Rental Scammer - [email protected]

- $533 / 2br - Great 3 Bedroom 1 Bath Brick Bungalow With A 1 Car Detached Garage, an (Detroit, MI)
2 messages

ONLY GOD <[email protected]> Mon, Oct 28, 2013 at 7:18 AM

Reply-To: ONLY GOD <[email protected]>

To: R******

Hello,

Thank you for the interest in my house. The house is still available for rent; the house was completely renovated easy access to Public Transportation. The Bedrooms are equipped with everything you need for your stay.

Monthly Rent: $533
Security Deposit Is $533
Total move in cost:$1066
Utilities are included in the rent.
Minimum rental: 1 month
Maximum rental: 6 years or more.
House Address: 16121 W Parkway St, Detroit, MI 48219

I will love to have showed you round the house and the inside, but am sorry i am presently out on a missionary trip.I have been posted to the West Africa by the United State Christian Organization for (Worldwide Missionary Outreach). We are now in West Africa for the Missionary work and so all you can do is drive by the home anytime. i wanted to sell it before and later changed my mind to rent it out for investment purposes since i might still come back some time 5 years or more to come. So we have ordered them to stop all advertisement about the home for sale and that will be effective asap. So i wouldn't want that to bother you at all I could not find an honest agent to hand over the place before leaving so i and my wife decided to post the property online. Here is our rental application form that you will have to fill if you are still interested in this house.

RENTAL APPLICATION FORM

FIRST NAME: __________________
MIDDLE NAME: __________________
LAST NAME: __________________
PROFESSION: ________________
PHONE______________________
AGE_____
YOU HAVE A PET?__________________________ _ _
DO YOU HAVE A CAR?__________________________ _ _
OCCUPATION____________________ ________
PRESENT ADDRESS: ___________________________
WHY ARE YOU LEAVING?______________________ _____________________________
PREVIOUS ADDRESS: ___________________________
HOW LONG DO YOU INTEND STAYING? ____________
WHEN DO YOU INTEND MOVING IN? ______________
HOW SOON IS YOUR MOVE IN COST READY? ___________________________

I CERTIFY that answers given herein are true and complete to the best of my knowledge. I authorize investigation of all statements contained in this application for tenant screening as may be necessary in arriving at a tenant decision. I understand that the landlord may terminate any rental agreement entered into for any misrepresentation made above.


Best Regards and Remain Blessed

Mr Benson Ola

YOU CAN REACH ME ON THE NUMBER BELOW:
+234-810-668-7566 or 011234-810-668-7566

On Sunday, October 27, 2013 4:34 PM, wrote:

http://detroit.craigslist.org/wyn/apa/4124320704.html
I would like to set up an appointment to view the house. Please contact me at 313*******. My name is R*******

[email protected]

$800 / 3br - 7B-C Carolina Saint John, VI 00830 (7B-C Carolina Saint John, VI)
http://virgin.craigslist.org/apa/5509790636.html

''Paradise on the Rocks'' is centrally located on Ajax Peak at intersection of Centerline & North Shore rd only 5 minutes to Francis Bay & north shore beaches yet convenient to restaurants & shops in Cruz Bay town and Coral Bay. This well-built masonry home enjoys cool, comfortable breezes at a 900' elevation on a spacious .63 acre parcel that is fully fenced, lovingly landscaped and has flat, easy driveway access with ample parking. Beautiful Bordeaux Mt and valley views from the main living area and the generous deck offers expansive panoramic views including east/sunrise, Coral Bay, Bordeaux Mt and west/sunset views. The main level has 2 bd x 2 ba and the lower level apartment has 1 bd x 1 ba and could be rented to supplement income or offers privacy for your visiting family & friends."
-----------------------------------------------------------------------------



I contacted this same scammer, but they are using a different email address now.

This is the same form that they sent me as the OP. It is the same phone number.
But a different name and email, and property.


You are welcome, It is good to hear from you . I may not be returning to the house because we plan buying another house upon arrival. You can call or text me on (011-234-810-668-7566 or +234-810-668-7566) Below are some questions I need you to answer so that we can discuss further.

