OT: eBay Fake Buyer Scam?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Put my iPod up on eBay.

Got what looks like an eBay notification that it was sold -
including a name/shipping address.

Checked PayPal, but no transfer had occurred.

Emailed the supposed buyer offering to take personal check or MO.

The reply I got kind of set me off:

- It was obviously written by a non-English speaker

- It offered some alternative payment method, but stipulated
  that it needed my full name, address, phone number and
  "the item number on ebay".


Could I be corresponding with some kind of 'bot.... or maybe just
some huckster who needs to work on their English?
--
PeteCresswell

Re: OT: eBay Fake Buyer Scam?


Quoted text here. Click to load it

Caveat emptor

Don't do business with them if there are any Red Flags.


--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp



Re: OT: eBay Fake Buyer Scam?

Per David H. Lipman:

Quoted text here. Click to load it

Alleged buyer sent me a note claiming my PayPal account had been
credited and, concurrently, I received two apparently-identical
notes claiming tb from PayPal telling me my account had been
credited.

Of course there was no credit to my account when I checked.

I was going to post the headers and ask if anybody knew enough to
validate them but, after going through the entire message and
snipping several thousand line feeds the picture got clearer: a
variation on the Nigerian 419 scam.  

"We have credited your account (with more money than you asked
for, of course....), now you need to send your merchandise to
us...."

Even the likes of myself was able to grok the Nigerian shipping
address....

For my own edification, maybe somebody who knows can point out
the more obvious anomalies in the message's headers.

To Wit:
================================================
Received: from nm27-vm1.bullet.mail.ne1.yahoo.com
(nm27-vm1.bullet.mail.ne1.yahoo.com [98.138.90.59])
    by mailhost.cotse.com (8.14.3/8.14.2) with SMTP id
p6KA5g3K049977
(EDT)
    (envelope-from infodesk@2-mail.com)
Received: from [98.138.90.57] by nm27.bullet.mail.ne1.yahoo.com
with NNFMP; 20 Jul 2011 10:05:36 -0000
Received: from [98.138.89.168] by tm10.bullet.mail.ne1.yahoo.com
with NNFMP; 20 Jul 2011 10:05:36 -0000
Received: from [127.0.0.1] by omp1024.mail.ne1.yahoo.com with
NNFMP; 20 Jul 2011 10:05:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 500045.18556.bm@omp1024.mail.ne1.yahoo.com
Received: (qmail 42470 invoked by uid 60001); 20 Jul 2011
10:05:36 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=yahoo.com; s=s1024; t=1311156336;
bh=CAyOToGeu8adUGFjEWCNNsZIhtsv5AKJUYvvKVpDGzE=;
h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=mVSneKJSTaaBaxuAfLOzUNKWVx0ArWKntQ4mhvyFPgqFq8XCN/ju1OjUFyx5FOBdgEbUB2vxbVHH6JpX0cYp8rzL9KMZdk2LcYQLQbR19XP7Gf2zfcuhBVHgECjZCY6tqpo7aor77agTZZqmRx4aE2wfRbzW0DmqgE+dqzcLg4A=
X-YMail-OSG: P0N9UbMVM1nH6PK2TVgRUSCgUh1ZlCQBM2bXpTiLnZnlPKB
 j4FlvtValJc_OmUB4TSj28oliB5merhzYFF9R62ctPWbPRDtEJ2G4X3lTfLm
 LuUBKJ12aLfXegRP2FvDZAVUSbmwcABwYgQx174wtzt39oN7mr9EtADksaCW
 STB2GIVF9IG_AnZB0T3QUNj.I7_Ab_YhYDJF00IzhwmqodrYjhJQ_wBof0Nz
 yLVsC072GRgHJKS04sKvNuHn2kIaFMZkFx_ywjvJIFfcNItQgZs8P14qNkbd
 BNAxfP2zUdZs8CmvrZbnrl9ij0Dj4o7Li1satLGUKAKLNfepK_NDlSPpY4Wz
 pM2EUeJ6NRPOLa9IhwGjTSyw57FYD_lfAYFzSms.BTtjB.sn5kwac9Lo-
Received: from [41.138.175.50] by web125515.mail.ne1.yahoo.com
via HTTP; Wed, 20 Jul 2011 03:05:36 PDT
X-RocketYMMF: jr_jamesrobert01
X-Mailer: YahooMailClassic/14.0.3
YahooMailWebService/0.8.112.310352
Message-ID:
Date: Wed, 20 Jul 2011 03:05:36 -0700 (PDT)
Reply-To: infodesk@2-mail.com
Subject: You've got new funds from Rayna
Maraki(allmandinger515@gmail.com)with the paypal Routing Code:
840-L001-Q999-T51365 Transaction ID 1WW70510V79963356.
To: PayPal@fatbelly.com
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="0-938568325-1311156336=:38536"
X-Whitelist: Whitelisted (destination paypal@fatbelly.com)
X-Antivirus: avast! (VPS 110720-0, 07/20/2011), Inbound message
X-Antivirus-Status: Clean
X-Agent-Received: from mail.cotse.net (mail.cotse.net); Wed, 20
Jul 2011 06:18:20 -0400
X-Agent-Train-Legitimate: 0
X-Agent-Junk-Probability: 0

