I FELL FOR JOB SCAM NEED HELP!

Guys! I think this is a scam now after reading many posts on this site....but I already went ahead and applied for the position...It all looked so legit! They have my sort code, account number, and picture of my passport!! I Can't believe i was so dumb to believe....What do i do now!? Please somebody give me advice! Anyways here is the email...If you need any more information please tell me:




Hello,

Here is additional information about the vacancy with Straight Line Productions.

Our priority is to help our clients seek out the best freelances in various fields such as IT, legal department and accounting.

Job title is Payment-Processing-Agent.

Job requirements:
- 18 years of age or older;
- Internet access;
- working telephone number;
- bank account (current/savings) or a Verified Premier or Business PayPal account. New accounts are also welcomed!
- availability of 2-3 hours per day.

Refer to the links below for additional information: http://www.straight-lineproduct.org/job ... e2?lang=uk

Frequently Asked Questions: http://www.straight-lineproduct.org/job/finance/faq

Base salary of 1500 pounds is paid at the end of each month, various bonuses, including the Sign-On bonus in the amount of 300 pounds are also added to your monthly base salary.
You will also receive 8 commission for every transaction, 3 are designated for transfer expenses and 5 is for you.

After the probationary period you will be given the option of either maintaining the self-employed status or becoming a regular employee of the company where we would take out the taxes and NI contributions.

SIGN ON BONUS! Please follow the link: http://www.straight-lineproduct.org/job ... us?lang=uk

To apply for the position, fill out our on-line application form: http://www.straight-lineproduct.org/registration/1

We welcome you to review all of the information provided above and contact us with your questions. Keep in mind that this is not a sales position of any kind, nor do you need to invest any of your own money!

For further information or to request an application, please reply to this e-mail. Also you may call us anytime between 9 a.m. and 5 p.m.

HR Manager
Jessica Phillips
Phone: 0121 318 6229

Welcome to Scamwarners dirtybit,

It a Money Mule scam. The scammer wants to use your bank account to receive and launder stolen money.

You need to contact your bank and inform them of the situation. Do not withdraw any money deposited into it from any unknown source. Your banks fraud department should be able to advise you as what to do next.

Please stop all contact with the scammer. Do not even warn him. Just cease all communication.

Please post the email and email headers of an email requesting your bank account. You can find information in my signature about finding headers.

109.200.2.155
Domain Name:STRAIGHT-LINEPRODUCT.ORG
Created On:14-Oct-2013 15:03:42 UTC
Expiration Date:14-Oct-2014 15:03:42 UTC
Sponsoring Registrar:Paknic (Private) Limited (R1605-LROR)

As Bryon mentioned the site is registered for the bare 12 month minimum time frame being a ploy of many scammers. They have a registration for the minimum time because they know the scam site will be detected and possibly closed down. It's unlikely your details will be mis-used by the scam artist. They ask for peoples details to make the scam more believable, so try not to panic. When you go see your bank, take the emails and show them the headers too. That will greatly assist the bank in giving you the best advice to your situation.

Welcome to Scamwarners dirtybit,

It a Money Mule scam. The scammer wants to use your bank account to receive and launder stolen money.

You need to contact your bank and inform them of the situation. Do not withdraw any money deposited into it from any unknown source. Your banks fraud department should be able to advise you as what to do next.

Please stop all contact with the scammer. Do not even warn him. Just cease all communication.

Please post the email and email headers of an email requesting your bank account. You can find information in my signature about finding headers.

109.200.2.155
Domain Name:STRAIGHT-LINEPRODUCT.ORG
Created On:14-Oct-2013 15:03:42 UTC
Expiration Date:14-Oct-2014 15:03:42 UTC
Sponsoring Registrar:Paknic (Private) Limited (R1605-LROR)

Wow, thanks for all your advice so quickly! I will make sure i will inform my bank, I just hope they can't take money from my bank with those details, and What happens if they deposit money in my bank but since you tell me to cease all communication with them it just stays there? They will come after me right?...Since they have my passport details now...

