Scammers are getting more sophisticated

15 replies
  • OFF TOPIC
  • |
I spoke on the phone with the FBI yesterday and got some insight into this one - I originally reached out to them because this was one of the most elaborate money scams I had come across, and an agent called me back.

Here's the story... I get an email from a friend of mine, from his actual AOL email address that he's been using for years, basically saying his sister is in need of about $1500 for a surgery and is reaching out to all of his friends to see if he can get the money together. It was signed the way he normally signs his email, and the typing style was consistent with the way he usually talks. Nothing stood out at all.

I decided I'd just send him the full amount he was looking for and hit reply, but that's when I noticed something ... the reply-to address looked a little off. There was a zero where an "o" should be. Again, the message came FROM his real account, it even maintained the same conversation chain from the last time we talked (wasn't spoofed). But the reply-to email was one character off.

I called him up, he had no idea what was going on. Someone had hacked his account and gotten access to his contacts list. So I replied to the email, playing along and asking the scammer where I could send the cash to. He replied (this time from the email account with the zero) thanking me and asking me to send it either to the Western Union in Clarksville, TN, where his "sister" lives and gave me her name, or just to send it through PayPal. So I'm thinking "busted, sucka, you're in the United States" and started digging. Identified the so-called sister as a 71 year old woman, found her Facebook page, relatives, etc. Did arrest record searches, the whole nine. Nothing that really screamed "criminal" there.

So I turned all of the info over to the FBI, thinking maybe its identity theft and we could send some money to bait the perp and have an agent there bust whoever picked up the cash. Up until this point I'm thinking I'm dealing with an American scammer, not the classic nigerian money scam types.

And that's when the Agent calls me back and gives me the full detail... that the woman in Tennessee isn't the perpetrator, but also a victim. And it IS still a foreign scam - a fake SURVEY scam.

Basically there are networks of fake survey sites, promising to pay people for filling out surveys, and the "deal" you agree to as a survey taker is that when you receive payment for a survey, you're allowed to keep some percentage and then you pay the survey company their fee. Sounds familiar, right? It's the classic nigerian money scheme, disguised as a legitimate service - they tell the survey-taker that their payments come directly from the companies who contracted them to fill out surveys, and then rely on "the honor system" to collect their fees.

So these guys are playing both sides at once - one scheme to get a person to receive the money, and another scheme to get a person to send it to them. If I had sent $1500 to this 71 year old woman, she would have thought it was payment for a survey she took, accepted it, and then paid the Nigerian scammers their "fee" from it, never had any idea she was part of a foreign money laundering scheme.

Anyway, I've seen a lot of these scams over the years but never one this elaborate, where they actually created an AOL account that was this similar to the person they were pretending to be and combined multiple schemes to make a convincing, seemingly U.S.-based triangle transfer.

Anyway, I hope this message helps someone else also avoid something similar. Always keep your guard up when people are asking for money.
  • Profile picture of the author ComponY
    You really need to be aware that there are email fakers, and MANY more tools to do this so easily. You could scan someones email for 5 minutes, grab the signature, and see how they talk, and go from there. It's really easy to do this, and not hard to hide your traces. With a VPN etc.
    Signature
    {{ DiscussionBoard.errors[8362706].message }}
    • Profile picture of the author ronrule
      Originally Posted by ComponY View Post

      You really need to be aware that there are email fakers, and MANY more tools to do this so easily. You could scan someones email for 5 minutes, grab the signature, and see how they talk, and go from there. It's really easy to do this, and not hard to hide your traces. With a VPN etc.
      Yeah, it was the overall complexity of the scheme I found the most interesting, using an innocent third party to facilitate the transfer. Some old lady supplementing her social security income taking online surveys is ultimately the one who would end up losing had this all gone through. I hadn't seen anyone go to that much trouble before, and the request for money was so much more simple... no "here is some money for you, you just do this and send me that" and all of that crap. Just a simple request from a friend for a small amount of cash, sort of a "Hey man, I need to get some cash together, can you help?". Entirely plausible.

