Scams offering fake Au Pair positions
by saberjevang7 Sat Jul 07, 2012 11:15 pm
This message just arrived on my account, It looks kind of fishy, does somebody know anything about this guy, or it could be a real au pair job?

Hi, my name is Timothy A Richmond and we are looking for an au pair live-in, live-out sitter for a full time, part time, full time summer, part time summer position.starting ASAP. If interested send inquiry to [email protected]. Regards Tim


I just replied to him, but maybe someone here in the forum knows about him (if he is a scammer) already.
Advertisement

by Chris Fuller Sun Jul 08, 2012 5:42 am
I'm not familiar with that email address, but if you would like to post the headers from that email, we may be able to discover which country Tim is writing from.

To access the headers, please follow the instructions for your mail provider.

Yahoo:

1. Go to Inbox.
2. Click the RIGHT-mouse button on the 'subject' (name/title) of the email.
3. LEFT-click on the bottom option of the menu: in English, 'View Full Headers'.

Or, in the older version of Yahoo:

1. Go to Inbox and open one of the emails you would like the headers for, as if you are going to read it.
2. Go to the bottom of the letter. On the bottom-right is a link, 'Full Headers' - left-click on that.

Hotmail:

1. Go to Inbox.
2. Click the RIGHT-mouse button on the 'subject' (name/title) of the email.
3. LEFT click on the second-option-from-the-bottom - in English it says 'View message source'.
4. This will open the 'headers' of the email.

Gmail:

1. Open the mail you wish to obtain the header for.
2. At the top of the mail, on the right, next to the little box marked 'Reply', you will see a downwards pointing arrow. Click it.
3. Now choose 'Show Original'.

If you are using a different mail provider, we may also be able to explain how to find the headers there.

For your own privacy, please make sure to remove all your own details (name, email address) from the headers before posting them here. Your own details may occur several times in the headers, so please check carefully all the way through.
by saberjevang7 Sun Jul 08, 2012 5:01 pm
Delivered-To:
Received: by 10.112.11.41 with SMTP id n9csp229488lbb;
Sun, 8 Jul 2012 00:25:14 -0700 (PDT)
Received: by 10.50.34.200 with SMTP id b8mr5860606igj.50.1341732313995;
Sun, 08 Jul 2012 00:25:13 -0700 (PDT)
Return-Path: <[email protected]>
Received: from omp1051.mail.ne1.yahoo.com (omp1051.mail.ne1.yahoo.com. [98.138.89.193])
by mx.google.com with SMTP id ml5si9421316igc.40.2012.07.08.00.25.11;
Sun, 08 Jul 2012 00:25:13 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.89.193 as permitted sender) client-ip=98.138.89.193;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.89.193 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: (qmail 37331 invoked by uid 1000); 8 Jul 2012 07:25:11 -0000
Received: (qmail 94956 invoked by uid 60001); 8 Jul 2012 07:25:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1341732310; bh=8MrrDLU8a5TFtpBxkApvovLOIvZOe4RLqHZB/wcIhhs=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=XwurZxrKAuYQVSWJjhhkb0NLCI2tejk58jMXg9kj2+xkftswDqyU6ZtC3ZS5AhbnPxSunVdZHOcZ5n0p2aZ88zoLVTOe1KbyJNMLWGELpvjC7YptQYS4PYFNrtPRy/sX4olBqcVldJOS4yMQJzqrhrSS/XtMn+qr3gFzV7Uc5fE=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=G90oYJCGRRyrake9cvFMKkO4QpXg2CCgbEIlbrR1B4I+V9usX/ZjO403nfwv6RK0W9KK4XjxpooHLtGdTVGjM0o4Z8LH7x2x29Tj/POiLy7sf67DVF61AbZTIDEkk9z0EeW7OsIGOJ9BoqDYUy9Dm2YZvArme+dPZOEHwtXhbo8=;
X-YMail-OSG: QVS0_NYVM1k5g2X9FYslRgzBw..BNt2ETkjTApPRL03y6Eb
uJzewjmShTgYwr3H2rVT9yv2bPedg5ORKjgCdn6rLNqIWM43Bj_ndrUUMgY5
akcu8yZahXQniOoE5NbywsrfoFCCtypAn_hms..Pt.kEiE75bGtLINIEvpfD
HGvQcSPo_DUyZs9ObEwH_ASxFbhWUQjN1QzbuiB6xySlAtXIJYyI2bKoM3KQ
3SK0W7q7P0eCtZyEuqdU1lXa.J1ydnETZL9kqfq8SS8CDfQUDOao0Lq8Nm44
L1u3uPvZsWMTn_Ep9X7Sc78F_AGDPzwq9rpHU4oKoAbf83rHTH6lHGvcA_rN
XqgG5ulpAP_Hxs2K2vl701WNBKdNxRQ7O2vKvVbpCUeKfw9uQQjMYw8Id2s9
aXqksUEROgz68fS58NW2NLVzX1f9FaNkdZQ--
Received: from [27.50.86.15] by web124906.mail.ne1.yahoo.com via HTTP; Sun, 08 Jul 2012 00:25:09 PDT
X-Mailer: YahooMailWebService/0.8.120.356233
References: <[email protected]> <[email protected]>
Message-ID: <[email protected]>
Date: Sun, 8 Jul 2012 00:25:09 -0700 (PDT)
From: Timothy Richmond <[email protected]>
Reply-To: Timothy Richmond <[email protected]>
Subject: Richmond Family, Australia
To:
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="576311973-2138920438-1341732309=:94463"