Anyways here's the email header:

x-store-info:eER+dkW9LbRZeSaTfrbsKbNwYWGSG1yylBVqBKWR43I=
Authentication-Results: hotmail.com; spf=none (sender IP is 79.170.91.93; identity alignment result is fail and alignment mode is relaxed) [email protected]; dkim=none (identity alignment result is pass and alignment mode is relaxed) header.d=gmail.com; x-hmca=none [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MTtHRD0xO1NDTD00
X-Message-Info: v7ExWpd4jwCYCI9AIupXEzDQnNdQGIyt6epNcZ4UNZKahz0e1T3T03ZZjqUL80pP1GVdNo2N5UvbO5D/oyvG470mtagUjPaXKOs18IHwZDaazenURiOBZ2RTGp86zYEdK7JIpNGS/5AFp3NwraE/yUBetIpLAQ1RmEb/EeLyQwiyHgK0dUStbXqc6vJWg3gPd6tpeUB2dvJgNW3GMQUx6JfufJ5xgONX
Received: from srv1.nrgi.nl ([79.170.91.93]) by BAY0-MC3-F53.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Fri, 25 Oct 2013 04:19:42 -0700
Received: from nobody by srv1.nrgi.nl with local (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VZfQb-0006rF-KI
for Removed (BW); Fri, 25 Oct 2013 13:19:41 +0200
To: Removed (BW)
Subject: Oct 25, 2013 2:37:15 PM Exciting favorable circumstances bring new means, Mr Tobi Lawal
MIME-Version: 1.0
Message-ID: <[email protected]>
From: Jessica Phillips <[email protected]>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Date: Fri, 25 Oct 2013 13:19:41 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - srv1.nrgi.nl
X-AntiAbuse: Original Domain - hotmail.co.uk
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - srv1.nrgi.nl
X-Get-Message-Sender-Via: srv1.nrgi.nl: uid via acl_c_vhost_owner from authenticated_id: nobody from /only user confirmed/virtual account not confirmed
Return-Path: [email protected]
X-OriginalArrivalTime: 25 Oct 2013 11:19:43.0087 (UTC) FILETIME=[1A78F7F0:01CED174]

How are you Removed (BW),

Are you jobless? Would you like to raise your wages?

Do you want to get a proper training and start a new career? If your answer is yes, then we are the company you need.

We acquired your resume at totaljobs.com. Requirements for the job:

Reliable Internet connection at home
You must be over 18 y.o;
Phone and E-mail availability.

If you are interested please E-mail me your resume and references and let me know your availability for a phone call.

Best regards,
Jessica Phillips
HR department

This gang of scammers has been in business since 2009 and keeps inventing new company names and website domains. This one has already been reported.

No, no and no the scammer will NOT 'come after' you. They are too busy hiding behind fake names, throw away e-mail addresses, lies and deception. If the scammer did come out of the shadows, it's true identity would quickly become known and they will do anything to avoid that happening. A scammers lot in life is to try and defraud others, not spend money going after someone. As stated previously if funds have ben placed in your a/c by a dubious individual, it's important not to touch it. Your banks fraud department will deal with it for you.

If they have your mobile phone number, which I presume they do, they may make threatening calls to you simply because they know they can do it without much risk of getting caught and your bank account is worth a lot of money to them. Even if you know they're lies it can still be annoying, so you can either get a new sim card and change your number or set up a temporary caller list for a short time on your current number.

I have only a simple mobile phone and I'm only a simple person but it's easy to do even if it's inconvenient for a short time. It blocks all calls except those you set up in a caller access list that you can arrange from your normal contact list. Any other calls will be blocked, but you can add people as you go. The scammer will still be able to text you but they are much less annoying and threatening, and they remain as evidence on your phone which gives you something to take to the police.

As 'jr' says. these people are cowards and won't risk anything that might bring them in to contact with the police. Lying and stealing is how they get their money, not by harming people which they know will get police attention.