RENT QUESTIONNAIRE

1)Your Full Name______________________________
2)Your Full Address & Phone Number______________________________
3)Marital Status?___________________________________________
4)How many people will be living in the house_________________________
5)Do you have a pet______________________________
6)Do you have a car______________________________
7)Occupation______________________________
When will you like to move in?_____________________________
9)How long are you willing to stay in the property________________
10)When are you ready to Move In?________________
11) How many months rent can you pay upfront? Minimum ( 1month +
SECURITY DEPOSIT ) or ( 2 months + SECURITY DEPOSIT ), so which option
do you prefer ??? ________________
12)Earliest possible date of deposit?_____________

Looking forward to hearing back from you with all this details so that i can have them in my file in case of issuing your rent payment receipt to you and for contacting you. Your quick response will be highly appreciated so that we can discuss on how to get the documents and the keys of my property to you via Express Delivery Services. May GOD bless you and your family.

Regards.

Welcome to Scamwarners,

What email address and name did the scammer use?

I just tried to edit my post to include that, the new email address they are using is; [email protected]

Also his new name?

This is the email that they sent with their new name, and some gig about a mission in Africa;

Hello,

Thanks for your interest and inquiries about my house. Yes the house is still available for rent and we are looking for a responsible person/family to occupy and maintain the house now that we are not around. Myself and Wife just traveled to West Africa for a program called SERVING IN MISSION (SIM), you can view the link for more info: (http://www.sim.org/index.php/content/our-purpose).

We will be away for 2 to 3 years or more that is why I have made up my mind to put up my house for rent to whom ever that will take good care of it. However, my initial plan was to sell the house but it was not successful because the Realtor raised the price which made it difficult for me to sell before leaving the States so never mind if you see the for sale sign in front of the house, It has already been taken off the market as for sale so there is no need to contact any Realtor.

Also how long do you intend to stay? How soon do you intend to move in?

FEATURES : Laundry, Electric Range, Master Bedroom, Playground, Car Park.
AMENITIES: Air Conditioning, Patio/Party Deck, Cable TV, Ceiling Fans, 24 hours Internet service, Dishwasher, Garbage Disposal, Microwave, security alarm, Pets Friendly, Refrigerator, Washer / Dryer.

Rental Price: $800 per month and security Deposit is $800(Security Deposit is Refundable) Utilities included in monthly rent
Pets are Welcome.
Below is the address to the house:
(7B-C Carolina Saint John, VI 00830)

Get back to me so i can forward you the rent questionnaire i would want you to fill out.

Regards.
Mr & Mrs Robert Lanre

One more thing to include. I used the link for the header information in your signature.

This is what came back. Apparently they are in the UK, or using a VPN from the UK.

Header Analysis Quick Report
Originating IP: 25.152.0.51
Originating ISP: Uk Ministry Of Defence
City: n/a
Country of Origin: United Kingdom
* For a complete report on this email header goto ipTRACKERonline

We will need you to paste the whole header here. Remove your name and email address from it prior to posting.

We can check to see if he is spoofing it.

The scammer is in West Africa. Most likely Nigeria.

I don't really feel comfortable posting the header information, as it can expose my ip address and personally identifying information. I mean, since you are the moderator here, you can already see that information about me. But on a message board that is about scams and scammers, you can see why I hesitate.

I will see if I can post what you need, and remove my personal stuff though;

