skip to content
rss Subscribe print Printer Friendly Share this Page

Scam

The British newspaper Mail Online reports that a local postman was scammed out of his life savings by an an attractive female "friend" he met on the popular online community site MySpace.

Saving the Damsel in Distress

The postman, Shane Symington, seems like a nice fellow who was simply trying to help a fellow human being. He befriended an American woman named 'Angela Gates' on MySpace in 2007. After a few weeks of friendly banter, the woman began asking for money to pay for her mother's funeral and for medical expenses.

What could Shane do but rush in and save her from her predicament? She needed him!

In order to hit every soft spot Shane had, 'Angela' also told him she needed more money to pay for legal fees that would allow her to inherit a $2 million piece of property. Anyone who's studied Advanced Fee Fraud scams will recognize this kind of story.

Damsel Turns Out to Be a Dude

Unfortunately, it appears Shane hadn't studied much about scams. It turns out this attractive, bikini-clad and potentially rich American woman was really a Nigerian man. Surprised? I doubt it.

After emptying Shane's bank account the Nigerian man even contacted Shane and admitted his fraud, but the story doesn't end there.

From the Mail Online:

He was then contacted by another woman, again from America, claiming she had also been caught in the scam.

He said that he then helped pay her legal expenses and the cost of hiring two ex-FBI agents in an attempt to regain the lost money for both of them.

Mr. Symington said that he now believes that these people are also involved in the scam. He said that he had paid out more than £30,000 to them, bringing his total losses to more than £130,000.

Ouch!

The lesson to learn here is that when this scammers find a victim, they hit them with multiple scams from multiple people until they have milked their target completely dry.

What does Shane have to say about all of this:

I feel sick from it all, I feel disillusioned, they have just played on my good nature. I've lost my life-savings, I have two loans and credit card debts, I'm in huge debts because of all of this.

You just can't trust anyone on the internet. I want to warn people but I know I won't be the last to fall for something like this.

The police in Hampshire working the case said that there's little they can do to recover the money because of the current political situation in Nigeria.

What Can We Do?

These stories are hard to read. We can't believe someone can be so easily manipulated. So what can we do? I suggest you help your friends, relatives, and neighbors by educating them about these kinds of scams. Shane said it best - "I won't be the last to fall for something like this."

Don't let it happen to someone you know.

Read the whole story (w/ pics of the lovey 'Ms. Gates' on the Mail Online web site.

January 16, 2009

It's a new year and — what do you know — there's a new tactic in the endless quest for new and improved phishing schemes from scammers.

Here's How It Works

Researchers at Trusteer recently released a security advisory detailing this new phishing technique. Rather than using email to lure unsuspecting victims into clicking over to a fake web site, this technique uses what Trusteer is calling "in-session" attacks. Here's a typical scenario:

  • A user opens a browser and logs into their banking web site
  • Leaving that browser session open, they open another browser window to check on their Webkinz or some other web pursuit.
  • After a time, a pop-up window opens — supposedly from their bank web site — asking for them to re-enter their username and password.
  • Since the user has recently logged in to the targeted web site, they are more likely to enter their info.

That's it! Their login credentials are now in the hands of the scammers.

What Makes It Possible?

A few things have to be in place for this to work. First, the scammers need a compromised web server in order to install the malware. Fortunately, there are lots of those around. Second, the malware has to be able to determine which other sites the user has visited. This is possible based on a vulnerability in the JavaScript engine used by Internet Explorer, Firefox, Safari, and Chrome.

From Trusteer:

The source of the vulnerability is a specific JavaScript function. When this function is called it leaves a temporary footprint on the computer and any other website can identify this footprint. Websites that use this function in a certain way are traceable. Many websites, including financial institutions, online retailers, social networking websites, gaming, and gambling websites use this function and can be traced.

How Can You Protect Yourself?

Well, the planets have to align a bit to pull this scam off and it's likely the JavaScript vulnerability will be patched in the near (hopefully) future.

Until then, Trusteer recommends the following preventative measures:

  • Have an up-to-date anti-virus installed
  • Be suspicious of any pop-ups asking you to login
  • and most of all...

  • Log out of banking or other sensitive sites before heading over to Pogo.com for your bingo fix.

Learn more about this attack by downloading Trusteer's security advisory.

January 15, 2009

WEBex INCORPORATION LOTTERY(AUSTRALIA).
678 NIN NAMARAL STRAATWEG 5009GL.MELBOURNE AUSTRALIA.

