Scam Email: John Henry or John Smith

So many things about this scam is wrong. Makes it easy to know it is not for real. Lazy on the scammer's part. But good for us.

Return-path: [john_henry155@rediffmail.com]
Delivery-date: Thu, 29 Dec 2011 23:17:00 -0600
Received: from f4mail-235-239.rediffmail.com ([202.137.235.239]:52780 helo=rediffmail.com)
From: "Simth John" [john_henry155@rediffmail.com]
Subject: PLEASE QUOTE

Having gone through your listed products, we offer

great interest to do a purchase agreement with your

company. Please get back to us with the following

information

PLEASE QUATE

1. Prices FOB

2. Payment terms

3. Delivery Period

4. MOQ

5. Specified delivery date assuming from the Date of Order.

you can also get back to us through our private email:pretexglobal@yahoo.com

Please your quick reply will be highly appreciated.

Scam Email: Nadia Coker

This scammer went as far as calling the potential victim to followup on receiving the payment (which is fraudulent). They want to rush a victim through the steps of the scam, before the potential victim is likely to actually search their name or email address online or ask their bank. Fortunately, the artist who forwarded this to me did not lose any money or items before she *did* search online.

If a scammer ends up bothering you via the phone, on the second call be all excited and say, 'the authorities have asked me to record this phone call - okay, what do we need to do next?" And I'm guessing they will hang up darn fast and not call back again.

Here is the last email sent by this scammer, with all the usual blah blah blah about their fake story to try and rationalize why they would be overpaying by so much (and of course leaving out the crucial details of ALL of their money is fake, the shipper is fake - there is no shipper, there is no husband, and the only one who gains from this is them, when they receive the victim's good money via Western Union so that once picked up it is untraceable).

From: Nadia Coker [bestnadiacoker@yahoo.com]
Date: Fri, 23 Dec 2011 23:28:54 -0800 (PST)
ReplyTo: Nadia Coker [bestnadiacoker@yahoo.com]
Subject: Re: Overpayment..

Hello Judith,
Good to hear you have received payment for "Curious". Thanks for your update, I am very excited and can't wait to have your work in our home. I hope to give it a very good home and enjoy the piece for years.
Regarding the payment, my husband overpays you because he didn't have full details of the transaction since I was sick when he sent it. He mistakenly added mover’s payment with yours. He sent you a check of ($6,200 instead of $4,500). Anyway that should not be a problem, kindly deposit the check with your bank and as soon as you are credited with the funds, you can go ahead and remove the asking price for ("Curious") and forward the difference back to my husband. I will talk to him and get back to you with the information require sending the refund back to him.
Meanwhile, the shipper is currently on Christmas holiday. I was able to get in touch with him shortly before sending you this message. He said he can not come for the pickup now until after Christmas or first week in January 2012 which I think is still very ok by me. He has promised to get in touch with you to arrange for the suitable date and time with you. Try and make shipping arrangement with them and keep me posted with updates.
Finally, I would like to thank you for your patient and sincerity. I hope to purchase more of your works in the nearest future and meet you

Scam Email: Anderson Harry

Yet another scammer who can't recognize typical first names from last names when creating a fake scammer name.

From: Mr Anderson Harry [mr.andersonh@yahoo.com]
Sent: Friday, December 23, 2011 1:22 PM
Subject: inquiry

Hello,    I am Mr.Anderson Harry, i want to buy painting works suitable for hotel installation/decoration mostly for these places; guest rooms, hallways, and the reception.currently its on renovation.  I would prefer contemporary  abstracts and figurative styles. oil on canvas and water color.     Could you please let me know if you have some works available for sale,also get me the price details for the works. i am going to pay you with credit card.      Kindly get back to me for more details. Thanks. BEST REGARDS, Mr.Anderson Harry +447011130170

Scam Email: Christine Cannon

Very odd that this scammer felt the need to make their fake last name all capital letters. Also, their fake email address is pretty poorly constructed from their fake name. The rest of it is all classic to what we typically see.

Values submitted from web site form:

Name : Christine CANNON
Email : cannstine@gmail.com
Country : United States
City : seattle
Enquiry : Good day to you.

I am so excited that I came across of your work on internet search,I am interested in purchasing these creative artworks from you.....................

Embracing the future,Sharing the journey and Celebration of life

Let me know their various prices.and how much discounts are you going to give?I will be happy to have these selected artworks hung in our new home in South Africa.As well,I want you to take out the shipping cost.I have been in touch with a shipping firm that will be shipping other house decoratives.

We are traveling from our Seattle home to our new apartment as soon as possible.On Paying for the artworks,I will be glad to pay you with a Money Order or Cashier`s check in US funds that can be easily cashed at your local bank,please let me know on how to proceed for the payment of the creative artworks.

I will await your advise on how to proceed.Have a wonderful day.

Take care,
Christine CANNON

Scam Email: James Harry

Here is a classic series of emails that went to an artist who forwarded it to me. Notice how he carefully presents each part of the scam in subsequent emails until he finally reveals the core of the scam: overpaying (with what will turn out to be a stolen credit card number) and asking that the overage be forwarded to his shipping company (who does not exist). He had not yet mentioned the "shipper" would then require payment via Western Union but that would most certainly come in the next email - had the artist not gotten suspicious and began searching online and confirmed it was a scam.

"Kathleen thanks for your info on the Internet. I came so close to getting ripped off. Here is the conversation from a so called " hotel owner" in London. did a search on his address and it is a car dealership. Plus could not find the hotel on the Internet. 

 

Then I came across your blog. 

 

Thank you,

 

Diane"

First Email:

From: "Mr.james Harry" [mr.jamesh@yahoo.com]
Date Sent: Dec 15, 2011, at 4:35 AM

Hello,

I am Mr.James Harry, i want to buy painting works for hotel installation/decoration mostly for these places; guest rooms, hallways, and the reception.  I would prefer contemporary  abstracts and figurative styles. oil on canvas and water color.
Could you please let me know if you have some works available for sale,also get me the price details for the works. i am going to pay you with credit card.
Kindly get back to me for more details.
Thanks.

BEST REGARDS,
MR. JAMES HARRY.
Owner lewis Hotel & spa
20 Radley Mews
Kensington
London
W8 6JP
+447011130170

Second email:

From: "Mr.james Harry" [mr.jamesh@yahoo.com]
Date Sent: Dec 16, 2011, at 11:44 AM

Hello Diane,
Thanks for your reply. I like some of the works here, they will make a nice fit for the decorations. I will take 3 works . Please do know that i made arrangement with a shipping agent that will come for the pick up. he is going to do the shipping with other items too. he will contact you immediately we are through with the payment.
I will like to see these works hanged in my hotel As soon as possible.

Please confirm the grand cost of the following Works for payment.

pink ladies $475.00
spring tulips &1,200 and hamony $1,500  Total = $3,175

Looking forward to your urgent reply.
BEST REGARDS,
MR. JAMES HARRY.
Owner lewis Hotel & spa
20 Radley Mews
Kensington
London
W8 6JP
+447011130170

Third Email:

From: "Mr.james Harry" [mr.jamesh@yahoo.com]
Date: December 17, 2011 12:30:17 AM CST
Subject: Payment Arrangement
Hello Diane,
Sorry i did not tell you how I got your contact, it was through the net. I was looking up for an Art gallery to request for artworks for my hotel renovation and i came across your contact.
YES I love the works. I am going to send you my credit card details for the payment proper.
once you are in receipt of it, you are authorize to charge my credit card,i will send it together with the three digit number and expiration date , or even the scan copy ,then you charge the card,  it will reflect and confirm the total amount of $8,500.00USD in your account, then deduct $3,175 as full cost of the works, and transfer the balance of $5,325  to my shipping agent for the pick up and shipping of the works and other materials. I will forward to you his Information details immediately i receive your confirmation with this.
Confirm and get me these details for the payment

NAME, PHONE  NUMBERS FOR SECURITY REASONS AND YOUR GALLERY ADDRESS.

NOTE ,i will pay,any expenses or fees incurred for the charges.
I am looking forward to your urgent confirmation ,

BEST REGARDS,
MR. JAMES HARRY.
Owner lewis Hotel & spa
20 Radley Mews
Kensington
London
W8 6JP
+447011130170

Scam Email: Mike Walter

Here's an email I received from an artist:

Hello Kathleen,
I found your blog and thought I'd forward this to you.  I was recently contacted by a Sgt. Mike Walter with the following emails.   I did have the painting framed but that's OK, I'm just out  $300 for that and it's not a big deal. But I started getting suspicious about this transaction and at this point I really think its a total scam. Yes, the kicker $2900 more than the asking price.  I'm not going any further with this thing. I have the check which came from a bank in Utah and yet was posted from the UK.  That makes no sense to me.  In your blog you  recommend just stop replying to the emails. Do the police or anyone else actually investigate this stuff. What do you recommend doing,  besides stop replying to the emails?  Thanks,
Denise

 And here is the string of emails from the scammer (I've put my reply in the comments below):

From: Mike Walter [sgtmikewalter@gmail.com]
Date: November 21, 2011 11:35:48 PM PST
Subject: Payment Information

Hi,

Thanks for the message,I am very happy to know that the Artwork is still available for sale. i must tell you i am very much interested in the immediate purchase and i am willing to pay the asking price ($1000) for it framed .

