New Scam via fake shipping company...

I almost bought into this one... but the sellers impatience and the fact that i had never heard of the shipping company made me nervous. So, I searched "www.wdeliverylines.com" in google and only one link came up: this site and it saved me, thank you...

Here is the ad on Craigslist: http://calgary.en.craigslist.ca/tix/1011619818.html

It is also on Kijiji: http://calgary.kijiji.ca/c-buy-and-sell-tickets-2-CALGARY-FLAMES-REMAINING-SEASON-TICKETS-W0QQAdIdZ104145960

And the following is the correspondence I had with the scammer so far ("Garry Merkel"):

RE: flames tickets?
From: Garry Merkel ([email protected])
Sent: February 3, 2009 9:06:00 PM
To: [email protected]

I moved here because i like the fishing and the hunting . Here is how i sell the tickets so you can inspect them before i receive payment and so we can both be protected . Go to http://www.wdeliverylines.com , register with them, and get back to me when you have done that. Also read their pages so you know how they work. I will start a transaction with them as soon as you agree. They will take care of the shipping and of our transaction.
I will explain you how it works in steps :
1. I give them the tickets for packing and shipping
2.You send them the money
3. They send you the tickets
4. You receive the tickets and you will have a 3-30 days inspection period to inspect them and check the name on it ( i will receive the money ONLY if you agree to keep the tickets , if not you will be fully refunded by the shipping company )
5. If all is OK and you decide to keep the tickets I will receive the payment

Let me know .

Thanks ,
Garry

--- On Wed, 2/4/09, X <[email protected]> wrote:

From: X<[email protected]>
Subject: RE: flames tickets
To: [email protected]
Date: Wednesday, February 4, 2009, 12:52 AM


Hey Garry,

Please excuse my skepticism, there is just a lot of scams on Craigslist so whenever I see shipping involved I get suspicious. Just want to make sure you are legit... So why did you have to move to Whitehorse??
Also, how would I send you the $1400??

Thanks,

X


--------------------------------------------------------------------------------
Date: Tue, 3 Feb 2009 15:24:50 -0800
From: [email protected]
Subject: RE: flames tickets
To: [email protected]

The tickets must be shipped to you because like i said in the ad i have moved to Whitehorse this is the reason why i sell them . They are hard tickets and i will deliver them to you safe and fast . Let me know .

Thanks ,
Garry

--- On Tue, 2/3/09, X<[email protected]> wrote:

From: X<[email protected]>
Subject: RE: flames tickets
To: [email protected]
Date: Tuesday, February 3, 2009, 11:17 PM


Shipped? Do you not live in Calgary?


--------------------------------------------------------------------------------
Date: Tue, 3 Feb 2009 15:02:20 -0800
From: [email protected]
Subject: Re: flames tickets
To: [email protected]

Hello ,

The tickets are still for sale . I sell both season tickets , all remaining home games included for $1400 total . The tickets are ready to be shipped to the buyer . Let me know by email ASAP if you are interested .

Thanks,
Garry


How should I go about reporting this???

Hi Kingofpei, thanks for posting all that.

We have experienced site killers who should be able to get it sut down soon. It would really help if you could also post the full headers of some of the emails. (It adds authenticity to our reports). To do this from hotmail follow the instructions on the folllowing link. http://www.haltabuse.org/help/headers/hotmail.shtml

This is the first email he sent me after I replied to the craigslist ad :


