OT: eBay Fake Buyer Scam?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Put my iPod up on eBay.

Got what looks like an eBay notification that it was sold -
including a name/shipping address.

Checked PayPal, but no transfer had occurred.

Emailed the supposed buyer offering to take personal check or MO.

The reply I got kind of set me off:

- It was obviously written by a non-English speaker

- It offered some alternative payment method, but stipulated
  that it needed my full name, address, phone number and
  "the item number on ebay".

Could I be corresponding with some kind of 'bot.... or maybe just
some huckster who needs to work on their English?

Re: OT: eBay Fake Buyer Scam?

Quoted text here. Click to load it

Caveat emptor

Don't do business with them if there are any Red Flags.

Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk

Re: OT: eBay Fake Buyer Scam?

Per David H. Lipman:

Quoted text here. Click to load it

Alleged buyer sent me a note claiming my PayPal account had been
credited and, concurrently, I received two apparently-identical
notes claiming tb from PayPal telling me my account had been

Of course there was no credit to my account when I checked.

I was going to post the headers and ask if anybody knew enough to
validate them but, after going through the entire message and
snipping several thousand line feeds the picture got clearer: a
variation on the Nigerian 419 scam.  

"We have credited your account (with more money than you asked
for, of course....), now you need to send your merchandise to

Even the likes of myself was able to grok the Nigerian shipping

For my own edification, maybe somebody who knows can point out
the more obvious anomalies in the message's headers.

To Wit:
Received: from nm27-vm1.bullet.mail.ne1.yahoo.com
(nm27-vm1.bullet.mail.ne1.yahoo.com [])
    by mailhost.cotse.com (8.14.3/8.14.2) with SMTP id
    (envelope-from infodesk@2-mail.com)
Received: from [] by nm27.bullet.mail.ne1.yahoo.com
with NNFMP; 20 Jul 2011 10:05:36 -0000
Received: from [] by tm10.bullet.mail.ne1.yahoo.com
with NNFMP; 20 Jul 2011 10:05:36 -0000
Received: from [] by omp1024.mail.ne1.yahoo.com with
NNFMP; 20 Jul 2011 10:05:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 500045.18556.bm@omp1024.mail.ne1.yahoo.com
Received: (qmail 42470 invoked by uid 60001); 20 Jul 2011
10:05:36 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=yahoo.com; s=s1024; t=1311156336;
Received: from [] by web125515.mail.ne1.yahoo.com
via HTTP; Wed, 20 Jul 2011 03:05:36 PDT
X-RocketYMMF: jr_jamesrobert01
X-Mailer: YahooMailClassic/14.0.3
Date: Wed, 20 Jul 2011 03:05:36 -0700 (PDT)
Reply-To: infodesk@2-mail.com
Subject: You've got new funds from Rayna
Maraki(allmandinger515@gmail.com)with the paypal Routing Code:
840-L001-Q999-T51365 Transaction ID 1WW70510V79963356.
To: PayPal@fatbelly.com
MIME-Version: 1.0
Content-Type: multipart/alternative;
X-Whitelist: Whitelisted (destination paypal@fatbelly.com)
X-Antivirus: avast! (VPS 110720-0, 07/20/2011), Inbound message
X-Antivirus-Status: Clean
X-Agent-Received: from mail.cotse.net (mail.cotse.net); Wed, 20
Jul 2011 06:18:20 -0400
X-Agent-Train-Legitimate: 0
X-Agent-Junk-Probability: 0

July 19, 2011 13:10:25 PDT
Transaction ID: 1WW70510V79963356
(180+ line feeds snipped)

You've got new funds!
You received a payment of $450.03 USD from

To see all the transaction details, please log into your PayPal
account. It may take a few moments for this transaction to appear
your account.
Buyer information
Teresa Bucker
Instructions from buyer

Ship-to address -

Name??? :Tope Oluwadapo
Address :No 2 Kolawole Street,Iwo Road.
City??? :Ibadan
State?? :Oyo
Zip Code:23402
Country :Nigeria
Phone?? :+23480319371625

Address Status:
(approx 200 linefeeds snipped)

Shipping method

Unit price
Amount(Apple iPod touch 3rd Generation 64GB)#230646417210

$450.03 USD
1$450.03 USD

$450.03 USD

Subtotal: $440.03 USD
Tax (8.375%): $10.03 USD
Insurance: ----
Total: $450.03 USD

(approx 2,000 linefeeds snipped)

This PayPal? payment has been deducted from the buyer's account
and has been " APPROVED"
but will not be credited to your account until the shipment
confirmation number is sent to us for shipment verification so as
secure both the buyer and the seller.but will not be credited to
your account until the shipment tracking number
is sent to us for shipment verification so as to secure both the
and the seller from possible fraud. Here are the necessary
needed from you before your account will be credited.The tracking
number of shipment,your PayPal ID,your listing number and also
your eBay ID Below are the necessary
information requested before your account will be credited.Send
shipment reference/tracking number to us or email us through this
INFoDesk@2-Mail.comand our customer service care
will attend to you. As soon as you send us the shipment's
number for security purposes and the safety of the buyer?with the
seller,the money will be credited to your account.
(approx 1,150 linefeeds snipped)
?????????????????????????????? ???????????????? ?? *PLEASE NOTE**
Once shipment has been verified? and the tracking number sent to
You will receive a "CONFIRMATION Email"? from PayPal? informing
you that the Money has been credited.
(approx 1,150 linefeeds snipped)

Copyright ?1999-2011 PayPal. All rights reserved..
Thank you for using
(approx 2,000 linefeeds snipped)

 The PayPal Team
(approx 1,800 linefeeds snipped)

PayPal Email ID PP274.

(approx 80 linefeeds snipped)

Re: OT: eBay Fake Buyer Scam?

organisation:   ORG-VCL3-AFRINIC
org-name:       Visafone Communications Limited
org-type:       LIR
country:        NG
address:        12, Ologun Agbaje Street
address:        Victoria Island
address:        Lagos
e-mail:         spamalert@visafone.com.ng
phone:          +2347025551211
fax-no:         +23412624287
admin-c:        FY2-AFRINIC
tech-c:         FY2-AFRINIC
mnt-ref:        AFRINIC-HM-MNT
mnt-ref:        VISAFONE-MNT
mnt-by:         AFRINIC-HM-MNT
source:         AFRINIC # Filtered

person:         Fred Young
nic-hdl:        FY2-AFRINIC
address:        33 Saka Tinubu Street
address:        Victoria Island
address:        Lagos Nigeria
address:        Lagos
address:        Nigeria
e-mail:         fred.young@cybaaspace.net
e-mail:         spamalert@visafone.com.ng
phone:          +2347025551211
fax-no:         +23412624287
source:         AFRINIC # Filtered

Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk

Site Timeline