web counter
WWW. ASTRODATA.US/SCAMS/
SCAM INFORMATION AND REPORTING:
Wells Fargo Fraud Reporting numbers and email: 800-869-3557 email: reportphish@wellsfargo.com 800-723-5533
Below are some common questions about phishing:
Q: What is phishing?
A: Phishing is usually a two-part scam.
Part I: email. Fraudsters, also known as phishers, send email to a wide audience that appears to come from a reputable company. This is known as a phish email. In the phish email are links to spoof websites.
Part II: spoof websites. Websites that spoof or imitate a reputable company's website are known as phish sites. Fraudsters hope to convince victims to provide their personal information by using clever and compelling language in their phish emails and spoof websites.
Master Card email: consumer_inqiries@mastercard.com
Other scams and threats: http://www.fbi.gov/scams-safety/e-scams
Or google the card type and fraud reporting for search terms e.g.....visa fraud reporting or mastercard fraud reporting.
Other places to report: Better Business Bureau, your local police, any advertisers that help you find clients.
How to identify a SCAM: Remember that the secret to a scam is somehow the scammers want money from you! If it's seems
too good to be true...it probably is...Mark Twain said: A GOLD MINE ...is a hole in the ground
with a LIAR on top! His humor often had wisdom! Many of the scams are being launched from off shore of the U.S.A. in countries with little or no policing and investigation capabilities. East Africa, China, Beliese, and other 3rd world countries.
Often the scam perpeprators do not have well constructed sentences and grammar. However, the "mendhow.webs.com" scam below is an exception and is probably professionally done.
Another SCAM that I have seen is a page that looked like WESTERN UNION...they wanted ID information (preferrably credit card) to get payment for EBAY item. The giveaway that it was a scam is that the website address was an open socket layer...e.g....http:// xxxxxxxxxxxxx....any secure site for putting credit cards in should be encrypted with a secure socket....that is identified on the address line with an "s" in https:// xxxxxxxxxxxxxxxxx . If you are going to use the internet to pass credit card data...make sure you check this address line for https:// ......as a crypto expert I believe that the secure socket layer is very secure as long as the company you are dealing with is trustworthy. By the way the telephone is even less secure.....it is easy for communication people to tap into microwave linked, and wireless phone conversations. Never use the phone to pass your card information.
If you have a scam you can't identify and want help. Email me at jlasell3@gmail.com
Watch this site for future scams.
HOW TO LOCATE INFORMATION ON EMAIL SCAMS....FROM WWW.ASTRODATA.US
RE: WHO IS- Registry at Network Solutions for Domain Names: http://www.networksolutions.com/whois/index.jsp;jsessionid=1f29aef1197600b85bbebfbef29d:qevx
eg....mendhow.webs.com
///////////////
SEE "Tips to recognize Scams" at www.Astrodata.us/scams/
Remember that the secret to a scam is somehow the scammers want money from you! If it's seems
too good to be true...it probably is...Mark Twain said: A GOLD MINE ...is a hole in the ground
with a LIAR on top! His humor often had wisdom!
How to open, view, read, check or get email headers.
How to lookup origin of email message.
http://www.abika.com/Reports/Samples/emailheaderguide.htm
IP Address checking...Country of orgin...see....http://www.ipchecking.com/
Other posting of scams and threats...consult: WWW.ASTRODATA.US/SCAMS/
Information on Astrodata at: www.astrodata.us
EMAIL: jlasell3@gmail.com
------------------------------------ACTUAL SCAM:--------------------------------------------------------------------------------------------------
Scam/Fraud targeting the B&B and Tourist Industry.
Email 1 Supposedly from Indonesia....actually from West Africa. Info via reverse IP 10.151.78.16 lookup.
