Displaying Full Headers

Bobby D. Hunter · From: USA

This new twist on the old kited check scam was just sent to several members of the SGF. It now involves "depositing" US Postal Money Orders in your bank and wiring the money to Nigeria, as a favor to the sender, yada, yada.

I have traced the sender to Lagos, Nigeria. If any other members receive one of these please forward them to me as attachments (see instructions in my post down the page), or copy and paste the entire source code into a new message and send it to me.

The original message is pasted below.

Hello Dear Friend,

Good day to you, my name is Susan Bryant,I am an artist with my husband James Bryant,and we are the owner of Sus Art World .I live in London United Kingdom,with my two kids, four cats, one dog and the love of my life my husband James Bryant. It is definitely a full house.

I have been doing artwork since I was a small child. That gives me about 23 years of experience. I majored in art in high school and took a few college art courses. Most of my work is done in either pencil or airbrush mixed with color pencils. I have recently added designing and creating artwork on the computer. I have been selling my art for the last 3 years and have had my work featured on trading cards, prints and in magazines. I have sold in galleries and to private collectors from all around the world.

I am always facing serious difficulties when it comes to selling my art works to Americans, they are always offering to pay with U.S POSTAL MONEY ORDER, which is difficult for me to cash here in London United Kingdom.

I am looking for a representative in the states who will be working for me as a partime worker and i will be willing to pay 10% for every transaction, which wouldnt affect ur present state of work, someone who would help me recieve payments from my customers in the united states.i mean someone that is responsible and reliable,cause the cost of coming to the untied state and getting payments is very expensive, I am working on setting up a branch in the state, so for now I need a representative in the united state who will be handling the payment aspect.

All the payments are in U.S POSTAL MONEY ORDER and my customers will issue the U.S POSTAL MONEY ORDERS in your name and post the U.S POSTAL MONEY ORDER to your doorstep, so all you need do is to take the U.S POSTAL MONEY ORDER'S to your bank and cash them, then deduct your 10% and wire the balance back to me. This business will not cost you any amount of money, my customers will send you the U.S POSTAL MONEY ORDER'S through a courier company and the courier company will deliver the package to your doorstep, as soon as you receive the package from the courier company, just take the U.S POSTAL MONEY ORDER'S to your bank and cash them.

If you are interested, please get back to me as soon as possible via mail:susanartworld_uk01@yahoo.co.uk

I shall be waiting for your quickly response, Thanking you in advance and God be with you.

Friendly
Regards.

Susan Bryant

------------------
Bobby D. Hunter
Security for SGF
Hunting down Slimeball Game
Reporting member of SpamCop

[This message was edited by Bobby D. Hunter on 08 November 2005 at 01:32 PM.]

b0b · From: Cloverdale, CA, USA

Yes, I received one of those this morning. These folks have a lot of confidence in their ability to counterfeit USPS money orders.

------------------

Bobby Lee
-b0b- quasar@b0b.com
System Administrator
My Blog

b0b · From: Cloverdale, CA, USA

Jim Cohen · From: Philadelphia, PA

Bobby D. Hunter · From: USA

b0b said ...

quote:

These folks have a lot of confidence in their ability to counterfeit USPS money orders.

They will counterfit any monetary instrument in existance. US Postal Money Orders have been counterfitted for over a year now. I absolutely advise SGF members who accept US Postal Money Orders for payment for goods to take them to their local branch of the Post Office to cash them, not to your bank.

The Postal clerks have equipment at the counters to scan for and detect forged Postal Money Orders. If the money order is authentic they will cash it on the spot. If it was forged and you bring them the envelope it arrived in they may be able to launch a Postal Fraud trace. Sending counterfit monetary instruments through the USPS is a Federal Offense.

------------------
Bobby D. Hunter
Security for SGF
Hunting down Slimeball Game
Reporting member of SpamCop

Bobby D. Hunter · From: USA

Displaying Full Headers

Jim;
I don't use AOL so I can't give you any specifics, but they do have options available in the email section. Look for an option that allows you to view full incoming email headers, or complete source code, or equivilant terminology. Every other web-based email system I have seen provides an option to display the full headers and source code. If you have trouble finding this option contact AOL Tech Support, or search the email Help index.

Jim also asked what I need to track the scammers. Simply put I require the incoming message headers. To take action against scammers I need the full source code, which contains the headers, the message body and all of the normally hidden html formatting codes.

