Mystery Shopper Scam. [email protected]

Attn: Prospective Shopper,

Good Day, Your email passed through our system and you have been qualified to
become a mystery shopper. Reply as soon as you get this message with your
complete details like your full name,address,city,state,zip code,phone number
etc.
If you can attach your resume then it would be better,its an option.

Acknowledge Receipt Of This Message.

Regards,
Pat-America.


Email header details;

Return-Path: <[email protected]>
Received: from smtp7.versatel.nl (smtp7.versatel.nl [62.58.50.98])
by mtain-dd06.r1000.mx.aol.com (Internet Inbound) with ESMTP id A4C6D380000B1
for <*removed*@aol.com>; Sat, 7 Jan 2012 18:14:50 -0500 (EST)
Received: (qmail 15755 invoked by uid 0); 7 Jan 2012 14:26:34 -0000
Received: from ip136-146-172-82.adsl2.static.versatel.nl (HELO yahoo.com) ([82.172.146.136])
(envelope-sender <[email protected]>)
by smtp7.versatel.nl (qmail-ldap-1.03) with SMTP
for < >; 7 Jan 2012 14:26:34 -0000
Reply-To: <[email protected]>
From: "Pat-America"<[email protected]>
Subject: Resume
Date: Sat, 7 Jan 2012 07:28:19 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:112755856:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d40924f08d1ea1d95
X-AOL-IP: 62.58.50.98
X-AOL-SPF: domain : att.net SPF : none

Is this a scam or not???

Is this a scam or not???

Yes. Absolutely. 100% pure scam. Read here for more information on just exactly how this scam plays out.

Further scam script plus details on the western union pick up contact.

Hello Mystery Shopper,

This email is to let you know that the funds ( 2 money orders of $970 ) you will be needing to carry out your first assignment has been sent to your address ,it will be deliver to your address today via FEDEX Delivery.
As soon as you confirm the delivery of the check, it should be taken to your bank to Cash, deduct your commission for the assignment which is $200. You will be left with a balance of $1740, which will be used to carry out the assignment at any western union location closer to you

Do not forget that you will have to be observant and email me back with your observations as described earlier in my previous email.

VENUE FOR THE ASSIGNMENT ( Closest Western Union Location)

Please help us improve our money transfer services.

At westernunion.com, we value your opinion. We are asking our customers to help us better understand the needs of western union users. We appreciate your participation in this survey so that we can continue to offer the highest level of customer service.

Your opinion matters!

Please see below and answer survey here after completing your assignment


1. How fast and Efficient is the Western Union Money Transfer Service?
2. How long does it take you to have the funds wired?
3. How Close is the Western Union Money Transfer Location to your area?
4. Is the Senders Request Form too short or Long? Kindly Advise
5. Is the neighboring environment safe for handling Western Union Money Transfer Service.
6. What is the name of the Local Western Union Money Transfer Agent where you have the funds wired?
7. General Comment ....


All this should be kept unknown from the cashier.
You will be sending the funds to our other mystery shopper .
Note that there would be charges for sending western union,and this would be deducted from the balance ($1740).

Here is the info to send the funds.....

Name.....Justen Hall
Address....2209 Capital Avenue
City.........makati
State........manila
Country....Philippines

You are expected to have this done today and email us back your results with the following information after you have the funds wired:

1. Name and Address of Sender...
2. Money Transfer Control Number
3. Amount Wired after deducting your $200 pay and the cost of transfer
4. Make Sure the Funds is been made available in US$$ for the Recipient


Email header details;

Delivered-To: *removed*@gmail.com
Received: by 10.220.154.201 with SMTP id p9cs34308vcw;
Thu, 26 Jan 2012 05:34:20 -0800 (PST)
Received: by 10.224.217.10 with SMTP id hk10mr2546675qab.15.1327584860429;
Thu, 26 Jan 2012 05:34:20 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.igrin.co.nz (mail.igrin.co.nz. [202.49.244.12])
by mx.google.com with ESMTP id m17si1663123qcv.122.2012.01.26.05.34.19;
Thu, 26 Jan 2012 05:34:20 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 202.49.244.12 as permitted sender) client-ip=202.49.244.12;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning [email protected] does not designate 202.49.244.12 as permitted sender) [email protected]
Received: by mail.igrin.co.nz (Postfix, from userid 65534)
id 0D46D11391C8; Fri, 27 Jan 2012 02:19:23 +1300 (NZDT)
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on mail.igrin.co.nz
X-Spam-Level: *****************
X-Spam-Status: No, score=17.1 required=1000.0 tests=BAYES_50,DOS_OE_TO_MX,
FH_DATE_PAST_20XX,FORGED_MUA_OUTLOOK,IGRIN_SCAMS_15,MSOE_MID_WRONG_CASE,
RDNS_DYNAMIC,SUBJ_ALL_CAPS autolearn=no version=3.2.3
Received: from localhost (localhost [127.0.0.1])
by mail.igrin.co.nz (Postfix) with ESMTP id 597D411391BA;
Fri, 27 Jan 2012 02:19:20 +1300 (NZDT)
X-Virus-Scanned: Debian amavisd-new at mail.igrin.co.nz
Received: from mail.igrin.co.nz ([127.0.0.1])
by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id EohO+LQv6fFU; Fri, 27 Jan 2012 02:19:20 +1300 (NZDT)
Received: from User (ip67-155-46-166.z46-155-67.customer.algx.net [67.155.46.166])
by mail.igrin.co.nz (Postfix) with ESMTP id B28EB11391C8;
Fri, 27 Jan 2012 02:18:45 +1300 (NZDT)
Reply-To: <[email protected]>
From: "PAT-AMERICA"<[email protected]>
Subject: THIS IS YOUR INSTRUCTIONS
Date: Thu, 26 Jan 2012 14:26:35 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;

Yes, I actually got that exact e-mail 4 times just today and the 'postal money orders' FedExed to me this morning. I once got a $5000 certified check in the mail by UPS. Went to go cash it at CEFCU and it was only 1 number off of a real account number. Now I am in the check system for 7 years and get red flagged anytime I cash any check.