Scammers and eBay
I purchased an item on eBay today. Shortly after the item ended (which I won), I get an email from a googlemail.com address. I’m a little suspicious since the title of the email is: Don’t Pay For My Item,Please Read This Email – Item# XXXX. I figure whatever and I read it. The contents are below:
Delivered-To: me
Received: by 10.151.136.13 with SMTP id o13cs247840ybn;
Tue, 17 Mar 2009 11:37:49 -0700 (PDT)
Received: by 10.150.148.1 with SMTP id v1mr625442ybd.40.1237315068707;
Tue, 17 Mar 2009 11:37:48 -0700 (PDT)
Return-Path: <nobody@moccasin.propagation.net>
Received: from moccasin.propagation.net (moccasin.propagation.net [66.34.170.1]) REALLY? AND YET THIS EMAIL IS FROM EBAY SUPPOSEDLY. NOT THEIR IP!
by mx.google.com with ESMTP id 10si607168gxk.12.2009.03.17.11.37.47;
Tue, 17 Mar 2009 11:37:48 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of nobody@moccasin.propagation.net designates 66.34.170.1 as permitted sender) client-ip=66.34.170.1;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of nobody@moccasin.propagation.net designates 66.34.170.1 as permitted sender) smtp.mail=nobody@moccasin.propagation.net
Received: from moccasin.propagation.net (localhost [127.0.0.1])
by moccasin.propagation.net (8.13.6/8.13.6) with ESMTP id n2HIbkja008093
for <me>; Tue, 17 Mar 2009 13:37:46 -0500
Received: (from nobody@localhost)
by moccasin.propagation.net (8.13.6/8.13.3/Submit) id n2HIbkjn012705;
Tue, 17 Mar 2009 13:37:46 -0500
Date: Tue, 17 Mar 2009 13:37:46 -0500
Message-Id: <200903171837.n2HIbkjn012705@moccasin.propagation.net>
To: me
Subject: Don’t Pay For My Item,Please Read This Email – Item# XXXX, Nintendo Wii Game Console + Games
From: eBay Member: hawkexpress <sm-member@ebay.com> NOT A REAL EMAIL ADDRESS – NICE TRY THOUGH!
Reply-To: bwm590@googlemail.com
Content-Type: text/html; charset=iso-8859-1
Dear me.
You are the winning buyer for the Nintendo Wii Game Console + Games.
Thank you for your business.Just reply this email as soon as possible for new payment instructions(don’t pay until you contact me). We can’t use paypal right now,because we change the credit card account number in my paypal account & will be active in 10 days .If you have already sent the money,please cancel your order,in any case contact me for new payment instructions . We will make the transaction through eBay system.
Your purchase:
Item title: Nintendo Wii Game Console + Games
Item number: XXXXXUS $XXX.XX insurance
Included in the total price (optional)
US 0.00 Sales discounts
(-) or charges (+)
US 00.00 shipping/handlingPlease send me your shipping address & I will contact ebay for a new invoice with new payment instructions.
Again, thank you for your business.
I decided to play along. First, I wrote the buyer via eBay’s mail system. Sure enough, no problems with their Paypal account. Here’s the dialog between the scammer, bwm590@googlemail.com named John Michael and myself:
Me:
Hello,
Janice from your seller ID responded to be via eBay and the invoice
was processed. She said there were no problems with Paypal. So the
payment was submitted.
Scammer John Michael:
In your paypal account it is an option were you can cancel the payment.
Me:
You can contact me via eBay if there is a problem, not via personal mail. Thank you.
Scammer John Michael:
You must complete the payment with the invoice that you recive from eBay and in max 5 dais your payment from paypal will return to your account. I can not use my eBay account to speak with you and that wai i email you in your personal email address.
Thanks for understanding.
Me:
That’s odd. It’s against eBay’s Terms of Service to communicate and do transactions outside of their website. Funny, you have an eBay account (let’s play your game for a minute and assume you do for the sake of an argument), and yet you cannot log in and communicate with me there? Odd! Perhaps you should contact eBay about logging into your account then! I can only wonder how you’re able to post items for sale and yet cannot log in via their website.