WINNER NO: 5

ELECTRONIC MAIL AWARD WINNING NOTIFICATION AWARD PRESENTATION CENTER

DATE:5/12/2008.
Ref:4758961725
Batch No:70564943902/188
Winning no:FGNGB2701/LPRC

CONGRATULATIONS

Hello Lucky Winner,

We are delighted to inform you of your prize release on the 5th of DECEMBER, 2008 from the WEBex INCORPORATION LOTTERY program.

Which is fully based on an electronic selection of winners using their e-mail addresses, your name was attached to ticket number 47061725 serial number 07056490902 batch number 7741137002.

This batch draws the lucky numbers as follows 5-13-33-37-42 bonus number 17, which consequently won the lottery in the second category. You here by have been approved a lump sum of $500,000.00(US DOLLARS) in cash credit fileref ILP/HW 47509/02 from the total cash prize of $2,000,000.00(US DOLLARS) shared among lucky winners in this category.

All participant were selected through a computer balloting system drawn from Nine hundred thousand E-mail addresses from Canada,Australia,United state,Asia,Europe,Middle East, Africa and Oceaniaas part of our international promotions program which is conducted annually.This Lottery was promoted and sponsored by conglomerate of some multinational companies as part of their social responsibility to the citizens in the communities where they have operational base.We hope with part of your prize, you will participate in our end of year high stakes for $1.3Billion(US DOLLARS) international draw.

HOW TO CLAIM YOUR PRIZE: Simply contact our fiducial agent,

Name:Dr Lati Umar
Email:dr.latiumar@webportal.com.my

Please quote your reference,batch and winning number which can be found on the top left corner of
this notification as well as your full name,address and telephone number as to help us locate your fileeasily.

For security reasons, we advice all winners to keep this information confidential from the public until your claim is processed and your prize released to you.This is part of our security protocol to avoid double claiming and unwarranted taking advantage of this program by non-participants or unofficial personnel.

Note: All winnings MUST be claimed on or before the One month. Other wise all funds will be returned as unclaimed and eventually donated to charity .

Congratulations, once more from the entire Management and Staff of Webex LOTTERY Co-operation to all our lucky winners this year.

Thank you for being a part of this promotional lottery program.

Yours Faithfully,
co-ordinator.

December 22, 2008

Selling puppies via Craigslist - or any classified ad - can be hazardous to your bank account.

Janet from New York sent us this story about a response to an ad she placed in an online classifieds web site. Here's how it went down:

You have received a reply to your pet ad.

Hello,

I am Dan and am writing you because am much interested in your puppy for sale on the classified ads. Kindly email me the details with the actual price and the health condition of the pup. Hope the pup is still in a good state. Looking forwarding to hearing from you soon. Have a nice day.

Mr Dan

Not a bad start. His english isn't great, but that's okay. Here's Janet's reply:

Hi Dan,

I have two puppies left. The boy and the black and white girl. They are very healthy and quite active. They are $475 each. They will have their first 5way shot and have been dewormed. You can visit them if you like. They are available to leave the nest anywhere from the 19th to the 22nd. On the 22nd they will be 8weeks old.

Let me know. Don't worry about their health. I am taking good care of them. They will also come with papers.

Thanks,

Janet

A reasonable response and the price seems right (okay, I don't know anything about puppies, but I'm guessing these are pretty nice for $475 each). Here's where things turn south...

Hello

Thanks for your email. I'm okay with price of the female puppy for $475. I will be making the payment via Certified Check drawn from a United State of America bank. I will making a dual payment which will cover the payment of the puppy and little part of the shipping of the puppy to its final destination.

Furthermore, as soon as you receive payment, you need cash to deduct the money for the puppy and wire the rest to the shipper who will be available for pickup at your end. In addition, you need to deduct $90
for more proper vaccination, Purina puppy chow and vet check before the pickup. Get back to me with the below information in order to get the payment mailed:

Name to be on the check:
Address to be mailed to ( No P.O Box Please)
Phone Number(s) I can possible reach on ( Morning/Day/Evening)

I just had to let you know how lucky the pup is going to be because the pup is coming to a good home with a spacious fence yard and tender care of family of two kids and Pet Lover.. I will be happy to send you pictures of the puppy development. The shipper will be taking good of him by giving a good hospitality and making a sound delivery to me.

Moreso, I will be glad if you can scan a copy of the AKC registration document and other paperworks for me, i.e if available. Get back to me as soon as the possible so I can effect the payment.Thanks and I look forward to reading from you.

Regards,

~Pups are my World~

Janet could sense that something was very wrong here. What were the warning signs?

