Company Representative scams, Payment Processing scams and other Employment scams.
by Claire0817 Wed Dec 14, 2011 9:40 pm
I applied for a job on Craig's List for a Production Manager. This is the email I got back at 7:17PM from [email protected].

I'm Nick, head of the HR department. Thanks for showing interest in our opening. After looking at your experience we know you would be a awesome employee for our work place!

We have got a lot of resumes for this position and we're happy to inform you that you were the best person for this job. So go ahead and give yourself a pat on the back. We're definitely interested in setting an interview date anytime this week if you are not busy.

Our HR department was told this morning (after posting the post) that we are prohibited to employ you via craigslist and that it's against company policy. Because of this I'm going to need you to go to a site named Better Career Search and apply for this position via their tool.

If you are very interested in this position please go here and download their Better Career Search tool and find listing id: 1119790 and apply.

When you have completed the above please email me back so we can setup an interview time. Sometime this week would be good for me.

All the best,
Nick Gluson


Then I received another email from another Production Manager's job I applied for about 10 min later. This one is from [email protected].

I'm Jack, head of the Human Resources department. We would like to say thank you for showing interest in our opening. After reviewing your resume we think you would be a good fit for our work place!

We have received alot of interest in this position and we're happy to inform you that you were the best candidate for the job. So go on and give yourself a pat on the back. We're definitely interested in setting up an interview day sometime this week if you are not busy.

Our Human Resources dept. was told this morning (after posting the post) that we are prohibited to hire via craigslist and that it's against company policy. Because of this I am going to need you to go to a site named Better Career Search and apply for this opening via their tool.

If you are still interested in this opening please go here and get their Better Career Search tool and find listing id: 247185 and submit your resume.

When you have done the above please email me back so we can setup an interview time. Some time this week would be great for us.

Thank you,
Jack Munoz

This one did it, an email from Jack? with an email address as Chantay301?????????

So hard trying to find a job without having to put up with this CRAP!! Thank you for this site!!!!!!
Advertisement

by Justin Wed Dec 14, 2011 9:53 pm
Hello Claire0817!

As you suspect this is a scam! It probably made it pretty obvious when you got the exact same email applying to different jobs and from different people :)

It sucks I agree. Can you please post the email header from the first one? If you need help finding headed you can go here http://www.ip-adress.com/faq/view_email_header/

The scammer has registered the domain http://nicejobs.info/ a couple days ago. He is using it to so he cam email people with @nicejobs.info to make his scam look mor legitimate. We would like to try and get that shut down.

Great job spotting the scam!

Justin

by Claire0817 Wed Dec 14, 2011 10:03 pm
Is this what you're looking for?? I went to the site you have listed and when I open my email I don't have the tabs they tell me to click on. So I found "view source" on mine and when I clicked on that this is what I found. Let me know and I'll keep on looking.


<html><head><META http-equiv="Content-Type" content="text/html;charset=utf-8"></head><body>Hello Claire,<br><br>
by Claire0817 Wed Dec 14, 2011 10:07 pm
I don't understand what these people gain by doing this. It's so very frustrating so seemingly have a good lead and BAM it's a scam. Why do they do this? Does anyone know???
by Justin Wed Dec 14, 2011 10:08 pm
What kind of email account do you have? View source sounds correct but the email header should be bigger like the one below.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 14 Dec 2011 16:29:32 -0800
Received: from mail45.atl.registeredsite.com ([209.237.134.235] ident=[U2FsdGVkX1/+sAslkGrK8lZFWr1ofZhZDj2/bnv460s=])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RazCV-0006b3-Um
for ; Wed, 14 Dec 2011 16:29:32 -0800
Received: from mymail.myregisteredsite.com (wmailnode4c.webmail.web.com [209.237.135.234])
by mail45.atl.registeredsite.com (8.12.11.20060308/8.12.11) with ESMTP id pBF0TVog011960
for <>; Wed, 14 Dec 2011 19:29:31 -0500
Received: (qmail 19577 invoked by uid 80); 15 Dec 2011 00:14:03 -0000
Received: from localhost (HELO mymail4.myregisteredsite.com) (127.0.0.1)
by mymail.myregisteredsite.com with SMTP; 15 Dec 2011 00:14:03 -0000
Received: from 209.237.129.41
(SquirrelMail authenticated user [email protected])
by mymail4.myregisteredsite.com with HTTP;
Wed, 14 Dec 2011 19:14:03 -0500
Message-ID: <6a253761962b60780a770e7a320b882c.squirrel@mymail4.myregisteredsite.com>
Date: Wed, 14 Dec 2011 19:14:03 -0500
Subject: Diplomat AT The International Airport Now,Contact Him
From: "Rev. Joe Benson" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal

by Claire0817 Wed Dec 14, 2011 10:15 pm
I have outlook, but it has envelopes for reply and it doesn't have your typical file, edit, etc. As you can probably see, I'm computer challenged!!! LOL

This is the whole thing.