How to Forward As Attachment

Outlook Express provides these details by opening the "Properties" box. Go to "File > Properties" for an already open message, or right-click on message in inbox list and choose "Properties." When the Properties window opens click on the "Details" tab, then click on the "Message Source" button. A new window will open containing everything I need to trace and report the scam. Right click inside this box and choose Select All, the right click again and choose Copy. Open a new email message, address it to me, type a subject, then right click in the message body area and select Paste. The entire source code and headers will be pasted into the email body. Send it hither with all haste in your dispatch!

It is very likely that all of today's scams will come from the same ISP, in Lagos, Nigeria. If that is the case I'll post a request to stop sending any more of this scam to me (since I will already have them blocked from continued access).

I don't know what to tell MAC users about obtaining the headers and source code, so maybe our SysOp will chime in with those details (He's a MAC user).
Thanks again for all your help.

------------------
Bobby D. Hunter
Security for SGF
Hunting down Slimeball Game
Reporting member of SpamCop

[This message was edited by Bobby D. Hunter on 08 November 2005 at 01:35 PM.]

Mark van Allen · From: Watkinsville, Ga. USA

Hi, Bobby, I just got that same exact one this morning, sent it along to you in case there's anything new... thanks for working so hard on this.
The sadness/genius of these scams is that they work on the level of the victim's own greed- getting something for nothing and all that. I suppose they must work occasionally for us to see so many of them.

Pete Grant · From: Auburn, CA, USA

When I get one of these scams that seem to invariably be from a hotmail, msn, or other free service email address; I forward it --with the full headers as described above -- to abuse@homail.com (or whatever the provider is). That tactic will at least slow the creeps down a little.

Bobby D. Hunter · From: USA

Thank you all for assisting in this Quest. So far all of today's forwarded scams were sent from the same IP address, and same email service, probably by a Nigerian Mugu sitting in an all night Internet Cafe, in Lagos. I have already reported this scam to SpamCop.

I am getting a lot of forwarded emails and rather than replying to each one personally, please accept my thanks here, for all who participate.

------------------
Bobby D. Hunter
Security for SGF
Hunting down Slimeball Game
Reporting member of SpamCop

[This message was edited by Bobby D. Hunter on 08 November 2005 at 11:04 AM.]

J Hill · From: Colorado, USA

Bobby's advice to cash the "Postal" Money Order at the POST OFFICE, and NOT the Bank is excellent advice. The Bank cashes everything, then tells you a week or two later that it wasn't a good check. ONLY the POST OFFICE can verify that its good and will give you CASH for it on the spot.

Also....DON'T SHIP anything until you have that cash from the Post Office in hand.

Jeff Hogsten · From: Flatwoods Ky USA

The last two days I got two second chance offers for the same item I didnt win on ebay from two different pople, both bogus, maybe they are a corporation Jeff

Bobby D. Hunter · From: USA

Can anybody using AOL email tell our other AOL members how to setup their options to display the full headers and source code and how to forward them as attachments, with the complete source code? This would be very helpful as it will enable them to send me scam reports in the format I require for tracking and reporting to SpamCop.

------------------
Bobby D. Hunter
Security for SGF
Hunting down Slimeball Game
Reporting member of SpamCop

Dave Mudgett · From: Central Pennsylvania and Gallatin, Tennessee

This scam is based on the old, tried-and-true idea of telling the mark that they're going to "get something for nothing" - in this case a 10% commission for doing "nothing". Of course, there's no free lunch, which is a good thing to think about before you even think about accepting any kind of offer like this.

The same is true for the other scams like this - someone tells you that they will trust you, a perfect stranger, with a large amount of extra money when paying for an item you're selling, trusting that you will "send it back to them" - you gotta be kidding! These kind of scams are completely transparent, IMO.

The problem here is that many people trust the name of something like a Postal Money Order or Cashier's Check, or a PayPal, eBay, or bank email, but seem to be unaware just how easy it is to forge these. IMO, the even more malicious and dangerous scam is the realistic-looking PayPal, eBay, or bank emails threatening to close or suspend your account if you don't go online and give out personal financial information. I've heard of people who did this and lost a bundle. In the check-kiting scam, they offer obviously phony bait to lure the mark. In the computer info scam, they use the fear from an official-looking threat to coerce a response. I've actually gotten ones that looked like they were from the FBI and the IRS. They were phonies, but I know plenty of people who are outright frightened by such emails. To a large extent, we are "programmed to obey".

Loren Bayles · From: Iowa, USA * R.I.P.

