Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by onican Sat Nov 06, 2010 5:38 am
I got scammed
His name is Shawn Hayes,he said that he lives in Nashville, Tennessee. He gave me his phone number in US +16157198031 we talked many times on the phone
He called me 5times.
He is now in KL,he said he has business in Malaysia, and he called me from there also.
We chatted on cam 3times. I saw him as a white guy.
But I have a bad feelings about him.
Now he asked me for money,I didn't send,but she threaten me he will post my video cam when we are online when I was semi nude
What should I do? He said that he knows my name,the company where I'm working now.
He said that he will make me lost my job.
What should I do?
Advertisement

by David Jansen Sat Nov 06, 2010 6:11 am
Welcome here onican.

In most cases like this, where the scammer is trying to blackmail their victims, they are just bluffing. They don't want to make the effort to really post these video footage somewhere, or send it to people who know you. I know you are embarresed by this, but to beat this scammer, you can be open to your employer, and tell him about this. That way you have taken away the tools to blackmail for the scammer. Furthermore, if this scammer really lives in the USA, you can go to the police, and report him for blackmailing you. But it is likely he never lived in the USA. Did he write emails to you? If so, could you post them, preferably with the full headers. Then we have a good chance of locating this scammer. The phone number he is using seems to be a Nashville number, but that doesn't prove he really lives there.
Oh, and if you don't know how to post the full headers, just ask.

Being a victim doesn't mean you stand alone. We're here to help you.
by onican Sat Nov 06, 2010 11:51 am
Thank you for replying me David.
Yes he wrote me
I can give u his email. Anyway,How to post with full header?
by Chris Fuller Sat Nov 06, 2010 1:02 pm
Hi onican,

The way to find the headers depends on which email account you are using. For example:

Yahoo:

1. Go to Inbox.
2. Click the RIGHT-mouse button on the 'subject' (name/title) of the email.
3. LEFT-click on the bottom option of the menu: 'View Full Headers'.

Or, in the older version of Yahoo:

1. Go to Inbox and open one of the emails you would like the headers for, as if you are going to read it.
2. Go to the bottom of the letter. On the bottom-right is a link, 'Full Headers' - left-click on that.

Gmail:

1. Open the mail you wish to obtain the header for.
2. At the top of the mail, on the right, next to the little box marked 'Reply', you will see a downwards pointing arrow. Click it.
3. Now choose 'Show Original'.

If you are using a different mail account to one of those, please just say, and we should be able to help you find the headers in that account too.

You can then copy and paste the headers into a post, and frequently this will show the 'IP Address' which the email was sent from. It is a set of numbers, but they can tell us which country the sender was located in when the email was sent to you.

Please look carefully through the headers before posting, however, and remove your own name and email address - they may occur in several places.
by onican Sat Nov 06, 2010 10:34 pm
Ok Chris,
i got it
this is the result

Delivered-To:
Received: by 10.231.200.199 with SMTP id ex7cs8224ibb;
Sat, 23 Oct 2010 06:06:32 -0700 (PDT)
Received: by 10.231.161.209 with SMTP id s17mr3658642ibx.118.1287839192080;
Sat, 23 Oct 2010 06:06:32 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web114618.mail.gq1.yahoo.com (web114618.mail.gq1.yahoo.com [98.136.183.95])
by mx.google.com with SMTP id a6si4388770vci.166.2010.10.23.06.06.30;
Sat, 23 Oct 2010 06:06:31 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.136.183.95 as permitted sender) client-ip=98.136.183.95;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.136.183.95 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: (qmail 73067 invoked by uid 60001); 23 Oct 2010 13:06:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1287839190; bh=TVqL51yKRHqY/QzaRFCoagQVdFJknEB2S0I86Njp++4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=jh/HdGL5OEu+/NPkznoNJnZwRqqDN2BHrd/WvK53D0+4fM4XJMe2jno34CzWRYO7vijwGppzj/G551jrNaqlU0MuiwfjHcQk8qiBT9iYqNaNRhXFDmn7NdwI5BoyW+AObA1ysJep+ldSSd+r19DZSPiIRq5xmOvXXPneMPviHV0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=rslbrBRRajA0bYFqFIwmPffdBjDWlQIT2a0NjiSZA4ini4Ij4XqYwTprfNQxFyWETixAMth9VbfJaui+E7D+ETAryafrkNQaRM97UtzXleCsJMwPSLIgie7yYfwiggDp5Gm+A7NOMusmZGuQpInUetNWzVHDiOBdvHX0noTmtHM=;
Message-ID: <[email protected]>
X-YMail-OSG: zA3ABU8VM1l.w2D4cEIdYAb9DQDAj08vK8Z37N4vzdc2.Vx
0vhCgENiMxEvNFLYOC_VVlARiWi6X7AyeJPRCjYOvUISFgo29SndzYW59GKv
UJzDNayTwRo57HSkRNZsG6_8tXlJ00SOfuYHpV1flqtpWoa4lg9ihj6r5Eia
zFroveZZLXVpVx4P_QUJizdeUF1TDDoNxHZf1EWSI1E92v9_ogkChR0REkMT
mq75yqjebaJFnIGlMU.HSOEYpsjFdudHm4C5iYROY9pzUjPism4Pybo3kvhp
hoTBODDc5VE95
Received: from [115.134.58.70] by web114618.mail.gq1.yahoo.com via HTTP; Sat, 23 Oct 2010 06:06:29 PDT
X-Mailer: YahooMailClassic/11.4.9 YahooMailWebService/0.8.107.284920
Date: Sat, 23 Oct 2010 06:06:29 -0700 (PDT)
From: Shawn Hayes <[email protected]>
Subject: hello dear
To:
In-Reply-To:
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-24943370-1287839189=:72364"