      I hate to admit it, but seriously, if I hadn't noticed that zero in the email I'd have just sent it to him. Actually that's not 100% true, saying Western Union would have raised a red flag with me... but if the scammer had just said PayPal, I wouldn't have given it a second thought.
      Signature

      -
      Ron Rule
      http://ronrule.com

      {{ DiscussionBoard.errors[8362773].message }}
      • Profile picture of the author ComponY
        Originally Posted by ronrule View Post

        Yeah, it was the overall complexity of the scheme I found the most interesting, using an innocent third party to facilitate the transfer. Some old lady supplementing her social security income taking online surveys is ultimately the one who would end up losing had this all gone through. I hadn't seen anyone go to that much trouble before, and the request for money was so much more simple... no "here is some money for you, you just do this and send me that" and all of that crap. Just a simple request from a friend for a small amount of cash, sort of a "Hey man, I need to get some cash together, can you help?". Entirely plausible.

        I hate to admit it, but seriously, if I hadn't noticed that zero in the email I'd have just sent it to him. Actually that's not 100% true, saying Western Union would have raised a red flag with me... but if the scammer had just said PayPal, I wouldn't have given it a second thought.
        Honestly, people don't care about other people too much. That's the problem. They'll use anything they have to, to get that money. No matter what, there will always be that person trying to scam, or do something bad for money. It's happening every day, everywhere... It just wont stop. Humans want more, and more, and don't care about doing things to get their way.
        Signature
        {{ DiscussionBoard.errors[8363046].message }}
  • Profile picture of the author salegurus
    A lifetime sentence in a Russian Gulag comes to mind for these people...
    Signature
    Think of how stupid the average person is, and realize half of them are stupider than that.

    ― George Carlin
    {{ DiscussionBoard.errors[8362738].message }}
  • Profile picture of the author Dennis Gaskill
    I think it was on 60 Minutes a while back where they exposed another Nigerian scam. Some guy thought he found his future wife online, and was building a distributor business with her. She'd buy stuff with stolen identities, have it shipped to his house, then he'd ship it on to her.

    Every time they were suppose to meet in real life, she'd have an excuse why they had to postpone it. And he just kept on shipping the stolen goods. He spent thousands of dollars shipping stuff. The news crew tracked it down to some dude in an Internet café in Nigeria.

    When they confronted the patsy and told him what happened, he said something like, "I was kind of stupid I guess."

    Maybe a little. :rolleyes:
    Signature

    Just when you think you've got it all figured out, someone changes the rules.

    {{ DiscussionBoard.errors[8362888].message }}
    • Profile picture of the author MatthewM
      I don't condone the scamming of anybody, but you have to admit this sophisticated scam is genius.

      Only If they could use this creativity to do legitimate business.
      {{ DiscussionBoard.errors[8362910].message }}
  • Profile picture of the author vask
    Scammers have always been sophisticated. To be a scammer, you need to be one step ahead of the people you're scamming, right?
    {{ DiscussionBoard.errors[8363336].message }}
  • Profile picture of the author Media04
    A friend asking for money via email is not a friend... so no cash. Anyway, I only have about 5 friends to whom I would do that, they all have my phone and as I know them very well, I would say that it would be me who ask them some cash :p
    {{ DiscussionBoard.errors[8363636].message }}
  • Profile picture of the author HeySal
    I got one of these not too long ago but mine said that the person was stranded somewhere after having their purse, ID, yadda yadda stolen and they needed some cash to get home. From their email - and sounded legitimate. However - I happened to know that person was home only a few hours before I'd received the mail.

    These things are getting kinda scary - seems to involve a lot of tracking outside of just sending mail with some of the info that is included in the scams.
    Signature

    Sal
    When the Roads and Paths end, learn to guide yourself through the wilderness
    Beyond the Path

    {{ DiscussionBoard.errors[8363695].message }}
  • Profile picture of the author G0nzalez
    Banned
    Originally Posted by ronrule View Post

    I spoke on the phone with the FBI yesterday and got some insight into this one - I originally reached out to them because this was one of the most elaborate money scams I had come across, and an agent called me back.

