Company Representative scams, Payment Processing scams and other Employment scams.
by Sloppy Mon Nov 26, 2012 5:22 pm
Hello,

This is my first post, so forgive me if this company has already been spoken about.

This Vestrium company is a scam! I'm trying to make it google aware because when I tried to google this company I couldn't find anything on it(other than their really nice website, so it seemed legit) and I stupidly applied. It's similar to other scam companies but Vestrium seems a little more polished, from what I've seen.

Their website -- http://www.vestriumltd.com/ --Scam site.

I actually applied to them through I believe gumtree or reed.co.uk. Not sure which one. They posted a job and it seemed legit. I gave them my resume (CV) and then they called me for a phone interview (a few days after I applied). Which was pretty much them asking if i could work in the UK, if I have a bank, criminal record, when I could start. Basic stuff. Most numbers were private but one number that wasn't was 1 912 434 4086. Two different people called me as far as I could tell. An english female and I believe a male with a Pakistan Accent (Did the phone interview).

A few more days later i received an e-mail saying i got the job. They needed my bank information (I thought so they could pay me, but it was to wire fraudulent money into my account) , photo id and I would start working the next day. Also I signed a contract. This is the link to the contract page (can only get to it when they send you the link as far as I'm aware)

http://www.vestriumltd.com/admincontract.html

First day they gave me some assignments to do. This was the e-mail.

Today your probationary period starts and you will be receiving tasks daily with instructions how to complete it.
You must complete your task and provide me with a task report within 24hours. We value self-dependence in solving problems but you can always inquire me when have serious doubts or difficulties with task completing.

Your today's task:
Research the internet for the UK's most popular online job boards, check it's rating on http://www.alexa.com and provide me with a report in the following form:

Rank Site Alexa Traffic Rank Traffic Rank in UK
1) Reed.co.uk XXX XXX
2) Etc...........
...

There should be at least 20 websites in your report.
Should you have any questions do not hesitate to contact me.

EMAIL ME BACK CONFIRMING that you received and understood your task

Sincerely,
Pauline Costello,
Vestrium LTD


The e-mail address was [email protected]

Two more days of assignments similar to that. I thought it was very easy and kind of odd, but I thought it was just the company testing me before I got any real assignments.

Then they asked me to make a transfer to some people in Saint-Petersburg, Russia (clients of theirs). Vestrium wired the money into my account and I was suppose to send money grams to the clients. I then went to the bank to check this out. Sure enough the money was not cleared, but you can still take out the money (I didn't but I almost did). I e-mailed Vestrium and told them the money was not cleared. They still prompted me to send it anyways but I refused to. Sure enough, a few days later my account got locked because of fraudulent activity.

Thanks and I hope they saves someone from giving up their personal information! I feel really embarrassed about the whole deal.

To bad these people spend all this time trying to scam people, just think if they turned all that negative energy into positive energy! Wow, wouldn't that be something.

On a final note. Can they do anything with my address, ID, phone number? Little worried about that
Advertisement