(actually from East Africa) un-parsed header on email reveals:
/////////begin SCAM email header///////////
Received: by 10.151.78.16 with SMTP id f16cs86962ybl;
Mon, 28 Mar 2011 13:46:37 -0700 (PDT)
Received: by 10.150.75.6 with SMTP id x6mr4144781yba.217.1301345197213;
Mon, 28 Mar 2011 13:46:37 -0700 (PDT)
Return-Path: <SRS0=4cwW=WV=mendhow.com=manager@bounce.secureserver.net>
Received: from p3plsmtp04-05.prod.phx3.secureserver.net (p3plsmtp04-05.prod.phx3.secureserver.net [72.167.218.163])
by mx.google.com with ESMTP id w15si8567978ybk.60.2011.03.28.13.46.35;
Mon, 28 Mar 2011 13:46:36 -0700 (PDT)
Received-SPF: pass (google.com: domain of SRS0=4cwW=WV=mendhow.com=manager@bounce.secureserver.net designates 72.167.218.163 as permitted sender) client-ip=72.167.218.163;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of SRS0=4cwW=WV=mendhow.com=manager@bounce.secureserver.net designates 72.167.218.163 as permitted sender) smtp.mail=SRS0=4cwW=WV=mendhow.com=manager@bounce.secureserver.net
Received: (qmail 11963 invoked by uid 1000); 28 Mar 2011 20:46:35 -0000
//////end email header/////////// Learn how to un-strip the email header at: www.Astrodata.us/scams/
////////SCAM email content/////////////////
Dear Sir/Madame,
We are running an authorized and the most trustworthy travel and guide agent at Bali Indonesia. I can recommend your place and service to our loyal clients from Korea. He gives me order and authority fully to arrange his vacation well-designed. He has a surprise planning to have vacation with his friends (6 persons) that's way he asked me to prepare the reservation,etc. He also want to pay 100% deposit in advance to any reservations I am looking for, not just 30-50% payment in advance. So there's no need to balance the remainder upon their arrival to enjoy the service. I also explained them this would be non-refundable funds when they'll make any cancellation for doing 100% payment in advance.
Before I do some arrangement the reservation,
I have some questions here, this is about International reservation:
- That the service will be use at May 15, 2011 for 7 days stay.
- Do you accept major credit card for the payment?
- Do I get the commission for this recommendation from you?
The group is all adults and there are no children.
They are 3 couples about 35-50 years old and they would like to book room and the service for 3 couples.
Please recalculate the total payment with your the best price include tax & gratuity service. Thank you.
Looking forward to hearing from you soon.
Best Regards,
Mr. Wayan Suteja
Manager - Mendhow Travel Agency
www.mendhow.webs.com
Phone (62) 85-643-769-349
/////////////end of SCAM email 1 content///////////
Email 2 (supposedly from Mendhow Travel Agency Client in South Korea) Note: it is from the same IP ADDRESS:
////////////begin SCAM email 2 header//////////
Received: by 10.151.78.16 with SMTP id f16cs5265ybl;
Thu, 31 Mar 2011 07:20:37 -0700 (PDT)
Return-Path: <sungpoo@gmail.com>
Received-SPF: pass (google.com: domain of sungpoo@gmail.com designates 10.204.16.140 as permitted sender) client-ip=10.204.16.140;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of sungpoo@gmail.com designates 10.204.16.140 as permitted sender) smtp.mail=sungpoo@gmail.com; dkim=pass header.i=sungpoo@gmail.com
Received: from mr.google.com ([10.204.16.140])
by 10.204.16.140 with SMTP id o12mr2439819bka.125.1301581236783 (num_hops = 1);
Thu, 31 Mar 2011 07:20:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:date:message-id:subject:from:to
:content-type;
bh=nOjDUadDmT/XWrhYjIAehs0fYGWR0+fk8EELkYfRZ/c=;
b=iWoHBVRiOhZY1LcxY9unZGVRnWrrJVkh5syWsmNNNbU47oJnrWrXolEI+QbvUE+TWa
hgDjlFx5L8MEMwPORM+Gh2RmPAb6BjCEoVACaUhBQDRRveUZNJRc2Emjr20tq/cGmVTc
jMYgDNt6CH6k7lLodRDHrkxoRABlGpdhyqFhA=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:to:content-type;