    Here's the story... I get an email from a friend of mine, from his actual AOL email address that he's been using for years, basically saying his sister is in need of about $1500 for a surgery and is reaching out to all of his friends to see if he can get the money together. It was signed the way he normally signs his email, and the typing style was consistent with the way he usually talks. Nothing stood out at all.

    I decided I'd just send him the full amount he was looking for and hit reply, but that's when I noticed something ... the reply-to address looked a little off. There was a zero where an "o" should be. Again, the message came FROM his real account, it even maintained the same conversation chain from the last time we talked (wasn't spoofed). But the reply-to email was one character off.

    I called him up, he had no idea what was going on. Someone had hacked his account and gotten access to his contacts list. So I replied to the email, playing along and asking the scammer where I could send the cash to. He replied (this time from the email account with the zero) thanking me and asking me to send it either to the Western Union in Clarksville, TN, where his "sister" lives and gave me her name, or just to send it through PayPal. So I'm thinking "busted, sucka, you're in the United States" and started digging. Identified the so-called sister as a 71 year old woman, found her Facebook page, relatives, etc. Did arrest record searches, the whole nine. Nothing that really screamed "criminal" there.

    So I turned all of the info over to the FBI, thinking maybe its identity theft and we could send some money to bait the perp and have an agent there bust whoever picked up the cash. Up until this point I'm thinking I'm dealing with an American scammer, not the classic nigerian money scam types.

    And that's when the Agent calls me back and gives me the full detail... that the woman in Tennessee isn't the perpetrator, but also a victim. And it IS still a foreign scam - a fake SURVEY scam.

    Basically there are networks of fake survey sites, promising to pay people for filling out surveys, and the "deal" you agree to as a survey taker is that when you receive payment for a survey, you're allowed to keep some percentage and then you pay the survey company their fee. Sounds familiar, right? It's the classic nigerian money scheme, disguised as a legitimate service - they tell the survey-taker that their payments come directly from the companies who contracted them to fill out surveys, and then rely on "the honor system" to collect their fees.

    So these guys are playing both sides at once - one scheme to get a person to receive the money, and another scheme to get a person to send it to them. If I had sent $1500 to this 71 year old woman, she would have thought it was payment for a survey she took, accepted it, and then paid the Nigerian scammers their "fee" from it, never had any idea she was part of a foreign money laundering scheme.

    Anyway, I've seen a lot of these scams over the years but never one this elaborate, where they actually created an AOL account that was this similar to the person they were pretending to be and combined multiple schemes to make a convincing, seemingly U.S.-based triangle transfer.

    Anyway, I hope this message helps someone else also avoid something similar. Always keep your guard up when people are asking for money.
    I can send you an email, and you will see that's from the CIA or FBI. It's easy to do that, at least for me it is. I'm not involved in scams or something like that, but I've been on hacking forums for over 7 years and learned a lot.

    This scam is quite interesting, scammers have to be one step ahead of other people.

    Thanks for the nice story.
    {{ DiscussionBoard.errors[8371688].message }}
    • Profile picture of the author ronrule
      Originally Posted by G0nzalez View Post

      I can send you an email, and you will see that's from the CIA or FBI. It's easy to do that, at least for me it is. I'm not involved in scams or something like that, but I've been on hacking forums for over 7 years and learned a lot.
      I'm not talking about a spoofed mail-from, man ... I've been doing that crap since 1994 The original send actually came from the user's AOL account - that's part of what made it different from the other scams, and not picked up as phishing by Gmail's filters. Instead of just scraping his contacts and spoofing an outbound mail, which is what usually happens, this time they actually sent the email from his AOL account, modifying only the reply-to. The messages showed up in his Sent folder. It's the first time I've seen a scammer do it this way.
      Signature

      -
      Ron Rule
      http://ronrule.com

      {{ DiscussionBoard.errors[8371873].message }}
  • Profile picture of the author awesummer
    You might think that because of the advancement of technology, it will help us lessen and even prevent crimes. However, scammers are smart. They also can also adapt, evolve and they can use the technology to their advantage.
    We should always be very careful.
    {{ DiscussionBoard.errors[8372701].message }}
  • Profile picture of the author PROmotions LLC
    The old replace "I"s with "l"s, and "O"s with "0's, classic AOL Screen Name Jacking Techniques from the early 90s LOL
    Signature

    Signature!