I will like to let you know that your payment will be in a  Certified Check  and i will wait till it clears your bank before telling my shipper to come for the pick up, this will not take time at all because the payment will be sent out immediately i read back from you.You don't have to worry about shipment, my shipper will handle it. So get back to me with the information needed to send you the payment
I:E :

Full Name
Standard Mailing Address
Phone numbers

so that i can proceed in the payment arrangement.  I will like you to consider it sold and get back to me asap with needed information to mail the payment.

Kind Regards and God bless you.

Mike.

Begin forwarded message:

From: Brad Bucknor [movingalltheway@yahoo.com]
Date: December 1, 2011 6:37:34 AM PST
Subject: Packing and Shipment arrangements for Sgt Mike Walter
Reply-To: Brad Bucknor [movingalltheway@yahoo.com]

Hi,

I have received  communication from Sgt Mike Walter that we should work with you to pack and ship some artwork of his together with his other house decors to his new house in Indianapolis, IN  when you two are through with the transaction,as he advise.

I will like you to get back with the kind and nature of the things he want to ship.I will like to have your studio/home address ,so i can make arrangement  with any nearby Agent that will be coming for the pick up once you and Sgt Walter are through with the transactions. Thanks.

I will be happy to get an early reply from you so that i can begin arrangements on my end. Thanks.

Brad.

Pack N Box Movers and Logistics LTD
"Movers you can trust"
Email: movingalltheway@yahoo.com


Begin forwarded message:

From: Mike Walter [sgtmikewalter@gmail.com]
Date: December 3, 2011 10:24:14 AM PST
Subject: Payment Delivery

I have been expecting your email message because the courier service that will deliver the check has told me that it will be delivered today, get back to me as soon as possible so that i can know the delivery status of the check and get back to them if it is not yet delivered.
Regards.
Mike.

Begin forwarded message:

From: Mike Walter [sgtmikewalter@gmail.com]
Date: December 4, 2011 2:01:46 AM PST
Subject: Payment

Hi Denise,

Thanks for the message, i am very happy that the check has been finally delivered to you despite all the delay, I told you in my previous email that the remaining fund will be for the movers that will be moving all my decors to my new home and your Painting is included.I would have handled this in a more different way if not for my present deployment and now i am in Yemen, Deduct $1300 for the painting, Western Union Charges and your running around expenses.the remaining $2600 is to be sent to the movers to schedule pick-up asap, Please contact the movers for the information that will be required to send them the funds via western union money transfer and i am sure they will work with you and make sure the pick-up arrangement will be as easy as possible...Thanks for your patience and honesty in this transaction so far, please feel free to advice.... Thanks again and God bless you.

Kind Regards..

Mike.

Scam Email: Alice Mogan

The contents of this scam email was a little different than the usual I see but there were still the enough of the usual signs to tell me this was a scam. One sign was the word enquiry. The generic nature of the email not even referencing what I supposedly do. The weird company name. Signing the email not by the person's name that has been stating at the beginning. And finally that weird period I *always* seem to see at the end of a signature of a scam email. Their templated software must produce this because no real person puts a period there.

NOTE!!!! DO NOT ACTUALLY CLICK ON THE LINK IN THEIR SCAM EMAIL!!! It's there to just show what was in their email in case others search on that to see if they have also received a scam.

Return-path: [info@aalconltd.com]

Delivery-date: Fri, 02 Dec 2011 17:38:41 -0600

Received: from [189.10.142.230] (port=39570 helo=pirahy.ind)

            by gator1036.hostgator.com with esmtps (TLSv1:AES256-SHA:256)

            (Exim 4.69)

            (envelope-from [info@aalconltd.com])

Message-Id: <201112022036.pB2Ka03n008759@pirahy.ind>

Reply-To: [aalconltd@yahoo.com.ph]

From: "Anglo group"[info@aalconltd.com]

Subject: Enquiry

Date: Fri, 2 Dec 2011 15:41:15 -0500

Dear Sir/Mdm

My name is Alice Mogan we got a recommendation of you from one of your customers about your products you deal on. Here is the exact sample of the product we wish to deal with your company, so please confirm to us if You/your Company can make provision of the exact. Please kindly view our website for the design sample of our desired products if your company can partner with us with similar products in the in-page of our company website below.

Click Here To View Our Sample. http://charleshhulseps.ocdsb.ca/Page/images/login.alibaba.com/login.alibaba.com/login.alibaba.htm 

Upon the receipt of your confirmation, I shall forward to you the order quantity and delivery details, which will enable you to give us a proper quotation.

Looking forward to receiving your inquiry with price, invoice and shipment terms

Sincerely

Regards

Anglo group

Purchasing Manager.

Scam Email: Vivian Peston

Sharon forwarded me a scam email she received. She seemed to have some lingering doubt as to whether it was a scam or not, but it definitely is.

Hi,

I have received an inquiry about my artwork and think this one is a spammer. Might not be, but as there were a few red flags, thought I'd pass this correspondence thread along as the name Vivian Peston did not appear on the list of names on your site.

Sharon

-----Original Message-----
From: Vivian Peston [vivianpeston@yahoo.com]
Sent: Mon, Nov 21, 2011 8:23 pm
Subject: Re: Mailing Info?

Hello Sharon,
Good to hear back from you. Yes, I will like to proceed with the purchase of both “Gramercy Park West Snow” ($900) and “Union Square Winter” ($1200). I really like them and I believe they will make a beautiful home. Kindly take them off your website and consider them sold to me.
Though, I am presently away in Geneva, Switzerland for my twin sister's wedding even though it comes at a time when I was preparing for a big move and also expecting a baby but it means so much to her. I should be back in few days.
Meanwhile, I will like you to forward your name, standard mailing address and phone number so I can inform my husband who is still shuttling between our home in New Jersey and London, United Kingdom on where to forward the payment by (Cashier’s Check). He has just been promoted and transfers to head the plant section of their head office in London.
I will also contact the shipping agent that will be shipping our entire house decorative so he can get in touch with you to arrange for the pickup at your address or studio as soon as you receive the payment and clear your bank.
I will look forward to hearing from you so i can know how best to proceed. Cheers.
Best Regards,
Vivian.

-----Original Message-----
From: Vivian Peston [vivianpeston@yahoo.com]
Sent: Mon, Nov 21, 2011 10:55 am
Subject: Re: Purchase Info..

Hello Sharon,
Thanks so much for your response to my query about those creative works. Yes I will like to proceed with the purchase of both “Gramercy Park West Snow” ($900) and “Union Square Winter” ($1200). They are really nice and I must commend you for the job well done.
Can you please get back with what inspire you to make this nice works as to know how best to proceed with the purchase?
I will look forward to hearing from you.
Best Regards,
Vivian

-----Original Message-----
From: Vivian Peston [vivianpeston@gmail.com]
Sent: Sun, Nov 20, 2011 9:44 am
Subject: Purchase Info..

Hello ,
Hope this message finds you well. I saw these realistic creative artworks on your website ([url as inserted here]). They are really nice and I am interested in them.  Kindly get back to me as soon as you can if they are still available for purchase including their prices. They are titled as;
“Gramercy Park West Snow” and
“Union Square Winter”
I will appreciate your prompt reply.
Best Regards,
Vivian.

Scam Email: Brian Needs Help

Here is a scam we see quite a bit that takes a different approach to getting money out of people. This was forwarded to me by another artist.

In this scam, it is typical that someone's web-based email or facebook account has been hacked (either by phishing and someone accidently giving up their password or just by software that goes through millions of combinations and once in awhile hits it lucky and guesses the correctly combo - particularly when people's passwords are easy to guess). So this scam email looks like it is coming from someone you know. I can relate to this. It happened to me on my hotmail account (and I wouldn't have considered my password easy to guess!)

Then they pretend they are in trouble and need money fast - via Western Union... sound familiar?? Really, scammers would really have to go back to the drawing board if Western Union was just willing to create a system where their transactions were verified and traceable. That they are not is why scammers have earned such a great living utilizing Western Union.

Okay, here's the email (and notice that classic weird period after the sign-off name... that is in almost every scam email and I don't know why - must be the software they use to generate these emails).

Subject: TRAGIC NEWS (they put the name of someone you know here) HELP NEEDED

I'm writing this with tears in my eyes my Family and I came down here to Madrid,Spain for a short vacation,unfortunately we were mugged at the park of the hotel where we stayed all cash,credit card and cell were stolen off us but luckily for us we still have our passports with us.

We've been to the embassy and the Police here but they're not helping issues at all and our flight leaves in less than 3hrs from now but we're having problems settling the hotel bills and the hotel manager won't let us leave until we settle the bills.

Am freaked out at the moment.

Brian.

Scam Email: James Karg

Hi Kathleen - My name is beth and i received this strange e-mail today...a friend told me about recent "art scams" going around, and a quick google search lead me to your site. I was about to fall into the "too good to be true...but i still believe it" trap, but thought i might get your take on it. based on what i've read about these scams so far, it seems like this fella's just blowin' smoke. if you have a chance, i'd love to hear what you think.
Thanks!
Beth

---------- Forwarded message ----------
From: James Karg [jkarg001@gmail.com]
Date: Wed, Nov 2, 2011 at 5:57 AM
Subject: dream monster 3

Good day,

My name is James Karg, I'm from  california and i hope this message finds you well.I was going through your works and my eyes caught this particular work, i will like to have it for my new apartment this month.please let me know if the piece is available, if yes let me have the detailed price and more information about it. i will be waiting to read from you.

