Answered an ad in the Chicago Sun-Times

GREAT Opportunity: A COMPENTENT DRIVER IS NEEDED. We are looking for a dedicated and skilled Driver must have a valid drivers license and be able to pass a drug test at any time. Must be responsible,co- operative and hardworking. Email your resumeto:[email protected]

From: Steven Jeff <[email protected]>
To:
Date: 08/02/2013 03:15 AM
Subject: (Possible Spam) Driver

--------------------------------------------------------------------------------



Dear ,

Thanks for your interest. My name is Steven Jeff .I need a driver for my Mom,Mrs Jesse (69 years),who will be relocating to your city.She would really needs a driver that would be driving her around the city to get to various places such as to go see a real house estate agent and checkout some homes cause she is interested in buying a new home in your city,so that she can settle down there permanently.I'd be more than happy if you will take interest in driving her,because I have been very busy with work and presently in Harlingen, TX for a business project.I will like to let you know that this is a permanent job and also shifts are available depending on your daily plans and schedules.You will be driving her around and within the city in her new 2012 Range Rover Sport jeep which I bought for her as a birthday gift.You are required to be dependable,honest,dedicated,loyal and trustworthy.

You will be offered $25.00/hr and please fill in your availability hours below
Mon : (9am - 12 pm) (12pm-3pm) (3pm-6pm)
Tue : (9am - 12 pm) (12pm-3pm) (3pm-6pm)
Wed : (9am - 12 pm) (12pm-3pm) (3pm-6pm)
Thu : (9am - 12 pm) (12pm-3pm) (3pm-6pm)
Fri : (9am - 12 pm) (12pm-3pm) (3pm-6pm)
Sat : (9am - 12 pm) (12pm-3pm) (3pm-6pm)
Sun : (9am - 12 pm) (12pm-3pm) (3pm-6pm)

Kindly answer the following interview questions since we are not opportune to meet in person for an interview presently cause I have limited time to catch up with my business appointments.Without wasting any time

further,we would like you to start work as soon as possible if you ever get selected.So kindly get back to me with answers to the questions below.

1. Do you smoke ?
2. Do you do drugs or have you ever done drugs in the past ?
3. Ever been convicted ?
4. Where are you located presently (I mean your residential zip code) ?
5. Number of years as a Driver (Driving Experience) :
6. Present or previous occupation :
7. Total Charge Per Week for the number of hours you have selected.
8. Briefly tell me about yourself and your driving experience.

Regards

I have been corresponding with I believe two people, him and his mother. I don't know how to read the headers but I do know how to extract them. You guys came to mind today when the red flags starting going up. Trusting my gut feeling here this is probably too good to be true.

Please advise,
Juniper

The writing looks African, so I would consider it a scam. Also no one does interviews by just emailing a bunch of questions, and the names do not sound plausible, nor does the pay. Please post the headers, just in case.

Thank you for such a quick response. Does anyone care to follow-up on this I have more information,mutliple e-mails, I can attach the full header?
I guessing they just want to get my bank account numbers from the check they are sending (or was going to send). They have my information and all I have is an e-mail address which is a "dime a dozen". DANG IT!!

