questions or need more Instructions as to your first assignment, send me an email

E-mail me as soon as you get this message. We are counting on you and we expect a detailed report.

Thanks In Anticipation.


Email header details;

Delivered-To: *removed*
Received: by 10.231.138.201 with SMTP id b9cs278830ibu;
Thu, 22 Sep 2011 03:26:36 -0700 (PDT)
Received: by 10.52.67.84 with SMTP id l20mr1764371vdt.77.1316687196365;
Thu, 22 Sep 2011 03:26:36 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ims-m13.mx.aol.com (ims-m13.mx.aol.com. [64.12.207.146])
by mx.google.com with ESMTP id k8si1802435vcq.115.2011.09.22.03.26.36;
Thu, 22 Sep 2011 03:26:36 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.207.146 as permitted sender) client-ip=64.12.207.146;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 64.12.207.146 as permitted sender) [email protected]
Received: from oms-mb01.r1000.mx.aol.com (oms-mb01.r1000.mx.aol.com [64.12.102.137])
by ims-m13.mx.aol.com (8.14.1/8.14.1) with ESMTP id p8MAQQDS021987
for <*removed*>; Thu, 22 Sep 2011 06:26:26 -0400
Received: from mtaomg-da01.r1000.mx.aol.com (mtaomg-da01.r1000.mx.aol.com [172.29.51.137])
by oms-mb01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 9855A1C000085
for <*removed*>; Thu, 22 Sep 2011 06:26:26 -0400 (EDT)
Received: from core-mhe003a.r1000.mail.aol.com (core-mhe003.r1000.mail.aol.com [172.29.239.131])
by mtaomg-da01.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 2DA41E000088;
Thu, 22 Sep 2011 06:26:26 -0400 (EDT)
References: <CAG9SkhKNKMp6c7wdzpFU55-GDL9PrmZ+aBKg+sJ5NzQ+snNT8Q@mail.gmail.com>
To: *removed*
Subject: Re: FIRST ASSIGNMENT STARTS TODAY(FOLLOW THIS INSTRUCTION)
In-Reply-To: <CAG9SkhKNKMp6c7wdzpFU55-GDL9PrmZ+aBKg+sJ5NzQ+snNT8Q@mail.gmail.com>
X-MB-Message-Source: WebUI
Received: from 41.58.9.140 by webmail-m151.sysops.aol.com (64.12.101.140) with HTTP (WebMailUI); Thu, 22 Sep 2011 06:26:25 -0400
MIME-Version: 1.0
From: Andy Macaulay <[email protected]>
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8CE472937B20FC2_3210_18A7C8_webmail-m151.sysops.aol.com"
X-Mailer: AOL Webmail 34122-STANDARD
Cc: *removed*
Message-Id: <[email protected]>
X-Originating-IP: [41.58.9.140]
Date: Thu, 22 Sep 2011 06:26:26 -0400 (EDT)
x-aol-global-disposition: S
X-SPAM-FLAG:YES
X-AOL-SCOLL-SCORE: 0:2:392390880:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d33894e7b0d524206

Scammer provides another western union pick up contact.

Dear *removed*

Here is the information to wire the funds below
Name : CLAUDINE JEAN-BAPTISTE
Address: 329 AVANT
City: HAZELWOOD
State: MO
Zip Code: 63042

As soon as you are done, kindly email me the MTCN # and the specific amount you sent.
Thanks


Email header details;

Delivered-To: *removed*
Received: by 10.231.138.201 with SMTP id b9cs3659ibu;
Fri, 23 Sep 2011 14:29:18 -0700 (PDT)
Received: by 10.52.38.8 with SMTP id c8mr3654454vdk.324.1316813357761;
Fri, 23 Sep 2011 14:29:17 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ims-d11.mx.aol.com (ims-d11.mx.aol.com. [205.188.249.148])
by mx.google.com with ESMTP id ds10si10543017vdb.124.2011.09.23.14.29.17;
Fri, 23 Sep 2011 14:29:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 205.188.249.148 as permitted sender) client-ip=205.188.249.148;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 205.188.249.148 as permitted sender) [email protected]
Received: from oms-ma02.r1000.mx.aol.com (oms-ma02.r1000.mx.aol.com [64.12.140.130])
by ims-d11.mx.aol.com (8.14.1/8.14.1) with ESMTP id p8NLStsJ010990
for <*removed*>; Fri, 23 Sep 2011 17:28:55 -0400
Received: from mtaomg-ma02.r1000.mx.aol.com (mtaomg-ma02.r1000.mx.aol.com [172.29.41.9])
by oms-ma02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 2D44B38000085
for <*removed*>; Fri, 23 Sep 2011 17:28:55 -0400 (EDT)
Received: from core-mhe003a.r1000.mail.aol.com (core-mhe003.r1000.mail.aol.com [172.29.239.131])
by mtaomg-ma02.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 741DBE000082;
Fri, 23 Sep 2011 17:28:50 -0400 (EDT)
References: <CAG9SkhJkvQQQN5_Er=OupLhjtwOzOzG3WPEuE7fU9tic1hDVSQ@mail.gmail.com>
To: *removed*
Subject: INFO
In-Reply-To: <CAG9SkhJkvQQQN5_Er=OupLhjtwOzOzG3WPEuE7fU9tic1hDVSQ@mail.gmail.com>
X-MB-Message-Source: WebUI
Received: from 41.58.58.65 by webmail-m061.sysops.aol.com (64.12.158.161) with HTTP (WebMailUI); Fri, 23 Sep 2011 17:28:50 -0400
MIME-Version: 1.0
From: Andy Macaulay <[email protected]>
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8CE484EEB9A8F5B_223C_13E229_webmail-m061.sysops.aol.com"
X-Mailer: AOL Webmail 34122-BASIC
Cc: *removed*
Message-Id: <[email protected]>
X-Originating-IP: [41.58.58.65]
Date: Fri, 23 Sep 2011 17:28:50 -0400 (EDT)
x-aol-global-disposition: S
X-SPAM-FLAG:YES
X-AOL-SCOLL-SCORE: 0:0:0:0
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d29094e7cfa12169b