Received: by 10.36.13.14 with SMTP id 14csp255452itx;
Sat, 2 Apr 2016 03:48:05 -0700 (PDT)
X-Received: by 10.202.75.210 with SMTP id y201mr195571oia.116.1459594085274;
Sat, 02 Apr 2016 03:48:05 -0700 (PDT)
Return-Path: <[email protected]>
Received: from BLU004-OMC4S8.hotmail.com (blu004-omc4s8.hotmail.com. [65.55.111.147])
by mx.google.com with ESMTPS id b14si9150414otb.74.2016.04.02.03.48.05
for <xxxxxxxxxxxx>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Sat, 02 Apr 2016 03:48:05 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.111.147 as permitted sender) client-ip=65.55.111.147;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.55.111.147 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from EUR01-HE1-obe.outbound.protection.outlook.com ([65.55.111.137]) by BLU004-OMC4S8.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Sat, 2 Apr 2016 03:48:04 -0700
Received: from DB5EUR01FT006.eop-EUR01.prod.protection.outlook.com
(10.152.4.55) by DB5EUR01HT175.eop-EUR01.prod.protection.outlook.com
(10.152.5.226) with Microsoft SMTP Server (TLS) id 15.1.453.6; Sat, 2 Apr
2016 10:48:02 +0000
Received: from AMXPR07MB133.eurprd07.prod.outlook.com (10.152.4.58) by
DB5EUR01FT006.mail.protection.outlook.com (10.152.4.134) with Microsoft SMTP
Server (TLS) id 15.1.453.6 via Frontend Transport; Sat, 2 Apr 2016 10:48:02
+0000
Received: from AMXPR07MB133.eurprd07.prod.outlook.com ([169.254.9.133]) by
AMXPR07MB133.eurprd07.prod.outlook.com ([169.254.9.133]) with mapi id
15.01.0447.026; Sat, 2 Apr 2016 10:48:02 +0000
From: Home Rental <[email protected]>
Subject: Re: 7B-C Carolina Saint John, VI 00830
Thread-Topic: 7B-C Carolina Saint John, VI 00830
Thread-Index: AQHRjJvGre+4jyslwEubb+rjBHu1hp92gPdD
Date: Sat, 2 Apr 2016 10:48:02 +0000
Message-ID: <AMXPR07MB133924FAD348CA22D0FF076BD9B0@AMXPR07MB133.eurprd07.prod.outlook.com>
References: <CAHkBjujbaJhPJbj3P1uU3v8skR=ULjau4HKobH-kw6bYrO3Bmw@mail.gmail.com>
In-Reply-To: <CAHkBjujbaJhPJbj3P1uU3v8skR=ULjau4HKobH-kw6bYrO3Bmw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=softfail (sender IP is 25.152.4.58)
smtp.mailfrom=outlook.com; gmail.com; dkim=none (message not signed)
header.d=none;gmail.com; dmarc=fail action=none header.from=outlook.com;
received-spf: SoftFail (protection.outlook.com: domain of transitioning
outlook.com discourages use of 25.152.4.58 as permitted sender)
x-tmn: [1JaG4uZrHX7vc5prnGPYWdCFW/idqmar]
x-eopattributedmessage: 0
x-forefront-antispam-report: CIP:25.152.4.58;IPV:NLI;CTRY:GB;EFV:NLI;SFV:NSPM;SFS:(10019020)(98900003);DIR:OUT;SFP:1102;SCL:1;SRVR:DB5EUR01HT175;H:AMXPR07MB133.eurprd07.prod.outlook.com;FPR:;SPF:SoftFail;MLV:ovrnspm;MX:1;A:1;LANG:en;
x-ms-office365-filtering-correlation-id: 9e1f67ce-fb50-4ca7-a511-08d35ae443e0
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(5061506196)(5061507196);SRVR:DB5EUR01HT175;
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(432015012)(82015046);SRVR:DB5EUR01HT175;BCL:0;PCL:0;RULEID:;SRVR:DB5EUR01HT175;
x-forefront-prvs: 09007040D4
Content-Type: multipart/alternative;
boundary="_000_AMXPR07MB133924FAD348CA22D0FF076BD9B0AMXPR07MB133eurprd_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Apr 2016 10:48:02.6431
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR01HT175
Return-Path: [email protected]
X-OriginalArrivalTime: 02 Apr 2016 10:48:04.0814 (UTC) FILETIME=[22A8FEE0:01D18CCD]


IF YOU NOTICE ANYTHING PERSONALLY IDENTIFYING ME, PLEASE REMOVE IT.
Thank you.

I have already forwarded the email, and the header information to the FBI.

Check your Ip with that link. Then tell me how close on the map does it report to your actual location.

Well, I have a dynamic IP from my ISP, but it has been the same IP address for a year. So it's as good as some hacker having my physical address. I just worry. Hackers are smart these days.

But I think I removed everything that could identify my personal stuff. I was just asking if I failed to remove something, that you would do it for me.

I wish I could get a new IP address on a regular basis from my ISP, but even unplugging my router for 24 hours hasn't renewed my IP address.

Anyway, thanks for this useful service. I hope that my report helps potential victims of this guy. It appears to be the same person as the report from the other author.