Room for Rent and other rental scams
by Paulo Oliveira Mon Apr 03, 2017 3:31 pm
Hello there,

This week I've been searching for places to rent in Vancouver (BC, Canada). I've been using mainly Padmapper.com, and there were a few listings that got my interest.

In one specific listing, no photos of the condo were included, so I sent a message (using the webform inside the site, which prevent users from sending their real email addresses) asking for more information and any photos showing the place. The very same day I got a new email from the renter (via Padmapper), just asking: "The apartment is still available,if you like more details and photo please provide your email.".

After providing my email, the next day I received a message from someone called "Robert Safdar" telling a very suspicious story:

Hello,

Thank you for your interest.
My name is Robert Safdar and I see that you are looking for an apartment to rent.
I own an apartment located in:1188 Howe Street: 1 Bed 1 Bath that I think it would suit you perfectly.
I received this apartment long time ago from my grandmother after she passed away and I'm renting it since then because I don't have any business there.
Before we go any further I would like to know a little something about you, like how many persons you intend to live in the apartment, and for how long.
The flat is exactly like in the pictures, furnished and renovated. The utilities are included in the price of rent , you will have one parking spot , the rent ( with all utilities ) is 950 CAD / month . The guarantee deposit is 950 CAD, and you get it back, when you decide to leave the apartment (you will have to give me at least 20 days notice).
I am renting the apartment for unlimited time. Now, a little bit about myself so we can get to know each other better.
I'm a 56 years old, company manager of Recalcati Multimedia from Rome/Italy.
The only inconvenience is that my job doesn't allow me to leave Rome even for one single day. We just hired some new staff and I'm in charge of their training. But this won't affect you at all. I can make all arrangements to rent the apartment from Rome (on my expense of course) as I found a company which is specialized in these kind of deals.
Kind Regards


So, I immediately realized: that guy would try to do something. I just answered the message saying something like "Wow.. Your place is quite nice. How can we set up a visit to it?". The next day, "Robert" replies:

Hello

As I told you in my first e-mail, I am in Italy.
Before leaving we had prearranged the deal with Airbnb Company so my presence isn’t necessary.
The keys and all needed papers are ready for delivery.
You will have 3 days to inspect the the apartment before rent it.
Airbnb will start the delivery for the keys and the contract to you , but you must deposit the value of one rental months CAD 950 and the security deposit CAD 950 in Airbnb account.
If you decide not to rent the apartment, airbnb will refund your money back in the same day. If you like the apartment Airbnb will send me the money only after you check in.
Obviously we need to complete this deal in a safe and fast way for both and this is the only safe way with Airbnb. So if you want to make this deal please send me the following details:
Full name and address
Shipping address

After I’ll receive your details I will forward them to Airbnb and I will proceed the order.
Airbnb will contact you with all the details that you need, to complete this deal. Waiting your email with the requested details.
Best regards,


I'm an Airbnb user for years, and I know that Airbnb doesn't arrange this kind of rental. Nevertheless, I just continued on this demonstrating my interest, replying his message with a fake full name and a fake address.

Today I received the following "Airbnb Booking" message:

[AIRBNB LOGO]
Hello xxxxx,

You are going to 1188 Howe Street, V6Z 2S8,Vancouver,Canada
during Flexible date. Please review your booking details below and contact us immediately to confirm the payment.
In order to validate your booking the payment must be done to us within 24 hours.

Thanks for using Airbnb
[AIRTEAM LOGO]

Itinerary
CONFIRMATION CODE: YHBY3A
Flexible date
Flexible check in time
Check In:15.04.2017
Flexible date
Flexible check out time
Check Out: 15.04.2018

One Year
2 Guest

1188 Howe Street, V6Z 2S8,Vancouver,Canada

Name:xxxxxxxxx
Email:[email protected]

Payment to Airbnb via Bank Wire Transfer:

Payment instructions:

Next step to be taken: The tenant must send the payment to AirBnb Payment must be sent by Bank Account Transfer or through Online Banking.

