tag:blogger.com,1999:blog-33342603764009001062024-03-05T02:02:25.846-08:00Stop Art ScamsScammers use the Internet to find new victims. I fight back using the Internet to educate and help artists NOT become victims.KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.comBlogger315125tag:blogger.com,1999:blog-3334260376400900106.post-71441681832708503682024-02-26T09:14:00.000-08:002024-02-26T09:14:19.943-08:00Scam Email: Screening Sharing and Fake Live Chat<p>Here is a recent twist on a very old scam where the scammer has some story (the victim has a virus on their computer or some fake problem), the victim calls into a number the scammer provides in the message, while talking to victim the scammer gets the victim to agree to download a screen-sharing software so they can "help" them (they won't), and the scammer proceeds to steal passwords, etc. Another old twist on this is the scammer is attempting to send money to the victim (not really) and they pretend to send $10,000 to them instead of $100 (again, its all on faked screening sharing screens) and demand the money back.</p><p>So you can see this particular twist on this scam has taken it to the corporate space but it especially also impacts anyone who is signing into their bank account while screen sharing software is running. As you can imagine, that is a bad thing. </p><p>Sometimes, the scammer won't say why you need to click that OK button, which allows them to screen share with your computer, or - as in the image below - they fake an email so you can log into a live chat. But you are not actually logging into a live chat. And once in, the scammer can do anything on your computer at that point.</p><p>They are well practiced at moving quickly once they get in on how to steal money and grab passwords. </p><p>So in this twist, the scammer is pretending to be a bank's customer support (or internal technical support where corporate employees are involved) and they want to get you on "live chat" (its screen sharing, not live chat), so they trick the victim into clicking the button that says join live chat. But its not.</p><p>Again, this is increasingly impacting corporate employees (because they are jumping on to live chats for meetings all the time) as well as individuals accustomed to live chat to get support on various things.</p><p>So terrible. But all we can do is just keep sharing what they are doing to hopefully reduce the number of times they are successful.</p><p>Here is what I've seen:</p><p>1. Hackers are send personalized emails and texts pretending to be from financial institutions. The email might reference the individuals job title or company role. Or it might be an individual bank customer. </p><p>2. The messages tell victims to download a "live chat app" which is actually remote access software AnyDesk.</p><p>3. Once the screen sharing software is running, victims are instructed to share the access code with the "support agent".</p><p>These attacks are so effective because they’re so believable and targeted.</p><p>- They're commonly used by organizations for IT support</p><p>- Banking sites often can't detect if customers are running them during login</p><p>- Access codes provide complete control without needing credentials</p><p>I *highly* recommend and advocate for all banks to be implementing measures to detect when remote access tools are running when consumers log into their banking accounts. Some do it on the consumer side (not all) but they also need to do it on the corporate side for employees who may become unwitting victims while at work.</p><p>As for us consumers, I can only say, be careful out there. When it involves money, ALWAYS be skeptical and verify by another path (i.e. say you'll call yourself into the bank customer service phone line).</p><p>As the world becomes default digital, devices and our behavior on all of these convenient devices has become our most vulnerable area of risk for scams.</p><p><br /></p><p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEhriwv2zROQyR5kvdurNHjOa6QLd3zNd4YC8SPnHgxYSCJgrmbFY3Kw-J-ysJkMTaSHj9pPQpCNoN-p2e-d-Bw_3CXVtjgEbo7Xvexxf8tf24MMWDQ_b3PqI-0VYkPTXBT79XEnDqO-p2WhlOBawdHioMHGAJPKx-7lic2qtvWuIqYNlWejggXVF7fBBKU" style="margin-left: 1em; margin-right: 1em;"><img alt="" data-original-height="801" data-original-width="786" height="370" src="https://blogger.googleusercontent.com/img/a/AVvXsEhriwv2zROQyR5kvdurNHjOa6QLd3zNd4YC8SPnHgxYSCJgrmbFY3Kw-J-ysJkMTaSHj9pPQpCNoN-p2e-d-Bw_3CXVtjgEbo7Xvexxf8tf24MMWDQ_b3PqI-0VYkPTXBT79XEnDqO-p2WhlOBawdHioMHGAJPKx-7lic2qtvWuIqYNlWejggXVF7fBBKU=w364-h370" width="364" /></a></div><br /><br /><p></p>KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com0tag:blogger.com,1999:blog-3334260376400900106.post-28018172209297019162023-02-02T08:21:00.003-08:002023-02-02T08:21:56.263-08:00The Latest Paypal Scam - Be Careful!<p> Today I received an email that is in the image below. I have been monitoring and reporting on scams for decades, so I feel like I've seen it all. And mostly I have.</p><p>Scams are kind of like viruses - the basics are recognizable but there are an endless variety of always emerging variations - all with the goal to evade identification and trick people into the scam. Get their money. Get their personal information so they can sell that. Money. It's about them stealing your money. However they can.</p><p>The Paypal scam has been around a LONG time. They have, in the past, sent a fake email that looked like a real paypal email either sending you a [fake] invoice or saying you've received money [you haven't] in order to get your login details (and then they clean out your Paypal account).</p><p>So I wasn't surprised to see this scam email in my inbox. Here, let me show you an image:</p><p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEjeliuLLqfuSu0wSHv5KMkBlevEdRcesTSjC-XJJYKf7s2tdkLzD7bpnnr4J7VgwIZCXHXCMVxq1JUwXYmv6VEJT5LfIsc_q1x2gtlk1fy_m2ZZ4GIq0M_bxZC5Hjk4ElcJBjyA82b4GoKvrS9wUZD9RPrWSSaxvuuPkuGY37FHxQWpd6XvSZB5NXUk" style="margin-left: 1em; margin-right: 1em;"><img alt="" data-original-height="739" data-original-width="437" height="499" src="https://blogger.googleusercontent.com/img/a/AVvXsEjeliuLLqfuSu0wSHv5KMkBlevEdRcesTSjC-XJJYKf7s2tdkLzD7bpnnr4J7VgwIZCXHXCMVxq1JUwXYmv6VEJT5LfIsc_q1x2gtlk1fy_m2ZZ4GIq0M_bxZC5Hjk4ElcJBjyA82b4GoKvrS9wUZD9RPrWSSaxvuuPkuGY37FHxQWpd6XvSZB5NXUk=w295-h499" width="295" /></a></div><br />I hovered (notice how I said HOVER... never ever ever click on these links in the email) over the FROM email and in the old days, that would look like a fake Paypal email address and I would know right then. But this email looked like a real Paypal email address. <p></p><p>So I kept looking. The next thing actually gave it away but I decided to open a brand new browser and log into my Paypal account myself. But let me show you what gave it away.</p><p>I hovered over that TINY link highlighted in the below image.</p><p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEjPrjtjAnQZi_sQmU36TtuqFEBv8r-eltrC9elXQ2CTXbeVXN6I1EtUUcxVkXNEBRUvO_Jt2cY6lpiDWjlL4ZSnab05TKoaYAf0PBKZS-pSClai18iBcf44tlXXnWCjvCV09Ao2mLyks7hpI-rs3zDUjWyGRq5u8I-ypfCHg43PgWCdakIo-74shSk9" style="margin-left: 1em; margin-right: 1em;"><img alt="" data-original-height="613" data-original-width="806" height="240" src="https://blogger.googleusercontent.com/img/a/AVvXsEjPrjtjAnQZi_sQmU36TtuqFEBv8r-eltrC9elXQ2CTXbeVXN6I1EtUUcxVkXNEBRUvO_Jt2cY6lpiDWjlL4ZSnab05TKoaYAf0PBKZS-pSClai18iBcf44tlXXnWCjvCV09Ao2mLyks7hpI-rs3zDUjWyGRq5u8I-ypfCHg43PgWCdakIo-74shSk9" width="316" /></a></div><br />That was NOT a Paypal address when I hovered over it so bingo - it's a fake email.<p></p><p>If you call the phone number in the fake email, it is likely NOT a legitimate phone number. It's the scammer themselves. Often they will have a foreign accent (no red flag there for customer support people) but often you will hear traffic and noise because the scammer is just walking somewhere. If you continue with the call, they will tell you oh dear - that sounds like a fake email, give me your login details and I will confirm (at which point they will log into your account and clean it out). </p><p>As Paypal now uses Two-Factor Authentication now (sends a code to your phone on file), the scammers will then tell you - oh dear, sounds like your computer has a virus (or security problem) and they will then shift you to the classic scam that traditionally has been fake "Microsoft Support Technicians". So you can see this is just a variation on that. Don't give your login details to ANYONE.</p><p>So at this point, this is a pretty classic fake Paypal scam email. I can just delete it and move on with my life.</p><p>But I want you to know more about how this scam has evolved. In some cases, the scammers will actually have an actual Paypal account and use the Paypal system itself to send a made-up invoice but it looks real because it IS coming from the Paypal system. They then follow-up with a fake email so they can put a fake customer support number in the email (and now you are back to the above flow if you call the fake support number and they tell you there is a security problem on your computer). It's tricky because there IS an invoice in your real Paypal account.</p><p>The fake follow-up email might look something like this:</p><p><i>Note from Billing Department of PayPal:</i></p><p><i>There is evidence that your PayPal account has been accessed unlawfully. $1,000. 00 has been debited to your account for the Walmart eGift Card purchase. This transaction will appear in the automatically deducted amount on PayPal activity after 24 hours. If you suspect you did not make this transaction, immediately contact us at the toll-free number [redacted] or visit the PayPal Support Center area for assistance. Our Service Hours: (06:00 a. m. to 06:00 p. m. Pacific Time, Monday through Friday)</i></p><p>So what is the bottom-line of all this and how can you avoid falling for the many variations of this Paypal scam?</p><p>1. Never click on ANY links in emails that are suspicious or asking you to log in or provide private information. Hover over links to see if any of the links looks suspicious. Sometimes its the tiny links at the bottom.</p><p>2. Never call the support number that you see inside an email. Just NEVER. That is the safest thing. Open a new browser and look up that vendor's site yourself and find their support number on their website in a clean newly opened browser. Take the extra time to do this.</p><p>3. Never give your log in information to anyone. Your legitimate vendors will not ask you for your login password ever.</p><p>4. Often, you can google certain details of the scam email you've received and often there will be posts out there like this blog post that will help you identify if its a scam email.</p><p>Stay safe out there!</p><p><br /></p>KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com1tag:blogger.com,1999:blog-3334260376400900106.post-41181483741537393302020-04-16T19:49:00.003-07:002020-04-16T19:49:51.703-07:00Scam Text: COVID -19If you, or anyone you know, receives a text that looks anything like this, DO NOT CLICK ON THE LINK, and block the source. Of course scammers, lacking any sign of humanity or compassion, are going to take full advantage of the COVID-19 crisis to victimize people further. Don’t be one of them.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitLWurb4I8exuDbgOeAz675g_2QNoYphttam-d_Nn8JL4IXgjGXSKU2dsifYKz7jQWvxBJ4oDrKsw8QGNAP8kw_3ol6VCfoUg83P5MWYURHiRdPyIxnaO9DstJ9LtXg7zhZi282jZk_dw/s1600/42231AB0-8B97-4492-BE09-8BD93FDD92F4.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="477" data-original-width="842" height="181" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitLWurb4I8exuDbgOeAz675g_2QNoYphttam-d_Nn8JL4IXgjGXSKU2dsifYKz7jQWvxBJ4oDrKsw8QGNAP8kw_3ol6VCfoUg83P5MWYURHiRdPyIxnaO9DstJ9LtXg7zhZi282jZk_dw/s320/42231AB0-8B97-4492-BE09-8BD93FDD92F4.jpeg" width="320" /></a></div>
<br />
<div>
I will type out the text of this scam so it is searchable. </div>
<div>
<br /></div>
<div>
“Someone who came in contact with you tested positive or has shown symptoms for COVID-19 & recommends you self-isolate/get tested. More at [scam link inserted here]”</div>
<div>
<br /></div>
<div>
Don’t become a victim to this. </div>
KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com0tag:blogger.com,1999:blog-3334260376400900106.post-75896287065636376612020-03-11T12:44:00.002-07:002020-04-13T18:15:04.418-07:00Scam Emails and Texts: Corona Virus COVID<div class="" data-block="true" data-editor="f7f2o" data-offset-key="ft2hk-0-0" style="background-color: white; color: #1c1e21; font-family: Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;">
<div class="_1mf _1mj" data-offset-key="ft2hk-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="ft2hk-0-0" style="font-family: inherit;">You know that scammers are not going to pass up the chance to trick people using the coronavirus (COVID) pandemic. Expect lots more fake and phishing emails for some time to come leveraging this story and playing on people's fears.</span></div>
<div class="_1mf _1mj" data-offset-key="ft2hk-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="ft2hk-0-0" style="font-family: inherit;"><br /></span></div>
<div class="_1mf _1mj" data-offset-key="ft2hk-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="ft2hk-0-0" style="font-family: inherit;"></span><br />
<div class="" data-block="true" data-editor="f7f2o" data-offset-key="a9ee6-0-0">
<div class="_1mf _1mj" data-offset-key="a9ee6-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="ft2hk-0-0" style="font-family: inherit;"><span data-offset-key="a9ee6-0-0" style="font-family: inherit;">Texts are going out also with false information, requests to get more information, and false claims that products address the corona-virus when they don't. Also fake texts and emails promoting things like surgical masks. DON'T REPLY TO THESE TEXTS OR EMAILS.</span></span></div>
</div>
<span data-offset-key="ft2hk-0-0" style="font-family: inherit;"><div class="" data-block="true" data-editor="f7f2o" data-offset-key="2ivic-0-0">
</div>
</span></div>
</div>
<div class="" data-block="true" data-editor="f7f2o" data-offset-key="a39fo-0-0" style="background-color: white; color: #1c1e21; font-family: Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;">
<div class="_1mf _1mj" data-offset-key="a39fo-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="a39fo-0-0" style="font-family: inherit;"><br data-text="true" /></span></div>
</div>
<div class="" data-block="true" data-editor="f7f2o" data-offset-key="5mhj4-0-0" style="background-color: white; color: #1c1e21; font-family: Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;">
<div class="_1mf _1mj" data-offset-key="5mhj4-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="5mhj4-0-0" style="font-family: inherit;">Emails are being sent that make it look like it's from some official health agency with an attachment, saying to click on the attachment to get more information on coronavirus. DON'T DO IT. Don't give up your private information to answer a questionnaire, take a quiz, or get access to additional virus information. DON'T DO IT.</span><br />
<span data-offset-key="5mhj4-0-0" style="font-family: inherit;"><br /></span></div>
</div>
<div class="" data-block="true" data-editor="f7f2o" data-offset-key="9updm-0-0" style="background-color: white; color: #1c1e21; font-family: Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;">
<div class="_1mf _1mj" data-offset-key="9updm-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="9updm-0-0" style="font-family: inherit;">We may even see, from an art perspective, and our VERY familiar fake buyer scam, mentions of the corona-virus may get incorporated into their scam email 'stories' as to why money needs to be wired to their shippers (fake). DON'T WIRE MONEY TO ANYONE if you are the seller. Don't accept over-payments, no matter what their story is. DON'T DO IT.</span><br />
<span data-offset-key="9updm-0-0" style="font-family: inherit;"><br /></span></div>
</div>
<div class="" data-block="true" data-editor="f7f2o" data-offset-key="d1qh3-0-0" style="background-color: white; color: #1c1e21; font-family: Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;">
<div class="_1mf _1mj" data-offset-key="d1qh3-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="d1qh3-0-0" style="font-family: inherit;">The pandemic is real and we must be safe and take care of each other... but not become susceptible to scammers leveraging this for own criminal activities.</span></div>
</div>
<div class="" data-block="true" data-editor="f7f2o" data-offset-key="2jih0-0-0" style="background-color: white; color: #1c1e21; font-family: Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;">
<div class="_1mf _1mj" data-offset-key="2jih0-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="2jih0-0-0" style="font-family: inherit;"><br data-text="true" /></span></div>
</div>
<div class="" data-block="true" data-editor="f7f2o" data-offset-key="24orb-0-0" style="background-color: white; color: #1c1e21; font-family: Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;">
<div class="_1mf _1mj" data-offset-key="24orb-0-0" style="direction: ltr; font-family: inherit; position: relative;">
<span data-offset-key="24orb-0-0" style="font-family: inherit;">Stay safe out there. And stay calm.</span></div>
</div>
KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com2tag:blogger.com,1999:blog-3334260376400900106.post-55368000642237281222019-08-23T06:32:00.000-07:002019-08-23T06:32:50.893-07:00Scam: Online Dating Romance ScamI am not sure what it is about nigerians and scams - the two seem connected so often. And in this particular case some of the scam nigerians were located in California.<br />
<br />
Here is an example - when you report scams to the <a href="https://www.ftccomplaintassistant.gov/#crnt&panel1-1">FTC</a>, how officials do not typically work on individual cases, but look at trends and try to go after the "bigger fish". Romance scams can wipe out the entire savings of elderly people. It takes an orchestrated effort of a group of scammers to successfully pull off romance scams - and they have to succeed at enough of them to support all in the scam group.<br />
<br />
Scammers know, with the fake buyer scam we typically see, that if they keep their "take" relatively small and under the radar, the officials don't focus on those cases. So you will typically see them try to steal about $1500-$5000 from their victims. So that is their strategy. Keep the amount of stolen money low and just try and succeed at a lot of them.<br />
<br />
Does that mean you don't report yours? No - I would still report any scam where actual money has been lost. You are still contributing to trends and what officials look at. An example is when Texas got hit with a lot of "ransom" scams. The volume was high enough in a targeted area to (a) make the news and (b) get the attention of the authorities.<br />
<br />
Okay. So romance scams have red flags to watch out for just like the fake buyer scam. There is a very prescriptive way scammers move through a romance scam. It has a script. Red flags briefly are: (1) their photos to you all seem too good to be true (and are often stolen from online... to an reverse image search on Google or get a family member to help you do one), (b) they typically use a lesser known dating site and send a lot of relentless messages with vague or irrelevant information - typically trying to get you to believe their fake "backstory", (c) relationship is moving too fast - they may even send small token gifts and some go for the long haul - trying to gain your trust over months...but have some reason why meeting face to face is never possible (they will have one last minute excuse one after the other), (d) they WILL ask for money - often a small token amount to begin with, to warm up their victim, and then they will go for larger and larger amounts, typically with some back story - a family member is having a health crisis, a business needs just a little cash flow help, they are trying to get a visa. It is all fake and intended to get your money.<br />
<br />
This is a tough scam - they do target lonely and older women and if those lonely older women are not sharing what is happening to them with family members, it is hard to intervene to give them an objective perspective. Usually other family members find out too late. But if you are having an online romance, check to see if any of the photos have been stolen from online and really (your children can help you do a reverse image Google search) - and really - just do not give ANYONE money if you have not met them in real life... and even then there are local scammers and I think it is just not smart to give money to someone in a new relationship. We want to be trusting and kind to others, but first be smart and protective of yourself!<br />
<br />
Here is the CNN article they reported on today:<br />
<br />
Men in California oversaw a romance scam that targeted women worldwide, feds say<br />
<br />
By Faith Karimi, CNN<br />
<br />
Updated 6:26 AM ET, Fri August 23, 2019<br />
<br />
(CNN) In March 2016, a man claiming to be a US Army captain stationed in Syria reached out to a Japanese woman on an international site for digital pen pals.<br />
<br />
Within weeks, their relationship grew into an internet romance with the man sending daily emails in English that she translated via Google. The man who called himself Terry Garcia asked for money -- lots of it -- from the woman identified as FK in federal court documents. Over 10 months, she sent him a total of $200,000 that she borrowed from friends, her ex-husband and other relatives to make her love interest happy.<br />
<br />
But in reality, Garcia did not exist. It was all an international online scam ran by two Nigerian men in the Los Angeles area with the help of associates in their home country and other nations, federal officials say.<br />
<br />
And Thursday, US prosecutors charged 80 people -- mostly Nigerians -- in the widespread conspiracy that defrauded at least $6 million from businesses and vulnerable elderly women.<br />
<br />
Of those, 17 people have been arrested in the US so far and federal investigators are trying to track down the rest in Nigeria and other nations.<br />
<br />
[ <a href="https://www.cnn.com/2019/08/23/us/nigeria-romance-scam-arrests/index.html">read more</a> ]<br />
<br />
<br />KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com0tag:blogger.com,1999:blog-3334260376400900106.post-89899260380800143342019-07-23T16:33:00.000-07:002019-07-23T16:33:16.817-07:00Scam Email: 'Save Yourself' Ransom Type ScamThis isn't the usual fake buyer scam we deal with so often on this blog, but I've been getting a lot of these emails lately and I felt it was time to post a warning to help others.<br />
<br />
The scam type is called 'ransom scam'. The scammer typically will say they have incriminating photos of you via malware they were able to install on your computer, etc. Then they ask for money before they 'release the photos'.<br />
<br />
Here is an example of what I've been getting a bunch of lately from scammers. It lists an actual previous password of mine (which I will obviously not show in the example below) but one of these scam emails to you will actually display a password of yours.<br />
<br />
Here is the thing: they haven't likely installed any malware on your computer. How did they get your password? Likely from one of the many many data breeches many online companies have experienced. They did not get it from your computer. And I'm hearing online that the password is likely pretty old - so if you are someone who never changes their password AND/OR someone who uses the same password for various things online - it is time to CHANGE that behavior! There are software programs out there that protect and help you manage many different passwords now... use one of them.<br />
<br />
I could tell the password the scammers are using with me was one of my old passwords, no longer in use. But you can see how this scam could work on a lot of vulnerable people.<br />
<br />
Don't reply to these emails, don't click on anything... except the delete email button.<br />
<br />
But it IS a good reminder to change up your passwords periodically and don't use the same one for everything.<br />
<br />
Okay - here is the actual text of one of the many I've been receiving:<br />
<br />
From: Save Yourself [<span style="background-color: white; color: #323130; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14px;">SaveYourself07@1741.com]</span><br />
<span style="background-color: white; color: #323130; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14px;">Subject: </span><span style="background-color: #faf9f8; color: #323130; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 17px; font-weight: 600; white-space: nowrap;">You got recorded - [actual password listed here]</span><br />
<br />
<span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">Hi, I know one of your passwords is: [actual password listed here]</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">Your computer was infected with my private malware, your browser wasn't updated / patched, in such case it's enough to just visit some website where my iframe is placed to get automatically infected, if you want to find out more - Google: "Drive-by exploit".</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">My malware gave me full access to all your accounts (see password above), full control over your computer and it also was possible to spy on you over your webcam.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">I collected all your private data and I RECORDED YOU (through your webcam) SATISFYING YOURSELF!</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">After that I removed my malware to not leave any traces and this email(s) was sent from some hacked server.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">I can publish the video of you and all your private data on the whole web, social networks, over email of all contacts.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">But you can stop me and only I can help you out in this situation.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">The only way to stop me, is to pay exactly 1000$ in bitcoin (BTC).</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">It's a very good offer, compared to all that horrible shit that will happen if I publish everything!</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">You can easily buy bitcoin here: </span><a data-auth="NotApplicable" href="http://www.paxful.com/" rel="noopener noreferrer" style="-webkit-font-smoothing: antialiased; background-color: white; border: 0px; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: inherit; margin: 0px; padding: 0px; user-select: text !important; vertical-align: baseline;" target="_blank">www.paxful.com</a><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;"> , </span><a data-auth="NotApplicable" href="http://www.coingate.com/" rel="noopener noreferrer" style="-webkit-font-smoothing: antialiased; background-color: white; border: 0px; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: inherit; margin: 0px; padding: 0px; user-select: text !important; vertical-align: baseline;" target="_blank">www.coingate.com</a><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;"> , </span><a data-auth="NotApplicable" href="http://www.coinbase.com/" rel="noopener noreferrer" style="-webkit-font-smoothing: antialiased; background-color: white; border: 0px; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: inherit; margin: 0px; padding: 0px; user-select: text !important; vertical-align: baseline;" target="_blank">www.coinbase.com</a><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;"> , or check for bitcoin ATM near you, or Google for other exchanger.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">You can send the bitcoin directly to my wallet, or create your own wallet first here: </span><a data-auth="NotApplicable" href="http://www.login.blockchain.com/en/#/signup/" rel="noopener noreferrer" style="-webkit-font-smoothing: antialiased; background-color: white; border: 0px; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: inherit; margin: 0px; padding: 0px; user-select: text !important; vertical-align: baseline;" target="_blank">www.login.blockchain.com/en/#/signup/</a><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;"> , then receive and send to mine.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">My bitcoin wallet is: 1Nq84HeDmd2JGyRtjqh32QRG4zoSrp8bdL</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">Copy and paste my wallet, it's (cAsE-sEnSEtiVE)</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">I give you 3 days time to pay.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">As I got access to this email account, I will know if this email has already been read.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">If you get this email multiple times, it's to make sure that you read it, my mailer script is configured like this and after payment you can ignore it.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">After receiving the payment, I will remove everything and you can life your live in peace like before.</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">Next time update your browser before browsing the web!</span><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><br style="-webkit-font-smoothing: antialiased; background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;" /><span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">Mail-Client-ID: 4679663290</span><br />
<span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;"><br /></span>
<span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;"><br /></span>
<span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;"><br /></span>
<span style="background-color: white; color: #201f1e; font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;"><br /></span>KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com0tag:blogger.com,1999:blog-3334260376400900106.post-25325175132665170432018-08-24T17:46:00.000-07:002018-08-24T17:46:05.363-07:00Scam Email: Jackson GreeneHi Katie,<br />
<br />
I apologize for not being able to find this on my own. I received a message through my art Website from a Jackson Greene.<br />
<br />
Date:<span style="white-space: pre;"> </span>Thursday, August 23rd, 2018 at 10:35pm<br />
From:<span style="white-space: pre;"> </span>Jackson Greene [mailto:jacksongreene007@yahoo.com]<br />
Sent from IP address 154.66.37.96<br />
<br />
Hello There,<br />
My name is Jackson Greene from California. I actually observed my wife has been viewing your website on my laptop and i guess she likes your piece of work. I'm also impressed and amazed to have seen your various works too, You are doing a great job. I would like to purchase one of your Paintings "[name inserted here]", as a surprise to my wife on our anniversary. Also, let me know if you accept CHECK as mode of Payment.<br />
<br />
Thanks and best regards<br />
Jackson.<br />
<br />
Seems scammy to me, but I couldn’t verify on your Stop Art Scams Blog. Which is a wonderful service you’ve taken on!<br />
<br />
The wording includes a sentence like Steven Leavitt’s though. Agreed?<br />
<br />
Best,<br />
Dale<br />
<div>
<br /></div>
KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com85tag:blogger.com,1999:blog-3334260376400900106.post-23598346642888850712018-08-17T06:45:00.002-07:002018-08-17T06:45:46.776-07:00Scam Email: Tony GriderThe use of English language looked suspicious to me, as well as the 'cashiers check', so I found your site -- very informative and helpful. I'll just ignore any future emails from "Tony Grider". Thanks.<br />
<br />
Here's the emails.<br />
<br />
<br />
Fwd: AWAITING PAYMENT DETAILS......REPLY TODAY<br />
Geri<br />
<br />
Begin forwarded message:<br />
<br />
From: Tony Grider [tony.grider@aol.com]<br />
Date: August 16, 2018 8:12:36 AM<br />
To:<br />
Subject: AWAITING PAYMENT DETAILS......REPLY TODAY<br />
<br />
Hello,<br />
<br />
Okay I'll take it and will offer $900 for<br />
<br />
Hatteras in Harbor $450<br />
Hatteras Jetty $450<br />
<br />
and will proceed straight with cashier's check which will clear instant or the next day to avoid delays, I am located in LAS VEGAS i will handle the shipment once the check as cleared your bank and funds have been made available to you, the shipper broker will come over to your location to pick up and have it delivered safely to me at my residential.<br />
<br />
<br />
Please email me back the following details below to issue out the check to you.<br />
<br />
Full Name that will be on the check<br />
Full Address to send the check to<br />
Cell phone number<br />
<br />
Waiting to read from you.<br />
<br />
Thank you.<br />
<br />
Tony Grider<br />
tony.grider@aol.com<br />
<br />
<br />
-----Original Message-----<br />
On Aug 16, 2018, at 06:02 AM, Tony Grider [tony.grider@aol.com] wrote:<br />
<br />
Hello,<br />
<br />
I am interested in your art work, Kindly please get back to me the asking price for these below:<br />
<br />
[list of 4 paintings here]<br />
<br />
Thank you<br />
<br />
<br />
Tony Grider<br />
tony.grider@aol.com<br />
<div>
<br /></div>
KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com8tag:blogger.com,1999:blog-3334260376400900106.post-69821581986043117602018-08-15T16:14:00.000-07:002018-08-15T16:14:03.613-07:00Scam Email: Bill BurrusHello Kathleen,<br />
<br />
Having read your really useful art scam website I’m pretty sure the below is a new name for you, just received!<br />
<br />
Kind regards,<br />
<br />
Gerard<br />
<br />
<br />
<br />
From: Bill Burrus [mailto:bill.burrus1@gmail.com]<br />
Sent: 13 August 2018 10:58<br />
To:<br />
Subject: Re: [name of 4 paintings right in subject line]<br />
<br />
Hi Gerard,<br />
<br />
Thanks for your reply, regarding the prices I have seen it with your reply. Yes I am truely interested in purchasing.<br />
<br />
I want you to know that I am purchasing the paintings for a Wedding Anniversary and it really need to get to my destination because the date of the Anniversary is around the corner.<br />
<br />
Below are the paintings I am interested to purchase.<br />
<br />
[name of 3 paintings listed here]<br />
<br />
it will be better to discuss the payment and the shipping on Skype either verbally or typing due to the urgent of the Anniversary if possible it will be better to view the artworks on Skype Video.<br />
<br />
My location and address of delivering are below..<br />
<br />
1476 River Road<br />
Titusville, NJ 08560<br />
USA<br />
<br />
Concerning the payment, the payment I am 100% sure about is to send you a Cashiers check or personal check or transfer the cash into your bank account for the total amount, base on the advise given via my bank.<br />
<br />
My Skype name is bill.burrus1@gmail.com [mailto:bill.burrus1@gmail.com] I am available throughout today on Skype to discuss and conclude.<br />
<br />
[note: you can bet this scammer will have some reason to never show his face on Skype!]<br />
<br />
If you don't have a Skype name kindly go to www.skype.com [http://www.skype.com/] and register with Skype then download it and fix a time to Skype today.<br />
<br />
Cheers,<br />
<br />
Bill Burrus<br />
<br />
<br />KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com58tag:blogger.com,1999:blog-3334260376400900106.post-37587271341394085292018-06-11T05:28:00.001-07:002018-06-11T05:28:37.610-07:00Scam Email: Sean PringleHi Kathleen,<br />
<br />
I'm forwarding an email I received yesterday through my art website. My immediate reaction was that it looked like a scam so I didn't respond. When I googled art email scams looking for his email address, I didn't see it. But, I did come across your site and thought it would be helpful to other artists to have his info added to your list.<br />
<br />
Thanks so much for helping by sharing this info. Glad we can all work together! If you need anything else, please let me know.<br />
<br />
And...I just enjoyed looking at the paintings on your website. Hope all is going well for you!<br />
<br />
Thanks again,<br />
Di<br />
<br />
---------- Forwarded message ----------<br />
From: Sean Pringle [sean.pringle152@gmail.com]<br />
Date: Thu, Jun 7, 2018 at 6:45 PM<br />
Subject: Artwork:<br />
<br />
<br />
<br />
Hello ,<br />
<br />
<br />
I'm Sean Pringle from Pontiac, Michigan. I actually observed my wife has<br />
been viewing your website on my laptop and i guess she likes your piece of<br />
work. I'm also impressed and amazed to have seen your various works too,<br />
You are doing a great job. I would like to purchase one of your piece as a<br />
surprise to my wife on our anniversary. Also, let me know if you accept<br />
check as method of payment.<br />
<br />
<br />
Regards<br />
<br />
Sean Pringle<br />
<br />KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com31tag:blogger.com,1999:blog-3334260376400900106.post-47028155263385458112018-05-11T12:05:00.001-07:002018-05-11T12:05:34.621-07:00Scam Email: Kevin WatersThey didn't lose the website address. They send out hundreds of thousands of email and are hoping their potential victims will respond and tell them the website. Then the scammer can continue on to the next step of the scam, which is to pretend to want to buy individual pieces and then overpay with a counterfeit check and ask to have the difference wired either back to them or on to some fake shipping company.<br />
<br />
---------- Forwarded message ---------<br />
From: Kevin Waters [kwaters671@gmail.com]<br />
Date: Wed, May 9, 2018 at 10:13 PM<br />
Subject: Artwork Inquiry<br />
<br />
<br />
My name is Kevin Waters from Jacksonvile, Florida. The images on your<br />
website are so fascinating and so vivacious, looking at each piece of work<br />
i can easily see that you added so much dedication in making each work come<br />
out to life, unfortunately i lost the website where i first saw your work<br />
but i was able to save your email address. I will like to purchase some of<br />
your work for my wife as a surprise gift for our 20th anniversary. Please<br />
kindly send pics and prices of some of your art which are ready for<br />
immediate sale within price range $500- $5,000, I could be flexible with<br />
price. I am writing you because i need your assistant to get back to your<br />
website so as to be able to retrieve the details of your work that interest<br />
me or send me images of some of your new works with price.<br />
Best Regards,<br />
--KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com8tag:blogger.com,1999:blog-3334260376400900106.post-65989007231747682382018-05-09T05:22:00.000-07:002018-05-09T05:22:07.633-07:00Scam Email: Megan SweetNotice the frequent email changes from the scammer in this below exchange as well as the fake story of why the check was so much more than the amount owed.<br />
<br />
<br />
---------- Forwarded message ----------<br />
From: Megan sweet [sweermeg09@gmail.com]<br />
Date: Mon, Apr 23, 2018 at 7:57 AM<br />
Subject: Re: Artwork<br />
To: Christy<br />
<br />
<br />
Dear Christy,<br />
<br />
I am so excited and can't wait to have the piece in our home. I hope to<br />
give it a very good home and enjoy the piece for many years.<br />
Regarding the check, Just find out my husband made a terrible mistake and<br />
overpaid you because he didn't have full details of the transaction, been<br />
busy when he sent it. I am very sorry for the confusion but I will like you<br />
to go ahead and deposit the check, deduct the cost of the piece inclusive<br />
the shipping . I spoke with my husband and he will like you to send the<br />
difference back to his chief accountant. Pls get Two (2) Money gram or post<br />
office (USPS) money orders of (1) $1000 USD each & (1) $400 totaling $1400,<br />
you might be required to pay extra fee for the purchase of the money orders<br />
and money orders should be left blank, include purchase receipt and use<br />
FedEx Overnight. The money orders should be sent to the address below.<br />
<br />
Attn: Mr Karl<br />
9915 198TH ST<br />
<https: maps.google.com="" q="9915+198TH+ST+HOLLIS+NY+11423&entry=gmail&source=g"></https:><br />
HOLLIS NY 11423<br />
<https: maps.google.com="" q="9915+198TH+ST+HOLLIS+NY+11423&entry=gmail&source=g"></https:><br />
-3321<br />
<br />
FedEx or UPS First Overnight delivery cost about $45. Overnight shipping<br />
FedEx charges can be deducted from the money remaining. I'll appreciate if<br />
you take care of this as soon as possible and advise with the tracking<br />
number. Please acknowledge this email. Thank you.<br />
Cheers,<br />
Megan<br />
<br />
<br />
On Fri, Apr 20, 2018 at 2:40 PM, Christy wrote:<br />
<br />
> Good afternoon, Megan,<br />
><br />
> I hope that you are enjoying your Friday?<br />
><br />
> I just got your check and was rather astonished to see that it was 4 times<br />
> the expected amount! I was going to send your prints, but now I feel that<br />
> we should resolve this. Here are some ideas:<br />
><br />
> 1. I can destroy the check and you can send me another for $800<br />
><br />
> 2. You can choose 6 more prints. This would give you 3 more in each<br />
> series, or from different ones. Whichever you like best, of course.<br />
><br />
> 3. I can have the images matted and framed, but I'm pretty sure that,<br />
> even with shipping, it would not cost $2400, so you could either choose an<br />
> additional 2 prints or I could destroy the check and you could send me a<br />
> new one for the new amount.<br />
><br />
> Please let me know what you would like to do.<br />
><br />
> All the best,<br />
> Christy<br />
><br />
><br />
> On Thu, Apr 19, 2018 at 10:31 AM, Christy<br />
> wrote:<br />
><br />
>> Hello Megan,<br />
>><br />
>> I am sorry that you were struggling with your health! I hope that you are<br />
>> feeling better.<br />
>><br />
>> Thank you for sending the check and the tracking info. I am planning to<br />
>> send your prints either today or tomorrow and will send the shipping<br />
>> information when I do.<br />
>><br />
>> Thank you again for your interest in my work!<br />
>><br />
>> All the best,<br />
>> Christy<br />
>><br />
>> On Thu, Apr 19, 2018, 9:51 AM Megan sweet [sweermeg09@gmail.com] wrote:<br />
>><br />
>>> Good morning Christy,<br />
>>> Hope this message finds you well. Apologies I have not been able to get<br />
>>> in touch for a very long time as i have been battling with health issue.<br />
>>> Just to confirm that payment was sent by my husband on Tuesday via USPS<br />
>>> with tracking number 9405503699300216219950 and he was advise you will have<br />
>>> it deliver today or latest Friday please be on the look out for it. Kindly<br />
>>> acknowledge receipt of this email as soon as possible.<br />
>>><br />
>>> Cheers,<br />
>>> Megan<br />
>>><br />
>>> On Thu, Apr 5, 2018 at 12:52 PM, Christy<br />
>>> wrote:<br />
>>><br />
>>>> Hi Megan,<br />
>>>><br />
>>>> Thanks so much!<br />
>>>><br />
>>>> I'll get the prints ready to send to you!<br />
>>>><br />
>>>> On Thu, Apr 5, 2018 at 9:09 AM, Megan sweet [sweermeg09@gmail.com]<br />
>>>> wrote:<br />
>>>><br />
>>>>> Hi Christy,<br />
>>>>><br />
>>>>> Awesome , the price is okay for the piece . May I confirm if payment<br />
>>>>> could be mailed to you by check to your address, Unfortunately I'm unable<br />
>>>>> to complete this transaction by credit card or Paypal . If you can email me<br />
>>>>> your full name,address for payment that will be helpful<br />
>>>>><br />
>>>>> Thank you<br />
>>>>><br />
>>>>> On Fri, Mar 30, 2018 at 7:45 AM, Christy<br />
>>>>> wrote:<br />
>>>>><br />
>>>>>> Hi Megan,<br />
>>>>>><br />
>>>>>> Now I must apologize to you!<br />
>>>>>><br />
>>>>>> I have been thinking a lot about this, as I did not have prices<br />
>>>>>> listed on Saatchi. Is $400 per print an acceptable amount for you?<br />
>>>>>><br />
>>>>>> About the pieces; I started combining negatives when I first started<br />
>>>>>> working in photography back in the 1990's. I don't consider myself a<br />
>>>>>> serious traveler, but when I am able to make trips, I try to take as many<br />
>>>>>> images as possible. These images from Greece came around because of the<br />
>>>>>> landscape itself; the desolate rocks contrasting with the beauty of the<br />
>>>>>> sunset. Greece itself is very inspiring; I draw a lot from the philosophy,<br />
>>>>>> the poetry and the ancient dramas. A lot of who we are, as people in the<br />
>>>>>> West, comes directly from the Greek thinkers. I try to pay them some subtle<br />
>>>>>> homage, particularly in the titles. I'm glad that you enjoy them!<br />
>>>>>><br />
>>>>>> As payment goes, it might be better to send a PayPal, if possible?<br />
>>>>>><br />
>>>>>> Let me know what you think, and thank you again for your interest in<br />
>>>>>> my work!<br />
>>>>>><br />
>>>>>> All the best,<br />
>>>>>> Christy<br />
>>>>>><br />
>>>>>> On Wed, Mar 14, 2018 at 2:22 PM, Megan sweet [sweermeg09@gmail.com]<br />
>>>>>> wrote:<br />
>>>>>><br />
>>>>>>> Hi Christy,<br />
>>>>>>><br />
>>>>>>> Apologies for not getting back to you sooner,It's nice to hear back<br />
>>>>>>> from you. I will like to proceed with the purchase of the 2 pieces (Buried<br />
>>>>>>> in the Sky & Beginning and End), would mind telling me what your<br />
>>>>>>> inspiration behind this piece. I think it is a lovely work and I hope to<br />
>>>>>>> give it a good home. I am presently away on vacation but I should be back<br />
>>>>>>> in few days. Pls confirm it listed price<br />
>>>>>>><br />
>>>>>>> 19621 Doris Lane<br />
>>>>>>> <https: maps.google.com="" q="19621+Doris+Lane&entry=gmail&source=g"></https:><br />
>>>>>>> N. FortMyers, FL Lee 33917<br />
>>>>>>><br />
>>>>>>> Meanwhile, can you please confirm your mailing address and phone<br />
>>>>>>> number so I may inform my husband on where to forward the payment. I can<br />
>>>>>>> have him send the payment asap. About shipping, you can handle it from your<br />
>>>>>>> side to my mailing address above, either by USPS, or FedEx, UPS postal<br />
>>>>>>> service<br />
>>>>>>><br />
>>>>>>> I will look forward to hearing from you so I can know how best to<br />
>>>>>>> proceed.<br />
>>>>>>> Cheers.<br />
>>>>>>> Megan<br />
>>>>>>><br />
>>>>>>> On Fri, Feb 2, 2018 at 4:49 AM, Christy<br />
>>>>>>> wrote:<br />
>>>>>>><br />
>>>>>>>> Hi Megan,<br />
>>>>>>>><br />
>>>>>>>> Thank you for your kind words! Here's a link to my Saatchi page:<br />
>>>>>>>>>>>>>>>><br />
>>>>>>>> Most of the works are for sale. I am open to discussion about<br />
>>>>>>>> process if you see something you really like.<br />
>>>>>>>><br />
>>>>>>>> All the best,<br />
>>>>>>>> Christy<br />
>>>>>>>><br />
>>>>>>>> On Thu, Feb 1, 2018 at 4:47 AM, Megan Sweet [vinesdd494@gmail.com]<br />
>>>>>>>> wrote:<br />
>>>>>>>><br />
>>>>>>>>> Hello,<br />
>>>>>>>>> I came across your web page , I like your inspiration as an<br />
>>>>>>>>> artist. How about you email me your recent work on sale for me to look<br />
>>>>>>>>> through?<br />
>>>>>>>>> Cheers,<br />
>>>>>>>>> Megan<br />
>>>>>>>>><br />
<br />KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com3tag:blogger.com,1999:blog-3334260376400900106.post-12552003313220665222018-05-09T05:08:00.000-07:002018-05-09T05:08:12.747-07:00Scam Email: Renata and Robert DennisHi Kathleen -<br />
<br />
In the spirit of trying to keep scammers from taking the joy of receiving an actual purchase order for our art, here an email I received that looks pretty fishy to me - down to the email address:<br />
<br />
<br />
Renata [info9842@gmail.com]<br />
May 7 (1 day ago)<br />
to bcc: me<br />
<br />
*Good Day,How is everything with you? I picked interest in your artwork and<br />
decided to write you. I will like to know if your artwork can be purchased<br />
and shipped internationally?.I can email the artwork of interest and<br />
payment will be completed in full once you confirm my purchase order with a<br />
quotation.Kindly let me know when you are in office and ready to take my<br />
artwork order also let me know if you accept either PayPal / Stripe<br />
International Payment or Visa Card or Master Card for payment?Furthermore<br />
you can email me your recently updated website or art price list in your<br />
response.Best Regards.*<br />
<br />
------<br />
<br />
I responded confirming that I did ship worldwide and for her to go to my website and click on the "Buy Art" link where most of my pieces (with the exception of two new original works) are available for sale direct from the website. She then responded with a link to the exact 2 pieces that are not<br />
available for sale online. Adding more "weird" to this interaction, I noticed that at the bottom of her message, there seemed to be another email from a "Robert" (same period after the name that "Renata." uses) requesting nanny services (LOL):<br />
<br />
--<br />
Hello,<br />
My name is Robert Dennis from Kansas, I will like to know if you<br />
render nanny service? If yes kindly get back to me 7858160171.<br />
<br />
Where you locate?<br />
<br />
Regard.<br />
<br />
Robert.<br />
<br />
----<br />
<br />
So yes, even as I write this I see scam written all over it. Thank you for your site and consider this my contribution in the fight against these idiots who rather spend time and energy trying to make money on honest people who are trying to spend their time and energy being honest abiding citizens with a dream to live of what their passionate about!<br />
<br />
Thank youKatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com0tag:blogger.com,1999:blog-3334260376400900106.post-12683125151861988622018-01-27T17:50:00.001-08:002018-01-27T17:50:16.775-08:00Scam Email: Jim WestMy favorite... when a scammer tries to act all indignant in order to get their victims to act quickly.<br />
<br />
Begin forwarded message:<br />
<br />
> From: jim west [westjim0009@gmail.com]<br />
> Subject: Re: What is going on? Why?<br />
><br />
> I have sent you couple of emails, why are you not replying my messages when you got my payment? is this how you treat your client?<br />
><br />
<br />
No, it's how we treat a scammer who sends a counterfeit check.KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com32tag:blogger.com,1999:blog-3334260376400900106.post-37520077331151060032018-01-27T17:45:00.001-08:002018-01-27T17:45:20.443-08:00Scam Email: Christopher BensonHi KatieMoe,<br />
<br />
I don’t see this name on your list but it sounds like a scammer.<br />
<br />
<br />
> Begin forwarded message:<br />
><br />
> From: christopher benson [bensonc145@gmail.com]<br />
> Subject: Artwork Purchase<br />
><br />
> Hello, my name is Christopher Benson from Atlanta, I was looking for some artwork online and I found your contact while searching. I will like to purchase one of your work for my wife as a surprise gift for our 20th anniversary. I'll need pictures and prices of some of your art work which are ready for immediate sale within price range of $1,500- $2,500. I hope to hear a lot more about any available piece in your inventory ready for immediate sale.<br />
><br />
> Thanks,<br />
> Chris.<br />
<br />
<br />
<br />KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com30tag:blogger.com,1999:blog-3334260376400900106.post-49081543771764917692018-01-27T17:42:00.001-08:002018-01-27T17:42:06.545-08:00Scam Email: Mathews CoughlinKathleen,<br />
<br />
Here is another Scammer. Thank you so much for your information.<br />
<br />
Thanks<br />
<br />
D<br />
<br />
<br />
---------- Forwarded message ----------<br />
From: Mathews Coughlin [mathewscoughlin@gmail.com]<br />
Subject: ATTACHED PIECE!!<br />
<br />
<br />
Dear D,<br />
<br />
Thanks for the message, I must tell you I intend to give my wife a surprise with the immediate purchase of the piece attached. If you'd like to know, I'm relocating to the Philippines soon and our wedding anniversary is fast approaching. So I'm trying to gather some good stuff to make this event a<br />
surprise. Kindly email me the asking price asap.<br />
<br />
As regarding payment, I would like to inform you, that my wife handles the family credit card/bank and Paypal transaction. So i would authorize a check to you for the payment as soon as i have your full name and contact address (preferably for FedEx delivery no P.O box). Also, as soon as you<br />
receive the check and it clears your bank, my shipping agent who is also moving my personal effect will contact you to arrange shipping/pick up of the piece from you (this is to avoid my wife receiving it, if been shipped directly to my address which would ruin the surprise for this event). You both have to sign a proof of pick up at the most.<br />
<br />
I would have handled this much differently if I'd been at home but i am actually going offshore and won't be back for another couple of weeks, and do not have access to a lot of cash over here to expedite this transaction... trying to kill two birds with a stone. :-)<br />
<br />
Have a Positive Day!<br />
<br />
Mathews<br />
<br />
PS: In the meantime, kindly get back to me with your cell phone no. so i can try and call you later as the phones may be working better when this storm passes through.<br />
<br />KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com29tag:blogger.com,1999:blog-3334260376400900106.post-50219865610006171622017-11-04T11:56:00.000-07:002017-11-04T11:56:40.667-07:00Scam Email: David MortonAn email I received from a reader:<br />
<br />
I wanted to share an art scammers name, email, telephone number and information with you. I am an artist and I was contacted by a "Mr. David Morton". The initial email read as follows:<br />
<br />
"I am so excited that I came across your work on Internet search, I am interested in purchasing some creative artworks from you let me know their various prices. And how much discounts are you going to give? Looking forward to hearing from you soon.<br />
<br />
Thanks and best regards!<br />
<br />
Mr. David"<br />
<br />
<br />
I thought it was suspicious, but I had never heard of an art scam so I emailed him back. We exchanged a few emails and he had me send a list of all the available work that I had. He picked out one piece that he said would be an anniversary gift for his "wife". He asked if he could pay me<br />
an extra amount to cover private shipping because he was moving to Canada and he wanted to keep the painting as a surprise for his "wife". This is when red flags started showing up for me. I wanted to catch this lowlife so I entertained his emails and he sent me a check via priority mail. The check was from a company called Ausenco Engineering USA South IN. located at 1320 Willow Pass Road in Concord, CA, 94520.<br />
<br />
In a few days, the check came and I immediately got an email instructing me to deposit the check. I took it to my bank where they immediately flagged it as fraudulent. "Mr. David" continued to insist that he was interested in purchasing the piece. He continued to text me until I had enough of this loser conman.<br />
<br />
As an artist, I love painting and I love having my pieces in people's homes. This is why this is such a sick and twisted scam. These scammers will never understand true beauty and art and I hope everyone becomes aware of these scams.<br />
<br />
Thank you for your blog and for fighting these scammers! I'll include a summary list of this conman's information.<br />
<br />
<br />
Here is a summary of this scammers info:<br />
<br />
<br />
Fake name: Mr. David Morton<br />
Fake Profession: Ocean Engineer at Ausenco Engineering<br />
email: samdavid.morton01@gmail.com<br />
phone numbers: (720)-538-4635 (David's phone),<br />
(409)-600-9495 ("Shipper's Number")<br />
Shippers name and address: Carol Brashear, City: Ravensdale Wa., Zip code: 98051<br />
<div>
<br /></div>
KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com51tag:blogger.com,1999:blog-3334260376400900106.post-87365037460351070092017-02-26T10:44:00.000-08:002017-02-26T10:44:06.199-08:00Scam Email: Fake PayPal PaymentHere is a good one to watch out for!<br />
<br />
The fake email wants you to believe someone sent you a large amount of money via PayPal and that PayPal recommends you withdraw it.<br />
<br />
No one sent you money and PayPal is definitely not recommending anything.<br />
<br />
The scammer wants you to click on the link, where the link (I won't share it so it won't be active, and I delinked it below in the example) looks something like this:<br />
<br />
http://[scammer_domain_here].com/click.php?[my_email_was_inserted_here]<br />
<br />
That can NOT be good. Do NOT click on that link!!! Delete the email and move on. Don't be a victim.<br />
<br />
<span style="background-color: white; color: #333333; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 21px;">Subject: Lauri just sent you $3,182.00 USD with Paypal. Paypal recommends to withdraw it now.</span><br />
<span style="background-color: white; color: #333333; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 21px;"><br /></span>
<span style="background-color: white; color: #333333; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 21px;">From: </span><span style="background-color: white; color: #333333; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 17px; white-space: nowrap;">Lauri [obligationwaqyf@pornoroutine.io]</span><br />
<span style="background-color: white; color: #333333; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 17px; white-space: nowrap;"><br /></span>
<span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;">Lauri just sent you $3,182.00 USD with </span><span class="contextualExtensionHighlight ms-font-color-themePrimary ms-border-color-themePrimary ident_41_47" role="button" style="background-color: white; border-bottom-style: dashed; border-bottom-width: 1px; border-color: rgb(0, 120, 215); color: #0078d7; cursor: pointer; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;" tabindex="0">Paypal</span><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;">. </span><br style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;" /><br style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;" /><u>Click here to continue</u><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;"> </span><br style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;" /><br style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;" /><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;">Best of luck! </span><br style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;" /><span style="background-color: white; color: #212121; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 15px;">Lauri </span>KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com17tag:blogger.com,1999:blog-3334260376400900106.post-29468498162443329662015-12-24T10:04:00.000-08:002015-12-24T10:04:50.793-08:00Scam Email: Michael KleemannKathleen,<br />
<br />
I have a website which I'm still working on, from which I sell the odd painting. While I do illustrate scientific journals, I also do "gallery art" or whatever you call it, but I keep it all simple.no galleries, no reproductions, low prices, direct transactions and so on.<br />
<br />
Anyway, last October a "Michael Kleemann" contacted me, purporting to be a businessman in Texas, on the cusp of moving to Turkey. He wondered if I had any other paintings to offer but the then relatively few for sale on my website (I still have only posted a fraction of what is available). Not knowing what his interest was, I just said that I did and sent him a few samples.<br />
<br />
He choose the [name of piece], and the [name of piece]. The former is framed, so I told him the shipping would therefore be more expensive than if it weren't framed and made some sort of general conversation about my love of Texas, and southwestern birds. But I admit alarm bells were already ringing in my head as most first-time buyers express their interest in birds or comment on art or whatever, and Michael Kleemann was very terse, polite, but nothing personal.<br />
<br />
He said that because he was moving he was in a state of flux and would it be okay if me mailed me the money in advance, with enough to pay the shipper at the door.<br />
<br />
I had explained that I normally use a specific courier because I it is a local family-run company that I've dealt with, favourably, for years.<br />
<br />
He instead said that he'd have his movers in Canada do the actual shipping.<br />
<br />
That seemed strange, but hey, maybe he was a wealthy Texas business guy with all kinds of flunkies working for him, and a finger in many different corporate pots.<br />
<br />
So I said, well, okay, fine.<br />
<br />
But nothing happened.<br />
<br />
Then, last Monday, my stepdaughter said there was a folder leaning up against the front door. It was from UPS. It contained a single check (or "cheque" as we write it up here) and it was $3,599.00. An odd sum. I had no idea what it was for. It was a company cheque, and the company was in Manitoba, as was the credit union it was drawn on. Google showed both existed.but the company manufactures medical equipment. I have only sold two or three paintings to Manitobans, none recently, no one there owes me anything and I don't produce a darn thing that would be of interest to a manufacturer of medical imaging equipment.<br />
<br />
Then I remembered Michael Kleemann. Could this be the money he had mentioned? If so, it was way too much, approximately twice what would have been necessary for the arrangements we had made.<br />
<br />
Sure enough, I got an e-mail from him after all that time, with an apology for the delay in getting back to me.<br />
<br />
The next morning I phoned the company named on the cheque. "It's fake," I was told by the guy before I had fully explained the situation. "And I bet it's for more than had been agreed upon." It was. It turns out that a lot of these cheques were out there and the company quite annoyed, but helpless to do anything.<br />
<br />
It took nearly two days to get a live person cop on the line, but I did this morning, and he opened a file, taking down all the particulars, which will then be distributed to fraud departments worldwide. <br />
<br />
Michael Kleemann (obviously an alias) could be anywhere. He did write to me the name of the "shipper" (a "company" based in Alberta) and a "tracking number" and so on, but the cop also advised me not to open any more e-mails from Michael Kleemann, as they could include viruses (it appears not, thank goodness, but that could change), and certainly not to respond to him again (my last message was designed to keep him interested as I hoped the police might be able to find him by intercepting the shippers, and I'm more than happy to be part of a "sting" if we can catch this crook. <br />
But I will take his advice. I do have a viewing pane so when Michael Kleemann wrote to me this morning that, okay, he'd wait until the new year (I told him I'd be away until then) I was able to read it even if I didn't open the message. <br />
<br />
But the other thing the cop told me was that by virtue of my having responded, this person, or one of his or her colleagues, may try another scam, so I am now more on guard than before. <br />
<br />
Frankly, it was a rather clumsy effort, but I HAVE sold art (and developed online friendships) from "cold" contacts, usually word-of-mouth, but a few times via my website, and I have sent art off to first-time-buyers before receiving payment. A sophisticated businessman I'm not. <br />
<br />
I've never been cheated, but obviously I now will modify that practice for the first-time buyers. <br />
<br />
I don't know if any of this will help anyone avoid being taken, but I felt better to tell you all then not.<br />
<br />
I will forward his e-mails to you one by one, under separate e-mails (I'm not very computer-adept so it's the only way I know to do it). <br />
<br />
<br />
Cheers,<br />
Barry<br />
<div>
<br /></div>
KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com26tag:blogger.com,1999:blog-3334260376400900106.post-71068898741046747402015-12-11T20:30:00.001-08:002015-12-11T20:30:23.329-08:00Scam Email: Holmes RainesHi Kathleen,<br />
<br />
I'm an artist.<br />
I received this email. I did not find anything about the person online, but it smells suspicious.<br />
Thank you Kathleen,<br />
Best regards,<br />
<br />
<br />
holmesraines02@gmail.com<br />
<br />
Wrote:<br />
<br />
Hello,<br />
Good day to you over there, My name is Holmes Raines I'm from Leipzig and i<br />
hope this message finds you well.I was going through your works and my eyes<br />
caught The thinker 60x80cm Oil on canvas, i will like to have it for my new<br />
apartment this Month. please let me know if the piece is available, if yes<br />
let me have the detailed price and more information about it. i will be<br />
waiting to read from you asap.<br />
<br />
Holmes Raines.<br />
<br />KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com6tag:blogger.com,1999:blog-3334260376400900106.post-17050343217383992015-11-20T06:53:00.002-08:002015-11-20T06:53:43.190-08:00Scam Email: Jonathan HashriIt is interesting to me that I can dig through the some of the oldest messages on this blog and in my email and the below email template can be found, basically unchanged word for word, from years and years ago.<br />
<br />
But really, that's bad news, because if the format and wording of some of these scam emails have basically not changed in so many years, it means it must work at attracting victims. Which of course, I hate.<br />
<br />
Or this could just be a really lazy scammer who is using some basic old scam template to see how well it still can work.<br />
<br />
In this case, they kind of make it generic enough that you'd want to write back to them to get a little more information and then they have collected their list of more "qualified" potential victims.<br />
<br />
But us artists know real buyers do not ask their initial question this way if they are interested in buying a piece.<br />
<br />
-----Original Message-----<br />
From: jonathan hashri [mailto:jonathan59hash@gmail.com]<br />
Sent: Thursday, November 19, 2015 12:18 PM<br />
To:<br />
Subject: info<br />
<br />
Hello,<br />
<br />
Saw images of your paintings online, which really caught my attention. I am interested in purchasing paintings from your collection, can you please get back to me with the price range, sizes of your paintings, so i know how to go about my purchase.<br />
<br />
Await your prompt reply.<br />
<br />
Regards.<br />
<br />KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com1tag:blogger.com,1999:blog-3334260376400900106.post-53456939096218053442015-11-15T08:16:00.000-08:002015-11-15T08:16:24.059-08:00Scam Email: Todd RieckDear Kathleen,<br />
<br />
Thanks for your awesome art-scammers blacklist. Here's unfortunately another one for you. The bad english from someone with an ultra-american name, combined with the clumsy non-knowledge of art and the mention of a cashier's check, give me 100% certainty. Won't be wasting any more time here! The IP address from the initial incoming email is also included.<br />
<br />
Thanks for all you do and wishing you great success and lots of REAL collectors. Hope it's okay to send this to you here; I couldn't get onto the website for some reason.<br />
<br />
<br />
<br />
Name: Todd Rieck<br />
E-Mail: todrieck@gmail.com<br />
Message:<br />
<br />
<br />
Dear M___,<br />
<br />
Thank you for your email and more information about "______(DRAWING) ".<br />
<br />
I am purchasing this for myself and my family purpose, I know my wife<br />
will definitely like it because she like everything about Art. Please<br />
email me more details I need to know about the pieces.<br />
<br />
Concerning the payment. I based in Illinois and that's where it will<br />
be ship too. The payment I am 100% sure about is to send you a<br />
Cashier's Check or Bank Draft for the total cost.<br />
<br />
I will be expecting your email concerning this.<br />
<br />
Cheers,<br />
Todd<br />
<br />
<br />
Sender IP: 207.244.83.214KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com7tag:blogger.com,1999:blog-3334260376400900106.post-19763820915354350022015-11-11T12:16:00.000-08:002015-11-11T12:16:04.192-08:00Scam Email: Valdmir and RebeccaKathleen,<br />
<br />
<span style="background-color: white; color: #444444; font-family: Calibri, sans-serif; font-size: 15px; line-height: 21.3px;">trick? or real? trick!!!! ;) d</span><br />
<div style="background-color: white; color: #444444; font-family: Calibri, sans-serif; font-size: 15px; line-height: 21.3px;">
<div style="line-height: 21.3px;">
<br style="line-height: 21.3px;" /><div style="line-height: 21.3px;">
Begin forwarded message:</div>
<br class="ecxApple-interchange-newline" style="line-height: 21.3px;" /><blockquote style="line-height: 21.3px;">
<div style="line-height: 21.3px;">
<span style="color: black; font-family: Helvetica; font-size: small; line-height: 22.72px;"><b style="line-height: 22.72px;">From: </b></span><span style="font-family: Helvetica; font-size: small; line-height: 22.72px;">Valdmir And Rebecca [<a href="mailto:bc5820823@gmail.com" style="color: #0068cf; cursor: pointer; font-weight: inherit; line-height: 22.72px;">bc5820823@gmail.com</a>]</span></div>
<div style="line-height: 21.3px;">
<span style="color: black; font-family: Helvetica; font-size: small; line-height: 22.72px;"><b style="line-height: 22.72px;">Date: </b></span><span style="font-family: Helvetica; font-size: small; line-height: 22.72px;">November 11, 2015 9:51:23 AM PST</span></div>
<div style="line-height: 21.3px;">
<span style="color: black; font-family: Helvetica; font-size: small; line-height: 22.72px;"><b style="line-height: 22.72px;">To: </b></span><span style="font-family: Helvetica; font-size: small; line-height: 22.72px;"><br style="line-height: 22.72px;" /></span></div>
<div style="line-height: 21.3px;">
<span style="color: black; font-family: Helvetica; font-size: small; line-height: 22.72px;"><b style="line-height: 22.72px;">Subject: </b></span><span style="font-family: Helvetica; font-size: small; line-height: 22.72px;"><b style="line-height: 22.72px;">Art Inquiry</b></span></div>
<br style="line-height: 21.3px;" /><div dir="ltr" style="line-height: 21.3px;">
<div style="line-height: 21.3px;">
Hi,<br style="line-height: 21.3px;" />Hope this message finds you well. I saw these creative works on your<br style="line-height: 21.3px;" />website and I will like you to get back with more details if they are<br style="line-height: 21.3px;" />still available for purchase.<br style="line-height: 21.3px;" /><br style="line-height: 21.3px;" /><span class="" style="line-height: 21.3px;"><div class="" style="line-height: 21.3px; padding: 0px;">
<div class="" style="line-height: 21.3px;">
<div class="" style="line-height: 21.3px; margin-bottom: 1.35em; padding-bottom: 0pt; padding-top: 0pt;">
Blue Heaven 36”x36”</div>
</div>
</div>
</span>I will appreciate an urgent reply.<br style="line-height: 21.3px;" /><br style="line-height: 21.3px;" />Best Regards,</div>
Rebeca</div>
</blockquote>
<br />
Never a good sign when they can't remember how to spell their fake name....<br />
<br /></div>
</div>
KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com2tag:blogger.com,1999:blog-3334260376400900106.post-32146009932405020672015-11-11T09:22:00.000-08:002015-11-11T09:22:56.916-08:00Scam Email: Michael DraxlerKathleen,<br />
<br />
I just received this email this morning and I knew it was a scam the moment I read it. I’ve seen a few similar to this one over the years.<br />
<div>
<br /></div>
<div>
No signature, bad English, certified check, and last but not least, they want to pick it up instead of having me ship it. </div>
<div>
<br /></div>
<div>
Thought you might want to add the name to the list. </div>
<div>
<br /></div>
<div>
<div>
<br /></div>
<div>
Begin forwarded message:</div>
<div>
<br /></div>
<div>
> From: "Michael Draxler" [micdrax@europe.com]</div>
<div>
> Subject: Lovers</div>
<div>
> Date: November 11, 2015 at 8:09:46 AM MST</div>
<div>
> To: </div>
<div>
> </div>
<div>
> Do you still have The Lovers available for sale as i am highly interested in it and do you accept certified check as a mode of payment and also if pick up is acceptable, hope to read from you soon</div>
</div>
<div>
<br /></div>
KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com112tag:blogger.com,1999:blog-3334260376400900106.post-49763260173353386792015-10-18T16:48:00.001-07:002015-10-18T16:48:09.941-07:00Scam Email: Greg Hembree<div class="tr_bq">
This was an obvious miss on the scammer's part but they could care less - they play a numbers game. They send out thousands of these emails seeking that small percentage that reply so that they can funnel those people closer to the heart of the scam - stealing their money by pretending to overpay and asking the "extra" be sent via wire (either back to them or to some non-existent shipper).</div>
<br />
Heartbreaking and annoying for this husband, though.<br />
<br />
<blockquote>
Hey Kathleen....my name is Craig. My late wife was a very accomplished artist before cancer took her at a young age. This person below is clearly a scammer. He emailed her account. It's clearly a scam. I did not email back. Thanks for your blog post on the topic of scammers. Feel free to add this scum bag to your list.<br />Thanks...you have a great site and blog....<br />Craig </blockquote>
<br />
<blockquote>
Sent from my iPad<br />> On Oct 14, 2015, at 5:43 PM, Greg Hembree [greghembree01111@gmail.com] wrote:<br />><br />> Hello,<br />> I actually observed my wife has been viewing your website (piece in subject field above) on my laptop and i guess she likes that piece, I must also say you are doing a great job. I would like to know what inspired that work. I am very much interested in the purchase to surprise my wife. Kindly confirm the availability for immediate sales.<br />><br />> Peace and blessings,<br />> Greg</blockquote>
<br />KatieMoehttp://www.blogger.com/profile/01998438534712939464noreply@blogger.com97