Beaverslayer Report post Posted October 23, 2007 Hello all, Here's the content of an E-Mil I just recieved. I'm wondering just how STUPID this guy thinks I am. What do you guys think? Content of E-Mail: Hello Sales, This is to let you know that i interested in purchasing some product from your company.Before,I can proceed on the inquiry. First,I will like to know that you accept credit-card.Also,I want you to advice on the shipping company you prefer using for international shipment (West Africa).I await your response. Regards. Wayne. __________________________________________________________________ Get your own free Chinese email account at ReXian.com today. http://www.rexian.com And to think he's got a CHINESE E-Mail account, and he wants me to ship to WEST AFRICA. I'm thinking NOT. Ken Quote Share this post Link to post Share on other sites
leatheroo Report post Posted October 23, 2007 I got an email from Paypal saying there was an error in my account and could i please log in to the link supplied in the email. I clicked on the link and it looked exactly like the paypal login page. I thought about it and went to paypal from google and my account was in order. I forwarded the email to paypal and they responded saying it was a scam to get my login details...phishing.. Glad i hesitated...someone would have cleaned out my account. Quote Share this post Link to post Share on other sites
pete Report post Posted October 23, 2007 ok-beaverslayer- I'm slow but what's questionable about the request. So you mail him back and tell him that you take Visa and ship UPS. Where is the risk to you? Who cares where the account (China) is located? All that I would be concerned about is whether his credit card was stolen. I'de take the information and check it out Quote Share this post Link to post Share on other sites
wolvenstien Report post Posted October 24, 2007 (edited) Nope.... not UPS... tell him you will ship by DHL only with him paying for it.... They (Nigerians) cant scam DHL like they do FedEx and UPS for some reason.... You accept Credit only when you get 100% of the info on the card and billing info and only ship to the billing addy.... then call the 800 number on the back of the card, and then look up the number of the bank and call the number you look up and see if they tell you the same thing.... see below.... There is a great site to go to and check out about these idiots: www.thescambaiter.com/forum/ You will learn alot about the tactics the scammers use as well as get a few good laughs at the scammers getting scammed.... I used to participate on the site quite abit and baited several nigerian scammers... Was fun... but I lost interest in it... I had one scammer going about a room for rent and "she" wanted to send me first months, last months rents, A hefty deposit, and extra to send back to "her" to cover her moving expenses. She sent me like $8000 in forged money orders, and when I called the number on the back the person who answered verified that the MO's were legit for the amount they were printed for... I then looked up the bank they were writen on and they didnt even issue MO's int he serial number these were writen for... Was quite funny when I told her I cashed then but my crack head wife took the money and ran off with the plumber.... LOL Dragged it out for a few months... Edited October 24, 2007 by wolvenstien Quote Share this post Link to post Share on other sites
JustWakinUp Report post Posted October 24, 2007 I got an email from Paypal saying there was an error in my account and could i please log in to the link supplied in the email. I clicked on the link and it looked exactly like the paypal login page. I thought about it and went to paypal from google and my account was in order. I forwarded the email to paypal and they responded saying it was a scam to get my login details...phishing.. Glad i hesitated...someone would have cleaned out my account. I get those emails all the time, oddly enough not enough people look at the URL in the address area of their browser upon going to this link. If you notice it will be an IP address or something completely arbitrary.com. If it was from paypal and a link for you to fix your account the address in the URL area of your browser would begin http://paypal.com not http://192.168.0.1/paypal. Those guys are getting sneaky that's for sure. Quote Share this post Link to post Share on other sites
Kevin King Report post Posted October 24, 2007 Was quite funny when I told her I cashed then but my crack head wife took the money and ran off with the plumber.... LOL Dragged it out for a few months... Now thats funny stuff wolvenstien. I've had a few run ins with those folks as well. Quote Share this post Link to post Share on other sites