--576311973-2138920438-1341732309=:94463
Content-Type: multipart/alternative; boundary="576311973-1993351160-1341732309=:94463"

--576311973-1993351160-1341732309=:94463
Content-Type: text/plain; charset=us-ascii

Dear Aupair Nanny,
We are Richmond Family from Australia, me and my wife just got a new job with the Australian Airlines and this will make me too busy by travelling all around the Australian cities but my wife works at Groceries store close to the house. We have a five year old and 8 old boy Randy and Carly, we need aupair to be home with them.
Free housing and feedings for aupair with $500 salary weekly and you have Saturday and Sunday to rest.
Our flight insurance we provides your flights to Australia if you want to join us.

Tim and Laura.
--576311973-1993351160-1341732309=:94463
Content-Type: text/html; charset=us-ascii

<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><div>Dear Aupair Nanny,</div><div>We are Richmond Family from Australia, me and my wife just got a new job with the Australian Airlines and this will make me too busy by travelling all around the Australian cities but my wife works at Groceries store close to the house. We have a five year old and 8 old boy Randy and Carly, we need aupair to be home with them.</div><div>Free housing and feedings for aupair with $500 salary weekly and you have Saturday and Sunday to rest.</div><div>Our flight insurance we provides your flights to Australia if you want to join us.</div><div><br></div><div>Tim and Laura.</div></div> </div></body></html>
--576311973-1993351160-1341732309=:94463--
--576311973-2138920438-1341732309=:94463
Content-Type: image/jpeg; name="999.jpg"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="999.jpg"
by Chris Fuller Tue Jul 10, 2012 1:01 am
Thank you! The IP address in that header shows the location of Australia; and I've now also seen another header from this person, and that shows the location of Thailand! These are likely to be proxy servers, hiding the true location of the sender.

I can know confirm, however, that this is a scam. This scammer is sending stolen photographs, pretending that they are photos of his own family.

Some of these photos were also used in this scam:

viewtopic.php?f=42&t=26312

They were also used in this scam:

viewtopic.php?f=42&t=32815

Image

Image

Image

Image

Image

Image

Image

Image

Image

Image

Image
by saberjevang7 Tue Jul 10, 2012 7:38 pm
Thank you so much! You saved me again. Althought it's really sad nobody real seems to want me as an au pair :(.
by Chris Fuller Wed Jul 11, 2012 1:47 am
This email from the scammer was sent from his real IP address: 41.155.34.166 - Lagos, Nigeria.

From: Timothy Richmond <[email protected]>

Thank you for your interests as we are happy to have you as part of our family, Kindly answer our Interviews.
1.Your Real Names:
2.Your Age:
3.Nationality:
4.Nanny Experience:
5. Are you satisfied with $500 weekly salary?
6. Have you ever visited Brisbane, Queensland in Australia before?
7. Your Mobile phone number:

Thank you,
Tim and Laura.
by Chris Fuller Wed Jul 11, 2012 5:35 am
This email was again sent from Nigeria.

From: Timothy Richmond <[email protected]>

Hello
Thank you for your introduction, We will pay your flight ticket to Australia from our family insurance after your visa has been granted but for your visa arrangements, you need an invitation letter from us to show the Australian Embassy to get your visa, my wife contacted the Australian Immigration and she was told that the making and authorisation of your invitation letter will cost you $360, you will pay $360 to the Australian Immigrations here for your invitation letter and authorisation

Kindly email me your full home address where the letters will be posted.

Tim and Laura.

For anyone interested in being an au pair in Australia: you will need to be eligible for either a Working Holiday Visa, or a Work and Holiday Visa. You can find details about these visas here:

http://www.immi.gov.au/visitors/working ... ptions.htm

Do not send money to any host family, nor to anyone who they put you in contact with.

Who is online

Users browsing this forum: ClaudeBot and 1 guest