Another heads up guys. I just received a SECOND CHANCE email supposedly from ebay today on an item I DID NOT WIN. I called the seller of the item and asked if they semt it. Their reply was "we never offer a second chance purchase." He checked the item number and it had already been paid for.
I notified ebay immediately. These people
(if you can call them that) don't let any grass grow, as the auction ended late yesterday and I received the bogus email late in the evening.
As usual, buyer beware.
Loren Bayles

Wiz Feinberg · From: Mid-Michigan, USA

Loren Bayles wrote:

quote:

Another heads up guys. I just received a SECOND CHANCE email supposedly from ebay today on an item I DID NOT WIN.

What does this have to do with this thread? Did these second chance emails originate in Nigeria, and did you receive them because you are a member of the SGF? This thread is about Nigerian kited check scams sent to SGF members, using email addresses that were harvested from the various SG forums. If you want to discuss eBay or PayPal scams open a new thread about that subject.

Wiz

Tom Quinn · Posted 8 Nov 2005 5:58 pm

Go Here! Go Here!! Go Here!!! These guys are not only very funny, but they are taking a pro-active stance with these thieves... Funny stuff, and a bit dark.
http://www.ebolamonkeyman.com/

Loren Bayles · From: Iowa, USA * R.I.P.

This post is mainly an appology to the moderator Wiz and all I may have offended with my post that mentioned ebay scam in this thread. I will be more careful to post correctly in the future. Guess I figured a scam is a scam and if that info helps one forum member the heat was worth it.
Loren

Wiz Feinberg · From: Mid-Michigan, USA

Thanks Loren. I wish you would open a new thread (Post a new Topic) about your experiences with eBay scammers. A lot of SGF members are also eBayers and could use a heads-up about second chance scams running wild on eBay.

Wiz

Mark Vinbury · From: N. Kingstown, Rhode Island, USA

Wiz-- Seems to me if your going to blast someone for drifting the topic it should be the first "drifter" not someone who is merely adding their experience to an already drifted subject.

Wiz Feinberg · From: Mid-Michigan, USA

Mark Vinbury eschewed:

quote:

Wiz-- Seems to me if your going to blast someone for drifting the topic it should be the first "drifter" not someone who is merely adding their experience to an already drifted subject.

You're absolutely right Mark. Lemme see...... Jeff Hogsten, consider yourself blasted for being first to post an off-topic reply to this thread!

Now, can we please get back to the business at hand?

All your posts are belong to us!

BTW: There are reasons why forums try to keep threads on-topic, and why off-topic commenters are asked to start a new thread. For one thing it makes it easier for forum searchers to find relevant information when they look over an archived thread if all the comments are on-topic. Another reason is called Netiquet, and a third one is called GoogleBot.

Wiz

Jeff Hogsten · From: Flatwoods Ky USA

Hello

Im with Loren, I dont guess I realized I was off topic, I thought a scam was a scam to, actually I thought my experience was funny and was just trying to share it. Ill have to go back and check the names and see if any of them were from Nigeria, maybe that would make it back on topic. Actually I was also just trying to warn people that are victims of scams and trying to do something about it and thought they would appreciate it. I didnt realize we were being that strict about the topic issue. Ill start a post about the ebay scam since I was the first one to bring it up if someone else hasnt, It does need to be brought to everyones attention.Sorry for causing a problem

Jeff

Jeff

Wiz Feinberg · From: Mid-Michigan, USA

Jeff;
Please do start a new topic about eBay scams. They are prevelant and should be discussed.

Let's all try to keep replies relevant to subjects stated by the original poster (OP), in new topics. Nobody is breaking any rules here. I just want to bring some order to our rapidly expanding sub-forum of the SGF.

When I became Moderator of this forum it only had a few regular posters, and was sort of Geeky (cool!). While the geekdom remains (a good thing) we are discussing some matters here that affect all computer users, and they are starting to notice our little forum. A lot of SGF members who haven't been interested in this section before are starting to look at what is being discussed here and participate for the first time. Some of these folks are just now getting up to speed on Internet threats and scams, and will be reading this forum for advise. Some will be coming here looking for help removing crapware from their computers.

I wish I could create sticky messages and sub-catagories that are specific to various topics, but the sofware we are currently using doesn't have that capability. That's why I am asking everybody to try to keep on-topic when replying to threads.

Thanks for putting up with me.

Wiz

Forum Index > Computers		Next oldest topic :: Next newest topic