SCAM

by Don Singleton

I received an email, supposedly from Paypal, but with an email address of email address security@onlineupdate.com

This email confirms that you have sent an Plimus Ltd. payment of $134.76 CAD to support@plimus.com for an Near Reality Redemption item.

-----------------------------------

Payment Details

-----------------------------------

Amount: $134.76 CAD

Transaction ID: 2GH38373AQA42426J

Subject: Near Reality Redemption Points (25)

Note: If you haven’t authorized this charge, click the link below to cancel transaction and get full refund

Cancel Transaction:

https://www.paypal.com/ca/cgi-bin/webscr?cmd=_login-run&/dispatch-5885d50a13c0db1f22d2370ef60a6759516h590e949Pa361fd1b68056146737F

I certainly had not authorized any such charge, but that link took me to http://inetserver.lancaster.com.br/.ssl128/cgi-bin/dispatch-5885d50a13c0db1f22d2370ef60a6759516h590e949Pa361fd1b68056146737F/ (i.e. not paypal.com but a website in Brazil. My security system protected me by blocking it.
If I had been foolish enough to click “Ïgnore this warning”I would have gotten:

It is foolish to ever click on a link any financial institution (bank, credit union, PayPal, etc sends you, but it is nice to know that my security system is protecting me from possible stupidity.

 

I reported it to Paypal Security:

A link to https://www.paypal.com/ca/cgi-bin/webscr ?cmd=_login-run&/dispatch-5885d50a13c0db1f22d2370ef60a6759516h590e949Pa361fd1b68056146737F takes me to http://inetserver.lancaster.com.br/.ssl128/cgi-bin/dispatch-5885d50a13c0db1f22d2370ef60a6759516h590e949Pa361fd1b68056146737F/ which is a fraud site. It looks like people can access your CGI script and get it to transfer to a non paypal site. I thought you might want to know about this so you can see if you can plug the hole.

SCAM

I received an email, in Cyrillic font) from Admin (pro.dep@att.net) but a reply would have gone to admuk@rediffmail.com

Attn: Please,

We wish to notify you again that you were listed as an heir to the total sum of Five Million British Pounds.

A regular mail was dispatched to you but no reply from you. We request you to kindly acknowledge officially to enable us process your inheritance.

Yours truly,

Admin

London UK.

Inquiries:+447024097981

As http://www.affilorama.com/free-tools/domain-location confirms, att.net is Atlanta, United States, but rediffmail.com is in Mumbai, India. Does it sound a but suspicious for a computer in Mumbai, India, set for Cyrillic font (Russia) to pretend to be in the US, to inform me of a British inheritance.

Yes I thought so too.

SCAM

I received an email from Duncan Dun (ducan_dun2010@rediffmail.com) [Note: as we discovered above rediffmail.com is in Mumbai, India]

Hello,

Can you please assist me retrieve funds abandoned in a fund clearing house for investment. I have all the details they need for the delivery but afraid of letting it into an account of a total stranger.

Which is exactly what I am.

Its 100 % risk free because we only have to apply to a fund clearing agency that specializes in delivery of fund irrespective of the source of the fund, there is practically no implication.

Gee, is it a Money Tree, or what?

I want a trust worthy individual who will not run away with all the money and am the only living person who know about it, what they mostly need to deliver the fund to you is intact with me so you don’t need to do much for the fund to come to you. You do not need to have money in any account you want it delivered to, i want your full identification to assure me i will get my share from you once delivered to you. We shall talk of your percentage before the transfer and how i will get my share from you. Reply with your full identity should you be willing to receive it. Full details later.

Regards

Duncan

I don’t think I want to give my “full identification” (including my bank account info) to someone I don’t know.

SCAM

I received an email:

Dear valued Member.

We Here at Ebay, Paypal, are sorry to inform you that we are having problem’s with the billing information on your account. We would appreciate it if you would go to our website and fill out the proper information that we need to keep you as an Ebay member.Please Update your account information by visiting our updates web site below,

http://members.multimania.co.uk/ebayaccountss

john smith.