Regards.

James.

Scam Email: Cynthia Hilson

Here is an email I received this morning from an artist:

Good work Kathleen. Thanks for taking the time to compile the scam list. Just received my first scam this morning from:

Cynthia Hilson [cynthilson@gmail.com]

The original email is below.

Received: from unknown (HELO cloudmark1) (10.49.16.75)
From: "Cynthia Hilson" [cynthilson@gmail.com]
Subject: artworks purchase
Date sent: Sun, 30 Oct 2011 06:06:00 -0400

Good day to you.

I am so excited that I came across of your work on internet search,I am interested in purchasing these creative artworks from you.....................

The Valley,Logging Road,Green Apples,Creole Cabin and Portrait of a Jug

Let me know their various prices.and how much discounts are you going to give?I will be happy to have these selected artworks hung in our new home in South Africa.As well,I want you to take out the shipping cost.I have been in touch with a shipping firm that will be shipping other house decoratives.

We are traveling from our Seattle home to our new apartment as soon as possible.On Paying for the artworks,I will be glad to pay you with a Money Order or Cashier`s check in US funds that can be easily cashed at your local bank,please let me know on how to proceed for the payment of the creative artworks.

I will await your advise on how to proceed.Have a wonderful day.

Take care,
Cynthia Hilson

Scam Email: Lynda James

Scammers choosing James as part of their fake name seems like a really common thing. Clearly they don't use a name randomizer. Ooops. Mustn't give them any additional ideas.

Here is one an artist forwarded to me this morning:

Time Submitted: Mon, 24 Oct 11 04:14:54 +0100
From IP: 41.205.173.195

NAME = Lynda
EMAIL = lynda.jameshop@gmail.com
EMAILCONFIRMATION = lynda.jameshop@gmail.com
TELEPHONE = 4755875436
COMMENT = Good Day,

I'm Lynda James from Norway.I want to place an order and i know the difficulties encountered when shipping internationally,But that will not be a problem because i am registered with a shipping company which i'v used severally times without any delay nor damage.
Before i place the order,i want to inform you that i will be making the payment with my Mc/Visa cards because as for now i can only make payment with my US credit card account information,so if it's okay by you kindly get back to me with the contact details and please reconfirm your website so as to know if i'm right with the site.I awaiting your swift response so as to list out the items needed.

Lynda-J-Supperstore
Strandgaten 34,
N-5817 BERGEN,
Norway.
Telephone: 4755875436
Telefax: 4755875427

Warmest Regards,
Lynda James. 

Scam Email: Ricky Tetteh

Ah yes, this is exactly the kind of language I use when I talk about my art with clients..... NOT!

And what is with the signature?? The fake name has the middle initial AFTER the last name? So lame.

Return-path: [oforidankwa05@gmail.com]
Delivery-date: Wed, 05 Oct 2011 19:07:22 -0500
Received: from mail-gx0-f171.google.com ([209.85.161.171]:60236)
Sender: oforidankwa05@gmail.com
Date: Thu, 6 Oct 2011 00:41:21 +0100
X-Google-Sender-Auth: pXWfyzBrIfvo4RaNYio4MyOMB6I
Message-ID:
Subject: Supply Inquiry
From: Amason Ventures Ltd
To: undisclosed-recipients:;

Dear Sir

There is an on-going tender for the purchase of your products in large quantity, I will like to know if you can handle the supply order of your company's product to the Government of Ghana in West Africa. I am a commission agent.

Please Can you furnish us in full details about the standard of your products.We will appreciate it more if you can give us with detail specification/price lists to avoid making a wrong choice of product.

Please Reply directly to myemail:amasonventuresltd@msn.com

Ricky Tetteh E.
amasonventuresltd@msn.com

Scam Email: Patrick Doe

This came from the same servers I saw on a different scam email I posted Monday, so clearly the same scammer is exploiting the same server to send out their massive mailings. And will likely continue to do so until the owners of those servers realize what is going on and plug the security hole.

Return-path: [dientito@gitserver2net.gitserver2.net]
Delivery-date: Wed, 05 Oct 2011 09:25:28 -0500
Received: from gitserver2net.gitserver2.net ([173.192.23.66]:55184)
Subject: Order Enquiry
From: Patrick Doe [patdoe@blumail.org]
MIME-Version: 1.0
Content-Type: text/html
Message-Id: [E1RBSPX-00059d-Pc@gitserver2net.gitserver2.net]
Date: Wed, 05 Oct 2011 09:25:27 -0500

Hello, This mail is to make inquiry on the below question. 1- Do you carry overseas? (though i already know of a freight forwarder that will pick my packages from you,since they ship lesser than any other courier and they are so effective in shipping my goods to me here in Giza, Cairo, Egypt is estimated to be Next Day Service and 3-4days) I have used their services in the past and it was splendid. 2- Do you accept credit card for payment(U.S.A Master and Visa card to be precise)? Kindly let me know your comments on these, before i send the items I am interested in purchasing from you.

Patrick Doe
Store Owner

Scam Email: John Cool

Got two scam emails in succession last night, one at 12:34 am and the second at 12:57 am. It was probably the same scammer sending out a massive mailing because both had similar characteristics - generic fake first name with no last name, both signed just "purchasing manager", and the email content and format basically identical, and sent so close together in time. So I'll post both of them below.

first one received:

Return-path: [dientito@gitserver2net.gitserver2.net]
Delivery-date: Mon, 03 Oct 2011 02:34:37 -0500
Received: from gitserver2net.gitserver2.net ([173.192.23.66]:58112) Mexico
Subject: Order List
From: john [johncool461@gmail.com]
X-AntiAbuse: Sender Address Domain - gitserver2net.gitserver2.net

Good day,

We browsed through your web page and we are interested in ordering some of your products,we are located in Finland,we will like to know if you have the items in stocks,so kindly get back to me with the right contact person email,phone # and confirmation of website so that we can place my order quickly, and i want to know if you have your own personal shipper or can the order be picked up at your store,please advise so that we can proceed by going ahead to place the order.

Regards
Purchasing Manager

 second one received:

Return-path: [anonymous@megatron.webapptron.com]
Delivery-date: Mon, 03 Oct 2011 02:57:18 -0500
Received: from [209.216.201.191] (port=55203 helo=megatron.webapptron.com)
Received: (qmail 25906 invoked by uid 48); 29 Sep 2011 18:10:06 -0700
Date: 29 Sep 2011 18:10:06 -0700
Message-ID: [20110930011006.25882.qmail@megatron.webapptron.com]
Subject: Email order
From: smith [sec@yahoo.com]
Reply-To: smithpayne91@yahoo.com

Good day,

We browsed through your web page and we are interested in ordering some of your products,we are located in Norway,we will like to know if you have the items in stocks,so kindly get back to me with the right contact person email,phone # and confirmation of website so that we can place my order quickly, and i want to know if you have your own personal shipper or can the order be picked up at your store,please advise so that we can proceed by going ahead to place the order.

Regards

Purchasing Manager

Scam Email: Thomas Morris

This interesting thing to note about the scam below that was forwarded to me is that the scammer got really confused about his faked name. Is he Thomas Morris like in his From field, or Abbot Morris like in his email address, or just "Morris" like how he signed off on his email (who in their right mind would sign their email by just their last name... this scammer is making it easy to spot this as fake).

Here is the email I received this morning:

kathleen-- I and another artist friend received the following email this morning. The only difference was the subject line--each was the  name of a piece we had made...gotten off of our website.

I was suspicious and googled the name and came upon your blog. Thank you for what you are doing to help us all!

Rory

Begin forwarded message:

> From: Thomas Morris [abbotmorris1@gmail.com]
> Date: September 26, 2011 5:21:01 AM CDT
> To: Rory
> Subject: Legacy II
>
> Hello,
>
> Happy new day, I have interest in this your piece of work i came
> across through my searching and i really
> want to make a request if you still have it available for purchase,
> meanwhile email the price you are willing to sale it.
>
> I hope to read more about the piece from you,
>
> Your's Morris.

Scam Email: Bill Richard

Notice the ugly altered "Return-path" on this scammer's email. They were somehow able to route their scam via AOL servers while altering all the headers to reveal any legitimate source of the email.

They've taken to always lately asking the person for their website address in initial emails like this. That way they can send out hundreds of thousands of these and not break a sweat trying to personalize anything. If someone does reply and actually does provide their website address, then the scammer can customize and personalize all other emails from the content they find on the website, making it seem like a legitimate purchase. But who would be purchasing from your "store" without first going to it on the internet. Doesn't make sense. But still people fall for it. Don't you.

I've also noticed lately a trend towards scammers just putting a first name only. Weird. Though in this particular scam email, I can tell their faked last name as well within their email address - which is disposable. The rest of the content of this scam email is the same ole same ole crap.

Return-path: (bjlhjkhjkjkhjhjk@fgfgfgdgdfdfg.com)
 by chakra.lunarbreeze.com with smtp (Exim 4.69)
 (envelope-from )
X-Originating-IP: 172.191.3.109 (AOL-172BLK)
X-Sender: bjlhjkhjkjkhjhjk@fgfgfgdgdfdfg.com
From: Bill (billrichard2010@ymail.com)
Subject: Order Inquiry

Hello Sales Dept,

I want to place an order in your store,and I will like to know if you ship to Portugal and my payment will be remitted via Visa/Master Card issued in US bank. So please let me know if you can assist me with the order,and please do not forget to include your website in your reply.Your quick response will be highly appreciated,I will be very glad if you treat this email with good concern.