  • Payment via check. - in an online transaction, a check should be considered worthless. Scammers are experts in creating forged checks. Your bank will initially accept the check, but will later discover that it's a forgery and will remove the funds from your account.
  • Extra payment - this is a huge warning sign. Any time a buyer wants to send you more money than you're asking for, alarm bells should go off. They're hoping you will deposit the "extra money" in your bank account and then wire your money to an accomplice. Not only will you not get paid for your merchandise, you'll actually end up paying them money. Getting scammed twice instead of once is not fun.
  • Payment via wire - thieves love being paid via wire because it's almost impossible to track and recover the money. Never pay by wire.
  • The use of emotion - the scammers play on the sellers feelings by talking about how they'll care for the puppy, take pictures of the puppy, put the puppy in a nice, big, safe, fenced yard, etc. Emotion is a powerful tool in distracting you as they steal your money.

This story had a happy ending. Janet sensed that something was wrong and didn't send the scammers anything. We're sharing the story here with the hope of educating other people placed in the same situation.

NOTE:This is our first in an on-going series of stories direct from visitors of Fight Identity Theft. If you'd like to submit your story, go to our contact page and select "I'd like to share my story."

December 15, 2008

The Better Business Bureau of Chicago and Northern Illinois has released its top 10 scam list for 2007. Even though this is a regional list, it fits nicely with what we're seeing here at Fight Identity Theft:

1. Check Scams

Would-be victims receive a check in the mail, allegedly for winning a sweepstakes, lottery or promotion. The check supposedly covers taxes or other fees (see the text of the letter below). Here's how the scam works:

  • You deposit the check in your bank.
  • You then pay the fees described in the letter via a money transfer.
  • Unfortunately there isn't any prize money and your bank eventually will tell you that the check you deposited is a forgery.
  • You now owe the bank the money ($2,998.65 in the example below).
  • You try to track down the money you sent out via money transfer, which is just about impossible.
  • The scammers are now richer and you are poorer.

Here's a sample of a check one of our readers received in the mail. The scammers will often place a reputable company on the forged check:

2. Advance Fee Lenders

These frequently will contact people by phone after they've filled out an online loan application or have found an advertisement in a local newspaper.

This is a similar scam to the check scam described above.

3. Online Employment Offers

Offers that look for "shipping" or "billing managers," "payment processors" or anything with a financial sounding name very frequently turn out to be fraudulent listings that are, in actuality, looking for victims to commit money laundering.

Other bogus online employment offers request money for travel, work visas, etc. Some scammers don't ask for money, but instead ask for your personal info (name, DOB, SSN, address, mothers maiden name) in order to steal your identity or sell your info to someone that will.

Be extremely careful when dealing with online employment. Don't send money to anyone. Use a company's main number and then ask for your contact within the company vs. just dialing direct to the number you've been given in order to verify your contact really works at the company you're interested in.

4. Lottery/Sweepstakes Notification Letters

Epidemic in proportion, these are very much like the fake check scams.

5. Overpayment Scams

These usually are found in forms of online ads and typically in places such as Craigslist or other classified forums on the Internet.

Same kind of scam as #1 with a slight twist.

A check overpayment scam begins when a scam artist replies to the classified ad or auction posting and offers to purchase the item for sale with a check, then comes up with a reason for writing the check for more than the purchase price for the item. The scammer asks the consumer to wire back the difference after the check is deposited. Later, the scammer’s check bounces, leaving the consumer liable for the entire amount.

6. Mortgage foreclosure rescue scams

Scammers contact residents and offer them a desperate plan that is affordable and supposedly allows them to keep the home. Here's how it works:

The scammers will offer to lower your monthly mortgage payment while also promising that in a short time you can own your home free and clear of any debt. The con artist claims to offer or arrange for a new loan but instead tricks the homeowner into selling the home to the con artist or a third party and agreeing to either lease the home back or purchase it back on a land contract.  The con artist or third party will pay off the existing mortgage or take out a loan. If the scammed homeowner lived in the home for a number of years, he or she likely built up and is surrendering significant equity. Equity is the market value of the home minus the value of all mortgages and other liens on the home. The con artist now owns the home and has stripped or taken the equity out of the scammed consumer's home.

Consumerlaw.org has a great pdf which covers this fraud in detail - http://www.consumerlaw.org/news/ForeclosureReportFinal.pdf

7. Marketing/Investment Scams

People are solicited by mail or e-mail and told they can make thousands of dollars working from home by buying a special kit, book or tape collection.

8. Inheritance Scam

An e-mail or letter is sent to the victim from someone claiming to be related to them, or from somebody that claims to know that the victim's distant relative is either very sick or has died and left inheritance money.

