Mystery Shopper Scam. [email protected]

Hello *removed*,



Sorry for the delay in getting your first assignment to you.You would be receiving the funds for your 1st survey assignment today via FedEx Courier Service,Friday 2/17/2012 between 9am-11am. Please make sure you wait at home to receive the package.FedEx may ring your bell or just leave the package at your front door,so please look out for it.You are required to follow the instructions carefully and get back to me asap with the survey results.


The FedEx package contains a total payment of $1,980 (2 pieces of $990 M/O).
You are to cash the Money Orders at your bank, deduct $200 as your bonus for
working with us, you will have $1,780 left. Make use of $160 for your
transportation & Western Union Charges. You are required to send a total o
$1,620 to another Undercover Surveyor in another location (where a customer
reported her funds missing) via Western Union Money Transfer so he can carry
out another survey. You are to send the money as money in minutes and the
receiver should be paid in US Dollars.
Here is the name of the Secret Shopper in another location which you would
be sending the funds to:

Name== Lauren Beaver

Address===301 South Gulfview Blvd

City===Clearwater

State==== Florida

Zipcode=====33767


===HOW TO FILL THE MONEY ORDERS===
The Money Orders have 2 sections:

The 1st section {writes pay to}.....in this space you are to fill in your

full names and address.

The 2nd section {writes from}.....in this space you are to fill in this name and address:

ROBERTA BRUDNER
18210 PRAIRIE ST
DETROIT
MI 48221




===YOUR FIRST ASSIGNMENT===
During this assignment which requires you to have the money orders cashed at
your bank before proceeding to wire the remaining funds at any local Western
Union Money Transfer location in your area, You are expected to secretly
perform the following survey operation:


1. How fast and Efficient is the Western Union Money Transfer Service?

2. How long does it take you to have the funds wired?

3. How Close is the Western Union Money Transfer Location to your area?

4. Is the Senders Request Form too short or Long?

You are expected to have this done today and email me back your results with
the following information after you have wired the funds.



1. Name and Address of Sender

2. Money Transfer Control Number(10 digits)

3. Amount Wired



I will be waiting to read from you ASAP with the requested transfer details.
Your pay would increase after every completed assignment.


Yours Sincerely
Thomas Williams


Email header details;

Return-Path: <[email protected]>
Received: from mail-yw0-f48.google.com (mail-yw0-f48.google.com [209.85.213.48])
by mtain-dh07.r1000.mx.aol.com (Internet Inbound) with ESMTP id 9E54B38000083
for <*removed*@aol.com>; Fri, 17 Feb 2012 08:40:56 -0500 (EST)
Received: by mail-yw0-f48.google.com with SMTP id j52so2190611yhj.21
for <*removed*@aol.com>; Fri, 17 Feb 2012 05:40:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=cEzdMTzkYsssBRoT1894E1ik2Ipac8hFMv4lGOw4oj4=;
b=PO8Buf1UaqxoaB1iVomvK/25qhHgyWn1jBFvCvsnAtsxAkbc3GBN+5I3uMYhJvAA+/
/bb5ekD1zIyu4tP8APmnCYMAjJQjyxO51CMR0F/17WgV1fh1OVJPRs/JSGlXLVzqw5Ul
uBTiccc/qSP176WFP3wehDmpJegC5rM28eiDA=
MIME-Version: 1.0
Received: by 10.236.154.232 with SMTP id h68mr9758109yhk.51.1329486056559;
Fri, 17 Feb 2012 05:40:56 -0800 (PST)
Received: by 10.146.123.21 with HTTP; Fri, 17 Feb 2012 05:40:56 -0800 (PST)
Date: Fri, 17 Feb 2012 14:40:56 +0100
Message-ID: <CAJ50_vZ7RqdOoxbSqgdsCa1vPb-_nsG3JJPNsZNnvogBhPZGSg@mail.gmail.com>
Subject: =?UTF-8?B?QVRUTjpSb2JlcnQgT2FrcyxGSeKAi1JT4oCL4oCLVCBTVVJWRVkgQVNTSUdOTUVOVOKAiw==?=
=?UTF-8?B?4oCL4oCLLChJTlNUUlXigItD4oCLVElPTlMgV0lUSElOKS4=?=
From: Thomas Williams <[email protected]>
To: *removed*@aol.com
Content-Type: multipart/alternative; boundary=20cf303dd29e22960304b929188f
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:227388352:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-SCOLL-AUTHENTICATION: mail_rly_antispam_dkim-m005.2 ; domain : gmail.com DKIM : pass
x-aol-sid: 3039ac1d411b4f3e58e87eb7
X-AOL-IP: 209.85.213.48
X-AOL-SPF: domain : gmail.com SPF : pass

Hello!
I mistakenly wrote to this "[email protected] who is obviously (one of) the Mystery Shopper "scammer".
I received a VERY SIMILAR email but they used UPS instead of FEDEX. I am trying to figure out where they can scam me? Probably at my bank? Where I supposed to take their "money order"? Which is obviously FAKE. I tracked the "package" which they were writing about and it was sent from KY,and indeed,it is on its way to my address. What should I do at this point?
Sincerely,
Robert (Registered user.)

Hello *removed*,



Sorry for the delay in getting your first assignment to you.You would be receiving the funds for your 1st survey assignment today via FedEx Courier Service,Friday 2/17/2012 between 9am-11am. Please make sure you wait at home to receive the package.FedEx may ring your bell or just leave the package at your front door,so please look out for it.You are required to follow the instructions carefully and get back to me asap with the survey results.