Heard of spell check? If you’re going to fraud someone, you might want to invest in learning English too. Have a pleasant day!
Scammer John Michael:
I am sorry but i can not do any think for you i must know if you will be able to complete the payment because i have someone else waiting for my answer and I must now.I told you the money that you sent by paypal will be sent back in about 5 days.
Thanks.
Me:
Can you translate this to English please? Thanks!
And no response from the scammer, bwm590@googlemail.com. Oh well. Just be warned if you’re contacted by this guy that he’s a total fraud. Perhaps he’s busy trying to translate what he wrote to me.
*************************
Update March 18, 2009
Seems like he still wants to play games with me. I received the following email from him and decided to dumb it down a bit and play some games with the scammer. Transcript of the email session below:
Scammer John Michael:
On Mar 18, 2009 10:19pm, John Michael <bwm590@googlemail.com> wrote:
You must complete the payment with the invoice that you receive from eBay and in max 5 days your payment from paypal will return to your account.
Thanks for understanding
Me:
Where do I send the money? You have Western Union? I need winning item fast, dear sir. Please do the needful ASAP as this is an URGENT request.
Don’t worry. Your scam has been exposed.
First off. How dumb do you need to be? I called this guy out twice and he is still playing the game and thinking I am sending him money?! Let’s start misspelling stuff and stooping to his level.
Scammer John Michael:
You have to send the money to the agent details that is in the invoice.
Me:
Never received invoice from u. Pls email 2 me at this addy.
Scammer John Michael:
You have to send the payment from your account or with cash from any Bank to our agent.
This are the agent details were you must send the payment:Bank Account( IBAN ): RO10INGB0000999901426922
Swift: INGBROBU
Bank Adress: ING Bank Amsterdam Sucursala Bucuresti
First Name : Emanuel
Last Name : Mustata
Adress: Mihail Kogalniceanu #21
City: Dragasani
State : Valcea
Zipp/Code: 245700
Country: Romania
Me:
I WIRE TRANSFER MONEY TO YOU IMMEDAITLEY. PLS CONFIRM.
Scammer John Michael:
Please email me as soon as you complete the payment to start the delivery.
Me:
Payment is complete. Do you knot recieve it? I resend it.
I mean why not? It’s not like I am actually sending him money and if he gets his hopes up twice so I can crush them later on, that’s fine by me!
Scammer John Michael:
We need the details like they appear on the Money Gram receipt .
Sender’s full name and addres : Receiver’s full name and addres : Amount sent :
Me:
TREAT AS URGENT
sender
John Michael
200, quai Charles de Gaulle
69006 Lyon
Francerecipient
First Name : Emanuel
Last Name : Mustata
Adress: Mihail Kogalniceanu #21
City: Dragasani
State : Valcea
Zipp/Code: 245700
Country: Romaniaamount
301.42$
I wonder if he knows that’s Interpol’s address? Oh well. Perhaps they will get a Wii! I “sent” him a little extra money too just for good measure since he’s learning English.
Scammer John Michael:
Dear customer, I need the copy of the invoice that you receive when you complete the payment to check if the payment it was made correct.
Thanks in advance!
Me:
never received invoice, seller. payment was made correct.
Scammer John Michael:
Yes but the agent it cant pick up the money with out this copy of the document .
Thanks for understanding.
We’ll leave it at that for now. I’m sure he’ll bother me again in a few days.
*************************
Update March 19, 2009
He’s still asking for the ‘official document’ of my fake payment. So far he has asked three times in the past 5 hours. Sounds like he’s getting a little desparate!
*************************
Update March 20, 2009
Silly me to think he’d just give up! He’s still asking if I have received the ‘official document’ from whomever I supposedly paid at his “company.” Ha! This guy’s relentless for not getting a dime from me!