Regards,
Bill Richard

Scam Email: John Cool

I got two of these, the second one coming only 9 minutes after getting the first one, both identical. This scammer decided not to even bother with a fake name.

Return-path: [geaveens@charon.e-dentify.nl]
Delivery-date: Wed, 07 Sep 2011 09:43:16 -0500
Received: from [94.100.20.18] (port=55062 helo=charon.e-dentify.nl)   
    (envelope-from )
    id 1R1JLQ-0004W7-AV
Received: from geaveens by charon.e-dentify.nl with local (Exim 4.69)
    (envelope-from )
    id 1R1JL8-0001lD-8q
Subject: Order Inquiry
From: john [johncool461@gmail.com]
Reply-To:
 johncool461@gmail.com
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: [E1R1JL8-0001lD-8q@charon.e-dentify.nl]
Date: Wed, 07 Sep 2011 16:42:58 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Originator/Caller UID/GID - [700 696] / [47 12]
X-AntiAbuse: Sender Address Domain - charon.e-dentify.nl

Good day,

We browsed through your web page and we are interested in ordering some of your products,we are located in Finland,we will like to know if you have the items in stocks,so kindly get back to me with the right contact person email,phone # and confirmation of website so that we can place my order quickly, and i want to know if you have your own personal shipper or can the order be picked up at your store,please advise so that we can proceed by going ahead to place the order.

Regards
Purchasing Manager

Scam Email: Campbell Kelly or John Campbell

This scammer just couldn't decide who his fake identity was. Started out as Mr. Campbell Kelly but then quickly dissolved into John Campbell. He also forgot to change the FROM email address to match what was in the body of the email but I never said scammers were the brightest batch in the room...

Return-path: [senior@host.supremevaluesserver.com]
From: Campbell Kelly [johniemark891@gmail.com]
Subject: Email Order

Dear Sales,

How are you today, my name is Mr CAMPBELL KELLY the

owner of China Gold Pandora Store.
I will like to order for some items in your store,but

before i proceed i will like to know if you can supply

and ship to CHINE and if you accept CREDIT CARDS as

payment.
Kindly advise me ASAP, so i can proceed with the list

of needed items.

Store Name:China Gold Pandora Store

No.2 Metro Road,Yinzhou District, Ningbo City, Zhejiang

Province

POSTAL Code:570923

Country:China

Phone:+86 09 7726  6540

E-MAIL:campbellkelly64@gmail.com

Thanks

JOHN CAMPBELL

Scam Email: Linda Scott

This scam is not art related but an artist forwarded it to me. Egads! This scammer went on and on and one, hoping their story would somehow convinced their intended victim they were for "real". And they didn't even get to the heart of the scam, which is their deposit check would be for more than was required and they would likely then ask the difference be sent to their shipping company, via Western Union. And therein lies the scam. The check will be fraudulent but your money is good, and once picked up by the scammers from Western Union, is completely untraceable.

I'm posting this because it may get the award for the longest lamest "backstory" offered up by a scammer.

Hello,

Thanks very much for e-mailing me back ,i really appreciate it, am also sorry for getting back to you late.. I am Linda Scott by name and live in Seattle, WA. I would have been kind of happy if we can meet before making any plans, but am very busy and i have a lot of things to do right now.. I will really appreciate it if you can tell me more about the place and tell me little about you because my uncle is presently very sick, and i have to travel to Finland to see him but i want to secure the place down before going. He was involved in a car crash with his new car some weeks back and now ill seriously, I need to check on him and take good care of him.

I am staying in CHRMC Children's Hospital Seattle staff Quarters now

The address is below:

4800 Sandpoint Way NE Seattle, WA 98105

I am moving cause of my job, am a medical Humanitarian nurse for united Nations. I work for CHRMC Children's Hospital in Seattle but will be working in a local clinic over there, More about me, am a neat type of person, honest, humble and responsible. I like honest, responsible and hardworking people while i hate the lazy, messy and uncaring people....well am a quiet and gentle going person to live with....I am 27 yrs old female, 5.4 in height ,i like tourism and i don't keep late at nights neither i will have overnight guest around but am ok if you do..

I was born and brought up in Finland, i studied there i had my university education right there while staying with my uncle.. I lived all my life in Finland before coming down to Seattle, WA have been living with my uncle from age 13 ...Then i was member of the Red Cross Association it really sounds interesting for me...

Am sure You 'll really like the person that i am ,because i will also do the dishing if you like I work when i am to and relax when i am to, I also like sharing my thoughts also....paying rent on time will not be a problem as i will also be making the rent fee before the month ends....

I do not have any pet, i really like dog and cat but have none of it now, so there is no problem about that.

I must confess am comfortable with the price and I will want to secure the place down before my arrival so i will want you to tell me all about the place as i can't see it before my arrival but the pictures...I also will want you to know that i have my car that i will be coming over with little of my furniture.

please let me know if there will be room for them. With all that I've said above I have told you more about me and more picture of mine will be attach in the next email Let me also know how i can go about securing the place down before my arrival as i will also be busy from next week and let me know if you can take off the ad off the site as i am going to secure the place with a deposit

Feel free to ask me any question and as I've said i am looking to move in by the availability of the place but want to secured it now

Thanks..

Scam Email: Ballet Ryan

Here is a note I received from another artist:

Friday, I had an email that I was suspect of the content. Today I am sure! Someone is trying to scam me. This is my second scammer email in the past year and a half that I have had. Luckily, I have been on my toes.

First Email:

From: ballet ryan (balleyryan@gmail.com)
Subject: Enquiry

Hello [my name],

My name is Ballet Ryan and am from South Carolina and Was going through your works and love this piece.
What's your final price for it and am really interested in purchasing the piece.

Thanks and i await your response.

Ryan.

Second Email:

From: ballet ryan (balleyryan@gmail.com)
Subject: Re: Enquiry

Hello [my name],
Thanks for your prompt reply.I really appreciate your detailed breakdown and frankness on this.
Unfortunately, Im on my way to Mexico on an official trip(I'm a marketing Executive) and wont be back for another two weeks, I
would have come to inspect the piece personally. Im taking your word for true on It though .
Im okay with the price, I think it worth it anyway. If you'd like to know, Im relocating to the UK soon and I'm trying to gather some
good stuff for my new abode. Im buying yours amongst others,quickly! before someone else grabs it.So, I'll arrange to send you payment ASAP as i will be responsible for the shipping (payment) of the piece to my new abode in UK.
However, I'll have to notify my shipper who's helping me move my stuff from the US,to get set for the pickup of the piece from your
place as I MIGHT be delayed in Mexico depending on how things goes.
Thanks,
PS: In the mean time, kindly get back to me with your contact address and also your phone# so I can get certified check prepared
and have it sent out to you ASAP.

Scam Email: Jasmine Anthony

The thing I found odd about this scam email is how the scammer seems to have used a "reply" to paste in to their main email (notice all the carets at the beginning of the lines). They also put their intended victim's email in the BCC field (I saw this when I looked at the full headers). I guess they were trying to cut some corners but it seems odd. The content is all the usual stuff we see over and over again.

From: Jasmine Anthony (jasminefashionboutique@googlemail.com)
To: jasminefashionboutique@googlemail.com
Subject: Enquiry

>
> Dear Sales,
>
> I got your contact through an international fashion network.
>
> My name is Mrs Jasmine Anthony, a store owner in Ivory Coast, Africa.
> I'm really interested in your product and would like to be one of your
> international customers.
> My business is five years old and steadily growing. We purchase all
> kind of women clothing,jeans, t-shirts , jewelries & accessories etc
> and resell them to our local customers and it has been very profitable
> for me.
>
> If you are considering selling to me, then send me some of your scan
> collections with the wholesale prices.
>
> Ordering should be easy as I could just note down the style
> numbers and e-mail you my order list. I do hope you'll accept my Visa
> or Master credit cards  as my only payment option and also hope you can
> ship Internationally
> to Ivory Coast.
>
> I look forward to hearing from you soon.
>
> Thank you,
>
> Mrs Jasmine Anthony - Owner
> Jasmine Fshion Boutique
> Rue 47 Immeuble Diallo-Avenue Houdaille
> Abidjan-Ivory Coast.
> My Company Reg N°: R.C N° 2856516-CC.N°020567896

Scam Email: Fanbox.com

Fanbox.com, formerly known as sms.ac, is one of the most annoying and sleaziest spams and misrepresentations going right now.

When you sign up for FanBox, it asks for your permission to email everyone in your address book. After you give them your password (DON'T do it!) it will start spamming everyone in your contact list / address book.  It will send them these stupid ":____ asked you a question" spams.

We've received them here; and verified that the senders had no intention of sending them to us, or "asking" a question. They felt victimized.

Here is the one I received this morning, obviously from someone I know - who likely fell victim to it.

P.S. DON'T CLICK ON ANY LINKS BELOW, they are there just to show you what they look like and I don't want you falling victim to this scam!

