[email protected]

Hi,
I try to sale a little boat on the net in a specific place dedicated to this specific boat.
I got one email in Correct English and bad French (not a google translation) to discuss for the price and location. A second mail is to say yes, and speaking of "certified bank cheque for the payment" ...cheque instead of check give me a signal so I stop the exchange by mail.
Here is the source code of that mail, I've removed my mail address and name

Ì've found the IP address 10.180.86.133 inside your forum.
The name Clay Nacly is also strange, Clay <=> Acly so Nacly means Not Clay and
Clay Nacly means Clay is not Clay

Is it a real scam or not?
_______
Delivered-To: [email protected]
Received: by 10.76.94.139 with SMTP id dc11csp347540oab;
Mon, 13 Aug 2012 07:30:54 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.180.86.133 as permitted sender) client-ip=10.180.86.133
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.180.86.133 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.180.86.133])
by 10.180.86.133 with SMTP id p5mr18960721wiz.17.1344868253232 (num_hops = 1);
Mon, 13 Aug 2012 07:30:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=u+xUo2dRLxlDvRqLFYKDbePiX+HxCEWc/b7YDTDVwd0=;
b=K2c3SCv7WO4V1PIqz0RDG6gEKhqvzrFzJDCIvqeu/WwJB8ZUHRIRpE8DBlVipfitNg
b2UVSq18uH8Er04YUZPP3SD0jOM6ndJyHUyRFTF6qVmUu3X0n0iFOzlLPr21x0SzWLd5
yZCUbifFAV1xTI/t8cCzukLvEviSqjRsLmVRZ+kc0azmo4/KCNKd6OJy68TVsJvLKgem
p2DcoUXqbeE0YGPKfKGzCSKjpUNDBz0SK6W8AV8rz6R0aDaanf6RYqTK5TnAzUjN34st
qux2B7gl/7dL69A+ETFiXittMiiBE3TM46vuPGswtad7gtAJHf/VkdwoIpoKHwRNbfg1
NZGw==
MIME-Version: 1.0
Received: by 10.180.86.133 with SMTP id p5mr18960721wiz.17.1344868253227; Mon,
13 Aug 2012 07:30:53 -0700 (PDT)
Received: by 10.194.10.3 with HTTP; Mon, 13 Aug 2012 07:30:53 -0700 (PDT)
Date: Mon, 13 Aug 2012 15:30:53 +0100
Message-ID: <CAAS7WGguLpDaNrFzqG9a-rWT-dAW634KrEpc7D6w_tqz=gmocA@mail.gmail.com>
Subject: =?ISO-8859-1?Q?Good_Day_Francis=3A_A_VENDRE_EUROPE_Roland_de_1969_N=B0?=
=?ISO-8859-1?Q?_2856?=
From: clay nacly <[email protected]>
To: xxxxxxxx

Good day XXXXX
Thanks for your response,I am happy to know that you are interested
in selling your boat to me. I am okay with your asking price and
I will like you to know that my freight agent will be taking boat of
the transportation after you have received the payment for the
boat.
I will instruct my client to send you a certified bank cheque for the
payment of the boat and as soon as you get the cheque, I will
like you to deposit the cheque in your bank and when you bank has
credited your account with the money, I will ask my freight agent to
come to your location for the pick up of the boat.
I hope you understand my terms of payment. If you will like to
continue with the sale of your boat,I will like you to send me
your contact details so that I can send the cheque to you as soon as
possible
I will like you to send me the following info:
Full Name:
Full contact address:
Phone number:
Email:
Final asking:
I look forward to your prompt response.
Best regards

Hi,
I've declared this scam in the official French Gouvernment site.
https://www.internet-signalement.gouv.fr/PortailWeb/planets/Accueil!input.action

Hello scam3456,

Yes, that is a scam. The check would be fraudulent, and when the bank discovered this (which may not happen quickly, but will happen), the bank would remove the amount of money it represented from your bank account.

The scammer, however, would ask you in the meantime to forward some money to his 'freight agent'. As the money from the check would later be removed from your bank account, you would actually be sending your own money to the freight agent. The fake freight agent will be the scammer himself, or one of his accomplices.

Furthermore, you could also be investigated yourself, for handling fraudulent checks. So it is good that you stopped contact with this fake purchaser.