Warmest regards,
Juniper

From Steven Jeff Wed Aug 7 05:03:33 2013
X-Apparently-To: via 98.139.221.26; Wed, 07 Aug 2013 12:03:34 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of aol.com designates 205.188.109.202 as permitted sender)
ZCBJIHdvdWxkIGxpa2UgeW91IHRvIGtub3cgaXQgYSBDYXNoaWVyIGNoZWNr
IGFuZCBpdCBHdWFyYW50ZWVkIGZ1bmRzIFlvdSBoYXZlIG5vdGhpbmcgdG8g
d29ycnkgYWJvdXQgYWxzbyBteSBtb20gd2lsbCBwYXkgZm9yIGFsbCB0aGUg
ZXhwZW5zZXMgb2YgdGhlIFZlaGljbGUgdGhlIFZlaGljbGUgaXMgY29taW5n
IGZyb20gYSBNb3ZlciBBZ2VudCB3aG8gaGF2ZSBiZWVuIHdvcgEwAQEBAQN0
ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzU-
X-YMailISG: 3wBvwpYWLDvXpXp5YYM6I10AdSc3DmPQBqaJLVa3X93lk.JK
8R1Scamhb2NKZ.NnEqLq3JBz7ju9KTFuAgQ6cvwRmHgs.ogFGtzBavedrBfg
NrzQeScpZhFv3wLzAKjPbYYOrxl.VzE_nHZ4N1GlR6l8fr4uCO6X9HguiMhk
BC_qdqYV06J9msW7NAR8_0twHWdUB6IC3k8Hg3hCm7CIGGtADobOr8.6Mw9H
HwimbdvtdHweZBE9R2jdgVR0KbxvwRhpdkO991SV7RfUcQsUhVK1V360J4p.
P57a3ApHk2gsu_TYdwKJQd5gKPwlwzIPo7XcRwuThAuVzMRLwOIQMBYRtBnb
Ctr32DD9LkG5wfzBJPec0EXAI92G2UShcevj9AL29YWe_VlVqyRhgjTuP57n
yPvKd23HXaxpgFT9U5S_Hhm7nlgaJ5_gl.cfG_mCgemBVgrFmAChsDBRTkD0
7L8ZR5kZDP0jD8ftrNEnwlwRlch2A2QxHfRq_mGmVqMBy9MTFf3s8Pe.2c1u
MusD4reaYPlLJeHRmeulFmG.vUSU8l1mTTRZvFVhyGmhwS9rsGH6wczLhoEz
Cz34vUkoZByTPQDYYzW_DFT68B5VHpq5ks4WKqL7L.mpzBy.C_vkdGmxOS4_
7Yi.VT9i9Z0wmQOEu18LuwvXJqEBwc1OXIW0CwPYM6Ff0trRJYyxpfR87J1v
iZl2qR9fYQzuSFxPeI3r60aUNV6w9eZrebthnYwvoQbA5zVeakJvYfAvJ3rE
8t6bKVTPmaIFK644HIyWySuc3hqnaimqY1x8BiiNNLYQuhyl_1gqeZY1Q31_
2XOCEng2oDJe_nv1Op4p13iwYfYsaFXvITiObm7.mEYEvgMbn7O2UoeVa1yW
9zBtfU90hjRCTIskT_yn2C_IRRkkljY77l8CdDtR..0VCXQVS1jZ3anVbhvz
spEq3LwrBy8WxmE3mQcPDX1e4qVRn6RannQI8Uz2zEXpYzVy2v3jEtqmi3JE
tHHWhB33KIz9sKxOXKer0e_3qM7zO7wSi87HahdGsj1dj6Rpmc_xdDKRcIwQ
gwTt7OMKdtkYB91vyJkjthOReXZKAWrkjvWCb8KdkTnrDo9WI3WAoXsd2hZL
aBcG1H3wnY50HVtKxKZlqN48WuqyRY9xibb_pnzNlWElHTQl1QmG3ukXRPbO
94E188hFsBecwNXW2DDh3WIZEViIzOPuvUawzi_6aCEikOe6EOUUeVN7Jfuq
5_IG9G00PRYsa7r6f1yui57ClNj003cUo5BO1EvFnzOFt4wrE841dlp5s2jz
0BK68dQr
X-Originating-IP: [205.188.109.202]
Authentication-Results: mta1022.sbc.mail.ne1.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=mx.aol.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO omr-d05.mx.aol.com) (205.188.109.202)
by mta1022.sbc.mail.ne1.yahoo.com with SMTP; Wed, 07 Aug 2013 12:03:34 +0000
Received: from mtaomg-mb04.r1000.mx.aol.com (mtaomg-mb04.r1000.mx.aol.com [172.29.41.75])
by omr-d05.mx.aol.com (Outbound Mail Relay) with ESMTP id D697C70002C6E
for <[email protected]>; Wed, 7 Aug 2013 08:03:33 -0400 (EDT)
Received: from core-mie001c.r1000.mail.aol.com (core-mie001.r1000.mail.aol.com [172.29.104.129])
by mtaomg-mb04.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 70848E000088
for <[email protected]>; Wed, 7 Aug 2013 08:03:33 -0400 (EDT)
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>
To: Subject: Re: Driver ~ In-Reply-To: <[email protected]>
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: Steven Jeff <[email protected]>
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8D0617D45F4EFEC_54C_19E0D_webmail-d243.sysops.aol.com"
X-Mailer: AOL Webmail 37953-STANDARD
Received: from 197.242.109.114 by webmail-d243.sysops.aol.com (205.188.17.37) with HTTP (WebMailUI); Wed, 07 Aug 2013 08:03:33 -0400
Message-Id: <[email protected]>
X-Originating-IP: [197.242.109.114]
Date: Wed, 7 Aug 2013 08:03:33 -0400 (EDT)
x-aol-global-disposition: G
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20121107; t=1375877013;
bh=V6UlFFVUDM8+m1pAE9wH2dHlNmLoCODtLyVAO96pEZ4=;
h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type;
b=sNz8f0mm5q8cfNoiAuxKFRqB5OKo0twV+xZLrMfJL9Y4c1QVUgbvD3xpZ5dD6TbAJ
aB66la1CGA3QCASe2cnCtQ+pLSUPZ6YxnJe6/eMdfV3NEmpVMUWnK6JTB+Cull/axK
CC6wC3FbCDNCTvYj2XXGUAjzJVGKVqGAEKAGOQiI=
x-aol-sid: 3039ac1d294b5202379577a9
Content-Length: 7517



