Mystery Shopper Scam. [email protected]

I AM PAUL ANDERSON OF RECUVA LLC, A PROFESSIONAL EVALUATION COMPANY WORKING TO IMPROVE AND ENSURE QUALITY CUSTOMER SERVICES. WE NEED A HONEST, SELF-MOTIVATED PERSON WHO CAN WORK FOR US AS AN EVALUATOR AND EARN $400 WEEKLY.
FOR MORE DETAILS PROVIDE THE FOLLOWING: +FULL NAME: +FULL ADDRESS: +CITY: +STATE: +ZIP CODE: +PHONE #: +EMAIL ADDRESS: +AGE:
PAUL ANDERSON
209-813-0544


Email header details;

Received: from mail5.sea5.speakeasy.net (mail5.sea5.speakeasy.net [69.17.117.49])
by mtain-mg02.r1000.mx.aol.com (Internet Inbound) with ESMTP id D22D9380001AC
for <*removed*>; Sat, 24 Sep 2011 15:38:00 -0400 (EDT)
Received: (qmail 26371 invoked from network); 24 Sep 2011 19:34:52 -0000
Received: from perian.planethoster.net (HELO User) (s.cross@[199.16.128.12])
(envelope-sender <[email protected]>)
by mail5.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP
for <[email protected]>; 24 Sep 2011 19:34:48 -0000
Reply-To: <[email protected]>
From: "Paul Anderson"<[email protected]>
Subject: Job Opening [Evaluator- Nedeed]
Date: Sat, 24 Sep 2011 12:34:47 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:149623584:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60ca4e7e31981343
X-AOL-IP: 69.17.117.49
X-AOL-SPF: domain : aol.com SPF : neutral

Further scam script plus details on the western union pick up contact.

1. Cash the MONEY ORDER at your bank at once after filling your name and address at the TO: SECTION of the money order that says TO: and then put this name and address at the FROM: SECTION that says from:

name: LAURA MAYS
ADDRESS: 170 Spring St NW,Atlanta, GA 30303

The money order has been left blank so that you can fill it without errors.

3. Locate a western union Outlet near you to conduct the survey by patronizing their services. You are to appear as a potential customer sending a western union transfer.

Deduct 100 for yourself and wire the rest to our accountant in PHILIPPINES given in the below information for the sole purpose of this survey.

YOU WILL SEND THE FUNDS TO:

NAME: MERCY FLAVORS
ADDRESS: 350 A J Villegas Street Ermita
CITY: MANILLA
COUNTRY: PHILIPPINES

TAKE NOTE: PLEASE INSTRUCT THE WESTERN UNION RECEPTIONIST OR CONTROLLER TO MAKE SURE THE MONEY IS SENT TO PHILIPPINES IN US DOLLARS CURRENCY.

Be sure to observe how long it took you to get served, Smartness of the attendant and Customer service professionalism

during the transfer process and Under no circumstances should the Western Union Agents know this survey is being carried out on them.

N.B: NOTE THAT IF YOU COMPLETE THIS ASSIGNMENT TODAY YOU WILL BE ALLOWED TO TAKE $150 FOR YOUR QUICKNESS AND EFFICIENCY INSTEAD OF THE INITIAL $100.


Email header details;

Delivered-To: *removed*
Received: by 10.220.189.65 with SMTP id dd1cs120281vcb;
Wed, 5 Oct 2011 23:47:46 -0700 (PDT)
Received: by 10.52.75.9 with SMTP id y9mr345181vdv.120.1317883665848;
Wed, 05 Oct 2011 23:47:45 -0700 (PDT)
Return-Path: <[email protected]>
Received: from imr-ma04.mx.aol.com (imr-ma04.mx.aol.com. [64.12.206.42])
by mx.google.com with ESMTP id g9si3536453vdw.69.2011.10.05.23.47.45;
Wed, 05 Oct 2011 23:47:45 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.206.42 as permitted sender) client-ip=64.12.206.42;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 64.12.206.42 as permitted sender) [email protected]
Received: from mtaomg-da03.r1000.mx.aol.com (mtaomg-da03.r1000.mx.aol.com [172.29.51.139])
by imr-ma04.mx.aol.com (8.14.1/8.14.1) with ESMTP id p966lafg000555
for <*removed*>; Thu, 6 Oct 2011 02:47:36 -0400
Received: from core-dfe001c.r1000.mail.aol.com (core-dfe001.r1000.mail.aol.com [172.29.55.131])
by mtaomg-da03.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 5D57CE000089
for <*removed*>; Thu, 6 Oct 2011 02:47:36 -0400 (EDT)
References: <[email protected]> <CAG9SkhKuSnM5vsuZ2xeskqR7WCK+9Uy8XLAmdBHaRBwajxQSHQ@mail.gmail.com>
To: *removed*
Content-Transfer-Encoding: quoted-printable
Subject: Re: Shopper [Respond ASAP]
In-Reply-To: <CAG9SkhKuSnM5vsuZ2xeskqR7WCK+9Uy8XLAmdBHaRBwajxQSHQ@mail.gmail.com>
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: Paul Anderson <[email protected]>
X-MB-Message-Type: User
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Mailer: AOL Webmail 34188-STANDARD
Received: from 65.60.41.26 by webmail-m022.sysops.aol.com (64.12.183.103) with HTTP (WebMailUI); Thu, 06 Oct 2011 02:47:35 -0400
Message-Id: <[email protected]>
X-Originating-IP: [65.60.41.26]
Date: Thu, 6 Oct 2011 02:47:36 -0400 (EDT)
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:373679680:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d338b4e8d4f08747d