b=T6ljVz81tHOddn602W5ZAL4qFmU8oKJ+uko1syUhhTNqpBOV/sb9iKQ67j5/NoJIwp
SJ/yb4lGNZ8L9j0KbzMHCKnjZiPt0QjW6ncNUOhBnXV1h6HDoNr3bAUNS+YDWVRlfVnW
sThcIno3vbukUCfbRxRLWGrMdvXbofd3aLmQs=
MIME-Version: 1.0
Received: by 10.204.16.140 with SMTP id o12mr2439819bka.125.1301581236728;
Thu, 31 Mar 2011 07:20:36 -0700 (PDT)
Received: by 10.204.120.136 with HTTP; Thu, 31 Mar 2011 07:20:36 -0700 (PDT)
Date: Thu, 31 Mar 2011 21:20:36 +0700
Message-ID: <AANLkTimWX63rgQ9fobFyxyLQ2RTXOq0GP9C605i=dEwv@mail.gmail.com>
Subject: Reference From Mr. Wayan Suteja
From: Sung Lian <sungpoo@gmail.com>
/////////end SCAM email 2 header//////////////////
/////////SCAM Email 2 Content/////////////////////
My Name is Sung Poo Lian, I'm from Seoul Korea. I asked Mr. Wayan Suteja,
from Mendhow Travel Agency Service to arrange my vacation with my friends in
your location. I have been Mr. Wayan Suteja client for years, as I usually
go to Bali Indonesia, for my holiday destination. I'm sure this will be our
amazing experience exploring your service.
If I'm not mistaken, here is the detail from Mr. Wayan Suteja regarding my
reservation :
Arrival day: May 15, 2011 for 7 days stay
The total payment I must deposited in your bank account = $5544.00
And here's my card details to make payment of my reservation in your place.
Owner Card, Sung Poo Lian
Card Type: MasterCard
Card Number, 5452xxxxxxxxxxxxxxxxxx (card numbers removed by WWW.Astrodata.us/scams/
Exp. date. 02/2012
CVV, xxx (number removed by Astrodata.us)
Billing address for credit cards :
#45 Wonnam-dong,
Jongro-gu,
Seoul,South Korea
post Code :110-450
Payment cost detail :
- Initial Reservation = $5544.00
- Mr.Wayan Suteja Service Gratuity = $500.00 (please help me to forward this
money to Mr. Wayan Suteja as his service gratuity)
- Your Personal Service Gratuity = $500.00
So I need all payment above will be clear all at once.
Totally = $6544.00
Please confirm me for the transaction approval code. Also please add note
for Mr.Wayan Suteja when you wired him for his gratuity etc, Regarding other
service , location detail etc, we can talk more detail after this
reservation has been paid completely and I will be glad to explore your
location. You can also inform anything to Mr.Wayan Suteja
Thank you
Best Wishes,
Sung Poo Lian
////////End of SCAM Email 2 Content/////////////
After informing them that I would need a phone number to process the card this email was
received:
///////////begin content SCAM Email 3/////////////////////
Dear Jim and Margaret
Yes I interested to visited your place for our vacation, but please don't use PayPal to get the money from my card, because my card has been registered in the PayPal and I have been close my account in the PayPal. at this time I want you to get the money from my card using terminal credit card process.
So here my phone number 822-399-0099
Please inform me as soon when you have done to process my card.
Thank you
Best Wishes,
Sung Poo Lian
//////////End Content of SCAM Email 3 //////////////////////
IF YOU ARE GIVEN A CARD NUMBER THAT IS BEING USED IN A SCAM. A GOOD STRADEGY IS TO TELL THE SCAMMERS THAT THE CARD IS OVER LIMIT AND ASK IF THEY HAVE ANOTHER CARD TO PUT THE CHARGES ON. ONCE YOU HAVE AS MANY CARDS AS THEY WILL PROVIDE YOU...THEN CALL THE BANKS AND REPORT THE SUSPECTED FRAUD.
You will note that the web site ....supposedly from Bali...is actually registered to a probable
fake person in Jacksonville, Florida...
////////another posting from a fishing charter company has the same names and date////////
Click this link: http://www.sportfishermen.com/board/f74/scam-1233556.html
------------------------------------END OF ACTUAL SCAM INFORMATION:---------------------------------------------------------------------------------
Other Sources of information: use search engines such as google and yahoo to search the words
"current internet scams " quotes are not needed!