Company Representative scams, Payment Processing scams and other Employment scams.
by A.B. Wed Jan 11, 2012 11:53 pm
Hi,

We currently have an opening in your region for parttime donation
receivers. You do not need to have any experience in finances and you are
not required to leave your current job. This is only during your spare
time.

If you would like to earn extra money to help with your finances, you can
receive donations made from fellow christians in the ministry in your
region. All you need is a verified paypal email. Please NOTE: This is free
to join. You will NEVER be charged for anything.

When any donation is made to your paypal account, we will notify you. You
will earn 10% of every donation. All you have to do is send the rest
through the western union to the Head Treasurer's office in London.

These are the information needed to apply for this position:

Full names:
Address:
Telephone:
Age:
Current occupation:
Paypal email address:
Will you be able to send out money paid into your paypal account on the
same day through western union to our treasurer in London? Yes or No :

If you are interested in this easy position, reply wit as soon as possible
with the information. We have very few available positions left for this
year.

In His Service,
Benny Hinn Ministries


Email header details;
Return-Path: <[email protected]>
Received: from directadmin.co.uk (server.directadmin.co.uk [85.13.197.10])
by mtain-db06.r1000.mx.aol.com (Internet Inbound) with ESMTP id 35A183800008E;
Wed, 11 Jan 2012 17:55:05 -0500 (EST)
Received: from localhost ([127.0.0.1] helo=theneemtree.net)
by directadmin.co.uk with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.67)
(envelope-from <[email protected]>)
id 1Rl6K5-0000g5-Rh; Wed, 11 Jan 2012 22:07:09 +0000
MIME-Version: 1.0
Date: Wed, 11 Jan 2012 22:07:09 +0000
From: MELISSA BLITZER <[email protected]>
To: undisclosed-recipients:;
Subject: CURRENTLY HIRING - EARN EXTRA MONEY
Organization: BENNY HINN MINISTRIES
Reply-To: [email protected]
Message-ID: <8138fc3eaf1ba9f38140da8bd9936691@localhost>
X-Sender: [email protected]
User-Agent: RoundCube Webmail/0.3.1
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 0:2:176540320:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d405a4f0e134959ff
X-AOL-IP: 85.13.197.10
X-AOL-SPF: domain : bennyhinnministries.org SPF : none
Advertisement

by A.B. Sat Feb 11, 2012 3:51 am
Edited to remove details of innocent person being targeted by this scammer.

Further scam script plus details on the western union pick up contacts. A scam angle, using apparently genuine Paypal transactions seem to have been employed by the scammer(s) in this instance. The payment has probably been initiated by a as yet unaware scam victim. My fictional scam-baiting character will not be collecting the payment.

Shalom,

We just received confirmation that donation was made to you through your paypal ($1,700) from Dell computers' sales donation. The Transaction ID: *removed*

You earn $100 as commission on this donation. You should send part through western union to the Charity organization in Malaysia and to the Head Treasurer's office in London, United Kingdom using the following information:

Send to: David Kenneth, 12 Shah Rd, Kuala Lumpur, Malaysia
Send Amount: $1000.00
Western union charges: $68.00

Send to: Sarah Brindle, 66 Lincoln's Inn Fields, London WC2A 3LH United Kingdom
Send Amount: $480
Western union charges: $43.00

Deduct the western union sending charges for both transfers from the donation. $100 is your commission.
Email the western union MTCN numbers for both transfers after you send it today.

Have a blessed day.

