Suspicious job offer

This morning I had a yahoo IM chat with someone claiming to be a hiring manager with Cadila Healthcare.
I had responded to a posting for an Office Assistant but interviewed for a data entry job. The whole thing started to smell fishy when they said they want to open a Brooklyn, NY office, where I live, even though she claimed they have a New York, NY office about 10 miles away. I decided to go along and she never asked for my social security number or my bank account info. After about 20 min of chatting I was offered the job. It seemed kinda odd and raised some flags. Now the more research I do I think it is a scam.
The person claimed to be Katelynn Rollinger with email address of [email protected]
I am suppose to contact her tomorrow morning for details on a check for software I am suppose to buy.

See here from the real company website PandaBear625

http://www.zyduscadila.com

WARNING REGARDING FRAUDULENT JOB POSTINGS IN US

http://www.zyduscadila.com

The fraudulent job postings are typically advertised without disclosure of the company’s identity and the applicant is directed to reply to the job posting only by email to a non-company email address. Please do not provide your driver’s license, social security number, financial information or any other personal information to anyone claiming to be a recruiter for Zydus or Zydus Cadila through an online job posting.

Welcome to Scamwarners PandaBear625.

It is a scam. The scammer will send you a fake check or money order. Once you receive the fake check he will have you cash it. Once cashed he will direct you to buy your supplies from his distributor. The distributor is also the scammer or an accomplice. He will have you send the money via Western Union or Money Gram. You will never get any supplies or job.

Days or weeks later your bank will inform you of the bad check. You will have to repay the money back to the bank. The bank may even close your account and report you to Law Enforcement for Fraud. You will never get the money you sent to the scammer back. He will never get arrested. He is using a fake name and free email address.

Employers do not use free email addresses nor interview with yahoo or skype. Real companies do not allow strangers to handle their money or accounts. You need to meet all employers face to face.

The other angles the scammer could be doing is recruiting you to be a Money Mule, basically launder money for him. Also he could be having you write fake check to other victims. Either way this would be a crime. As stated you will be the only one the Police will be able to locate.

I get many bogus emails for job offers, usually when applying for an office assistant or something of the like.
I know this one is a scam, as I do not use the email account I received the job offer on anymore.

this is the email I received:

MIME-Version: 1.0

Content-Type: text/html
Message-Id: <[email protected]>
Date: Mon, 13 May 2013 15:03:35 +0200 (CEST)

Hello,



If you have access to a computer, and have up to three hours spare time per-week. you can get paid, would you like to work part or full time online from home and get paid? If yes,then get back to us for more information.



Best Regards,

Andhra Paper.

this is the header for the email

Return-path: <[email protected]>
Received: from s16519254.onlinehome-server.info ([unknown] [87.106.226.151])
by vms172057.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with ESMTP id <[email protected]> for
xxxxxxxxxxxxx Mon, 13 May 2013 08:02:31 -0500 (CDT)
Received: by s16519254.onlinehome-server.info (Postfix, from userid 502)
id 511B11B961; Mon, 13 May 2013 15:03:35 +0200 (CEST)
Date: Mon, 13 May 2013 08:02:31 -0500 (CDT)
Date-warning: Date header was inserted by vms172057.mailsrvcs.net
From: Andhra Paper LMD. <[email protected]>
Subject: Clerical Assistant Needed.
X-Originating-IP: [87.106.226.151]
To:xxxxxxxxxxxxxx
Message-id: <[email protected]>
Content-transfer-encoding: 7BIT
X-PHP-Originating-Script: 502:a7a.php
Original-recipient: rfc822;xxxxxxxxxxxxxxxxxxxxxx

MIME-Version: 1.0

Content-Type: text/html
Message-Id: <[email protected]>
Date: Mon, 13 May 2013 15:03:35 +0200 (CEST)

this is another scam email for employment, as I do not use the email account this was sent to when looking for work.

Work as my personal assistant earn $350 weekly kindly reply if you are interested. Requirement: 18 years above, have access to internet and phone THIS IS NOT A JUNK OR SPAM EMAIL REPLY IF YOU ARE INTERESTED

this is the email address that comes up when tracking [email protected]