X-Message-Delivery: Vj0xLjE7RD0wO2w9MQ==
X-Message-Info: JGTYoYF78jEHjJx36Oi8+Z3TmmkSEdPt3Mi6GgUSv7yYKHQgGfDe+2wCW4LegkYQav29Pp7Mm4E=
Received: from n8a.bullet.mail.re3.yahoo.com ([68.142.236.46]) by bay0-mc12-f10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Tue, 3 Feb 2009 15:02:23 -0800
Received: from [68.142.237.88] by n8.bullet.re3.yahoo.com with NNFMP; 03 Feb 2009 23:02:23 -0000
Received: from [67.195.9.81] by t4.bullet.re3.yahoo.com with NNFMP; 03 Feb 2009 23:02:23 -0000
Received: from [67.195.9.107] by t1.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2009 23:02:23 -0000
Received: from [127.0.0.1] by omp111.mail.gq1.yahoo.com with NNFMP; 03 Feb 2009 23:02:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 7752 invoked by uid 60001); 3 Feb 2009 23:02:20 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type:Message-ID;
b=Tg4SUxTqNyIjtiRxHqZxBQjHJpFetgN/PWEt8ZetkIbE2/KnPAEuKhK03hgSMsvpSm+q1/fo88QbBlKeT7lwil/AnIhKNceVJPY/1tP99piQlWbfhgeG8sZHXGPOzLklvLLFGuJWJC8AY2JDXkcYR6Tvg/UBGDGYnRpzoRXRNBc=;
X-YMail-OSG: qvLm5lcVM1kzys6G9zzAEyRBv8PRwE4T73ifm.ag8cuexOgqkKoveUr3ONRu0wBjuRkaRIsOWzXDei2UKS5ge1uN_hxnoubYD7tbYY8UcF.2WbRvwsch8fmyPmZr2XYBMcdN6lHNW2M.WRvSn_T7tvWocJG1Y4KbJWHMrzGXI6BCOcihPPybi1v2SJeSILJAKc3r
Received: from [172.158.181.160] by web111205.mail.gq1.yahoo.com via HTTP; Tue, 03 Feb 2009 15:02:20 PST
X-Mailer: YahooMailWebService/0.7.260.1
Date: Tue, 3 Feb 2009 15:02:20 -0800 (PST)
From: Garry Merkel <[email protected]>
Reply-To: [email protected]
Subject: Re: flames tickets
To: x <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-584858164-1233702140=:4975"
Message-ID: <[email protected]>
Return-Path: [email protected]
X-OriginalArrivalTime: 03 Feb 2009 23:02:23.0926 (UTC) FILETIME=[79B7B560:01C98653]

--0-584858164-1233702140=:4975
Content-Type: text/plain; charset=iso-8859-7
Content-Transfer-Encoding: quoted-printable

Hello ,

The tickets are still for sale . I sell both season tickets , all remaining=
home games included for $1400 total . The tickets are ready to be shipped =
to the buyer . Let me know by email ASAP if you are interested .

Thanks,
Garry






#yiv738494153 .hmmessage P
{
margin:0px;padding:0px;}
#yiv738494153 {
font-size:10pt;font-family:Verdana;}

Is that $1400 total for two seats to each of the remaining 14 home games?


The new Windows Live Messenger. You don=A2t want to miss this.=20


this message was remailed to you via: [email protected]

=0A=0A=0A
--0-584858164-1233702140=:4975
Content-Type: text/html; charset=iso-8859-7
Content-Transfer-Encoding: quoted-printable

<table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" ><tr><td valign=3D"=
top" style=3D"font: inherit;"><DIV>Hello ,</DIV>
<DIV><BR>The tickets are still for sale . I sell both season tickets , all =
remaining home games included for $1400 total . The tickets are ready to be=
shipped to the buyer . Let me know by email ASAP if you are interested .</=
DIV>
<DIV><BR>Thanks,<BR>Garry<BR><BR></DIV>
<BLOCKQUOTE style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(=
16,16,255) 2px solid">
<DIV id=3Dyiv738494153><SPAN style=3D"FONT-WEIGHT: bold; FONT-FAMILY: couri=
er; BACKGROUND-COLOR: #ffff99"><U><FONT color=3D#0000ff></FONT></U><BR></SP=
AN><BR><BR>
<STYLE>
#yiv738494153 .hmmessage P
{
margin:0px;padding:0px;}
#yiv738494153 {
font-size:10pt;font-family:Verdana;}
</STYLE>
Is that $1400 total for two seats to each of the remaining 14 home games?<B=
R>
<HR>
The new Windows Live Messenger. <A href=3D"http://www.microsoft.com/windows=
/windowslive/messenger.aspx" target=3D_blank rel=3Dnofollow>You don=A2t wan=
t to miss this.</A> <BR>
<HR>
this message was remailed to you via: [email protected]
<HR>
</DIV></BLOCKQUOTE></td></tr></table><br>=0A=0A=0A=0A
--0-584858164-1233702140=:4975--

</

Thanks for that Garry (You might want to obscure your email address from the headers).
The headers give me an IP address in Germany. The other topic about this site also leads to Germany, so it's a fair bet that they are the same group.

My name is Michael, and in my postings I have replaced my full name and hotmail address with "x"s.

Garry Merkel is the one trying to scam me.

Of course you are/did, sorry about that. I only got a couple of hours sleep and it's catching up with me.