Mary Copeland
In His Service
Benny Hinn Ministries


Email header details;
Delivered-To: *removed*@gmail.com
Received: by 10.220.150.67 with SMTP id x3csp88490vcv;
Fri, 10 Feb 2012 12:36:20 -0800 (PST)
Received: by 10.229.78.165 with SMTP id l37mr5080648qck.142.1328906180497;
Fri, 10 Feb 2012 12:36:20 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm25.bullet.mail.bf1.yahoo.com (nm25.bullet.mail.bf1.yahoo.com. [98.139.212.184])
by mx.google.com with SMTP id hl3si5927809qab.117.2012.02.10.12.36.20;
Fri, 10 Feb 2012 12:36:20 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.139.212.184 as permitted sender) client-ip=98.139.212.184;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.139.212.184 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from [98.139.215.140] by nm25.bullet.mail.bf1.yahoo.com with NNFMP; 10 Feb 2012 20:36:20 -0000
Received: from [98.139.212.217] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 10 Feb 2012 20:36:20 -0000
Received: from [127.0.0.1] by omp1026.mail.bf1.yahoo.com with NNFMP; 10 Feb 2012 20:36:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 33429 invoked by uid 60001); 10 Feb 2012 20:36:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1328906179; bh=HARIKtG1Z5CowzA4kTQ0LI+T5gpFbO504oI7eS56iNg=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=0tIliv2kmhqWraNoYRymKUkP19kmtPj9L/vY7uKsV+g9w0CW+qABYZ3puHhA7SPy16oBR/HEKGS+Ub+2FZ1+lSji6IH0TxkZ+/XnVyf12nKDJuG6vP78BJdEpH6TnzLr7ShT1BsMGPLdJ9d/qEUMd+JwihuFtVg1cZqXsdePRqs=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=nglQlQ9K8mwsibq5wvnk4qmKbD8+14wb6htTubiW8IxSEMLnGxa5PehlsGhpREZtNxjGtOkNNbhr56AsDd9YtMZgKU7/Eja2plqpJdrlSrqNnbjNvw0wGq0gsr0xZsJJpYbEjczEP5NdFsBhwtt3zdgDtKsVc/Pxk1V9cUJrmZ8=;
X-YMail-OSG: 2dFbReEVM1k8TteI6HGsw6Nvu2BTIXfsiBpuAwu2jeCu176
MckMqlpIk9uOk26dJ6KbjQno..wxqC_LYCuyq2XmhXP3SvcPkgsSb71fnMmv
wFBnmtfRemjKC5jd.tCPTxkFunuZ2McA4Ys8sG1d6vrbbtJDW4DTiPpAHC9h
OCbmcWmkflUZjf.i5Iu2b61f6mGg05hR6_zSdIXNjbtMlhdxL7Z_tfr8.dHA
jO683jQwDzc7XfVC4DEW_6XSf4LS9VgzIGIjQNxQphUkJ5CDr.nl5VLZOx04
8gxZBOY_Ouou0Ir2QeMrLdt.cXNF3Z4abrCGURIlW0iyvFiI07oXNg_LW77s
eZXIQYDBBI7fMqwpcboxklyhcAQSC368D6En0Sv2L_Crw2J_xDGcAjE6_hS6
tcnIWnC8R1xmDO.nWF0l1pMtefox1eHrtIcdv1aICmNcwEGv5XS9X8wxakL0
ovBWkBNdu34ERq_7_HzuTUSedrWapn9YeTnTo4LNCoeIUh07z5NFqVoK0Qrt
JGWRi7G8unMOhxoE-
Received: from [38.78.194.69] by web140212.mail.bf1.yahoo.com via HTTP; Fri, 10 Feb 2012 12:36:19 PST
X-Mailer: YahooMailWebService/0.8.116.338427
Message-ID: <[email protected]>
Date: Fri, 10 Feb 2012 12:36:19 -0800 (PST)
From: Julia Lurn <[email protected]>
Reply-To: Julia Lurn <[email protected]>
Subject: DONATION WAS MADE TO YOUR PAYPAL
To: "*removed*@gmail.com" <*removed*@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="245377680-542716544-1328906179=:32291"





Images are not displayed. Display images below - Always display images from *removed*@gmail.com
PayPal

*removed*sent you $1,700.00 USD


Hello *removed*@gmail.com,

Just thought you'd like to know *removed* sent you $1,700.00 USD.
Note from *removed*:

Dell Alienware M18X 2.50-3.50GHz i7-2920XM 16GB 512GB SSD RAID 580M SLI Blu-Ray mail service is 5-7 days

Claim Your Money Now
Once the money's there you can:
Spend the money online at thousands of stores that accept PayPal.
Transfer it to your bank account (takes 2-3 days).
Get a PayPal Debit MasterCard.
Button not working?