From: {name of my friend} [fbNOREPLY@yourfanbox.com]
Received: from [208.69.101.171 helo=smtp171.sms.ac]
To:   {me}
Subject: {name of my friend} shared some photos with you

{name of my friend} shared a new photo slideshow with you View now
http://profile.fanbox.com/DeveloperOptin/BlogROME.aspx?vet=146&mlid=91144420&vlsid=31700&dt=081311&cid=31700&evt=708316703&src=BLOGROMESOCUSTOMTEXT&encemail=Iqknz%2f0G3SFW2CwCgByrpc5jPun6o6yFrpZestLSRCLT1ExbYh%2bq%2fQ%3d%3d&ptid=1584{name of my friend}'s time spent in this site helps fight Children Blood Disorders.To reduce unwanted emails: if you don't respond to (click) emails from any person, all further emails to you from that person are automatically blocked for 24 hours.

To ensure you don't miss anything from {name of my friend} please check your feed
 or inbox
 regularly.This message was intended for {my email address} and was sent as a notification, invitation or reminder (digital goods subject to change in reminders) of an event initiated by {my friend's name} using a third-party or platform application and may contain promotional materials and/or services for sale including digital goods received.To control messages sent to or from you, your contacts and/or FanBox, click here
http://profile.fanbox.com/ApplicationManager/ROMEBlogSettings.aspx?cid=31700&em=Iqknz%2f0G3SFW2CwCgByrpc5jPun6o6yFrpZestLSRCLT1ExbYh%2bq%2fQ%3d%3d&vet=146&mlid=91144420&dt=081311&ptid=1584&aec=-1&tec=-1&pid=31700&sendid=221470708.Our offices are located at: FanBox - 113 West G Street, STE 510, San Diego, CA 92101, USA

Scam Email: James

We've reported on this one before but it's been awhile so here is another one received this morning from the fake name of just "James". Notice on the full headers how the return address is different than the reply to address where they are receiving replies and communicating with their intended victims via a disposable gmail account.

Return-path: [w16149@managed18.lsrv.de]
Received: from managed18.lsrv.de (unknown [86.110.75.161]) Germany
From: james [makjames101@gmail.com]
Reply-To: makjames101@gmail.com
Subject: Order Inquiry

Good day Sales,

     I browse through your contact and I find some items which we have interest in purchasing to our store in Albania for urgent supply, I will like to know the prices per each items plus the shipping cost,i also want to know the kind of credit card you accept for payment e.g master card or visa card. I await your swift response so I can proceed with the needed items and
quantity

Thank you

Spam King could get 40 years for 27 million Facebook messages

Sanford Wallace has been around for a long time. Ever since I can remember anyone talking about spam. And I've been involved in the internet since the days of Usenet (curses, that'll date me somewhat). He seems to keep at it, no matter what is thrown at him.

There are really so few cases where the authorities actually pursue spammers, so I thought I'd post this. But I wonder if it's more about that Sanford seems to continue to insist on living in the United States. He'd probably be pretty untouchable if he chose a more remote location. And also the authorities maybe wanting us to believe they are actually trying to pursue the massive problem of spamming. Ole' Sanford will be back.

A Las Vegas man accused of sending more than 27 million spam messages to Facebook users faces federal fraud and computer tampering charges that could send him to prison for more than 40 years, according to a grand jury indictment.

Sanford Wallace, the self-proclaimed "Spam King," pleaded not guilty during an initial court appearance Thursday after being indicted July 6 on six counts of electronic mail fraud, three counts of intentional damage to a protected computer and two counts of criminal contempt.

The indictment filed in San Jose federal court said Wallace compromised about 500,000 Facebook accounts between November 2008 and March 2009 by sending massive amounts of spam through the company's servers on three separate occasions.

Wallace would collect Facebook user account information by sending "phishing" messages that tricked users of the social networking site into providing their passwords, the indictment said.

He would then use that information to log into their accounts and post spam messages on their friends' Facebook walls, the indictment said. Those who clicked on the link, thinking it came from their friend, were redirected to websites that paid Wallace for the Internet traffic.

Scam Email: Jerry Watts

[This was forwarded by another person, it seems the scammer found him through his ad on Craigslist (notice how the first email is just so they can get a real email and begin writing directly to their potential victim)]

seen your site and wanted to help out, below is two messages i receved from one of the scammers. top one was the last i got, second just under is the original. and below that is the full message details.   hope this helps.   good job

i am also going to keep on with this scamer so he will send the payment, i found out last time this came up that the checks are fake with stolen info from real companys, and the senders are sending the checks with stolen shiping info so some other companys are having a really hard time with the checks and the shipping costs they are fighting off.

last time john deer paid the shipping lol. anyway yea if i can save the companys a lil hassle by giving them a heads up the ill try to help if i can

----- Forwarded Message -----

From: Jerry Watts [dexme004@gmail.com]
Subject: The towing and repo high speed dollies - $800

Thanks for the prompt response,i will like to proceed with the
transaction asap and my mode of payment will be via Bank certified
check. However, to ease the pick up the item will be picked-up from
you by my shipper once you receive and cash the check,i am willing to
wait for your bank to verify and clear the check before the shipper
pickup the item therefore I'll need this detail below to mail out the
check.

* The Full name on check
* Mailing address (Deliverable Address)
* Phone Number

Proceed to delete the advert of this item if my mode of payment is
accepted and get back to me asap with your details to mail out the
certified check to you.

Thanks

First Email:

Message body

** CRAIGSLIST ADVISORY --- AVOID SCAMS BY DEALING LOCALLY
** Avoid: wiring money, cross-border deals, work-at-home
** Beware: cashier checks, money orders, escrow, shipping
** More Info: http://www.craigslist.org/about/scams.html

--
Do you still have these item for sale?
Get back to me asap.

Scam Email: Abdul-Quahaal

This scammer went right for the fake name that doesn't even sound english, perhaps hoping that might explain the bad grammar and formatting. This scammer also wasted no time in going right for the meat of the scam, that they will use their third party shipper (which really doesn't exist). That way, they can then in a later email explain why they are sending payment for MORE than the amount and ask you to send the difference on to the shipper via Western Union. Again - no shipper. Fake payment (whether by check or credit card). Only them at the other end of Western Union, collecting up your good money in a very untraceable way.

Don't fall for it.

Return-path: [phantomp@impala.ip-sg.net] (124.217.238.101) Malaysia
From: Abdul-Quahaal [abdulquahaal@yahoo.com]
Subject: Order Enquiry

Hi Sales, Am Mr Abdul-Quahaal currently based Dubai . I will like to place an order from you. I know there a lot of difficulties encountered when shipping internationally, But that will not be a problem because i am registered with a shipping company whom i have used severally without any delay nor problems with my goods. Before i place these order, i want you to notify me if i am able to place the order and most importantly: If i can make payment with my credit cards Visa/Mc because that is the only way we are set for payment now without no delay. I don't place online orders can i e-mail my ORDER needed then you can give me a quote here and make charges to my cards manually on your end ? Pls Clarify. Looking forward to your swift response then we can proceed further as soon as possible. Warmest Regards. Mr Abdul Quahaal Shipping Address: 215, III Floor, Matar Al Tayer Bldg Karama Dubai 115334. UAE. Registered in UAE, Reg. No. 1450827

Scam Email: David Williams

There are lots of things you can learn by glancing at the full headers. Of course, I immediately knew this was a scam because I am an artist and don't sell the items listed below. They are playing a numbers game and hardly care about anyone who doesn't actually match their email. They only care about those - in the hundreds of thousands of emails they send out at any given time, that SOME will be people who sell those items and think they have a real buyer.

But let's get back to the headers. So I view the full headers and I immediately see the email came from an IP owned by celtusdigital.com. I google it. I *don't* go to it. I just google it. It's not in english and its a joomla site (like wordpress) so now I'm guessing the owner doesn't even know the scammer hacked into their site and is using it to send out massive amounts of spams.

Interestingly, the line with X-PHP is more revealing. It is the scammer software script this cockroach used to send out the massive amounts of spams and the IP number for that sourced to Gambia, Africa. That is probably where the scammer is sitting.

David Williams (or Lin Williams or Rose Williams or Terry Williams - you get the picture) is a common fake name lots of scammers use, and the gmail account to correspond with their potential victims who do reply is a disposable gmail account.

By the time I look at the actual content of the email and where they pretend they are from, it's all already so obvious that it's all made up.

Return-path: [revistap@celt.celtusdigital.com]
Received: from 184.172.246.156-static.reverse.softlayer.com ([184.172.246.156]:38106 helo=celt.celtusdigital.com)
X-PHP-Script: www.revistapikabu.com.mx/mail.php for 41.76.9.170, 41.76.8.4 (The Gambia, Africa)
Subject: Order Quote
From: David Williams [bquality.venture@gmail.com]

Hi Sir/Madam,

      We are requesting pricing for the items mentioned below through  your store, kindly get back to us if any of this items can be supply as soon as possible  also advice on your payment methods.

Item:

1) USB Flash Drives 2 / 4 GB
2) Mirco SD CARDS 1 GB
3) HEW C9730A HP OEM Black Laser Toner Cartridge

We look forward to read from you soon.