?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
July 19, 2011 13:10:25 PDT
Transaction ID: 1WW70510V79963356
(180+ line feeds snipped)

You've got new funds!
???????????  
You received a payment of $450.03 USD from
(allmandinger515@gmail.com).

To see all the transaction details, please log into your PayPal
account. It may take a few moments for this transaction to appear
in
your account.
Buyer information
Teresa Bucker
allmandinger515@gmail.com
Instructions from buyer
EBAY ITEM

Ship-to address -

Name??? :Tope Oluwadapo
Address :No 2 Kolawole Street,Iwo Road.
City??? :Ibadan
State?? :Oyo
Zip Code:23402
Country :Nigeria
Phone?? :+23480319371625

Address Status:
 
(approx 200 linefeeds snipped)

Confirmed
Shipping method
USPS EXPRESS MAIL POST OFFICE


Description
Unit price
Qty
Amount(Apple iPod touch 3rd Generation 64GB)#230646417210

$450.03 USD
1$450.03 USD




$450.03 USD


Subtotal: $440.03 USD
Tax (8.375%): $10.03 USD
Insurance: ----
Total: $450.03 USD

(approx 2,000 linefeeds snipped)

This PayPal? payment has been deducted from the buyer's account
and has been " APPROVED"
but will not be credited to your account until the shipment
confirmation number is sent to us for shipment verification so as
to
secure both the buyer and the seller.but will not be credited to
your account until the shipment tracking number
is sent to us for shipment verification so as to secure both the
buyer
and the seller from possible fraud. Here are the necessary
information
needed from you before your account will be credited.The tracking
number of shipment,your PayPal ID,your listing number and also
your eBay ID Below are the necessary
information requested before your account will be credited.Send
the
shipment reference/tracking number to us or email us through this
mail
INFoDesk@2-Mail.comand our customer service care
will attend to you. As soon as you send us the shipment's
tracking
number for security purposes and the safety of the buyer?with the
seller,the money will be credited to your account.
(approx 1,150 linefeeds snipped)
?????????????????????????????? ???????????????? ?? *PLEASE NOTE**
Once shipment has been verified? and the tracking number sent to
us,
You will receive a "CONFIRMATION Email"? from PayPal? informing
you that the Money has been credited.
  
(approx 1,150 linefeeds snipped)

Copyright ?1999-2011 PayPal. All rights reserved..
Thank you for using
PayPal!
(approx 2,000 linefeeds snipped)

 The PayPal Team
(approx 1,800 linefeeds snipped)

PayPal Email ID PP274.

(approx 80 linefeeds snipped)
================================================
--
PeteCresswell

Re: OT: eBay Fake Buyer Scam?


organisation:   ORG-VCL3-AFRINIC
org-name:       Visafone Communications Limited
org-type:       LIR
country:        NG
address:        12, Ologun Agbaje Street
address:        Victoria Island
address:        Lagos
e-mail:         spamalert@visafone.com.ng
phone:          +2347025551211
fax-no:         +23412624287
admin-c:        FY2-AFRINIC
tech-c:         FY2-AFRINIC
mnt-ref:        AFRINIC-HM-MNT
mnt-ref:        VISAFONE-MNT
mnt-by:         AFRINIC-HM-MNT
source:         AFRINIC # Filtered

person:         Fred Young
nic-hdl:        FY2-AFRINIC
address:        33 Saka Tinubu Street
address:        Victoria Island
address:        Lagos Nigeria
address:        Lagos
address:        Nigeria
e-mail:         fred.young@cybaaspace.net
e-mail:         spamalert@visafone.com.ng
phone:          +2347025551211
fax-no:         +23412624287
source:         AFRINIC # Filtered





--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp



Site Timeline