*************************
Update March 23, 2009
He asked me if I was still interested. Odd, too, considering I received the item from the real seller in the mail today. I told him he was a scam artist (I use the word artist loosely considering this idiot’s intelligence) and hopefully he’ll shut up. If you have headers for the emails from him, feel free to forward them to me and I’ll bring them up to the correct people to get this guy. (admin@siriusaddict.com is my email).
Posted: March 17th, 2009 under Personal.
Comments: 14
Comments
Comment from John
Time: March 17, 2009, 10:13 pm
I just ordered an HTC Touch Pro today on ebay and I got the same exact e-mail (with the details changed), and it is obviously a scam. Be careful!!!
Comment from Hein
Time: March 18, 2009, 12:08 pm
Ditto,
Bought an item, and seconds later I received a much similar Email “(don’t pay until you contact me).”
The good news is that Hotmail actually flagged it.
So how did they link the substitute name NxxxM (X) which Ebay lists with the Email address i use for Ebay?
Comment from Ryan
Time: March 18, 2009, 7:04 pm
Yeah, that’s my question as well. I mean it’s pretty easy to get my email address but how they got it and why they went through the effort, if any, to get it is a bit baffling.
Either way, glad to see people are realizing it’s a scam and to only message sellers via eBay’s system, not a third party email address
Comment from Advanced VPS
Time: March 19, 2009, 12:04 am
Hi,
I got a similar email from the scammer today and immediately smelt something was wrong. Then I came across your post by searching his email-id in google.
Reported his email as phishing attempt.
Thanks
Comment from Alma
Time: March 19, 2009, 10:08 am
I got scammed by this idiot today…well almost…my coworkers saved me!
Aa
Comment from Movingfellow
Time: March 20, 2009, 7:50 pm
Thank you for posting this. I got the same email today and found your site after Googling his email address. I was able to promptly tell the worthless scumbag to go to hell.
Comment from michael
Time: March 22, 2009, 12:55 pm
THANK YOU ! You are my current internet hero! Great job of scamming the scammer ! I am considering messsing with him for what he is trying to do to me on ebay.
Comment from AMT
Time: March 22, 2009, 1:26 pm
Thank you so much for these comments, he did the same thing to me. I am definetly reporting this. Seriously someone needs to stop this guy…..
Comment from Kathy
Time: March 22, 2009, 11:04 pm
I had a few choice words for this guy myself. I also let him know that my 4 year old can write/speak better English than he can.
Comment from XT
Time: March 23, 2009, 1:47 am
I got one of these myself, didn’t believe it for a second, but checked with the seller immediately, just in case.
You should always report this kind of thing. To eBay, and I also recommend reporting it to the U.S. FBI at the Internet Crime Complaint Center: http://www.ic3.gov
Log as much detail, including the IP address if you can (eg: run it through SpamCop).
Comment from ebayer
Time: March 23, 2009, 3:23 pm
I received this same bogus email after auction close, from same email address. How did they get ebay ID and email address??
Did you use sniping service? I used auctionstealer.com to place the bid.
Comment from Ryan
Time: March 23, 2009, 4:05 pm
Nope, didn’t use a sniping service. Just went to eBay and placed a bid. If anyone wants to forward some headers to me, I’d be glad to take the complaints to someone who will do something about it. Feel free to email me at admin@siriusaddict.com
Comment from hroon
Time: March 24, 2009, 6:38 pm
got the same email! wtf. will be forwarding to you if it helps!
this worries me, have ebay accounts been compromised?!
Comment from Andrew
Time: June 15, 2009, 3:11 pm
I got that same name n adress! It’s bout a Samsung LCD TV and that his contact details:
Seller Information:
First name: Emanuel
Last name: Mustata
Address: Via Luigi PULCI 13
City: Milano
Zipp/Code: 20126
Country: Italy
Name:
Emanuel Mustata
Payment Details:
Address: Street Mihail Kogalniceanu
City: Dragasani
Zipp/Code: 245700
Country: Romania
Iban: RO76RZBR0000060011732630
Swift code: RZBRROBU
Bank name: Raiffeisen Bank
I’ve never paid anything! Stop that crime!
Nice greets from Austria!
Andy










Write a comment