<html><head><META http-equiv="Content-Type" content="text/html;charset=utf-8"></head><body>Hello Claire,<br><br>

I'm Nick, head of the HR department. Thanks for showing interest in our opening. After looking at your experience we know you would be a awesome employee for our work place!<br><br>

We have got a lot of resumes for this position and we're happy to inform you that you were the best person for this job. So go ahead and give yourself a pat on the back. We're definitely interested in setting an interview date anytime this week if you are not busy.<br><br>

Our HR department was told this morning (after posting the post) that we are prohibited to employ you via craigslist and that it's against company policy. Because of this I'm going to need you to go to a site named Better Career Search and apply for this position via their tool.<br><br>

If you are very interested in this position please go <a href="http://listings.nicejobs.info/?92016">here</a> and download their Better Career Search tool and find listing id: 1119790 and apply. <br><br>

When you have completed the above please email me back so we can setup an interview time. Sometime this week would be good for me.<br><br>

<b>All the best,<br>
Nick Gluson</b></body></html>
by Justin Wed Dec 14, 2011 10:17 pm
Claire0817 wrote:I don't understand what these people gain by doing this. It's so very frustrating so seemingly have a good lead and BAM it's a scam. Why do they do this? Does anyone know???



Simple they do this to steal money. They will eventually tell you this is a "work from home" job. They will tell you items will be shipped to you and you need to reship them. These items are bought with stollen credit cards. This allows the scammer to lead the trail directly to you without having items suspiciously shipped to where he is which is most likely West Africa. The scammer may also ask you to process checks as well. In this case you are sent fake checks from stollen accounts and asked to cash them and send him the money through Western Union. Basically the scammer makes their victim a money launder.

by Helen Halper Wed Dec 14, 2011 10:23 pm
Hi Claire0817!
Welcome to Scamwarners!
It seems like there are different years of outlook. Please google "view headers in outlook + the year" and you will find directions ...

by Claire0817 Wed Dec 14, 2011 10:23 pm
FOUND IT!!!!!!!!!!!! I've got OFFICE Outlook. After a little investigating, here it is!!! YAY!!

Return-path: <[email protected]>
Received: from gateway13.websitewelcome.com ([unknown] [69.93.179.5])
by vms169129.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with ESMTP id <[email protected]> for
Wed, 14 Dec 2011 18:16:50 -0600 (CST)
Received: by gateway13.websitewelcome.com (Postfix, from userid 5007)
id 4F2566FCC7C76; Wed, 14 Dec 2011 18:16:40 -0600 (CST)
Received: from ham02.websitewelcome.com (unknown [173.192.111.51])
by gateway13.websitewelcome.com (Postfix) with ESMTP id 35BB66FCC7C20 for
; Wed, 14 Dec 2011 18:16:40 -0600 (CST)
Received: by ham02.websitewelcome.com (Postfix, from userid 666)
id 2DBB9D172EFC; Wed, 14 Dec 2011 18:16:40 -0600 (CST)
Received: from mx5sql5.websitewelcome.com
(mx5sql5.websitewelcome.com [74.53.109.2]) by ham02.websitewelcome.com
(Postfix) with ESMTP id 81798D172DE8 for ; Wed,
14 Dec 2011 18:16:39 -0600 (CST)
Received: from [66.215.140.118] (port=58565 helo=Windows7)
by mx5sql5.websitewelcome.com with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.69)
(envelope-from <[email protected]>)
id 1Raz03-0007vp-9F for [email protected]; Wed,
14 Dec 2011 18:16:39 -0600
Date: Wed, 14 Dec 2011 16:16:33 -0800
From: "Nick Gluson" <[email protected]>
Subject: Re: Production Manager (Rhode Island)
X-Originating-IP: [69.93.179.5]
Message-id: <65DF1511E12E8D61F8E76C2A78EF349747079383@Windows7>
MIME-version: 1.0
Content-type: text/html
Content-transfer-encoding: 7BIT
X-Priority: 3 (Normal)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
ham02.websitewelcome.com
X-Spam-Flag2999: NO
X-Spam-Level2999:
X-Spam-Status2999:
"No, score=-0.6 required=5.0 tests=BAYES_00,HS_INDEX_PARAM, HTML_MESSAGE,MIME_HTML_ONLY
autolearn=ham version=3.3.1
X-AntiAbuse: This header was added to track abuse,
please include it with any abuse report
X-AntiAbuse: Primary Hostname - mx5sql5.websitewelcome.com
X-AntiAbuse: Original Domain - verizon.net
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nicejobs.info
X-BWhitelist: no
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: 66-215-140-118.dhcp.nlto.ca.charter.com (Windows7)
[66.215.140.118]:58565
X-Source-Auth: [email protected]
X-Email-Count: 321
X-Source-Cap: bmljZWpvYnM7c2lsdmVyZG87bXg1c3FsNS53ZWJzaXRld2VsY29tZS5jb20=
Original-recipient: rfc822;
Last edited by Claire0817 on Wed Dec 14, 2011 10:39 pm, edited 1 time in total.
by Justin Wed Dec 14, 2011 10:31 pm
Yay! Perfect I was just about to say what Helen said! Please edit out your email address from the header. You don't want anymore scammers emailing you and they comb the Internet for email addresses.

by caseyess Thu Dec 15, 2011 11:48 am
Same thing happened to me at the same time for the same job. Luckily the link to bettercareersearch.com in the email body didn't work.

Who is online

Users browsing this forum: ClaudeBot and 6 guests