9. Phishing Scams

Generally, e-mails are sent from what looks like a legitimate bank or financial institution, asking for confirmation of account numbers and personal information.

- See some examples of a typical phishing email - Paypal phishing scam.

10. Nigerian Scam

E-mails or letters are sent from someone claiming to be an official or agent from a foreign country, informing the recipient he or she is seeking a foreign company or individual into whose account they can deposit funds left over from government funds, a business bank transaction or a confiscated family inheritance.

- See some examples of a typical Nigerian Email Scam.

 

January 8, 2008

This has bounced around the internet the past few months, but I just had to share it.

In this clip, an eBay scammer appears on Judge Judy and is absolutely destroyed. Her scam was listing cell phones on Ebay, but instead of delivering an actual phone, she ships the buyer a photo of a cell phone.

How cute.

She tries to defend her scam by claiming that the buyer should have seen "photo only" in the fine print of the ad. Yeah, I'm sure that would work at a car dealership as well... 

"I'm sorry sir, we can't let drive the Mercedes home tonight. You actually only purchased the Mercedes S-600 brochure - not the car. We're sorry, but that's what the contract states if you look here at the bottom of page 15."

Fraud is fraud, whether it happens on eBay or at your local car dealership. Too bad the scammer got her comeuppance on a TV show instead of a real court. In any case, Judge Judy makes it pretty clear she's going to do her best to sick the IRS and child protective services on the woman.

December 18, 2007

Recently, a new phishing e-mail has been circulating. The e-mail is the IRS asking for donations to help the victims of the California wildfires. The e-mail is a scam. The IRS is not and never will ask for donations, let alone send out an e-mail asking for financial and personal information.

The e-mail seems real enough. It provides links to an IRS website. The website asks for personal and financial information in order to obtain the donation. It seems like a good thing to do. However, do not enter any personal or financial information, the website is not the real IRS website. The information that is asked for is what the scammers use to steal identities, open new lines of credit and ruin peoples’ credit and lives. If that weren't enough, the links and the e-mail are also thought to contain “malware and other malicious software.”

To protect yourself and help stop the phishing scam the IRS

“urged those who received the scam e-mail to help the IRS shut down the operation by forwarding it to phishing@irs.gov, using instructions found in "how to protect yourself from suspicious e-mails or phishing schemes" on the genuine IRS Web site, http://www.irs.gov.”

On a happier note, the IRS is doing their part to help the wildfire victims. They are extending payment and tax return filing deadlines for victims.

“As California taxpayers start the recovery process, the last thing they should worry about is meeting a tax deadline,” said IRS Acting Commissioner Linda Stiff. “The IRS offers many resources for disaster victims online at IRS.gov, over the phone and in person.”

If you would like to donate to the victims there are several ways in which you can. The LA Times wrote an article with several suggestions of how to help the wildfire victims.

Read the AP's article for all the details of the e-mail scam.

November 19, 2007

Who would have thought that a big company like SuperValu would be susceptible to an e-mail scam and almost lose $10 million?! Well, it happened just a few months ago. In February they received e-mails supposedly from American Greetings Corp. and Frito-Lay indicating new bank accounts had been set up and payments should be wired to these new accounts.

Has anyone at SuperValu ever read about "phishing' or other email scams? I guess not...

SuperValu Email Scam

Without making any inquiries with the two companies about the change in accounts, SuperValu just started sending payments to the accounts indicated in the e-mail. After a week, nine payments and $6.5 million later, it was discovered that the new account with American Greetings was fraudulent. Meanwhile, another $3.6 million was being sent to the fraudulent Frito-Lay account. Luckily, for SuperValu, the FBI was able to get right on it and recover the money before it disappeared.

“SuperValu was the target of attempted financial fraud,” company spokeswoman Haley Meyer wrote in a prepared statement. “We were able to quickly discover and report this to the FBI. As a result of the quick work of the Boise FBI Office and the U.S. Attorney, any funds lost are minimal.”

Fortunate as it may seem, it’s not quite time to break out the bubbly. American Greetings and Frito-Lay are demanding that they get paid – and rightly so. But the matter has been turned over to a judge to decide how the money is going to be allocated. It’s a shame that such fairy-tale endings don’t happen for most individuals who fall victim to e-mail scams. Here's the link the the whole tale from the Idaho Statesman.

October 23, 2007

Have you seen ads like this on the internet and wondered if they're for real?

Free Ipod

Well, they're for real, but I don't advise signing up for this kind of deal. Here's why...