by vonpaso xlura Mon Nov 26, 2012 10:19 pm
Could you post the emails, with headers included? That'll help us kill the website.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
by Sloppy Tue Nov 27, 2012 5:57 am
Return-Path: <[email protected]>
Received: from nm6-vm0.bullet.mail.sp2.yahoo.com (nm6-vm0.bullet.mail.sp2.yahoo.com. [98.139.91.206])
by mx.google.com with ESMTPS id h9si23028398pax.271.2012.11.15.07.53.30
(version=TLSv1/SSLv3 cipher=OTHER);
Thu, 15 Nov 2012 07:53:30 -0800 (PST)
Received-SPF: neutral (google.com: 98.139.91.206 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.139.91.206;
Authentication-Results: mx.google.com; spf=neutral (google.com: 98.139.91.206 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]; dkim=pass [email protected]
Received: from [98.139.91.63] by nm6.bullet.mail.sp2.yahoo.com with NNFMP; 15 Nov 2012 15:53:30 -0000
Received: from [98.139.44.85] by tm3.bullet.mail.sp2.yahoo.com with NNFMP; 15 Nov 2012 15:53:30 -0000
Received: from [127.0.0.1] by omp1022.access.mail.sp2.yahoo.com with NNFMP; 15 Nov 2012 15:53:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 55122 invoked by uid 60001); 15 Nov 2012 15:53:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352994809; bh=xIJ661X0v3HWtbFf0zVKU4k5k827s2oUTm0LHTg1rww=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=r0Fg8A4jW7RVMUH1dknqE5yV78XNY6GYwa4KdQTjCIzuFgkOm+PJMTy3Mdh4pSMgKNUynVcuGAcuOVQlikp9VAcxxzj4td5HdDcxoioaBA2D/n1UXggCk1NhDSOMfQFOHhDyy+l58sNVv0KYlf8IbAeviABLmpq6ftk2s8y3C2M=
X-YMail-OSG: g2BjCpYVM1mmZpYTdfzkFt9h5pjy8yoMyPmWrQsdqQLFZoj
1xN8JzBS9VBGBYqCT1mA7soQTpoRJFaeMWZt40nLMGzg0ZCP5qalXcpPPVMu
U800Q42F2Hdk_XCfWTb5JxXO_P8VZtOj.pEyMGWjNcyVz9G6NrM01pMkVivY
G70Gh7HH4Z3cWlLOO8xlfc9j8x.DuB3rdmDKBYlWXnhbricfA.ZG98TeZd24
j2tf46ZMUrBAsRDbFS9EMRU13g83f2WR9rbRx.dM4_v2v3kfG7IlOKMAOitr
9G1BZDTk.4wUvwfKpedkaqL6jh21hgfNkTnSDkqb3xLfioogfh1Hq2OhfEnU
gGflgPXfg8gc.embY0AuA39Novsy8eiairfAeLm9i16OiveNIix_gX6FJ5kY
EUz791nRcXBFeY_CDB0KoHu15tWcIt7BmAHQxgWfN2NQWQeA1GekWpLNGBdO
C3fqvC7NQYsV6vv4MdT0TFl2jZJc7MqahHJJWVNPHw89NFMI_TQ5aZ2gWoW8
eSr_J5yIMRgkBiABqjm4deX5L_bv65pgP9KfP6pZIP4f7fEafMYA5xhXNmA1
ToiL8KVjsPGutxo45VZ6X
Received: from [92.26.48.15] by web5716.biz.mail.ne1.yahoo.com via HTTP; Thu, 15 Nov 2012 07:53:29 PST
X-Rocket-MIMEInfo: 001.001,SGkgTHVjLAoKQmFzZWQgb24gdGhlIHJlY2VudCBwaG9uZSBpbnRlcnZpZXcgY29uZHVjdGVkIGFuZCB5b3VyIENWIHdlIGJlbGlldmUgdGhhdCB5b3UgYXJlIHRoZSByaWdodCBjYW5kaWRhdGUgdG8gam9pbiBvdXIgdGVhbSBhbmQgSSBhbSBnbGFkIHRvIGluZm9ybSB5b3UgdGhhdCBvbmUgcG9zdCBvZiBBZG1pbmlzdHJhdGl2ZSBBc3Npc3RhbnQgaXMgb2ZmZXJlZCB0byB5b3UuCgpUaGUgZmluYWwgc3RlcCBvZiB5b3VyIGFwcGxpY2F0aW9uLCB3b3JrIHByb2Nlc3MgZGVzY3JpcHRpb24gYW5kIGpvYiBjb24BMAEBAQE-
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <[email protected]>
Date: Thu, 15 Nov 2012 07:53:29 -0800 (PST)
From: Pauline Costello <[email protected]>
Subject: Administrative Assistant position offered in Vestrium Company
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii

Hi

Based on the recent phone interview conducted and your CV we believe that you are the right candidate to join our team and I am glad to inform you that one post of Administrative Assistant is offered to you.

The final step of your application, work process description and job contract can be found at:

http://www.vestriumltd.com/admincontract.html

Should you have any questions do not hesitate to contact me.

Sincerely,
Pauline Costello,
Vestrium LTD




I hope that helps! Let me know if you need more and how many. :beer:
by vonpaso xlura Tue Nov 27, 2012 10:36 am
Thanks! The site has gone blank, so if you saved the admincontract page, let me know and we'll figure out how you can send it. Also, if you can post a message you sent, and their reply, I'd appreciate it. Delete any of your personal info and any binary attachment. The headers will be short, but it'll show that email went to the domain.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
by Sloppy Tue Nov 27, 2012 11:10 am
Message I sent


MIME-Version: 1.0
Received: by 10.68.152.4 with HTTP; Fri, 23 Nov 2012 04:49:14 -0800 (PST)
In-Reply-To: <[email protected]>
References: <CAAc2noz-PgOZEQXM=BoxRDPPi3NBiO2WFO-yEnKDNAdLHqB3Lg@mail.gmail.com>
<[email protected]>
Date: Fri, 23 Nov 2012 12:49:14 +0000
Delivered-To:
Message-ID: <CAAc2nozMgoKWBt2LUcUqbDvudog3_AEHs3UmoYWT-TVEzo3oRg@mail.gmail.com>
Subject: Re: Fw: Re: Probationary start. Task4
From:
To: Pauline Costello <[email protected]>
Content-Type: multipart/alternative; boundary=f46d040fa18ed49a7704cf29027c