Here is a copy of the header from the last e-mail. I don't know how to read these and I have removed my information.

Please get back to me,
Juniper

I get

Source:
The source IP address is 197.242.109.114.
Geo-Location Information

Country Nigeria
State/Region 05
City Lagos
Latitude 6.4531
Longitude 3.3958
Area Code

You'll need a plane ticket.

Undoubtedly a scam, and calling a Range Rover a Jeep was a giveaway. It's an easy mistake to make if you don't own one and aren't familiar with the fact that they're two different makes.

From Jesse Duncan Sun Aug 4 20:39:28 2013
X-Apparently-To: via 98.139.221.29; Mon, 05 Aug 2013 03:39:29 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of hotmail.com designates 65.54.190.15 as permitted sender)
dSBhbmQgdGhpcyBzaG93ZWQgdGhhdCB5b3UgYXJlIGludGVyZXN0ZWQgaW4g
d29ya2luZyB3aXRoIG1lLCB3aGljaCBpIGhvcGUgeW91IGtub3cgbW9yZSBh
Ym91dCB5b3VyIGNpdHksIGFuZCBpIHdpbGwgbGV0IG15IHNvbiBrbm93IHRo
YXQgaSByZWFkIGZyb20geW91LCBBbGwgaSB3aWxsIGxpa2UgeW91IHRvIGRv
IGlzIGdldCBiYWNrIHRvIG1lIHdpdGggdGhlICg1IFNUQVIgSAEwAQEBAQN0
ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzI-
X-YMailISG: 5q6byLYWLDvEiKNjyGBPQUCUsSLemWbPtEf11Ekncc.lIIlb
UoxI6HBI97txYMNf6zsH9OnA3wmmk0T6obE3SONjJxTiT7llXUlziD48_.7O
i4o43sgFht8eNLvzq0uNMfekNRokpJfq5OUyAi.EtLwdresjV4sp6m8GYeC0
B_t0dp3V.VubciIjrZIPEVM54b_cRqUL2gGYL_3.AQ2Sg09TyueFvP3vK.gx
wIs67qeKCqEbvCJvDBeqRVD8ePVYA6cKx0J5sw9_zks3EVvKZNsQ.LdJ_OV3
FjgZbkGkmbdF.UEcWJUqIuFLdp_vKsGIIUXAMteE3L3_HtUy_AD3EcNY6lKu
mfe.Sga26FMFfFxpt8GuAmrvB2zKPGtSywwFz.AhkHqChM.jwiJdpWt_EtUw
ysBqoILPBw6BJA0UwGBYZ1KFDecEq5UV6DdaATBLJZXLFBxvAVj3jaqLRPzy
ykwsqL5xdU3Y4zfVh90tqX.exyJrMXqRJY9qezyPpBbYnZo7i.F3LQQBbpWb
DoC.d0eVjVp09vD4n30h_Y9u49DLgiHaWhp1aZ3ZiUacjM9shHiSn_aCmX0C
OvI764YFmsb1TRMesqKmZRqSOuLMqskGnuYTQmarP0eFP586.K5UVSq9Zo6K
2YiciYpTVBtoK5VbTItthdZivy_uvz_ukslxTNT.qNZjUr8hCLc4nMXuhlzh
ydv40eNK4Ynj2ZUPThKbkpleevu6NE1wHwk2dgQn4WBmYLZAJULt2zFtmQQ4
TH1subSrl8oMUZTzJ6X9DFDU1wBgBW6Y0BKUPXb0BvbrcdGTbRHOQoJBcqFX
yXCnGyx.Mb8fFKElEsfo6QeS96eHQk4jwf2CmVvkYbPTJdtdAqjpzsmYqnto
Ezuqi6phJC1qFntX7yPcGsYcP34MVDLVo2AOXTL2uatsCZP.k1xQ7kDDn7rg
aiZ6TikcgUJJsLuhBS3L8cFKIsoKedU13LoQtTY.JMYCNCgb5xCUVJjSybaf
C_Eia7J3BoIMV3GdRs63l8XE6u2VQUbYEGkkhvdh4yzwx3WltH6xUsFWVCkY
PEMUK8twIofRpk4pfSgIVablkse0RIydLKmr5s7b8ykCUnVZScBDjGQdc71S
NlagoTpgzqJ3pQi3cqI5.diqTtT8uXPqLdj9evJZdjFs8E0Oxv0OKikCrq5P
xxr5AkfV4OLUcQUy4Y4-
X-Originating-IP: [65.54.190.15]
Authentication-Results: mta1016.sbc.mail.ne1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc1-s4.bay0.hotmail.com) (65.54.190.15)
by mta1016.sbc.mail.ne1.yahoo.com with SMTP; Mon, 05 Aug 2013 03:39:29 +0000
Received: from BAY172-W22 ([65.54.190.59]) by bay0-omc1-s4.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 4 Aug 2013 20:39:29 -0700
X-TMN: [M+rc/yEUCRYEe/OFo1DImsN9fbLr9xSVlEuFNgLvPkQ=]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_00538720-a788-41e1-b89a-923950e71730_"
From: Jesse Duncan <[email protected]>
To:
Subject: Driving
Date: Mon, 5 Aug 2013 03:39:28 +0000
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 05 Aug 2013 03:39:29.0048 (UTC) FILETIME=[63C34180:01CE918D]
Content-Length: 1761