PAYMENT INSTRUCTIONS: Here are our verified payment details that you will use for this transaction:
Follow these simple steps in order to send money via Bank Transfer
Deposit Payment must be made to our Bank Account
( CAD $1.900,00 must be sent ):

1)Go to your local bank or log in on your online banking.

2)Make payment using the international bank account provided.

3)After you complete the transfer, email us,and confirm the following:

- Wire Transfer Receipt


NOTE:
SO OUR COMPANY CAN RECEIVE YOUR PAYMENT IN 1-2 DAYS PLEASE ASK YOUR BANK TO MAKE EXPRESS PRIORITY BANK TRANSFER.
OUR COMPANY WILL START THE TRANSPORT ON THE SAME DAY WHEN THE PAYMENT IS AVAILABLE.

Message to beneficiary Account: Transaction #RDRS1-2368G

Payment Information
Airbnb Account Name:

Address:
ALEXANDRU CORNECI


VIA TRENTO, 18, MARTANO CAP 73025, LECCE


IBAN:


IT07Z0760105138207455807456
Swift/Bic: POSOIT22XXX
Bank Name: BANCA POPOLARE DI SONDRIO
Bank Address:
PIAZZA GARIBALDI 16 23100 SONDRIO ITALY

Payment Reference: RDRS1-2368G

Once the payment was done, email us with the transfer receipt to validate your booking.

NOTE:
Once we receive the payment receipt, we will start the shipping process. We will secure the funds for you until you receive the package with keys and contracts and if everything is OK we will release the funds only with your approval. If the apartment will not be as described, you will have to send it back on the owner's expense and we will give you a full refund.

Cancellation Policy
Flexible: Full refund 2 days prior to arrival, except fees.

Important Notice
For security reasons please DO NOT release the payment details to any other unauthorized person.
All the transaction, payment and personal information is considered confidential and will not be released under any circumstances.
Purchase Protection program security measures are constantly reviewed and modified given evolving circumstances globally.
Our main and constant priority is the safety of our customers.

RENTAL AMOUNT
CAD: 950.00

DAMAGE DEPOSIT
CAD: 950.00
CLEANING FEE CAD: 0.00
AIRBNB FEE CAD: 0.00
TOTAL PAYOUT

PAYMENT DUE DATE
CAD: 1.900,00

April 4, 2017

THANKS FOR RENTING ON AIRBNB


In the next few messages I'm going to paste all email headers from messages that I received from the scammer!

Cheers,
Last edited by Paulo Oliveira on Mon Apr 03, 2017 3:38 pm, edited 1 time in total.
Advertisement

by Paulo Oliveira Mon Apr 03, 2017 3:33 pm
First contact:

Delivered-To: [email protected]
Received: by 10.200.37.14 with SMTP id 14csp2957958qtm;
Thu, 30 Mar 2017 23:40:09 -0700 (PDT)
X-Received: by 10.107.22.194 with SMTP id 185mr1405866iow.122.1490942409769;
Thu, 30 Mar 2017 23:40:09 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-io0-x22d.google.com (mail-io0-x22d.google.com. [2607:f8b0:4001:c06::22d])
by mx.google.com with ESMTPS id 186si175643itj.38.2017.03.30.23.40.09
for <[email protected]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 30 Mar 2017 23:40:09 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c06::22d as permitted sender) client-ip=2607:f8b0:4001:c06::22d;
Authentication-Results: mx.google.com;
dkim=pass [email protected];
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c06::22d as permitted sender) [email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Received: by mail-io0-x22d.google.com with SMTP id z13so27029726iof.2
for <[email protected]>; Thu, 30 Mar 2017 23:40:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=Cix1kmU3/LXpulwKfG5Aa0pIL/w6qMMEu/taoghgIto=;
b=cDymDohsuNl8SATQ620QcrPK90MEpQ+0B5ydAsnc7b6spnwAh21aliKPI80U/oJkLh
B6vYzwEGUO7RfOzyP7UUqwi3rtlG46+jnXLkdzOwOp+AHiAPTu/PP/LqnIH81QT3Wj6h
AlNvLoG39nDWydWsZlbSStKMB6Omb5BJeuksi/fs9goBMLwwBtGS9TKbbPertRDtwDV+
Um93xPaecVUZz/ScRAEt+H06BH/yquO1U83KSdwjoAeSZLoIH6q3glQUJboOf0cLvk1O
g94IUtqhCdxDuduNEaKYmakZmRmZkzjhWa0ls4cAzXDkEEofk9PsBEU41jdoIcwPpEgH
ZbkQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=Cix1kmU3/LXpulwKfG5Aa0pIL/w6qMMEu/taoghgIto=;
b=iVpPituG77IoC08rFfHdSOZqcK7gABpzzcV8EltJPX2lAkmDVIZc+0g2wKRAwiV5h3
+3BC/KGnaqiaYsvNElbVXQpkGgXQgAyrpQVSFb/u+gQDuoMV4i2gyScF9RX5/G8z5R9Y
wxrkyiJKirp43E4a2AhuEiroH9zJq4dJTU3tb7ZcjTlbRSLDnkJc7OG1MWWhpbwONQWG
z+cGaxfk7Y/MISVUL5rSLqBo6ZdA5eDwY/aSU8QElpN14kSax7ZWldA0DnT8EgRJto2n
XYK+MGZCrr9ch13H8DIb9m8TH8NOAmMr6ZJgdXoTzJhip8o2f9tPt5tr5Ms5qGgHLu/7
hLgw==
X-Gm-Message-State: AFeK/H216zZAKrtrEOySRRtttEXa03QfkM3aN2O5hJhp2WeS/HAtXvV0ys8dCjpD6CZKKXxTbvusydly3uCvpONGXXk=
X-Received: by 10.107.172.134 with SMTP id v128mr1570949ioe.49.1490942409029; Thu, 30 Mar 2017 23:40:09 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.170.21 with HTTP; Thu, 30 Mar 2017 23:40:08 -0700 (PDT)
From: Robert Safdar <[email protected]>
Date: Fri, 31 Mar 2017 07:40:08 +0100
Message-ID: <CAJ7dugFeRahsBm6W5Zydg1qAfnQ3r6o6zbkkgrzZ=OyvKDOhkQ@mail.gmail.com>
Subject: 1188 Howe Street: 1 Bed 1 Bath
To: [email protected]
Content-Type: multipart/mixed; boundary=001a1148d5d4ac1bb2054c011451

--001a1148d5d4ac1bb2054c011451
Content-Type: multipart/alternative; boundary=001a1148d5d4ac1baf054c01144f

--001a1148d5d4ac1baf054c01144f
Content-Type: text/plain; charset=UTF-8
Last edited by Paulo Oliveira on Mon Apr 03, 2017 3:39 pm, edited 1 time in total.
by Paulo Oliveira Mon Apr 03, 2017 3:35 pm
Second message:

Delivered-To: [email protected]
Received: by 10.200.37.14 with SMTP id 14csp3625747qtm;
Sat, 1 Apr 2017 10:58:15 -0700 (PDT)
X-Received: by 10.36.6.143 with SMTP id 137mr3655761itv.54.1491069495738;
Sat, 01 Apr 2017 10:58:15 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-it0-x241.google.com (mail-it0-x241.google.com. [2607:f8b0:4001:c0b::241])
by mx.google.com with ESMTPS id u125si6267669itc.22.2017.04.01.10.58.15
for <[email protected]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 01 Apr 2017 10:58:15 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c0b::241 as permitted sender) client-ip=2607:f8b0:4001:c0b::241;
Authentication-Results: mx.google.com;
dkim=pass [email protected];
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c0b::241 as permitted sender) [email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Received: by mail-it0-x241.google.com with SMTP id e75so4744307itd.1
for <[email protected]>; Sat, 01 Apr 2017 10:58:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
bh=MtV5nfGGFrD+++UsN8/RwJEGmvA2hbAF3c9LFJnsubY=;
b=FzJuV6JGOLKBH/BtcGFDmeoGYvPH5bu3Xz5Gv7Qe+K4AHoc/wRhTy9zhN0SnMOC1uV
4b0XI8WEFtiC07ql1tAhrTykX15pfd7925CXmvXKKTJ0U/XTbn6C8O1TJQDR9Wnrl+X7
gznoAXxjk2YGKLG/Fw2Cs7FexH5eaXYZm37qprLNm4XSoonWTwmAWJlyKZEaGg3PhI1Q
njcmdKymYk2nREja4wPXxS3BNWhIMwArVaMULKKAQTMU89WobRnjEvf9wLaA36iEWg+C
OmF9Xpfk9EevNOisNFSj3EwuuM+PFvidXR7Dofio10NTzj11XU1M3X4IHHaz7XIy5UHo
Y9IA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:in-reply-to:references:from:date
:message-id:subject:to;
bh=MtV5nfGGFrD+++UsN8/RwJEGmvA2hbAF3c9LFJnsubY=;
b=b5y+Tr2LhddeciOZtNAcaTxUs4EJVZ9tBfatSxIbOBNsAS+C0tIGugjf/S4DjPB+H4
zBUa8Tm17PArAXm345STeWhSZuY5BT5gL7ckhJ6fWdwCqVsZTkDPjBXFrImqlNwrscuL
Nz1KMDJTgHGVB4DdZci1PRkGLdre4zwyC+6zpWNZ+vHkk8knP4hzSwAE3ndce5jAhvkj
tRjwF7P3JM3TI6M01jDFd+u0vAacwX/xwETE0fk7qVC1C0ecD+5kRV9/p2Q45qI3R0RC
QH5+c3Df/KOcHZU8YSG6ojWUEuHdbkq+Vkt6MXxuAsxnK5BGTcT9dOegY9hdCK+srWu6
H7/w==
X-Gm-Message-State: AFeK/H3HMxsXu0KmJjGRNfZ+7mSt6jFiWCNqlbr682jFjg9SZg0ccLbz q0n/d0n38UK9IbNDPpP0ZeK308qTjpmf
X-Received: by 10.36.101.7 with SMTP id u7mr3379847itb.67.1491069495052; Sat, 01 Apr 2017 10:58:15 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.170.21 with HTTP; Sat, 1 Apr 2017 10:58:14 -0700 (PDT)
In-Reply-To: <CANb-vCMjy9LLy6Z5m8wpcxog_NHfXc0Z-UJ5ryNOMzAqjwLK7g@mail.gmail.com>
References: <CAJ7dugFeRahsBm6W5Zydg1qAfnQ3r6o6zbkkgrzZ=OyvKDOhkQ@mail.gmail.com> <CANb-vCMjy9LLy6Z5m8wpcxog_NHfXc0Z-UJ5ryNOMzAqjwLK7g@mail.gmail.com>
From: Robert Safdar <[email protected]>
Date: Sat, 1 Apr 2017 18:58:14 +0100
Message-ID: <CAJ7dugFZiGBMqndG5hbqRTri_A+m7iwgZ0tUzuDQknBYL815Yg@mail.gmail.com>
Subject: Re: 1188 Howe Street: 1 Bed 1 Bath
To: x <[email protected]>
Content-Type: multipart/alternative; boundary=001a113f71489695cd054c1eab46

--001a113f71489695cd054c1eab46
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Last edited by Paulo Oliveira on Mon Apr 03, 2017 3:43 pm, edited 2 times in total.
by Paulo Oliveira Mon Apr 03, 2017 3:36 pm
Message from 1h ago, asking if I had received the invoice:

Delivered-To: [email protected]
Received: by 10.200.37.14 with SMTP id 14csp215664qtm;
Mon, 3 Apr 2017 11:22:29 -0700 (PDT)
X-Received: by 10.107.200.85 with SMTP id y82mr17147147iof.47.1491243749709;
Mon, 03 Apr 2017 11:22:29 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-it0-x22a.google.com (mail-it0-x22a.google.com. [2607:f8b0:4001:c0b::22a])
by mx.google.com with ESMTPS id f133si12400425ioe.78.2017.04.03.11.22.29
for <[email protected]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 03 Apr 2017 11:22:29 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c0b::22a as permitted sender) client-ip=2607:f8b0:4001:c0b::22a;
Authentication-Results: mx.google.com;
dkim=pass [email protected];
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c0b::22a as permitted sender) [email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Received: by mail-it0-x22a.google.com with SMTP id a140so49857ita.0
for <[email protected]>; Mon, 03 Apr 2017 11:22:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
bh=LxDM2OQOLAw0cZVrhZHSAL5BtOlqVll3ge3S7xt0EO8=;
b=FfZqQQHOvoK04JVXwtcbUHaPbtKYwvRMz81czUuore18G7f/IYgPJYkahxnPv2KtpH
IKP6zUM8YHEl75lEg2qjORQcLHZXl9gwjJi/mDdCqKXzQsYaNAqWy1A/zXbxwUtxhdW5
sW7UaY8FcYrgvtm7aenS2fqG0rBq/cqEPAOtUqdKZl5I2/HzyhsNT4GOINBAZMRUzcKX
qg+lgVFekZ723xHEloJfy3Rc/UYi9WCwlZWApbB4iVdyccHHevclFNfwT+Ezg9UUO/mn
L+2s39yzz2ndtzpo1a5vAWzgi7PiW1mUvgsiPmpP7+q4MjMsEG6u30i/qbQ4xxtTFlnZ
VFLQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:in-reply-to:references:from:date
:message-id:subject:to;
bh=LxDM2OQOLAw0cZVrhZHSAL5BtOlqVll3ge3S7xt0EO8=;
b=WOICmziJ3NDB/PNdRLNg9AT8fRaA+lk12Vw7g5O4rIBiQ/iMZhkhB8Yatqes+kbUHg
M04ZguWSzyejIykBEo5oN0+4aqxci8zDblqCOD1aJz49R1nr2TziRK74/no40B+pYp9G
RF9vhaiBoYG/gVahm5o99g12wFBWNxYfchBJOvsryS8S53x03ARZ3MR4i9TluvZZINlp
uJ3O1+XPiTpwcn77J3GiQqv1vLct93DsDNXCb2WHT/5qJ7asArBQPSU0L7HzdV2RbPp2
DQHVIHAINb0UUAkhJ1q/ALIW43mYIxMEBC9HM7i3p8O0uUGoHyoo3lzPu05KES4FH1ij
0ACQ==
X-Gm-Message-State: AFeK/H1sJPSagm+53NKU9nOveEAjfxd8/RZdMTfERvmu3yD2Jx7oJUeJ3m39FnBkUKWgrJORAzXgk0RTEqLCDeHK
X-Received: by 10.36.108.144 with SMTP id w138mr11051230itb.67.1491243749146; Mon, 03 Apr 2017 11:22:29 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.170.21 with HTTP; Mon, 3 Apr 2017 11:22:28 -0700 (PDT)
In-Reply-To: <CANb-vCPhFbaA5qC3BFLBOsQ=KTMaUefFg=1m-wkFMnWJwCQDtg@mail.gmail.com>
References: <CAJ7dugFeRahsBm6W5Zydg1qAfnQ3r6o6zbkkgrzZ=OyvKDOhkQ@mail.gmail.com> <CANb-vCMjy9LLy6Z5m8wpcxog_NHfXc0Z-UJ5ryNOMzAqjwLK7g@mail.gmail.com> <CAJ7dugFZiGBMqndG5hbqRTri_A+m7iwgZ0tUzuDQknBYL815Yg@mail.gmail.com> <CANb-vCPhFbaA5qC3BFLBOsQ=KTMaUefFg=1m-wkFMnWJwCQDtg@mail.gmail.com>
From: Robert Safdar <[email protected]>
Date: Mon, 3 Apr 2017 19:22:28 +0100
Message-ID: <CAJ7dugHJqHnSCd8BUeSb21+GsgOF_g5AGw6=Yq7Rd7JTM5yfug@mail.gmail.com>
Subject: Re: 1188 Howe Street: 1 Bed 1 Bath
To: X <[email protected]>
Content-Type: multipart/alternative; boundary=001a113f88c8f10811054c473dd2

--001a113f88c8f10811054c473dd2
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Who is online

Users browsing this forum: ClaudeBot and 18 guests