    {{ DiscussionBoard.errors[8372898].message }}
  • Profile picture of the author seasoned
    Originally Posted by ronrule View Post

    I spoke on the phone with the FBI yesterday and got some insight into this one - I originally reached out to them because this was one of the most elaborate money scams I had come across, and an agent called me back.

    Here's the story... I get an email from a friend of mine, from his actual AOL email address that he's been using for years, basically saying his sister is in need of about $1500 for a surgery and is reaching out to all of his friends to see if he can get the money together. It was signed the way he normally signs his email, and the typing style was consistent with the way he usually talks. Nothing stood out at all.

    I decided I'd just send him the full amount he was looking for and hit reply, but that's when I noticed something ... the reply-to address looked a little off. There was a zero where an "o" should be. Again, the message came FROM his real account, it even maintained the same conversation chain from the last time we talked (wasn't spoofed). But the reply-to email was one character off.

    I called him up, he had no idea what was going on. Someone had hacked his account and gotten access to his contacts list. So I replied to the email, playing along and asking the scammer where I could send the cash to. He replied (this time from the email account with the zero) thanking me and asking me to send it either to the Western Union in Clarksville, TN, where his "sister" lives and gave me her name, or just to send it through PayPal. So I'm thinking "busted, sucka, you're in the United States" and started digging. Identified the so-called sister as a 71 year old woman, found her Facebook page, relatives, etc. Did arrest record searches, the whole nine. Nothing that really screamed "criminal" there.

    So I turned all of the info over to the FBI, thinking maybe its identity theft and we could send some money to bait the perp and have an agent there bust whoever picked up the cash. Up until this point I'm thinking I'm dealing with an American scammer, not the classic nigerian money scam types.

    And that's when the Agent calls me back and gives me the full detail... that the woman in Tennessee isn't the perpetrator, but also a victim. And it IS still a foreign scam - a fake SURVEY scam.

    Basically there are networks of fake survey sites, promising to pay people for filling out surveys, and the "deal" you agree to as a survey taker is that when you receive payment for a survey, you're allowed to keep some percentage and then you pay the survey company their fee. Sounds familiar, right? It's the classic nigerian money scheme, disguised as a legitimate service - they tell the survey-taker that their payments come directly from the companies who contracted them to fill out surveys, and then rely on "the honor system" to collect their fees.

    So these guys are playing both sides at once - one scheme to get a person to receive the money, and another scheme to get a person to send it to them. If I had sent $1500 to this 71 year old woman, she would have thought it was payment for a survey she took, accepted it, and then paid the Nigerian scammers their "fee" from it, never had any idea she was part of a foreign money laundering scheme.

    Anyway, I've seen a lot of these scams over the years but never one this elaborate, where they actually created an AOL account that was this similar to the person they were pretending to be and combined multiple schemes to make a convincing, seemingly U.S.-based triangle transfer.

    Anyway, I hope this message helps someone else also avoid something similar. Always keep your guard up when people are asking for money.
    As I always say, the emails are RELAYED, and NOT private! Unless you use a proprietary mechanism(TOTALLY INCOMPATIBLE WITH EMAIL), or PRIVATE encryption ON BOTH ENDS(NOT SSL), NOBODY can honestly claim otherwise.

    Anyway, someone can SNIFF the line, or examine the relay caches, and find out possibly EVERYTHING you ever spoke with one another about. As for the email? That is EASY to forge! He could have a relay on or past the other persons relay, and look almost IDENTICAL. With the different email address, your friend may NEVER know you sent the message.

    Steve
    {{ DiscussionBoard.errors[8373701].message }}

Trending Topics