--0-24943370-1287839189=:72364
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable


Hello dear,
=A0=A0 =A0How are you doing?i just called you and you didn't pick up please=
check your number to see if you gave me the right number this is the numbe=
r you gave me=A0.let me know.
Shawn
--- On Fri, 10/22/10, wrote:

From:
Subject:=20
To: [email protected]
Date: Friday, October 22, 2010, 3:26 PM


Powered by Telkomsel BlackBerry=AE=0A=0A=0A
--0-24943370-1287839189=:72364
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" ><tr><td valign=3D"=
top" style=3D"font: inherit;"><br>Hello dear,<div><br></div><div>&nbsp;&nbs=
p; &nbsp;How are you doing?i just called you and you didn't pick up please =
check your number to see if you gave me the right number this is the number=
you gave me&nbsp;+62 812 891 2626.let me know.</div><div><br></div><div>Sh=
awn<br>--- On <b>Fri, 10/22/10, <i>&lt;&gt;</i></b> wrote:<br><blockquote style=3D"border-left: 2px solid rg=
b(16, 16, 255); margin-left: 5px; padding-left: 5px;"><br>From: Subject: <br>To: heyes2010@yahoo=
.com<br>Date: Friday, October 22, 2010, 3:26 PM<br><br><div class=3D"plainM=
ail">This is my number br>Powered by Telkomsel BlackBerry=
=AE</div></blockquote></div></td></tr></table><br>=0A=0A
--0-24943370-1287839189=:72364--
by Chris Fuller Sat Nov 06, 2010 11:26 pm
This is the part that shows which country the email was sent from:

Received: from [115.134.58.70]

That shows that the email was sent by someone in Malaysia. You can check it yourself by Googling

IP locator

and entering the number 115.134.58.70 into the box on any of the websites - some are easier to use than others, and some are more accurate than others - but you will see that the sites will tell you that that email came from Malaysia.

The scammer told you that he had business in Malaysia - and often scammers do mention where they are really living, in case they need to request that you send money directly to their country. Though sometimes they have colleagues in other countries who will receive money for them.

As David said, scammers don't usually carry out threats about posting your video or exposing you to your employer. The threat is just another way to try and make you send money. Lots of people make intimate videos for their boyfriends, and that is all that you thought you were doing, too. It is a horrible thing to be threatened with - but it is not an unusual threat. Scammers will make all kinds of threats to people if they think it will provoke them into sending money.

The scammer is probably writing to many other people as well, and trying to trick them into sending money. If you totally ignore him, and do not answer any more of his emails, pick up his phone calls, or talk to him on a Chat programme, he will go away, and instead target others who seem that they might send him money.

It is a difficult time for you, while you are worrying about this. Please talk to at least one friend or family member who you feel able to share this time with. And totally ignore the scammer - if necessary, you can change your email address and telephone number, so he doesn't know where to find you anymore. He will go away, if you completely ignore him.
by onican Sun Nov 07, 2010 8:22 pm
Thank you for your advise Chris.
Anyway,I still curious,when we chatted on cam,I saw he is a white guy.
I don't understand, how could he did that?
by Dotti Sun Nov 07, 2010 9:32 pm
Can you post the photos he used and some of his letters?

Webcam can be faked. Some scammers buy software that can be used to edit video and the scammer can just push buttons to make the character on the screen do what he wants. We see it more often with scammers pretending to be females-they use videos of porn actresses this way--but if there is video available, it can be done for male characters too.

Need to post photos? http://scamwarners.com/forum/viewtopic.php?f=28&t=3219
Are you a victim of a romance scam? Read here for advice and FAQ's.
by onican Tue Nov 09, 2010 7:25 pm
I'm trying to post my pictures,but can't
How can I post pictures in here?

Who is online

Users browsing this forum: ClaudeBot and 20 guests