When you see any "free" offer, you should be very careful. Very few things are really free. You should ask yourself these kinds of questions:

Question:

An ipod costs $69 to $399 dollars. How are they paying for it if they're giving it to me for free?

Answer:
You have to give them something of value.

Question:

What do I have that's valuable to them?

Answer: A lot.

  • Your personal information - you have to give them your name, email, home address, gender, date of birth, and phone number. They use this information to send offers to your email account, to your home via direct mail, and to your phone with telemarketers.
  • Your credit card - you also are required to sign up for one of the offers they present to you. All of these offers will involve giving them your credit card number. The offers are things like a Blockbuster online rental membership, DVD and music clubs, credit card offers, ringtones & horoscopes. They are paid a bounty from these companies when you sign up. Companies will pay anywhere from $10 - $70 per sign up.
  • Your friends and family - in order to qualify for the free item you have to get 5 friends or family members to sign up AND request one of their offers.

See how the money is now adding up? The company will receive possibly $40 per sign up which equals $240 (6 users x $40).

Were you worried they weren't going to make any money on this deal? Don't worry, they will still make more.

In fact, Eliot Spitzer, the fireball New York Attorney General has recently filed suit against Gratis Internet, the parent company of sites Freeipods.com, FreeCDs.com, FreeDVDs.com, and FreeVideoGames.com (just an aside - "gratis" means "free" in Spanish).

The suit alleges that Gratis:

"... sold personal information obtained from millions of consumers under a strict promise of confidentiality.

From 2000 through 2004 Gratis made numerous explicit promises to the users of its web sites about protecting personal information. Among the promises the company made were:

'We will never give out, sell or lend your name or information to anyone';

'We will never lend, sell or give out for any reason your email address or personal information';

'We at [Gratis web site] respect your privacy and do not sell, rent or loan any personally identifiable information regarding our customers to any third party'; and

'Please note that we do not provide your E-mail address to our business partners.'

Even on its sign-up pages, Gratis promised consumers that it 'does not . . . sell/rent emails.'

However, the Attorney General’s investigation confirmed that Gratis’s owners, Peter Martin and Robert Jewell, repeatedly violated these promises during 2004 and 2005 by selling access to lists of millions of Gratis’s customers to three independent email marketers. The marketers then sent hundreds of millions of email solicitations to those users, on behalf of their own customers. In each of these deals, Gratis wrongfully shared between one and seven million confidential user records.

This is believed to be the largest deliberate breach of a privacy policy ever discovered by U.S. law enforcement.


Need another reason to avoid offers like these?

Here's a good one - if you jump through all their hoops and qualify for your free ipod, you'll have to send them an IRS W-9 form, since the iPod's value will have to be counted as revenue.

What information is provided on a W9? Oh, only your name, address, and Social Security Number. Is that the kind of information you want in the hands of these people? I don't think so.
Save your pennies and buy your own stinking iPod. That's what I recommend.

March 24, 2006

Think only the uneducated can be caught in a criminal's web? Hardly...

This is the sad story of "The Doctor" and "The General." The doctor, in this case, is an internationally recognized psychiatrist, 89 year-old Dr. Louis A. Gottschalk. The general is a anonymous figure Dr. Gottschalk met in Nigeria known only as "The General."

According to papers filed by his son, Dr. Gottschalk has been a ten year victim of a Nigerian Advanced Fee Scam, losing up to $3,000,000. Like the last victim we talked about, Dr. Gottschalk is also accused of destroying bank records in order to hide the crime. Understandably, his son is trying to wrest control of the family partnership before more money is lost to the criminals.

Gottschalk was first contacted in 1995 by Nigerian fraudsters. He traveled to Nigeria and Amsterdam to "show them that he was sincere so he would get the money." Early on, he admitted to his family that he had given "The General" $300,000. After being convinced he was being conned, he promised not to give any more money.

Nigerian Email Scam
Dr. Louis Gottschalk, Nigerian Scam Victim

Unfortunately, time passed and Dr. Gottschalk continued to send money to his "partners" in Nigeria.

Why would someone do that - especially someone as educated as Dr. Gottschalk? Here's one assessment from Anthony Pratkanis, a fraud expert from UC Santa Cruz:

"There's a line that gets crossed when they send in the money and then they're caught in a rationalization trap," Pratkanis said. "One way to convince yourself the scam is for real is to send more money, ironically enough."

Makes sense to me. Evidently it made sense to Dr. Gottschalk as well. When asked by his son as late as October 2005 about the money, he replied:

"Don't worry, everything will be all right on Thursday because I will be getting $20 million."

Dreams die hard, don't they? Here's a link to the whole story from KTLA.

March 10, 2006