Beaverslayer Report post Posted October 24, 2007 For anyone that wonders about where a certain e-mail has come from, all you have to do is "right click" the e-mail in your lisy, then click "properties" this will bring up a screen that shows you a bunch of stuff that may confuse you, but I'll try to explain it here. Here's the properties of the e-mail in question: By the way, this is the e-mail address that I was supposed to send my reply back to: wayne_happy2003@yahoo.com Return-path: <SRS0=3yXy=PQ=rexian.com=kosalxy@bounce.secureserver.net>Shows that this e-mail was bounced from this server Received: from pd4mr4so.prod.shaw.ca (pd4mr4so-qfe2.prod.shaw.ca [10.0.162.215]) by l-daemon (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JQB00CO71PJTM20@l-daemon> for emation@shaw.ca; Mon,My Home e-mail address 22 Oct 2007 02:46:31 -0600 (MDT) Received: from pd3mi6so.prod.shaw.ca ([10.0.121.236]) by pd4mr4so.prod.shaw.ca (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JQB00M7R1PJ2G30@pd4mr4so.prod.shaw.ca> for emation@shaw.ca (ORCPT emation@shaw.ca); Mon, 22 Oct 2007 02:46:31 -0600 (MDT) Received: from smtp06-01.prod.mesa1.secureserver.net ([64.202.189.20])IP Address where e-mail came from by l-daemon (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JQB001DC1PIE080@l-daemon> for emation@shaw.ca; Mon, 22 Oct 2007 02:46:30 -0600 (MDT) Received: (qmail 2596 invoked by uid 1000); Mon, 22 Oct 2007 08:46:30 +0000 Received: (qmail 2593 invoked from network); Mon, 22 Oct 2007 08:46:30 +0000 Received: from unknown (HELO p3presmtp01-07.prod.phx3.secureserver.net)Notice the word UNKNOWN ([208.109.80.156]) (envelope-sender <kosalxy@rexian.com>)Notice the sender address does not match the address to reply to by smtp06-01.prod.mesa1.secureserver.net (qmail-1.03) with SMTP for <kenclark@beaverslayer.com>; Mon, 22 Oct 2007 08:46:30 +0000Where this e-mail was first sent (I have mine forwarded to my home account) Received: (qmail 4931 invoked from network); Mon, 22 Oct 2007 08:46:30 +0000 Received: from smtpout1075.sc0.he.tucows.com (HELO n120.sc0.he.tucows.com) ([64.97.144.75]) (envelope-sender <kosalxy@rexian.com>) by p3presmtp01-07.prod.phx3.secureserver.net (qmail-ldap-1.03) with SMTP for <kenclark@beaverslayer.com>; Mon, 22 Oct 2007 08:46:30 +0000 Received: from sc0-out01.emaildefenseservice.com (64.97.131.2) by n120.sc0.he.tucows.com (7.2.069.1) id 4717E4C200085BB3; Mon, 22 Oct 2007 08:45:25 +0000 Received: from emd2-smtp.sc0.he.tucows.com (smtpout1107.sc0.he.tucows.com [64.97.144.107]) (Authenticated sender: kosalxy@rexian.com)This shows and authenticates the actual sender by sc0-out01.emaildefenseservice.com (Postfix) with ESMTP; Mon, 22 Oct 2007 00:45:28 +0000 (UTC) Received: from [62.56.147.220] by mail.rexian.com with HTTP; Mon, 22 Oct 2007 08:45:25 +0000 (America/Los_Angeles)This shows the actual city and country the e-mail came from. Notice it's NOT West Africa Date: Mon, 22 Oct 2007 08:45:25 +0000 (America/Los_Angeles) From: wayne_happy2003@yahoo.comThe address that the e-mail "From" line say's it's from, and the address that most people would return send to Subject: Inquiry.... Message-id: <20071022084525.27703.fh065.wm@emd2-smtp.sc0.he.tucows.com> MIME-version: 1.0 X-Mailer: Web Mail 6.2.3-4.2_0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 7bit Content-disposition: inline Delivered-to: kenclark@beaverslayer.com X-SpamScore: 1010 being the HIGHEST number for a Spam Score X-Spamcatcher-Summary: 10,1,0,bbe1b33dd02f96b7,6e7dd6e40ecf87a8,wayne_happy2003@yahoo.com,-,RULES_HIT:152:355:379:387:392:541:590:966:967:973:979:980:988:989:1260:1274:127 :1304:1305:1311:1312:1313:1314:1345:1437:1515:1516:1518:1519:1534:1538:1567:1593 1594:1595:1596:1676:1711:1714:1730:1747:1766:1792:2196:2199:2393:2525:2559:2563: 682:2685:2693:2733:2743:2857:2859:2890:2933:2937:2939:2942:2945:2947:2951:2954:3 22:3622:3865:3867:3870:3871:3873:3874:3934:3936:3938:3941:3944:4042: 4077:4080:4383:4384:4385:4395:4605:4659:4860:5007:6261:7602:7652,0,RBL:none,Cach IP:none,Bayesian:0.5,0.5,0.5,Net X-Spamcatcher-Explanation: (100%) RECEIVED: Received headers not consistentThis tells you the reasons why it was determined this was a spam e-mail. "NOT CONSISTENT" with Yahoo! "FROM:"; X-Sent-From: kosalxy@rexian.com Original-recipient: rfc822;emation@shaw.ca Always be very cautious of an e-mail such as this one, you may think it is from a real and reputable person, but be sure before replying. So many people each year are caught up in such scams, and lose a lot of money. Hope this helps. Ken Quote Share this post Link to post Share on other sites