Updates Center

Account Team.

Well “john smith”, those of us in the real world know that Ebay and Paypal are seperate organizations, each with its own website, neither of which is http://members.multimania.co.uk/ebayaccountss. I can tell just from looking at that URL that you signed up with a UK ISP called Multimania with the user name of “ebayaccountss” (two “s”s), and neither Ebay or Paypal send emails with links that you are to click, in fact both warn their customers never to click a link in an email to reach their sites.

SCAM

I received an email from Mr Evans Green (infogrnevans@pacific.net)

Attn: Sir/Madam,

Although you might be apprehensive about my email as we have not met before, I am Mr Evans Green,I am a Banker i work with Bank Of England, There is the sum of $20,600,000.00 in my Bank “Bank Of England” London, There were no beneficiaries stated concerning these funds which means no one would ever come forward to claim it.

That is why I ask that we work together so as to have the sum transfered out of my Bank into your Bank Account or any other account of your choice. I will be pleased to see if you can help me and also be a good and trusted person. Once the funds have been transferred to your Nominated Bank Account we shall then share in the ratio of 60% for me, 40% for you,do send me a mail as soon as possible for more details here is my email address:greenevans67@yahoo.com.hk

Regards

Mr Evans Green

Well, “Mr Evans Green” I am definitely apprehensive about anyone who would think I am stupid enough to think a banker would pick my email address and expect me to assist him in transferring funds out of his bank, even if he had not quoted the balance in dollars rather than pounds sterling or euros, and even if he had not given an email address from yahoo in Hong Kong, while sending the email with a different email address.

SCAM

I received an email from Webmail Admin Desk [web_update11@live.comsanson@noos.fr]

Attention!!!

We have notice that your webmail account has been compromised by spammers by gaining access to your webmail account and has been using it for illegal internet activities. You are requested to provide your current login credentials to enable us reset your webmail account password immediately to avoid abuse of your account.

Current Username/ID:

Current Password:

Confirm Password :

Date of Birth:

You shall be contacted with a new password upon completion and you are advised to provide the above information or your account will be terminated by the abuse team.

To help track your enquiry we have generated a reference number. Your ticket code is LTK1650537248X. Please use this code in any further communication

I certainly know that spammers have been sending me a lot of spam (including this email) but they did not need to know my current login credentials to do it. My ISP knows that information, so they have no reason to ask me to provide it, and if they want to communicate with me, they would do it from a cox.net or cox.com email address, not one from France.

SCAM

I received another email, supposedly from gccombs@cox.net [gccombs@cox.net] but if I do a reply it would go to mariam10120@live.com

we found out that some emails are been used as fraud, therefore we are closing down some unused emails. Please if you still choose to maintain your email with us. Provide us with the below info:

CONFIRM BELOW:

User name:

Password:

D.O.B:

Warning!!! Account owner that refuses to update his or her account before one weeks of receiving this warning will lose his or her account permanently.

Thanks for Co-operation

Cox Communications

Boy a lot of people seem to think that I will be stupid enough to provide my user name and password to my ISP, when it was the ISP that provided them to me. It is so easy to open their own email addresses, as mariam10120 did with live.com that I wonder what sort of scam they would be trying if I was foolish enough to tell them how to access my webmail account.

SCAM

I received an email from MobilOil Message Center

Please login to your MobilOil Message Center

and visit the Message Center section in order to read the message.

To Login, please click the link below:

MobilOil Online Banking

Copyright © 2010 MobilOil Federal Credit Union

I don’t have an account with the MobilOil Federal Credit Union but out of curiosity I clicked and was sent to http://mobiloilhome.com/MessageCenter/. I know that no bank or credit union would ever send an email with a link in it that I had to use, and I also doubt seriously that the MobilOil Federal Credit Union would use a domain name of mobiloilhome.com, but it sure looks like they are hoping I would be stupid enough to fill in my login credentials: