Fake job scam. EPS luxury goods

This fake job scam is targeting Australians. The victim will be directed to process funds through their own bank account for a commission of five percent and then to transfer the remainder of the funds to the scammer via Western Union. The original transfer will, of course be fraudulent and when the victims' bank identifies the fraud the victim will be left to pay the entire amount back to the bank. There is also a possibility the victim may face police questioning.

I have been baiting this scammer using a safely anonymous and thoroughly fake identity. This scammer sent this initial scam email with a throw-away email address, in this case [email protected] and [email protected]. He quickly replied to my message with an email address from a fake domain [email protected] I have asked our talented site killers over at our sister site 419eater.com to euthanize this fraudulent domain. The scammers' follow up emails describes how this fraud is played out.

Original email;

Received: by 10.90.89.6 with SMTP id m6cs560605agb;
Sun, 20 Dec 2009 13:19:30 -0800 (PST)
Received: by 10.204.154.209 with SMTP id p17mr4255721bkw.104.1261343969915;
Sun, 20 Dec 2009 13:19:29 -0800 (PST)
Return-Path: <[email protected]>
Received: from blu0-omc2-s22.blu0.hotmail.com (blu0-omc2-s22.blu0.hotmail.com [65.55.111.97])
by mx.google.com with ESMTP id 22si9826919bwz.5.2009.12.20.13.19.28;
Sun, 20 Dec 2009 13:19:29 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.111.97 as permitted sender) client-ip=65.55.111.97;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.111.97 as permitted sender) [email protected]
Received: from BLU139-W36 ([65.55.111.73]) by blu0-omc2-s22.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 20 Dec 2009 13:19:28 -0800
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_de7199da-75f8-488c-8cd2-2af831cbb9fb_"
X-Originating-IP: [66.108.237.187]
From: Marisa HICKS <[email protected]>
To: <>
Subject: Job offer. (790).
Date: Sun, 20 Dec 2009 21:19:28 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 20 Dec 2009 21:19:28.0761 (UTC) FILETIME=[1D384E90:01CA81BA]


Hello.

The company EPS is looking for employees.

Location : Australia
Job type: Part-Time

If you are interested, please reply to : [email protected] with your resume.

Best regards,
EPS Team

Next email (scammer now uses his fraudulent domain email);

Return-Path: <[email protected]>
Received: from compute1.internal (compute1.internal [10.202.2.41])
by store82m.internal (Cyrus v2.3.15-fmsvn) with LMTPA;
Mon, 21 Dec 2009 20:27:08 -0500
X-Sieve: CMU Sieve 2.3
X-Spam-charsets: plain='windows-1251'
X-Attached: Agreement-.doc
X-Resolved-to: *****@yahoo.com
X-Delivered-to: *****@yahoo.com
X-Mail-from: [email protected]
Received: from mx5.messagingengine.com ([10.202.2.204])
by compute1.internal (LMTPProxy); Mon, 21 Dec 2009 20:27:08 -0500
Received: from vps01.nynocser.com (lvps7.sprocketnetworks.com [66.100.170.57])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx5.messagingengine.com (Postfix) with ESMTPS id B3F081AD
for <*****@yahoo.com>; Mon, 21 Dec 2009 20:27:05 -0500 (EST)
Received: from [192.168.3.134] (localhost.localdomain [127.0.0.1])
by vps01.nynocser.com (8.13.8/8.13. with ESMTP id nBM1Qr6L020378
for <*****@yahoo.com>; Tue, 22 Dec 2009 04:26:55 +0300
Date: Mon, 21 Dec 2009 20:26:49 -0500
From: Eve Parker <[email protected]>
X-Mailer: The Bat! (v3.71.03) Professional
Reply-To: Eve Parker <[email protected]>
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: *****@yahoo.com
Subject: Re[2]: Job offer. (790).
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------2DA7230AD596D"
X-Truedomain-SPF: None
X-Truedomain-DKIM: None
X-Truedomain: Neutral


Dear *****,

EPS, a luxury goods company, is currently seeking administrative assistant/sales support to work at the convenience of their home, part-time. We would like to consider you for this position.

EPS presents the best off-season luxury finds from the most prestigious international designers and collectibles from the rarest collections at irresistible prices.

Candidates for the job should possess excellent organizational skills as well as the ability to efficiently multi-task. Ideal candidates have a strong focus on day-to-day operational excellence, and a personal style that builds trust, and inspires loyalty. The candidate should be motivated, proactive, be able to learn and adapt quickly.

Other duties of the Administrative Assistant/Sales Support include, but are not limited to:

• Incorporating effective priorities for the virtual office function
• Administer day-to-day financial responsibilities for clients
• Reporting online daily
• Preparing brief summary reports, and weekly financial reports

Salary part-time: 1,600AUD/month, plus commission.

In the attachments you will find the agreement with a detailed job description. If you are interested in this trial period, which will last for one month, during which you will receive training, salary, and commission, please see the attached agreement. Upon successful completion of the trial period you will receive a contract to continue working with EPS, have an option to change from part-time to full-time or continue working part-time.