To claim your money, sign up for an account using this email address: *removed*@gmail.com. If you already have a PayPal account, just add this email address to it.

When that's done - and you've confirmed your email address - this payment will show up in your PayPal account.
Shipping address

*removed name and address of innocent scam target*

Help Center | Resolution Center | Security Center

Please don't reply to this email. It'll just confuse the computer that sent it and you won't get a response.

Copyright © 2012 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA

95131.

PayPal Email ID PP1547


Email header details;
Delivered-To: *removed*@gmail.com
Received: by 10.220.150.67 with SMTP id x3csp58895vcv;
Thu, 9 Feb 2012 16:42:07 -0800 (PST)
Received: by 10.68.229.33 with SMTP id sn1mr11016964pbc.60.1328834527015;
Thu, 09 Feb 2012 16:42:07 -0800 (PST)
Return-Path: <[email protected]>
Received: from mx0.phx.paypal.com (mx0.phx.paypal.com. [66.211.168.230])
by mx.google.com with ESMTP id l6si6424843pbg.109.2012.02.09.16.42.05;
Thu, 09 Feb 2012 16:42:07 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 66.211.168.230 as permitted sender) client-ip=66.211.168.230;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 66.211.168.230 as permitted sender) [email protected]; dkim=pass [email protected]
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=dkim; d=paypal.com;h=DKIM-Signature:Received:Date:Message-Id:Subject:X-MaxCode-Template:To:From:Sender:X-Email-Type-Id:X-XPT-XSL-Name:Content-Type:MIME-Version;
b=9K3LF2tFIKzExJ2vejBgr2x1PDihGIheEBVSQUnhIH3KgbBhVUg+tU1rzdQHyqsL
UGC++6imZoOfxMaoYGIAlZWqJc0J9F3rO0XDdYdgM5Pk1/oA7eZGfLryWcINefpQ
GfWE3FMJVzM7PUmmyaP9y7Te2juC6mA9Jsqa+1PISnc=
DKIM-Signature: v=1; a=rsa-sha1; d=paypal.com; s=dkim; c=relaxed/relaxed;
q=dns/txt; [email protected]; t=1328834525;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=UhoSvOu810JbGlNMGptxAoBWkXQ=;
b=yV8CZ3MTJl3y01z7kQqBgesauVU+mTzyM1T3Dv+J0ma17FSPuc41KHGyb1Zgy3jr
XtizGx5zG40Of3xYmbN4kZm8kDMxHCUlIS819Am4ImsNgajO+xdUjZ8ukPQ0O7dW
n77TvYPoPLnkrGc5mzWuqxu5tTZ1GRSidr1wMvYGT6A=;
Received: (qmail 7419 invoked by uid 993); 10 Feb 2012 00:42:05 -0000
Date: Thu, 09 Feb 2012 16:42:05 -0800
Message-Id: <[email protected]>
Subject: You've got money!Dell Alienware M18X 2.50-3.50GHz i7-2920XM 16GB
512GB SSD RAID 580M SLI Blu-Ray
X-MaxCode-Template: email-standard-transaction-unilateral
To: "*removed*@gmail.com" <*removed*@gmail.com>
From: "*removed*@gmail.com" <*removed*@gmail.com>
Sender: [email protected]
X-Email-Type-Id: PP1547
X-XPT-XSL-Name: email_pimp/US/en_US/transaction/UnilateralRecipient.xsl
Content-Type: multipart/alternative;
boundary=--NextPart_048F8BC8A2197DE2036A
MIME-Version: 1.0

Who is online

Users browsing this forum: ClaudeBot and 7 guests