Clara Bell [email protected]

This scammer is targeting people who have businesses/sales online.

I received the following email from someone who smartly inquired here at ScamWarners about whether or not this was a scam. I have removed personal details to keep the person anonymous.

Monday, January 12, 2009 4:38 AM
From Clara Bell Mon Jan 12 04:38:41 2009
Return-Path: <[email protected]>
Authentication-Results: mta100.mail.re4.yahoo.com from=yahoo.com; domainkeys=pass (ok)
Received: from 68.142.237.91 (HELO n6.bullet.re3.yahoo.com) (68.142.237.91) by mta100.mail.re4.yahoo.com with SMTP; Mon, 12 Jan 2009 04:38:43 -0800
Received: from [68.142.230.28] by n6.bullet.re3.yahoo.com with NNFMP; 12 Jan 2009 12:38:42 -0000
Received: from [67.195.9.83] by t1.bullet.re2.yahoo.com with NNFMP; 12 Jan 2009 12:38:42 -0000
Received: from [67.195.9.111] by t3.bullet.mail.gq1.yahoo.com with NNFMP; 12 Jan 2009 12:38:42 -0000
Received: from [127.0.0.1] by omp115.mail.gq1.yahoo.com with NNFMP; 12 Jan 2009 12:38:42 -0000
Received: (qmail 76087 invoked by uid 60001); 12 Jan 2009 12:38:42 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type:Message-ID; b=A5bvSWMuAJ9KOVik0F02uZy7wY3AySdCRIQ1JqwJAyTm7Pb8zfLwIe/0jwzIntfvheQZjNWauIcEi/RQ5jv/5CKp4hw
ULkQVLxaj5ve49QOMoqWMyA8/O7lVopJCkztoDCrhkk/cAvd9Dw/Mi0jFXAIf0TyAmALSXX0HuT1h0iY=;
Received: from [62.173.56.69] by web111214.mail.gq1.yahoo.com via HTTP; Mon, 12 Jan 2009 04:38:41 PST
Date: Mon, 12 Jan 2009 04:38:41 -0800 (PST)
From: This sender is DomainKeys verified Clara Bell <[email protected]> View contact details
Reply-To: [email protected]
Subject: Re:
To: [email protected]
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-366127902-1231763921=:76071"
Message-ID: <[email protected]>
Content-Length: 4867


Hi there,
Thanks for your quick response and i really appreciate it. My name is Clara bell,i am located in WA ,I am a retail buyer and i am deaf and also a single mother of 2 kids . I got your sales and contact from Avon and I would like to purchase this Items with you on a dealership and not with the company cos i am new on computer and i don't operate credit card that is why am dealing direct with you .
All the product i want to order from you is for New year sales in my shop.I will want you to get back to me with the total cost of the listed item i want to order from you


- 8 Pieces of ANEW CLINICAL Instant Face Lift 464-060
- 10 Pieces of ANEW Cleanse 2-in-1 Anti-Aging Gel Cleanser 532-943
- 12 Pieces of ANEW ULTIMATE Age Repair Elixir 390-603
- 10 Pieces of ANEW Daily Resurfacing Cleanser 426-374


Please kindly let me know if there is any discount you want to give me on my first order, and also you don't need to worry about the shipping and the pick up of the order from your location that will be handle through my Shipper after you have receive the funds for the order. And as for the payment , i will be paying you through a Cashier check or Money Order. I will want you to get back to me with your full name and address including your phone number so that i can arrange on how the payment will be mail out to your address for the order through my financial bank. Hope to hear from you ASAP.

Regard
Clara Bell

Note that "Clara" claims to be in the US, but the originating IP for the email is: 62.173.56.69 = Lagos, Nigeria

Aside from the fact that the language use is obviously not American, here is the crucial part of the email that shows with certainty that it is a scam:


you don't need to worry about the shipping and the pick up of the order from your location that will be handle through my Shipper after you have receive the funds for the order. And as for the payment , i will be paying you through a Cashier check or Money Order.


The way the scam works is that the scammer will send you a check or money order for more than the cost of the items, with the overage to pay for the shipping fees. They will have to use their own shipper because of course, there is no shipper. The scammer will play the role of the shipper. They will tell you to deposit the check and wire the extra money through Western Union to the "shipper" to pay the shipping fees. You will do this and then eventually the check will come back as fraud (either fake or forged on a stolen account). Your bank will hold you responsible, meanwhile, you've wired out the "shipping fees" to a criminal using a fake name.

Other flags here are the mention of being deaf and a single mom, which most real people wouldn't include in an email to ask about a purchase.

Good job on the part of the person who received this in checking it out, and thanks to her for letting me post it to help others.