Please read carefully the trial period agreement, complete, sign, and forward back to us either via email or by fax +1-714-276-0697. For the commencement date, please choose any date that is convenient for you during the month of December. If you have any questions please email.

Thank You,
Eve Parker

Next email;

Return-Path: <[email protected]>
Received: from compute1.internal (compute1.internal [10.202.2.41])
by store82m.internal (Cyrus v2.3.15-fmsvn) with LMTPA;
Tue, 22 Dec 2009 20:41:35 -0500
X-Sieve: CMU Sieve 2.3
X-Spam-charsets: plain='utf-8'
X-Resolved-to: *****@yahoo.com
X-Delivered-to: *****@yahoo.com
X-Mail-from: [email protected]
Received: from mx1.messagingengine.com ([10.202.2.200])
by compute1.internal (LMTPProxy); Tue, 22 Dec 2009 20:41:35 -0500
Received: from vps01.nynocser.com (lvps7.sprocketnetworks.com [66.100.170.57])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx1.messagingengine.com (Postfix) with ESMTPS id AC564526
for <*****@yahoo.com>; Tue, 22 Dec 2009 20:41:34 -0500 (EST)
Received: from [192.168.3.222] (localhost.localdomain [127.0.0.1])
by vps01.nynocser.com (8.13.8/8.13. with ESMTP id nBN1fU39012172
for <*****@yahoo.com>; Wed, 23 Dec 2009 04:41:32 +0300
Date: Tue, 22 Dec 2009 20:41:24 -0500
From: Eve Parker <[email protected]>
X-Mailer: The Bat! (v3.71.03) Professional
Reply-To: Eve Parker <[email protected]>
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: *****@yahoo.com
Subject: Re[4]: Job offer. (790).
In-Reply-To: <[email protected]>
References: <[email protected]> <[email protected]> <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Truedomain-SPF: None
X-Truedomain-DKIM: None
X-Truedomain: Neutral


Dear *****,

We have received the documents from. All is correct.
Below you can see example of the task. Please read it carefully.

*BEGIN OF THE EXAMPLE*

First transfer was sent and here are the details:

amount: 2.870,00 aud
buyer: Mondic Inc
item: Montblanc

You should receive this transfer on Thursday. Once received keep 5% from this transfer, withdraw in cash and transfer the remaining amount through western union location near you Mukim(first name) Ohunov(last name) in Dushanbe(city)
Tajikistan(country). Deduct the fees for transferring from the received payment. When sending please state USD as currency available for pick up, use the money in minutes services. Once completed the western union transferring agent will provide you with reference numbers.

Once completed send us the brief report that should state:

Amount Received:
Commission 5%:
Fees:

Amount Transferred through western union to Mukim(in AUD/USD):
Reference Numbers for Mukim:

Send us the brief report as soon as completed.

*END OF THE EXAMPLE*

Do you understand all details of the example? Are you ready to process the first transfer tomorrow? Please confirm.

Thank you,
Eve Parker

Hi
I hate to say it but i got scammed into this one but luckily i saw this website and specifically this post before i accepted the counterfeit chqs that will soon be arriving. I did however provide my account details such as bsb, and account number. can they in any way harm me through my account details or withdraw any funds from me?
Awaiting your response
Thanx

Hi Billy and welcome.

I am glad you found this before things got much worse.

You should immediately get your account details changed by notifying your bank, there should be a 24hour service to deal with this on the phone, do that NOW.

When the cheques arrive (if they do) you have a few choices, take them unopened or complete with the envelope if you do happen to open them to your nearest police station and explain how you came by them, copies of the emails may also help.

You could destroy them, tear them up and throw them away.

You could keep the cheques as a reminder of your experience, if you take this option, write clearly in big letters "FAKE" having a fake cheque in your posession is an offence in most countries, writing fake on it will save any problems.

It is not for me to tell you which option you take, I may have leaned towards option 3 myself, then display it prominantly so others can see it, then explain to them how you got it, by doing this you may actually prevent others from being scammed.

Option 1 comes with a very small chance of something being done to find the (possibly) victim who is posting these cheques for a scammer.

Thank you for posting, if you have any other questions, please ask

Hi
Thankyou so much for your help you've been great.
I just finished speaking with my bank and everything has been changed. I will learn from what you've taught me and be so much better off. I have already informed those around me about these types of scams and alot of eyes have been opened.
once again
Thanx.

Hi Billy, thanks for getting back to us.

You have done all the right things which is great to see.

Glad to see your helping our cause by spreading the word, you would be surprised how little the average person actually knows about the various scams, if you mention Nigerian scam most will understand it to be somebody offering you an inheritance but beyond that most wouldn't know so thank you for spreading the word.

Feel free to drop in any time, you now know where to find us

Hi

I'd just tlike to thank whoever it was who posted this thread. I was invited to do the exact same thing and was on the verge of filling out forms with my bank details when i thought i'd check out what others were saying about this 'company' before doing anything which is how i found this site.