Best Regards

David Williams
234n Palm Ave,
Hemet,CA 92543
818 358-0535

Scam Email: Etherington Parton

This scam has the typical content of the "template". Looking at the headers and glancing at the RETURN-PATH field rather than the FROM field revealed the shady shady source of this email. Also, pretty bizarre fake name for this scammer to have chosen. I really think they must have software that just randomly chooses and throws names together. And this scammer was hedging their bets by referring to me as a "gallery/store".

Return-path: [nobody@zero8.webzero.kr]
Received: from [110.45.139.18] (port=53783 helo=zero8.webzero.kr) (Seoul, Korea)
From: Etherington Parton [e.partonsupplies0@gmail.com]
Subject: Inquiry...

Hello,

I am Etherington Parton and I'll like to order some items from your gallery/store but before we proceed I'll like to ask the following questions.

Do you ship to Australia?
Do you do Mail Order?
Do you accept credit card as for Payment (My US Master and Visa card to be precise)?

I await your urgent response so we can proceed.

Etherington

Scam Email: Dakar Arts Festival

So this scam is a little different than the ones we typically deal with on this blog. But a scam is a scam and I intend to post all of them that I receive which target artists. I did review the lovely flowchart this artist provided of how the scam operates and what IS the same is that the "organizers" are after direct cash from the artist - requiring a booking fee (one level of collecting money) and THEN upon the artist shipping the artwork requiring some time of service fee (level 2 of collecting money). If they've gotten their victim through two levels of payment, they will attempt to make up other stories of why they need more money in fees or in assisting some type of sale (obviously fake) of the artwork.

I want to say 'shame on you, scammers', but then I have to remember they are sociopaths and are incapable of feeling or recognizing shame or guilt or any moral behavior. So let's move on.

An artist sent me this information and I am posting it as it was sent to me. I thank this artist for continuing to spread the word so artists do not fall victim to this stuff.

Dear Kathleen,

I am a interested reader of your "Stop Art Scams" Blog!

I am also following the nasty "DAKAR ART FESTIVAL" scam, where the scammers try to get money from artists by organizing a fake art festival.

I hope you can post it on your site to warn other artists as well!!

Attached I also put a diagram showing the "anatomy of the scam".

A fellow french artist also translated parts of the page into french.

Here the "open call" they use, they also write the same text as emails directly to victims:

FESTIVAL ARTS SENEGAL 2011

DAKAR INTERNATIONAL ARTS FESTIVAL 2011
Dakar. July, 01-2011 TO August,01-2 011

Under the patronage of the Ministry of Culture in association with the art galleries of Africa and especially West Africa (ECOWAS). Senegal ( Dakar ) will host for the first time an International contemporary Arts Festival From July,01-2011 to August,01-2011 All arts galleries, Artists from all over the world are cordially invited. ARE INVITED: Arts lover, Art Galleries: Artists, Drawings: Painters, Photographers, Sculptors, Graphic Designers, Digital, pastels, watercolors, Potteries .

PROGRAMS: -Exposure -Speech) -Carnival) for more information for your  participation

CONTACT US AT: BP: 2240 Dakar Arts Festival Dakar – Senegal Mr. Sow 
TELEPHONE + 221- 77-743-63-51 + 221- 76-743-63-51 Write us at dakar.arts@yahoo.fr
  Contact Mr Sow

http://www.senegal-annonces.com/DetailsAnnonceAutres.asp?cod_ann=12741 www.sunumail.sn

 ——————————————————————————————

FESTIVAL ARTS SENEGAL 2011

Festival International Arts du Sénégal
Dakar 01 Juillet Au 01 Aout 2011

Sous le haut patronage du ministère de la culture en association avec les galeries d’arts de l’Afrique et plus particulièrement de l’Afrique de l’ouest (CEDEAO). Le Sénégal (Dakar) abritera du “01 Jullet 2011 Au 01 Aout 2011 “pour la première fois le Festival international d’arts contemporain du Sénégal regroupant des artistes de toutes les horizons et tout les continents SONT INVITE: Amateurs d’arts, Galeries d’arts: artistes, Dessins: peintres, Photographes, Sculpteurs, Graphistes, Designers, Digitales, Pastellistes, Aquarellistes, Céramistes. 

PROGRAMME: Exposition Et vernissage) -manège) -discours) -carnaval) 
Pour plus des renseignements pour votre participation. CONTACTACTEZ 
NOUS : BP: 2240 Dakar Arts Festival Dakar – Senegal Mr. Sow TELEPHONE 
+ 221- 77-743-63-51 + 221- 76-743-63-51

http://www.senegal-annonces.com/DetailsAnnonceAutres.asp?cod_ann=12741 www.sunumail.sn

Scam Email: Janet Richardson

Well, "Janet", that was an odd way to end your email. Did your scammer email template confuse you?

From: Janet Richardson [amriamis194@hotmail.co.uk]
SUBJECT: Mail Order

Hello there,
   My name is Janet Richardson and i live in the United Kingdom, I am writing to inquire about some of your products which i am highly interested in buying. I would like to know if you can sell to me and i shall be paying with my credit card, In your response kindly include your website address so that i may look further to see if i can get more interesting things that i can buy.
Richardson
Thanks

Scam Email: Susan Rogers

We've reported previously on Janet Rogers [edwedg12@gmail.com] so this scammer hasn't changed it up much at all. And they made no effort to match the fake name to the disposable email address. The rest of it is pretty straight-forward, and the format we've seen thousands of times before.

From: Susan Rogers [edwedg13@gmail.com]
Subject: Artworks Inquiry...

Hi,

Hope this message finds you well. I saw these creatives works on your web site and i will like you to get back with more details if they are still available for purchase.

[name of painting here] 

I will appreciate an urgent reply.

Best Regards,
Susan Rogers.

Scam Email: Ramon Molina

Okay, the topic here is not art-related but an artist forwarded me this scam email they got, so I'm posting it anyway.

What I'm not posting is the scammer grabbed the IRS.gov logo off the website and pasted it into their scam email, clearly they faked the From email address and the link in the email is a self-extracting PDF file (looks like a PDF file but actually ends in .exe which means any unsuspecting person clicking on this will immediately be downloading a self-executing virus).

Just another thing to be on the lookout for.

From: [Ramon_Molina@irs.gov]
Date: June 22, 2011 3:21:06 AM PDT
Subject: Rejected Federal Tax transaction

[IRS logo image was inserted here]

Your federal Tax payment (ID: 828568582766), recently sent from your checking account was canceled by the your Bank.

Canceled Tax transaction

Tax Transaction ID: 828568582766
Return Reason: See details in the report below
Tax Transaction Report: tax_report_828568582766.pdf.exe (self-extracting archive, Adobe PDF)

Internal Revenue Service, Metro Plex 1, 8401 Corporate Drive, Suite 300, Landover, MD  20785

Scam Email: Denzel Mathew

Here is a great example scam email to demonstrate that scammers not only target pretending to buy artworks but also classes. They'll go after anything they can to trick people into depositing fake checks (or accepting stolen credit card numbers which will not show up yet as stolen because they are not yet reported - try matching the billing address to their shipping address and you will see none of it matches even close) and then forwarding their own good money to some non-existent shipper via Western Union (which is then just the scammer at the other end, ready to pick up the cash). The formatting and grammar is of the usual atrocious nature.

From: DENZEL MATHEW [blulilydes@blumail.org]
Subject: Art & Craft Class:::::::::::::::::::::::
Hello,
How are you doing today ?  My name is Mr.DENZEL MATHEW I want to book for Art & Craft Workshops Classes with you while on a 2weeks holidays in your country.We are a group of 10 people seeking for Art & Craft Workshops training while on holidays and as part of our plans we need Art & Craft Workshops classes/private lessons.

We shall be needing a Art & Craft Workshops classes for the whole 2weeks in your area.
I would like to book for 2weeks classes for 3 hours each day Monday to Saturday (morning hours) for a group of 10. We are asking for 3 hours per day for 2weeks - Monday - Saturday. A total of 36 hrs
Do you have a training facility where you conduct classes? We can arrange for this,if not available.  Do you have rooms or is there any hotel close to your facility?
DATE: 7TH JULY 2011 TO 21 JULY 2011
I would love to know the possibility of working with you during this period.Kindly get back to me with your proposals so that we can make booking asap.
The group would be performing for a group of family members over there. I would love to get the total cost or a quote/estimate. What are your payment options?  Do you accept credit cards? I would be grateful if you will be willing to do the work to teach quality classes and make us happy
Regards
Mr.DENZEL MATHEW

Scam Email: Lin Williams

Another stupid oversight on a scammer's poor ability to understand language. No real person would sign their email with just their last name. The rest of their email is just the same old line so many of the scammers use. This scammer get pretty darn quickly right to the core of the scam - that they need to use a third party shipper of their choice (who doesn't exist, by the way) and they don't place orders online so they can use a stolen credit card number and process the real target of their scam - the amount will include the shipper's fee and they will ask you to forward that amount (often thousands of dollars) to the shipper who for some silly reason can only accept Western Union (which is untraceable).

Who is at the other end of Western Union to receive your good money? The scammer. They are careful to use credit card numbers that are stolen online but not yet reported as such - but you will end up with a chargeback. They don't care about the product - the shipping address is never real either. They only care about you taking your good money and forwarding it to a Western Union account and then they pick up their "profit". And they didn't spend any real money to get that money. That's why there are so many scammers out there trying to trick people out of their good money.

This email source traced back to Iran with the IP number of 85.198.1.90.

