Search This Blog

Monday, September 12, 2011

Scam Email: Bill Richard

Notice the ugly altered "Return-path" on this scammer's email. They were somehow able to route their scam via AOL servers while altering all the headers to reveal any legitimate source of the email.

They've taken to always lately asking the person for their website address in initial emails like this. That way they can send out hundreds of thousands of these and not break a sweat trying to personalize anything. If someone does reply and actually does provide their website address, then the scammer can customize and personalize all other emails from the content they find on the website, making it seem like a legitimate purchase. But who would be purchasing from your "store" without first going to it on the internet. Doesn't make sense. But still people fall for it. Don't you.

I've also noticed lately a trend towards scammers just putting a first name only. Weird. Though in this particular scam email, I can tell their faked last name as well within their email address - which is disposable. The rest of the content of this scam email is the same ole same ole crap.

Return-path: (bjlhjkhjkjkhjhjk@fgfgfgdgdfdfg.com)
 by chakra.lunarbreeze.com with smtp (Exim 4.69)
 (envelope-from )
X-Originating-IP: 172.191.3.109 (AOL-172BLK)
X-Sender: bjlhjkhjkjkhjhjk@fgfgfgdgdfdfg.com
From: Bill (billrichard2010@ymail.com)
Subject: Order Inquiry

Hello Sales Dept,

I want to place an order in your store,and I will like to know if you ship to Portugal and my payment will be remitted via Visa/Master Card issued in US bank. So please let me know if you can assist me with the order,and please do not forget to include your website in your reply.Your quick response will be highly appreciated,I will be very glad if you treat this email with good concern.

Regards,
Bill Richard

1 comment:

  1. A man with the same name: Richard Bill, wrote to me in Badoo with this e-mail: chardylove50@yahoo.com. He is an scam who appears in a lot of web pages. Please take care about him!

    ReplyDelete