Here is the second person involved, his mom, a header from her e-mail minus my information.

Thank you for all you do, I'm sure I won't be hearing from these folks(persons) anytime soon. It sure sounded cool and like a dream job to me.

Very grateful,
Juniper

The IP address of his mom is encrypted; we don't know how to read it. They're really two characters played by one scammer. The last IP address in the headers is Hotmail.

I don't know how this scam works if they pretend to be in America and you're there, but there's been a series of scams pretending to be in the UK where they ask for fifty pounds sent by Ukash for some fee.

My guess is that if they send a check to you to pay for delivery charges of this vehicle plus advance wages that they are trying to get your bank account numbers. Just the very idea that they are from Nigeria (land of scams) pretending to be something they are not, stops me in my tracks. If its too good to be true, it probably is. What upsets me is that they have my information and all I have is an e-mail address. DANG IT!

Thank you once again for being there for the honest ones.

Blessings,
Juniper

I was so mad this morning, at 3 AM I didn't even spell "Chicago" right.

The scam is a basic over payment scam. The scammer will send you a fake check and have you deposit it. He then will have a reason why you should send the over payment to a third person. He does not want your account number nor can he get it from you by depositing the check.

Your bank will cash the fake check. Day or weeks later your bank will inform you of the fraud. You will have to repay any money withdrawn on it. Your bank may close your account and report you to Law Enforcement for Fraud.

Thank you all for responding so quicky, I see how this works. NO! I would never tell anyone about reporting them, time will catch-up with them. I will probably try to contact the newspaper and get the ad pulled so no else will respond to them, it won't stop them but it'll slow them down a bit.

I got two questions; where do I change my password and can someone correct my spelling in the subject line "Chicago".

Thank you so much, once again,

We gotta stop meeting like this but I am grateful you are there,
Juniper

where do I change my password

User Control Panel (upper left) > Profile Tab then Edit Account Setting.