The FedEx package contains a total payment of $1,980 (2 pieces of $990 M/O).
You are to cash the Money Orders at your bank, deduct $200 as your bonus for
working with us, you will have $1,780 left. Make use of $160 for your
transportation & Western Union Charges. You are required to send a total o
$1,620 to another Undercover Surveyor in another location (where a customer
reported her funds missing) via Western Union Money Transfer so he can carry
out another survey. You are to send the money as money in minutes and the
receiver should be paid in US Dollars.
Here is the name of the Secret Shopper in another location which you would
be sending the funds to:

Name== Lauren Beaver

Address===301 South Gulfview Blvd

City===Clearwater

State==== Florida

Zipcode=====33767


===HOW TO FILL THE MONEY ORDERS===
The Money Orders have 2 sections:

The 1st section {writes pay to}.....in this space you are to fill in your

full names and address.

The 2nd section {writes from}.....in this space you are to fill in this name and address:

ROBERTA BRUDNER
18210 PRAIRIE ST
DETROIT
MI 48221




===YOUR FIRST ASSIGNMENT===
During this assignment which requires you to have the money orders cashed at
your bank before proceeding to wire the remaining funds at any local Western
Union Money Transfer location in your area, You are expected to secretly
perform the following survey operation:


1. How fast and Efficient is the Western Union Money Transfer Service?

2. How long does it take you to have the funds wired?

3. How Close is the Western Union Money Transfer Location to your area?

4. Is the Senders Request Form too short or Long?

You are expected to have this done today and email me back your results with
the following information after you have wired the funds.



1. Name and Address of Sender

2. Money Transfer Control Number(10 digits)

3. Amount Wired



I will be waiting to read from you ASAP with the requested transfer details.
Your pay would increase after every completed assignment.


Yours Sincerely
Thomas Williams


Email header details;

Return-Path: <[email protected]>
Received: from mail-yw0-f48.google.com (mail-yw0-f48.google.com [209.85.213.48])
by mtain-dh07.r1000.mx.aol.com (Internet Inbound) with ESMTP id 9E54B38000083
for <*removed*@aol.com>; Fri, 17 Feb 2012 08:40:56 -0500 (EST)
Received: by mail-yw0-f48.google.com with SMTP id j52so2190611yhj.21
for <*removed*@aol.com>; Fri, 17 Feb 2012 05:40:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=cEzdMTzkYsssBRoT1894E1ik2Ipac8hFMv4lGOw4oj4=;
b=PO8Buf1UaqxoaB1iVomvK/25qhHgyWn1jBFvCvsnAtsxAkbc3GBN+5I3uMYhJvAA+/
/bb5ekD1zIyu4tP8APmnCYMAjJQjyxO51CMR0F/17WgV1fh1OVJPRs/JSGlXLVzqw5Ul
uBTiccc/qSP176WFP3wehDmpJegC5rM28eiDA=
MIME-Version: 1.0
Received: by 10.236.154.232 with SMTP id h68mr9758109yhk.51.1329486056559;
Fri, 17 Feb 2012 05:40:56 -0800 (PST)
Received: by 10.146.123.21 with HTTP; Fri, 17 Feb 2012 05:40:56 -0800 (PST)
Date: Fri, 17 Feb 2012 14:40:56 +0100
Message-ID: <CAJ50_vZ7RqdOoxbSqgdsCa1vPb-_nsG3JJPNsZNnvogBhPZGSg@mail.gmail.com>
Subject: =?UTF-8?B?QVRUTjpSb2JlcnQgT2FrcyxGSeKAi1JT4oCL4oCLVCBTVVJWRVkgQVNTSUdOTUVOVOKAiw==?=
=?UTF-8?B?4oCL4oCLLChJTlNUUlXigItD4oCLVElPTlMgV0lUSElOKS4=?=
From: Thomas Williams <[email protected]>
To: *removed*@aol.com
Content-Type: multipart/alternative; boundary=20cf303dd29e22960304b929188f
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:227388352:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-SCOLL-AUTHENTICATION: mail_rly_antispam_dkim-m005.2 ; domain : gmail.com DKIM : pass
x-aol-sid: 3039ac1d411b4f3e58e87eb7
X-AOL-IP: 209.85.213.48
X-AOL-SPF: domain : gmail.com SPF : pass

Hi skyrocking,

The best thing is to drop contacts with scammers asap, as they have your real life details.
You can inform the anti fraud department of your bank, and tell them you suspect your account may be used for fraudulent purposes. Bring them email exchanged with scammers.
If you ever receive money orders (or cheques with dubious origin), be sure to inform the anti fraud department of your bank, and eventually the police.

A general anatomy for this kind of scam is more or less the following:

In the email:
1. Scammers send you an Money Order, here $1980, and they ask you deduct something
2. They ask you to wire $1760 to someone else via Western Union. They ask you details of transaction (MCTN, Name and Address of Sender, Amount Wired)

The trick is:
1. The money scammers sent you (here $1980) is STOLEN from another victim
2. The bank will first accept the money order (if they do not discover immediately that this is fake, which is not guaranteed by any mean), so your account displays you have $1980 more. This is called "flashing" your account
3. If you wire money (here $1760) via Western Union or MoneyGram, these money will be gone forever (Western Union and MoneyGram transfers are NOT reversible, almost completely anonymous, and can be picked by ANYONE who knows MCTN and few other data ANYWHERE - most times there is no need to be identified beyond any reasonable doubt, so do not think that only the receiver can pick it)
4. After some time (weeks or even months) the money order WILL be discovered fraudulent, and the bank WILL deduct the money (here $1980) from your account

Net result:
you have lost $1760 of your real money (because WU transfers are irreversible)

Moreover, to make things worse, you may be asked to pay extra fees from the bank, your credit may plummet (as you have cashied fraudulent money orders), and if the bank informs the police (which is a real possibility), you may face money laundering charge.