Mystery Shopper Scam. [email protected]

GOOD NEWS WITH MYSTERY SHOPPER !!

Welcome to Your step recruitment, You have been selected for assignment as a
Detective Shopper in your area, and You
will get $200 being a Detective Shopper. Your employment packet will include
funds for the shopping. We want you to participate because it's fun & rewarding.
After you reply this email to: [email protected]
you will have access to training materials Provide the following details if you
interested:
F u l l N a m e:
Address (NOT P.O Box):
City, State, Zip:
Occupation:
A g e:
E m a i l:
Phone Number :
As a Detective Shopper You work and shop together for pleasure,
and You only work 2-3 hours twice in a week. We wait your good response
Thank You! Regards,
Dr.Joe Wooves


Email header details;

Return-Path: <[email protected]>
Received: from smtpnewsletter2.aruba.it (smtpweb147.aruba.it [62.149.158.147])
by mtain-mh04.r1000.mx.aol.com (Internet Inbound) with SMTP id 53136380000A5
for <*removed*@aol.com>; Thu, 9 Feb 2012 14:25:55 -0500 (EST)
Received: (qmail 23183 invoked by uid 89); 9 Feb 2012 19:25:50 -0000
Received: from unknown (HELO smtplqs02.aruba.it) (62.149.158.79)
by smtpnewsletter2.aruba.it with SMTP; 9 Feb 2012 19:25:50 -0000
Received: (qmail 29159 invoked by uid 89); 9 Feb 2012 19:25:51 -0000
Received: from unknown (HELO smtpsmart3.aruba.it) (62.149.158.114)
by smtplqs02.aruba.it with SMTP; 9 Feb 2012 19:25:51 -0000
Received: (qmail 18037 invoked by uid 89); 9 Feb 2012 19:25:50 -0000
Received: by simscan 1.2.0 ppid: 17460, pid: 17562, t: 1.4663s
scanners: clamav: 0.88.4/m:40/d:1945 spam: 3.1.4
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
smtpsmart3.fe.aruba.it
X-Spam-Level: *******
X-Spam-Status: No, score=7.4 required=7.5 tests=BAYES_50,FORGED_MUA_OUTLOOK,
MISSING_HEADERS,MISSING_MID,RDNS_NONE,SUBJ_ALL_CAPS autolearn=disabled
version=3.2.5
Received: from unknown (HELO smtp5.aruba.it) (10.10.10.193)
by smtpsmart3.fe.aruba.it with SMTP; 9 Feb 2012 19:25:49 -0000
Received: (qmail 16903 invoked by uid 89); 9 Feb 2012 19:25:50 -0000
Received: from unknown (HELO User) ([email protected]@219.223.252.137)
by smtp5.ad.aruba.it with SMTP; 9 Feb 2012 19:25:48 -0000
Reply-To: <[email protected]>
From: "joe wooves"<[email protected]>
Subject: GOOD NEWS WITH MYSTERY SHOPPER !!
Date: Thu, 9 Feb 2012 19:25:51 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Rating: smtplqs02.aruba.it 1.6.2 0/1000/N
X-Spam-Rating: smtpnewsletter2.aruba.it 1.6.2 0/1000/N
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:249054928:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60d84f341dc3218a
X-AOL-IP: 62.149.158.147
X-AOL-SPF: domain : perfectchoice.com SPF : none

Further scam script plus details on the western union pick up contact.

FOLLOW THE BELOW INSTRUCTION CAREFULLY:
- Have the money order processed at your bank.
- Keep $200 as your salary for this particular assignment
- Evaluation at Wall-Mart:
YOUR FIRST ASSIGNMENT: You will be evaluating Any Wall-mart store and Money Gram outlet in your City. Cash the Money Orders at your Bank then go ahead with Wall-mart Evaluation, proceed to Wal-Mart to purchase an item not more than $50 for your personal use (any item) and carry out a survey while you are there...
Then proceed to the customer service department at the same Wall-Mart store where a money gram outlet is available, send the BALANCE of the money via MONEY GRAM MONEY TRANSFER to the below information. Endeavor to request for the “money transfer in minutes service.”
NAME: MARK PHILIPS
ADDRESS: 100 E HAMPTON ST, CHICAGO 60614
Basically, I need you to carry out this evaluation without arousing any kind of suspicion that you are a secret shopper.
Provide us with your assessment about what you think about the services at the Wall-Mart outlet and the money gram outlet also;
Let us know the ambiance/outlook of the shop/outlet;
Smartness of the attendant;
Customer service professionalism;
Reaction of personnel under pressure;
Information that you think would be helpful;
Your comments and impressions
- Please note that whatever you purchased at Wall-Mart belongs to you.
- Send a detailed email to me once the whole evaluation at Wall-Mart and money gram is completed,
Please provide the following information also:
1. MONEY GRAM REFERENCE NUMBER 2. AMOUNT SENT 3. SENDER'S NAME IN YOUR EMAIL.
I AWAIT A DETAILED REPORT SENT TO MY EMAIL: [email protected] OR [email protected]
Yours Faithfully
John Kehoe


Email header details;

Return-Path: <[email protected]>
Received: from s02.orangecay.com (unknown [62.129.145.129])
by mtain-db06.r1000.mx.aol.com (Internet Inbound) with ESMTP id BA3F8380000CE
for <*removed*@aol.com>; Fri, 24 Feb 2012 16:44:20 -0500 (EST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=bahamamail.com; s=mail; h=Message-Id:From:To:in-reply-to:
Subject:Date:Content-Type:MIME-Version; bh=SJBf8aEYGMJpeS2FKAloz
BK5q6pfzlWlc6UqbOuG5wc=; b=jcSUQCB7yBA7VkBfU6wrd9X7RqGYm3xijwYxP
1uJv/9uhxI6HFvO9rNIZWIaw9sdo1JAA63KrySArFn52QOXyXJLdsKwjApxAB2rN
JfNwff9VsMnl+lVtrtllG/xfX8Y5c+Fms5KvWddV+LY/l46bdGUPwjUFhcU9SRSj
01ksY4=
Received: from localhost ([127.0.0.1])
by s02.orangecay.com with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1S12w7-0006WG-04
for *removed*@aol.com; Fri, 24 Feb 2012 22:44:19 +0100
Message-Id: <[email protected]>
From: "joe wooves" <[email protected]>
To: "*removed*" <*removed*@aol.com>
in-reply-to: CAG9SkhKjf8s1KYWB6kjYsufK2xwhAZp2SjXbcb ... .gmail.com
Subject: Re: GOOD NEWS WITH MYSTERY SHOPPER !!
Date: Fri, 24 Feb 2012 16:44:18 -0500
Content-Type: multipart/alternative; charset="UTF-8";
boundary="=_1847de878ccfd412d245739411c746f2"
MIME-Version: 1.0
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 1:2:431187200:93952408
X-AOL-SCOLL-URL_COUNT: 2
X-AOL-SCOLL-AUTHENTICATION: mail_rly_antispam_dkim-m226.1 ; domain : bahamamail.com DKIM : none
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d405a4f4804b36703
X-AOL-IP: 62.129.145.129
X-AOL-SPF: domain : bahamamail.com SPF : none