--f46d040fa18ed49a7704cf29027c
Content-Type: text/plain; charset=ISO-8859-1




Message recieved


Delivered-To:
Received: by 10.68.152.4 with SMTP id uu4csp385147pbb;
Fri, 23 Nov 2012 05:00:26 -0800 (PST)
Received: by 10.229.76.149 with SMTP id c21mr838631qck.141.1353675624717;
Fri, 23 Nov 2012 05:00:24 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm4-vm0.bullet.mail.bf1.yahoo.com (nm4-vm0.bullet.mail.bf1.yahoo.com. [98.139.213.129])
by mx.google.com with ESMTPS id w9si2276671qct.29.2012.11.23.05.00.24
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 23 Nov 2012 05:00:24 -0800 (PST)
Received-SPF: neutral (google.com: 98.139.213.129 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.139.213.129;
Authentication-Results: mx.google.com; spf=neutral (google.com: 98.139.213.129 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]; dkim=pass [email protected]
Received: from [98.139.212.147] by nm4.bullet.mail.bf1.yahoo.com with NNFMP; 23 Nov 2012 13:00:23 -0000
Received: from [66.94.237.114] by tm4.bullet.mail.bf1.yahoo.com with NNFMP; 23 Nov 2012 13:00:23 -0000
Received: from [127.0.0.1] by omp1019.access.mail.mud.yahoo.com with NNFMP; 23 Nov 2012 13:00:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 17084 invoked by uid 60001); 23 Nov 2012 13:00:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353675623; bh=I5FTQEsrVXxzXIzmXH18/DtKuS5l49LVjqoV76X9Rm8=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=K5bFkV0dnQIJpTPpVlGMxSBPYJ2oFL8X+yg5/fGajTmEfd8rE1RPaBRRBiuHxgsjedtSHkuRRFHpB94NthCk9b04jdXJgvHTZehXTqeAcFYk7InKU0jifsnPLSZa9X9v8q7vV/mDPAaVwSZ+u4OdhbAr1J4QO6SzM76QErpwfI0=
X-YMail-OSG: PvVI1xAVM1l.z7K4cB_YboyHx6bdvuU9A6fCWmhRwd_us.R
kQNfLu9C9HLHqZcDx5UX3aH1aPqOWP6l1tmfy1cpBF.tE9udBhG18M.7j_pN
mYI.BRbA1BJW.MWGWw8_.1GOG2dUtANq.1E42bp4.3nts9nJkS28s8z9Hpos
mKP8CElGUKG_P5ytCxzg6OEjNi4XwnNkgeEPc9bFcyHIL9ydTCCdjylGwFKi
RTjcnRIjOjHCN0vqmKSohcLNwKmbZn59VD7skSmG3yQ92QfahC2SGsYTeNZK
4tOu00P5t6dYr5Cj6wpxhpdHBFL0u3vEbsXMDxNz7Q8_hksCSoRioLZxa.XH
pwAQSAbTpo0lkbkRAQYC50bJ.ncIq3VJLKB1nQlddz3HufLYryYxEGHVaV7r
yEmphsSFGi.WscSdeO0UY3JDnv4a5YOLWO2UKH4wwVABd3nzqASDdMSnFpLe
0wyxu36YZIQ--
Received: from [99.228.226.42] by web5701.biz.mail.ne1.yahoo.com via HTTP; Fri, 23 Nov 2012 05:00:22 PST
X-Rocket-MIMEInfo: 001.001,VG9tb3Jyb3cgaXMgYSB3ZWVrZW5kIGFscmVhZHkuIElzIHlvdXIgYmFuayBicmFuY2ggd29ya2luZyB0b21vcnJvdz8NCkFueXdheSwgY2hlY2sgaXQgYWdhaW4gdG9kYXkgYXQgMTUuMzAgYW5kIGlmIG5vdCB0aGVuIGNoZWNrIGl0IHRvbW9ycm93Lg0KQW5kIGtlZXAgbWUgdXBkYXRlZC4NCg0KU2luY2VyZWx5LA0KUGF1bGluZSBDb3N0ZWxsbywNClZlc3RyaXVtIExURA0KDQotLS0gT24gRnJpLCAxMS8yMy8xMiwgTHVjIERlc2NoZW5lcyA8bGphZDg3QGdtYWlsLmNvbT4gd3JvdGU6DQoNCkZyb206IEx1YyABMAEBAQE-
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <[email protected]>
Date: Fri, 23 Nov 2012 05:00:22 -0800 (PST)
From: Pauline Costello <[email protected]>
Subject: Re: Fw: Re: Probationary start. Task4
To:
In-Reply-To: <CAAc2nozMgoKWBt2LUcUqbDvudog3_AEHs3UmoYWT-TVEzo3oRg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1055065309-1349490318-1353675622=:5023"