Return-path: [rojit@live.com]
From: LIN WILLIAMS [lin.williams40@gmail.com]
Subject: ORDER NEEDED

Hi Sales,
Am ordering from Dubai.I want to place an order from you. I know the difficulties encountered when shipping internationally, But that will not be a problem because i am registered with a shipping company whom i have used severally without any delay nor problems with my goods.Before i place this order, i want you to notify me if i am able to place the order and most important If i can make payment with my credit cards Visa/Mc (Issued in the United States) because that is the only way we are set for payment now without no delay. I don't place online orders ,can i e-mail my ORDER needed then you can give me a quote here and make charges to my cards manually on your end ? Pls Clarify. Looking forward to your swift response then we can proceed further as soon as possible.
Regards.
Williams.

Scam Email: Jason Holts

This scammer is a little confused. Is he Jason or Johnny? Is he Holtz or Holts or Holt? It's funny the way they don't even try to make sense.

From: JASON HOLTZ [holtjohnny@blumail.org]
Subject: Order Request

My name is JASON HOLTS from JASON HOLTZ SUPPLY  will like to purchase some order from your store to our store here,but before i proceed to advise the needed items,i will like to confirm the terms of payment you accept either Visa or Master card, and if you do ship to Spain as well,urgent response needed from you asap,so i can forward you my order list. Waiting to read from you soon.

Regards.
JASON HOLTZ SUPPLY
Address, Calle Vereda Norte 1011, La Moraleja,
Madrid, 28109, Spain
Tel. 977-855-999
Email:holtjohnny@blumail.org

Scam Email: Ray Collins

We've reported on this name in the past using the email ralph.gregg2010@inbox.com. This report the scammer seems to be using a new disposable email.

From: Ray Collins [ray.collins2001@sify.com]

Hello,

Good day to you over there, My name is Ray Collins and i hope this message finds you well.I was going through your works and my eyes caught some of your works. I am interested in purchasing some of the art works for my new resident. Kindly get back to me with your website so that i can request for the detailed price, availability and more information of the piece i am interested in.

I hope to read back from you as soon as possible.

Kind regards,
Ray

Scam Email: Pete Anderson

Here is an interesting exchange an artist forwarded to me.

Kathleen,

Thanks for your efforts.  This is the original e-mail used to contact me.  It's rather humerous. There is no listing for his company name, the address belongs to a bed and breakfast and the phone number belongs to a radio station.

I will also send the e-mail with the fake shipping company information.

I am going to go along with it and report the credit card numbers I am given as stolen.

Best regards,

Steve

First Email (the scammer didn't even personize the TO field):

From: Pete Anderson
To: panderson223@yahoo.com
Subject: Order Request

Dear Sir,
With much regards to your company, I will like to buy some sculptures from your shop and am interested in some wildlife sculptures so kindly get back to me here with the price list of the wildlife sculptures you currently have in stock. Hope to read from you soon with your response.

Kind Regards

Peter Anderson
Sales Manager

Aubrey's Industries
1702 Post Office St.,Galveston,TX,77550
P-832-713-8267 ext 328

Then the artist wrote a shipping quote to the shipping company, but of course that just goes to the scammer and the scammer had a whole silly official-looking email prepared for that. Notice how the total amount adds up to a high enough amount to make their scam really worth it if the victim decides to "forward" that amount from their good money thinking the buyer had paid it but it will be a stolen credit card number. Also notice the mistakes in filling out their fake email and the signature of Mark Morgan is actually another common name scammers use and pretending to be a buyer. Finally, notice in the shipping how the destination client is now listed as Ken Moore (another common scammer fake name, they must just pull these from a database) instead of actual fake buyer Pete Anderson. Guess the scammer forgot to change this part...

From: FL Cargo [flcargo@cooltoad.com]
Subject: Re: Att. Mr Mark Morgan shipping quote

Dear Customer
Thank you for your interest in using Frontline Cargo Freight and logistics for your shipping needs and services and below is the information regarding the shipping quote and payment terms for pick up schedule to final destination
***INTERNATIONAL SHIPPING QUOTE REQUEST***
Your Shipping Request ID: 00610354172TT
For = [artist name inserted here]
From = USA
To = Haiti
Origin Address = [artist address inserted here]
Origin City = [artist city inserted here]
Origin State = [artist state and zip inserted here]
Origin Country = USA
Destination Address = C/O Ken Moore 32 Route Nationale #1
Destination City = Hout bay
Destination State = Port-au-Prince, 0509
Destination Country = Haiti
Import customs = Yes
Pickup Date = N/A
No. of Pallets = 1
No. Of Packages= 5
Package Dimension = N/A
Total Weight = 120lbs
The Quote for the Shipping is further broken down below :

******************************************************************************
***************
International Shipping Cost                              :$   920.00
International Airway Taxes (I.A..T)                      :$   530.00
Packaging and Pick Up Charges                            :$   220.00
Import Taxes (Haiti)                                     :$   75! 0.00
Tariffs and customs clearance duties
And Delivery To Destination Address                      :$   310.00

******************************************************************************
***************
Total Quote for the Freight by air                       :$ 2,730.00

******************************************************************************
***************
This freight charges include, International Air-way taxes and tariffs(I.A.T.), import & customs levies (Clearance Duties) and door - door delivery.The bill of lading & all documentation will be taken care of by the driver at the time of Pickup. And the shipment will take 3-4 business days to deliver at the door step in Haiti
For International Shipments:
(To or From outside the USA or elsewhere): Cargo insurance will be issued "Institute Cargo Clause (C)", unless you have arranged otherwise, which is primary coverage for the following perils: Fire or explosion, the vessel being stranded, grounded, sunk or capsized, overturning or derailment of land conveyance, collision or contact of vessel craft or conveyance, discharge of cargo at a port of distress, general average sacrifice and jettison. This applies to shipments moving by truck, boat or plane.
TE! RMS OF PAYMENTS
NOTE: For international shipment, we don't accept third part payment. The shipping charges for the shipment will have to be paid to the shipping company via bank transfer or money gram money transfer by the customer in charge of the order at the pickup location. As at now we (Frontline Cargo Freight and logistics) only accept payment via money gram or bank transfer and it is our policy that the payment must be made from the pickup location or company. We (Frontline Cargo Freight and logistics) are doing our best to start accepting the major credit cards soon. The payment must be made prior to pick up to the Financial controller in the head quarters .Once the payment is made, we (Frontline Cargo Freight and logistics) start the documentation and will come over and pick up units at the time you want. If your customer agrees and finalize the payment with you then you get back to us for the information to make payments to. Thank you for contacting Fron! tline Cargo Freight and logistics Limited. For your International busi ness shipping needs. Please include Shipping Request ID: 00610354172TT to all follow-up emails for reference purposes. Please note our truck will come over to pick them up at your location.

Regards,
Mark Morgan
Frontline Cargo Freight and logistics

Scam Email: Rebecca Mac

This scammer had an incredibly lazy beginning to their scam ("hi seller" - now that's personal) and then just got all out of control with their logic. There was no way this scammer was going to find success with his tone.

Here is the email an artist sent to me:

Here is  the latest scam, which came to me at Zibbet, and to inquire about 30 of my paintings:

Hi seller,
just want to make an enquiry if this item is still for sale or not...if it's still for sale then you can mail back to my email address on rebeccamac001@yahoo.com OK..

regards..

Second email after the artist explained they could buy the paintings via Zibbet:

RE: January Jog: Crossing

I am an astronaut stuck on an asteroid at the moment deal with it, i am buying the item as a gift for my mum, i want to make it a surprise for her,she won't know anything about the item until they get delivered to her, i can only pay through paypal as i dont have access to my bank account online as i dont have internet banking,but i have my bank account attached to my paypal account and this is why i insisted on paying you through paypal,So please kindly get back to me with your paypal details so i can proceed with the payment and after the payment has been done, i have a pick up agent that will come around to pick the item up after i have made the payments for the item.please get back to me on my private email address.rebeccamac001@yahoo.com...

Scam Email: Dawes Valez

Here is an email from an artist I received today:

Kathleen,

They sent an initial email asking for my website address which they had 'mislaid'. then this one. got all the way through to them saying they'd sent the cheque before i found your site. thanks for your hard work. what should i do with the cheque when/if it arrives? i emailed them saying i dont accept cheques but they sent it anyway,ignoring all my requests for clarification/names of shippers etc.
regards
amanda

First Email:

From: Dawes Valez [dawesvalez@yahoo.com.co]
Subject: Interest in your artwork

Hello
The images in your website is so fascinating and so vivacious looking at each piece of work make me know you added so much dedication in making each work come out to life  but unfortunately i lost the weblink but i was able to save your email address am writing you because i need your help to get back to your website so that i can be able to see more of  your work and purchase some for my resident
Regards
Dawes

Second Email:

From: Dawes Valez [dawesvalez@yahoo.com.co]
Subject: .....: Interest in your artwork

Dear Amanda
    I keep wondering how much time and effort you devoted into your work to make the following piece a one of a kind and as i can see from the images you sent to me your work as a pleasant and a suiting feeling and am so sure it will bring comfort and happiness into my home and to those that view it. I will be purchasing the following piece listed below

[5 names of art pieces inserted here]

Payment for those piece will be made through UK bank cheque  from a firm that i recently purchase some goods from which some where not available and there had to be a refund of the initial payment i had transfered to them the refund will be in sum of  £6300 to cover the cost of the piece and shipping of the artwork i also have some House Furniture to be shipped from the New Castle  i think it will be better if the shippers picking up the Furniture can come pick up the artwork from you so as to save time because a payment issued from Poland will take months to be cleared in United Kingdom.I would let the shippers know that they will be coming over to your area to pick-up the artwork and have them delivered to me.I will be needing your contact address and phone number to write and send the cheque to you,hope to read from you soon.
Regards
Dawes
My address
Dawes Valez
27 Rynek Starego Miasta,
00-272 Warsaw,
City: Warsaw
Poland

Scam Email: Bernard Merrac

Here is an email I received this morning:

Dear Kathleen,

I am so please to have found your page.

Yes, I am, at the moment a victim of a similar scam.  I was sent a cheque Friday (through through Royal mail 1st class post), I ran to the bank and deposited it before closing. As, soon as I did this I knew things were not right and have been on the phone to the bank manager who know it was dodgy straight away and will investigate tomorrow.  I am being emailed by the frauds asking me when the shipping can be arranged. I sent an email back with a link to an artscam site and yesterday night got another email asking me for shipping again. I sent another email saying the bank  will not clear it as it is a counterfeit. Not heard anything else yet. And have been told by Action fraud team not to email again. I am so concerned as they have my address. I keep thinking they will come to my home.

The email address is:  "Bernard Merrac" bernardmerrac@yahoo.com

Thank you,
 Thea

Good advice from the bank. No one is under ANY obligation to write back to these scammers. You can be sure once they realize their scam is not going to complete, they will quickly ignore you and move on to the next potential victim. The good news is this person didn't lose any money or items. They simply deposited a fraudulent check. They didn't forward the "shipping" money (which is the crux of the scam) or any items. So this person caught that it was a scam in a nick of time.

By the way, it is HIGHLY unlikely they will come to your house. These guys do not want to be traced or caught or come out of the shadows. They like to operate in a way that the authorities can't find them. It's more likely they will just stop asking for the shipping and move on to their next victim.

Scam Email: Janet Ward

Notice how this spammer created a disposable email address that doesn't even make sense - no real person with the name of Ward would have an email address like this. Also, the artist who forwarded this to me kept asking the scammer how they found her website and you'll notice the scammer keeps ignoring the question and just proceeds with the steps of the scam. See how this is probably the same scammer as our Janet Miller report.

This was what was forwarded to me:

Kathleen - Just, on a whim! checked art fraud sites and found yours....so here are the name and correspondence from my latest  "art buyer"....Thanks so much for doing this!   Kate

First email:

From: Janet Ward [jan.ard0010@gmail.com]
Subject: Artworks Inquiry...

Hi,

Hope this message finds you well. I saw these creatives works on your
web site and i will like you to get back with more details if they are
still available for purchase.

"Floundering Souls"  and  "Eat it All..."

I will appreciate an urgent reply.

Best Regards,
Janet.

Second Email:

Hi Kate ,

Thanks so much for your response to my query about those creative works. I will like to  proceed with the purchase of both pieces  (  "Floundering Souls"  5' x 5' oil painting  and  "Eat it All..."   as a 19 1/2 " x 24 1/2"  giclee print  ). Can you pls confirm the  price  of the two pieces so i can know how best to proceed.  I will also like to know  what inspire you to make the pieces.


I will look forward to hearing from you soon.

Best Regards,
Janet.

Third email:

From: Janet Ward [jan.ard0010@gmail.com]
Subject: Re: Artworks Inquiry...

Hi Kate ,

Good to hear back from you. Yes,i will like to proceed with the purchase of "Floundering Souls" . I think it is a lovely work  and i hope to give it a good home. I first heard about your work fromBullWings: Orcas Issues!.

I am presently away in London for my twin sister's wedding even though it comes at a time when i was preparing for a big move and also expecting a baby but it means so much to her. I should be back in few days.

Meanwhile,i will like you to forward your mailing address and phone number so i can inform my husband still shutling between our home in New Jersey and Jo'burg, SA on where to forward the payment . He has just been transfer to head the IT section of their head Office in Jo'burg.

I can also forward your contact info to the local cartage company that will be moving all our house decors so they can get in touch with you to arrange shipping details. They can arrange  FedEx pick up of the artwork from your studio.
 
I will look forward to hearing from you so i can know how best to proceed. Cheers.


Best Regards,
Janet.

Scam Email: Janet Miller

Notice how the format of the email is similar to another report for Sharon Miller. It's the same scammer just swapping out names.

First Email:

From: Janet Miller [jan.miller010@gmail.com]
Subject: Artworks Inquiry...

Hi,

Hope this message finds you well. I saw these creatives works on your web site and i will like you to get back with more details if they are still available for purchase.

Language of October 2007  and  Tybee Island II 2010

I will appreciate an urgent reply.

Best Regards,
Janet.

Second Email:

From: Janet Miller [jan.miller010@gmail.com]
Subject: Re: Artworks Inquiry...

Hi,
 
Thanks so much for your response to my query about those creative works. I will like to proceed with the purchase of  only Tybee II . Can you pls get back with what motivate you to make the artwork.

I will look forward to hearing from you soon .

Best Regards,
Janet.

Third Email:

From: Janet Miller [jan.miller010@gmail.com]
Subject: Re: Artworks Inquiry...

Hi ,

Good to hear back from you. Yes,i will like to proceed with the purchase of Tybee II. I think it is a lovely work  and i hope to give it a good home.
 
I am presently away in London for my twin sister's wedding even though it comes at a time when i was preparing for a big move and also expecting a baby but it means so much to her. I should be back in few days.

Meanwhile,i will like you to forward your mailing address and phone number so i can inform my husband still shutling between our home in New Jersey and Jo'burg, SA on where to forward the payment . He has just been transfer to head the IT section of their head Office in Jo'burg.
 
I can also forward your contact info to the local cartage company that will be moving all our house decors so they can get in touch with you to arrange shipping details. They can arrange  FedEx pick up of the artwork from your studio.
 
I will look forward to hearing from you so i can know how best to proceed. Cheers.

Best Regards,
Janet.

Fortunately, the artist who forwarded this to me looked this person up at this point and found our blog and knew it was a scam, so no money or art lost!

Scam Email: David Osborne

An artist wrote me and shared an important experience that can some times happen to some potential victims, even if they happen to identify that the check is fake before they sent any product. Here is her email:

I want to thank you for posting your list of "Known Scammer Names". You really are helping other artists avoid these folk.

I just received an email that I thought might be a scam. It was one of those "I want to buy a painting for my new apartment and am in a hurry" things that instantly made me suspicious. I googled "buying painting scams" and was directed to your web site. Sure enough, the supposed client "David Osborne" is on your list. The email address he used on the thing I got is "davidosborne03@gmail.com" if you want to add it to your list. If you want a copy of the email, let me know and I will send it to you.

By the way, there is yet another way you can lose money on these things. About a year ago I received one of these scam emails. I figured out it was a scam but got so far in as to receive the cheque. I took the cheque to the bank, almost sure that it would bounce, and sure enough it did. The problem was that I live in Canada and the cheque was mailed in the United States and was in US funds. When the bank got the cheque they put the money in my account, exchanging the amount to Canadian funds. When the cheque bounced, they took the money out again. The problem was that inbetween those two dates the exchange rate had changed and the bank uses the exchange rate for the day they do the transaction. I ended up losing about $100.00.  The bank got the money rather than the scammer, but that is small consolation to me. You might warn artists that if the scam is coming from another country they can lose money on the exchange rate so they are running a risk if they even deposit the cheque.

Thanks again for posting the list.

 Also people within the U.S. have been hit with bounced check fees. I've heard some people who have asked the bank to see if the check is fraudulent before they deposit it in order to avoid the bounced check fee and have been successful at this (banks are getting better at recognizing these fake checks fast) but I guess it depends upon your bank.

Just another thing to be aware of.

Scam Email: Sharon Miller

Here is a scammer that is going to strong the potential victim along and not even mention the key components (use of their own third-party shipper and overpaying the amount and asking the potential victim to "forward" the difference to the shipper via Western Union. Remember - the payment will be faked and there is no shipper) of the scam until the victim is fully engaged and feeling like they will do anything to help the "sale" go through.

Fortunately, the artist who forwarded this to me, caught on before the scammer even got to the meat of their scam. Notice the characteristic period after their name at the end of emails. they seems very characteristic of the software they must use to send out hundreds of thousands of these and template parts to be "personal".

First email:

From: Sharon Miller [sha.miller030@gmail.com]
Subject: Artworks Inquiry...

Hi,

Hope this message finds you well. I saw these creatives works on your web site and i will like you to get back with more details if they are still available for purchase.

Boxer  and   Chrysalis

I will appreciate an urgent reply.

Best Regards,
Sharon.

After the artist replied and told the scammer that one painting was sold and the other is available:

From: Sharon Miller [sha.miller030@gmail.com]
Subject: Re: Artworks Inquiry...

Hi Robert ,

Thanks so much for your response to my query about those creative works. I will like to proceed with the purchase of  'Chrysalis'. Can you pls  get back with what motivate you to make the artwork.

I will look forward to hearing from you soon .


Best Regards,
Sharon.