Thank you so much again, you saved me a lot of time and trouble.

Jennie,

I am glad to hear that you avoided being scammed.

As you wade through the variety of online options, remember--any employment offer that involves collecting money and forwarding it to someone, or requires you to provide banking information before you have performed any work, is almost certainly going to be a scam.

If you have any questions about future job offers, or you would like to inform others of scams you encounter, please feel free to stop by!

RE: Totaljobs - Application Admin Assistant?
From: submittal Lord ([email protected])
Sent: 11 March 2010 09:38:59
To: [email protected]
Hello,

We have reviewed your resume on Totaljobs and would like to consider you for the position of administrative assistant/sales support. You'll work at the convenience of your home, part-time.

EPS, a luxury goods company, presents the best off-season luxury finds from the most prestigious international designers and collectibles from the rarest collections at irresistible prices.

Candidates for the job should possess excellent organizational skills as well as the ability to efficiently multi-task. Ideal candidates have a strong focus on day-to-day operational excellence, and a personal style that builds trust, and inspires loyalty. The candidate should be motivated, proactive, be able to learn and adapt quickly.

Other duties of the Administrative Assistant/Sales Support include, but are not limited to:

• Incorporating effective priorities for the virtual office function
• Administer day-to-day financial responsibilities for clients
• Reporting online daily
• Preparing brief summary reports, and weekly financial reports

Salary part-time: 1,800GBP/month, plus commission.

In the attachments you will find the agreement with a detailed job description. If you are interested in this trial period, which will last for one month, during which you will receive training, salary, and commission, please see the attached agreement. Upon successful completion of the trial period you will receive a contract to continue working with EPS, have an option to change from part-time to full-time or continue working part-time.

Please read carefully the trial period agreement, complete, sign, and forward back to us either via email [email protected] or by fax 1-714-276-1463.

If you have any questions please email to: [email protected].

Thank You,
Paula Hill
EPS Team

received today, beware, luckily was not conned into this before I did research as it very weird to be offered month trial, also no details where job is??

Anyway can understand how some one may get conned so just thought i would take time to post this, as it is disgusting that people are doing this sort of thing all evidence we can get may help at some point nail the idiots......what is strange is that duxie email is not mine???

Hi, just read your forum. I've just been offered the "opportunity" to join this lot on a P/T basis in UK.
It follows exactly the format in the copy e-mail previously on this forum.
Any ideas on how use this offer in a way to "cock these scumbags up"?
I have been unemployed since July last year and have only had 3 "job" offers, all from scammers. I'm now on a mission!

Baz

Welcome, lelliot & barrybowers.

Thanks for your posts & glad you realised it was a scam.

If you want to know how to "cock these scumbags up" (called scambaiting) I suggest you visit our sister site 419eater.com where there is a load of advice & helpful people to advise how to go about this safely.

Looks like these scammers have some active fake domains to support their scam:

Domain Name: EPSCAREERS.COM
Registrar: ALANTRON BLTD.
Whois Server: whois.alantron.com
Referral URL: http://www.alantron.com.tr
Name Server: NS1.MONKYBABY.NET
Name Server: NS2.MONKYBABY.NET
Status: ok
Updated Date: 10-mar-2010
Creation Date: 02-dec-2009
Expiration Date: 02-dec-2010

and from the older posts:

Domain Name: HR-EPS.COM
Registrar: ALANTRON BLTD.
Whois Server: whois.alantron.com
Referral URL: http://www.alantron.com.tr
Name Server: NS1.MONKYBABY.NET
Name Server: NS2.MONKYBABY.NET
Status: ok
Updated Date: 17-jan-2010
Creation Date: 18-nov-2009
Expiration Date: 18-nov-2010

For those of you who want to learn how to make life more difficult for these scammers--fake scammers pay for these fake domains and use them to make these scams look more plausible. This means they are fair game for killing, and 419eater has a whole forum dedicated to killing fake websites and domains. If you think this might interest you, stop by the appropriate forum over at 419Eater. In the meantime, we will make sure that some site killers are aware of these domains so they can take action.

I am so glad this has been found out about. It is bad enough being unemployed , without being stolen from as well! Well done for uncovering it. I was approached through totaljobs.com which is a very big website - I have now alerted them and hope that they will reveal it.

Thanks to all who have uncovered this. I might well have fallen for it.

Sally

Hi Sally and welcome to Scamwarners.

I am glad to hear you have avoided being scammed, well done.

Please be mindful there are many scammers out there and some are much harder to spot than this one, if you have any questions or concerns now or in the future, please ask.

I too Sally recieved this e-mail this morning, it seems like theyre targetting totaljobs.com as that is where they got my info from too, I will also be alerting them to this to let them know its not an isolated incident! (Good job I got hired last week otherwise I may have replied to this! :S)

Hi Daniel and Welcome to Scamwarners.

Glad to hear that another person has avoided being scammed, well done.

It sounds like you are well sorted now but if you have any questions, please dont hesitate to ask