---1055065309-1349490318-1353675622=:5023
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Sincerely,
Pauline Costello,
Vestrium LTD




I hope that's what your looking for. And I hope I'm not releasing to much info on myself. Also, was this the link you were looking for? http://www.vestriumltd.com/admincontract.html
by Sloppy Tue Nov 27, 2012 11:23 am
I also was digging through my e-mail trash and I found this. I only had 1 phone interview and it was with the scam company. SO i believe this is related to the scam. I hope it helps

Delivered-To:
Received: by 10.68.152.4 with SMTP id uu4csp88119pbb;
Thu, 15 Nov 2012 08:10:25 -0800 (PST)
Received: by 10.216.212.225 with SMTP id y75mr778752weo.39.1352995825132;
Thu, 15 Nov 2012 08:10:25 -0800 (PST)
Return-Path: <[email protected]>
Received: from blade14.gs.broadbean.net (blade14.gs.broadbean.net. [46.254.116.46])
by mx.google.com with ESMTP id k5si4816936wiw.22.2012.11.15.08.10.24;
Thu, 15 Nov 2012 08:10:25 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 46.254.116.46 as permitted sender) client-ip=46.254.116.46;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 46.254.116.46 as permitted sender) [email protected]
Received: (qmail 25995 invoked by uid 80); 15 Nov 2012 16:10:24 +0000
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Disposition: inline
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=utf-8
X-Mailer: MIME::Lite 3.024 (F2.74; T1.28; A2.04; B3.08; Q3.08)
Date: Thu, 15 Nov 2012 16:10:24 +0000
Subject: Re: Ad response to: 41712/Application for 41712 - Telephone Interviewer -
From: Resourcing Team <[email protected]>
X-Adcourier-Type: Candidate Autoresponder v2
Reply-To: Resourcing Team <[email protected]>
X-Bean-Epoch: 1352995822
To:


Many thanks for your recent application for our advertised vacancy: Telephone Interviewer . At Carlisle Managed Solutions we act as an Employment Agency on behalf of our client.

We will shortly review all candidate applications and will get in touch with you if we feel that your skills and experience are a strong match for our requirements. Unfortunately due to the high volume of applications we receive, it is not always possible to contact each candidate with detailed feedback, so if you have not heard from us within 7-10 working days, please assume your application was unsuccessful at this stage.

Please note that your details will be stored on our database so we may contact you in the future regarding other suitable vacancies. We may also share your details within our group of companies that form the Impellam Group plc but we will not forward your details on to third parties without your consent.

Kind regards and best wishes,

Resourcing Team
Carlisle Managed Solutions
by vonpaso xlura Tue Nov 27, 2012 12:58 pm
The link is down (404). If your web browser has it cached, that would help.

Could you post the text of your message to Vestrium? As far as I can see from whois, Carlisle is legitimate and unrelated to Vestrium.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
by began steele Fri Dec 07, 2012 12:56 pm
Vestrium is on several antiscam sites including AA419 since November 26 and perhaps it has been taken out? I couldn't get it either, not even via a cache copy. A similar job is on this site but can't find it just now. It involved the same type of job-at first.
99.228.226 42 is Canada.
NetRange: 99.228.226.0 - 99.228.227.255
CIDR: 99.228.226.0/23
OriginAS:
NetName: HSI
NetHandle: NET-99-228-226-0-1
Parent: NET-99-224-0-0-1
NetType: Reassigned
RegDate: 2009-03-03
Updated: 2009-03-03
Ref: http://whois.arin.net/rest/net/NET-99-228-226-0-1

CustName: Rogers Cable Inc. HNSN
Address: 1 Mount Pleasant Road
City: Toronto
StateProv: ON
PostalCode: M4Y-2Y5
Country: CA
RegDate: 2009-03-03
Updated: 2011-03-19
Ref: http://whois.arin.net/rest/customer/C02172236

A lot of scams from Canada, but possibly it is a victims "job ".

We sleep safe in our beds because rough men stand ready in the night to visit violence on those who would do us harm. ~~ George Orwell.

Who is online

Users browsing this forum: ClaudeBot and 18 guests