this is the header

From Mr Smith Sat May 18 00:14:29 2013
X-Apparently-To: xxxxxxxxxxxxxxxxxxxxxxxxxxxx; Sat, 18 May 2013 08:31:53 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 88.191.244.167
Received-SPF: pass (domain of bilginhost.com designates 88.191.244.167 as permitted sender)
X-YMailISG: jc29UfAWLDuJotkqySOS_MbFHVR4V75rq2Bb63lyhRYp3CbO
OhrbdhMl06qrDqZkHApL8cIu81ROAxPzujHESin8o9TMhK4eod_zlsKUyjiJ
V2EEo._TW7bsEqDOiDk.7Chz1u_2aKixWocB4umWfI_RzfF53n8JCGJL9jI9
HDmmhFjiBWTtOEXpD_4nSY2IqvX_STkFMdmA84FzbsePzbHCLCw0K_mtcnvu
07pIA3nPQGEjde1MRUYvwD2TIX2w_yz0gnM7tHUuviKQ59JyS4lyk0o7Q1gt
8oBdMsX6KtLN0NlYZsoW9P3FwCi1njypRyss7L5rYHLfKXY_8i0A84gpAzKM
xViSVAYyfGXh7J6NUSt7HLRDqutsC1H7HjBlmydHwghVtnfeJT5wVfuOrwMG
rpYSubEG1jbF.JH_i2OylNu.h4BxZy9ja34QJZ58aTxROY7YhWDRnRv28PxE
Pj26_.QsesOzeBYo2pC3c3niQU0.U6wGps2Dei2GLR5mLSEEC2D_KwcTqDN4
.peFELUQp3EwtRbyi.TKD3FJdqUyvjREBU6_I3bpQLWp42yVi2.T7Kxop0_y
5tSj03I3kJ9xBMkbUPhKOHMrLRfeFq9RAWVNoAgzOpjEO2Aq2NpvxyxwUtiW
FFI1jpdh6bnIznsu7X8TpNkbizlnFMguU7v_h7JOHesnrKGPlSTRSdotG0B4
LIFhXuMfX3sjuBWqSLM3PYCsWAG1K6iaC_8IG6_xE9rkG3ek4AwZiL5cZwxV
5zqxvEhuPb3NyYNTrfqlc2QCSN88ApWrNMIJxUsxycbWFd.NbLEsDdfAdYAA
pAwuohE0t26PlsVfKrtJHWgxIaxyA5dKx05Ke41HVnth053lkiqttNJmkUcj
kjtp2dTIhnzwCXcw1LvS6_5Of3bTU2_ChLDwpKgNVNoCpUctuec1xsOFpKvF
830VYU8L.Y0FcmmLoTqTyTZsUP4_DY4PZnkII7g7ffKodm04pofmMxK.Zwjr
1JdWgE3TFG0yX.EAl42jXdTU6HBxAFP.wRug8n_6Uka.J22DYgfk0tw2hu4g
3AzKXGRrxBjjN.ciBDJ.ANZBiptxZoKzix8xtxkC.IPvB3yjKmFfIHl9VmjC
b.xD7i1Dpox_KlPpxAEaFkFMQS0iOcVS4oa6RfJln0OjfELtaFpDH_Tf4d61
1XOHhLeruZSD3.vQ9JLPrgNZ7b9YbVHUliOANfBWz1uT8.B6ExqSBnU-
X-Originating-IP: [88.191.244.167]
Authentication-Results: mta1129.mail.ne1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bilginhost.com) (88.191.244.167)
by mta1129.mail.ne1.yahoo.com with SMTP; Sat, 18 May 2013 08:31:53 +0000
Received: by bilginhost.com (Postfix, from userid 10030)
id 863BF415968; Sat, 18 May 2013 10:14:29 +0300 (EEST)
To: xxxxxxxxxxxxxxxxxxxxxxxxxxxx
Subject: Good Morning: Personal Assistant Needed!
X-PHP-Originating-Script: 10030:relay.php
To: xxxxxxxxxxxxxxxxxxxxxxxxxxxx
From: Mr Smith <[email protected]>
Reply-to: [email protected]
Subject: Good Morning: Personal Assistant Needed!
X-Priority: 3
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=utf-8
Message-Id: <[email protected]>
Date: Sat, 18 May 2013 10:14:29 +0300 (EEST)
Content-Length: 207

I received a text message supposedly from a Mr. Stone Peters, HR Mgr at Novartis.
I was requested to have online interview through Yahoo IM.
I responded to him, asking why would such a big company interview like that, so naturally no response.
I have contacted the company to advise that their is a scammer out their using their company name.
The number the text was received from is 716-280-7673
Again name given Mr Peter Stone, from Novartis.

I received a text message supposedly from a Mr. Stone Peters, HR Mgr at Novartis.
I was requested to have online interview through Yahoo IM.
I responded to him, asking why would such a big company interview like that, so naturally no response.
I have contacted the company to advise that their is a scammer out their using their company name.
The number the text was received from is 716-280-7673
Again name given Mr Peter Stone, from Novartis.

"Again"? I thought it was Stone Peters the 1st time.

Did Novartis respond confirming that there is no such person there, that they don't use Yahoo IM at all during their hiring process, and that that phone number is not theirs? Trouble is, it's a weekend.

I'd like a job with Novartis, and I'd like to know how you so quickly concluded this was a scam. Did the IM exchange end abruptly, and at a time that wouldn't've corresponded to quitting time, in response to your inquiry as to why they were using IM? People are using all sorts of preliminary screening techniques these days in hiring. Was the phone number at which you received the text one that could not be (or would be unlikely to be) looked up by someone doing hiring?