Thanks for all your help guys! They called me and it was a lady speaking but foreign, I was quite suspicious because of how unprofessional it was, but she said she would deposit money in tomorrow, So should i just ignore her and report it to my bank?

re: she said she would deposit money in tomorrow, So should i just ignore her and report it to my bank?
That sounds like the best course of action is to ignore and report that to the bank also.
You are probably being targeted by a scam syndicate. The comms sounding un-professional would be normal for scammers as they don't know any different.

What sort of accent was it? I'm pretty sure these scammers are Slavs, but was it Russian, Polish, Serbo-Croatian, or something else?

Agreed: ignore her (don't even answer if she calls again) and tell the bank. Print out all the emails with complete headers and show them to the fraud department of the bank. If money appears in your account, do not withdraw anything until the fraud department has dealt with it.

What sort of accent was it? I'm pretty sure these scammers are Slavs, but was it Russian, Polish, Serbo-Croatian, or something else?

Agreed: ignore her (don't even answer if she calls again) and tell the bank. Print out all the emails with complete headers and show them to the fraud department of the bank. If money appears in your account, do not withdraw anything until the fraud department has dealt with it.

YES! She sounded like she was from Slovakia!
I will block her number then, and i'll do that then!

Hi, I also received the same communication after they said they took my details off Jobsite.co.uk

The scammers website is http://www.straight-lineproduct.org

I became suspicious when I looked at their contact details and it was an office suite/mailing address,
so I searched their phone number and it brought me to here, I already suspected a scam when they mention paypal/western union in their FAQ section.

I have since reported them and forwarded the emails to the UK Police (City of London Police who investigate such matters) at https://reportlite.actionfraud.police.uk/ who I am sure will move fast to investigate and take action against these scammers.

I will also report their site to google to have it shut down.

If you have given personal bank details you can have a new account issued and the old one closed down fast!

REMEMBER: If it sounds too good to be true it IS!!!

In future do in depth research into companies offering dream jobs/opportunities etc etc!!!

LET'S BE CAREFULL OUT THERE

Welcome to scamwarners!

I'm glad that you were able to avoid being scammed.

A couple of quick points, though:

-Google does not shut down websites unless google hosts them. I haven't checked this one, but the gang involved in this series of websites typically does not use google. We do have a group of volunteers who specialize in collecting the required evidence and filing the necessary reports to get fake sites and/or domains killed, and they have been working on this one--unfortunately some hosts are more scammer-friendly than others. If you are interested in site killing, you can check out our sister site at 419eater.com

I have since reported them and forwarded the emails to the UK Police (City of London Police who investigate such matters) at https://reportlite.actionfraud.police.uk/ who I am sure will move fast to investigate and take action against these scammers.

In an ideal world, this would be true. Unfortunately it is not an ideal world. These scams cross international borders and the criminals are far out of the jurisdiction of the London police. International investigations are complicated and costly, and it takes a LOT of evidence to even get one initiated. Chances are these scammers will not be shut down any time soon, even if this particular website goes down quickly. As VX said, this gang has been operating since 2009 under a variety of names and scams, and I can guarantee that they have been reported several times before. With that said, we do encourage reporting, as the accumulated information from many different reports can ultimately lead to the necessary investigation and action. We just want to make sure that people understand that the outcome may not be what they are hoping for, at least not in the immediate future.

As a general rule for any of these scams:
anyone who has given their account information should contact the fraud department of their bank to ensure the appropriate protective measures are taken.
Anyone who has given confidential information that could lead to identity theft should follow their country's process for addressing possible identity theft. (For example, in the US, it is possible to have a flag put on your credit report so that nobody can apply for credit in your name without being alerted that there is a possible stolen identity.)
And, anyone who has given out passwords and/or the info needed to reset passwords should change those passwords and the reset questions as well.

further to my last you can check websites and i/p addresses here:

http://www.malwareurl.com/listing-urls.php

this showed:

109.200.2.155 155-2-200-109.rackcentre.redstation.net.uk


Name servers:

ns3.merxs.su => 201.182.29.172 | 15 domains listed using this name server
ns1.wermo.su => 188.165.42.226 | 16 domains listed using this name server
ns2.marso.cc => 201.182.29.134 | 4 domains listed using this name server

Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the
Public Interest Registry registry database. The data in this record is provided by
Public Interest Registry for informational purposes only, and Public Interest Registry does not
guarantee its accuracy. This service is intended only for query-based
access. You agree that you will use this data only for lawful purposes
and that, under no circumstances will you use this data to: (a) allow,
enable, or otherwise support the transmission by e-mail, telephone, or
facsimile of mass unsolicited, commercial advertising or solicitations
to entities other than the data recipient's own existing customers; or
(b) enable high volume, automated, electronic processes that send
queries or data to the systems of Registry Operator, a Registrar, or
Afilias except as reasonably necessary to register domain names or
modify existing registrations. All rights reserved. Public Interest Registry reserves
the right to modify these terms at any time. By submitting this query,
you agree to abide by this policy.

Domain ID:D169939082-LROR
Domain Name:STRAIGHT-LINEPRODUCT.ORG
Created On:14-Oct-2013 15:03:42 UTC
Expiration Date:14-Oct-2014 15:03:42 UTC
Sponsoring Registrar:Paknic (Private) Limited (R1605-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:PAK13101474909-1
Registrant Name:Sean Mitchell
Registrant Organization:Sean Mitchell
Registrant Street1:20 Denbigh Road
Registrant Street2:
Registrant Street3:
Registrant City:London
Registrant State/Province:London
Registrant Postal Code:W13 8QB
Registrant Country:GB
Registrant Phone:+44.20881014
Registrant Phone Ext.:
Registrant FAX:+44.20881014
Registrant FAX Ext.:
Registrant Email:[email protected]
Admin ID:PAK13101474909-2
Admin Name:Sean Mitchell
Admin Organization:Sean Mitchell
Admin Street1:20 Denbigh Road
Admin Street2:
Admin Street3:
Admin City:London
Admin State/Province:London
Admin Postal Code:W13 8QB
Admin Country:GB
Admin Phone:+44.20881014
Admin Phone Ext.:
Admin FAX:+44.20881014
Admin FAX Ext.:
Admin Email:[email protected]
Tech ID:PAK13101474909-3
Tech Name:Sean Mitchell
Tech Organization:Sean Mitchell
Tech Street1:20 Denbigh Road
Tech Street2:
Tech Street3:
Tech City:London
Tech State/Province:London
Tech Postal Code:W13 8QB
Tech Country:GB
Tech Phone:+44.20881014
Tech Phone Ext.:
Tech FAX:+44.20881014
Tech FAX Ext.:
Tech Email:[email protected]
Name Server:NS3.MERXS.SU
Name Server:NS1.WERMO.SU
Name Server:NS2.MARSO.CC
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned


the owners name is probably made up and the address is a bed and breakfast

then the location of the web site can be found here:

http://www.geobytes.com/iplocator.htm

putting in 109.200.2.155

gave the server location in australia

I also read whats written on sites and with this one it shows the people behind it and a career write up for each and it's so easy to spot it's made up when it lists educational/work institutions that do not exist or/and they don't name them.

And....

no-where did it give a legitimate company name/registration number or/and address,
I called the number given on the site and it just rang,
the address failed the google map test etc.

SO..... HOW MANY ALARM BELLS DOES THIS HAVE TO RING TO KNOW IT'S EVIL NASTY SCAMMERS???

PLEASE REPORT SCAM SITES/SCAM EMAILS ETC ETC, SO OTHERS DO NOT BECOME THEIR VICTIMS,
TO THE POLICE AT:

https://reportlite.actionfraud.police.uk/

THEY CAN AND ALSO HELP PEOPLE WHO HAVE BEEN SCAMMED AND DEAL WITH THESE PEOPLE FAST,
SOONER OR LATER THEY GET CAUGHT!

This site is one of many owned by a criminal gang and has been reported to the internet host.