The scam mail you received was sent from Gmail, so Gmail has replaced the sender's IP address with one of their own IP addresses. Therefore, the scammer's location is unknown, and he could really be living in any country in the world.

Hi,
today I got a massage by the following address:

clay nacly <[email protected]>

It seems to me, that it could be the same pearson:



Good day xxxxxx

Thanks for your response, I am happy to know that you are interested in selling your instrument to me.

I am okay with your asking price and I will like you to know that my freight agent will be taking instrument of the transportation after you have received the payment for the instrument.

I will instruct my client to send you a certified Bank Cheque for the payment of the instrument and as soon as you get the check, I will like you to deposit the Cheque in your bank and when you bench has credited your account with the money, I will ask my freight agent to come to your location for the pick up of the instrument.

I hope you understand my terms of payment. If you will like to continue with the sale of your instrument, I will like you to send me your contact details that I can send the Cheque to you as soon as possible.

I will like you to send me the following info:

Full Name:

Full contact address:

Phone number:

Email:

Final asking:

I look forward to your prompt response.

Best regards



How can we stopp it?

Hi,

first I'd like to thank you for this posting - as I received an E-Mail from this person too.
I am selling our old car on a local (very small) online market of our regional news page.

E-Mail was in perfect english too, and was 100% translated into German with the Google Translator (I reproduced that).

This was the E-Mail I received:

Delivered-To: xxx
Received: by 10.112.167.106 with SMTP id zn10csp33131lbb;
Wed, 23 Oct 2013 19:03:01 -0700 (PDT)
X-Received: by 10.14.106.131 with SMTP id m3mr238912eeg.83.1382580180629;
Wed, 23 Oct 2013 19:03:00 -0700 (PDT)
Return-Path: <xxx>
Received: xxx
Received: from mail-la0-f42.google.com ([209.85.215.42])
by mx0.webpack.hosteurope.de (mi021.mc1.hosteurope.de) with esmtp
id 1VZAGJ-00011b-Kl
for xxx; Thu, 24 Oct 2013 04:02:59 +0200
Received: by mail-la0-f42.google.com with SMTP id ea20so1371207lab.29
for xxx; Wed, 23 Oct 2013 19:02:59 -0700 (PDT)
MIME-Version: 1.0
X-Received: by 10.152.225.161 with SMTP id rl1mr184130lac.38.1382580179117;
Wed, 23 Oct 2013 19:02:59 -0700 (PDT)
Received: by 10.152.27.6 with HTTP; Wed, 23 Oct 2013 19:02:59 -0700 (PDT)
Date: Thu, 24 Oct 2013 04:02:59 +0200
Subject: Kauf-Anfrage Sie Anzeige auf http://www.much-heute.de/
From: clay nacly <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=001a113490fa732bd004e9730865
Bcc: xxx
X-HE-Spam-Level: /
X-HE-SPF: PASSED

--001a113490fa732bd004e9730865
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

hallo,
Ich bin interessiert in Ihren Artikel beworben. Sind Sie der urspr=FCnglich=
e
Eigent=FCmer? Wie lange haben Sie es selbst? Was ist Ihre letzte
Preisvorstellung?
Bitte mit Fotos von der Nachricht antworten, falls verf=FCgbar.
Mit besten Gr=FC=DFen

Hello,
I am interested in your item advertised. Are you the original owner? How
long have you own it? What is your final asking price?
Kindly respond with photos of the item if available.
best regards

--001a113490fa732bd004e9730865
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>hallo,</div><div>Ich bin interessiert in Ihren Artike=
l beworben. Sind Sie der urspr=FCngliche Eigent=FCmer? Wie lange haben Sie =
es selbst? Was ist Ihre letzte Preisvorstellung?</div><div>Bitte mit Fotos =
von der Nachricht antworten, falls verf=FCgbar.</div>
<div>Mit besten Gr=FC=DFen</div><div><br></div><div><div>Hello,</div><div>I=
am interested in your item advertised. Are you the original owner? How lon=
g have you own it? What is your final asking price?</div><div>Kindly respon=
d with photos of the item if available.</div>
<div>best regards</div></div><div><br></div></div>

--001a113490fa732bd004e9730865--

I will not answer to this. Just to let you know that "clay nacly" is still active.

Greets
Jan

Thank you so much for updating this thread. Your kindness will help a lot of people. Also, Welcome to Scamwarners.

Bryon