AutoTrader Paypal Scam

They're still at it. Here're the emails I received:

Do you have the extra keys, Do you have the spare tire, Where did you get your car serviced, Have you ever had any transmission repairs and Is there any rust on the vehicle?. I'm ready to pay your asking price but not cash in person because I'm currently in a conference and calls are restricted at the moment and my only quickest payment option is PayPal, its safe fast and secure and i will be responsible for the PayPal transaction charges so you can get your expected amount. If you don't have an account with PayPal, its pretty easy to open one,Just log onto http://www.paypal.com and sign up. I hope we can make the purchase as fast as possible? As I am buying it for my dad and I'm pretty very sure he will love it, he's an handy man, so if there is anything that need to be fixed in it just let me know he will handle it. I have a mover that will come for the pick up once payment clears in your account and he will handle the documentations and changing of ownership on my behalf. I'll look forward to hearing from you with the information below so that I can make the payment this morning as
soon as possible.

Your PayPal e-Mail Address :
Full name:
Zip code for pickup:
Firm Price

================================
I am glad to inform you that I have made the payment to your PayPal account and you ought to have received the payment confirmation from PayPal by now. Kindly remove the ads and check your PayPal email address for the payment receipt. I had a little problem with the mover they said they can only schedule the pick up date and time after they receive their money for the pick up fee via Money gram Money transfer or Money Gram in there head office in Baltimore,MD. So l included $890.00 USD that they charge for the pick up and $60 for the Money Gram charges. Making total payment of $24,949.00 USD PayPal will instruct you on how to get the money sent to my mover. The Money gram agent might ask you purpose of sending money at Money Gram office, tell him or her you are sending it to a well known friend or family, because Money Gram charges for friends and family is lower than the one for business or services. I hope you understand that, to avoid additional Money gram charges.The payment has been made and the money has been deducted from my account. Kindly get the shipping fee sent to the name and address below and send the details to PayPal email customer care for your total funds to be credited. I believe that since payment has been made, the advert should be taken off the site and please do let me know your free date and time so that I can give it to my mover for them to schedule the date and time they will be coming for the pick up in your location.

Pickup Agent details:

Name: Laura Coleman

Address: 4301 Pulaski Hwy

City: Baltimore

State: MD 20201

USA

Welcome to Scamwarners,

What email address and name did the scammer use.

Please post both the scammers email address and the fake Paypal email address.

On Sat, Aug 8, 2015 at 12:39 PM, JULIET THOMAS <[email protected]> wrote:
I am glad to inform you that I have made the payment to your PayPal account and you ought to have received the payment confirmation from PayPal by now. Kindly remove the ads and check your PayPal email address for the payment receipt. I had a little problem with the mover they said they can only schedule the pick up date and time after they receive their money for the pick up fee via Money gram Money transfer or Money Gram in there head office in Baltimore,MD. So l included $1000.00 USD that they charge for the pick up and $100 for the Money Gram charges. Making total payment of $22,600.00 USD PayPal will instruct you on how to get the money sent to my mover. The Money gram agent might ask you purpose of sending money at Money Gram office, tell him or her you are sending it to a well known friend or family, because Money Gram charges for friends and family is lower than the one for business or services. I hope you understand that, to avoid additional Money gram charges.The payment has been made and the money has been deducted from my account. Kindly get the shipping fee sent to the name and address below and send the details to PayPal email customer care for your total funds to be credited. I believe that since payment has been made, the advert should be taken off the site and please do let me know your free date and time so that I can give it to my mover for them to schedule the date and time they will be coming for the pick up in your location.

Pickup Agent details:

Name: Kerry Lewin

Address: 2929 Washington Blvd

City: Baltimore

State: MD 21230

USA





Delete foreverNot spam More
3 of 117

Print all In new window
You've received an Instant Payment (0001) From Juliet Thomas
Spam
x

[email protected]® [email protected] via yahoo.com
12:35 PM (1 hour ago)

to me

Be careful with this message. It might contain a virus or a malicious link. Learn more
PayPal logo


Hello ***********

You've received a secured payment of $22,600.00 USD from Juliet Thomas.

Payment Receipt:




Transaction Date: August 8, 2015
Transaction ID: 8R2719348E8048815



Payment Status: Secured PayPal Charges: Paid

Here is the header information:
Received: by 10.76.83.35 with SMTP id n3csp1011272oay;
Sat, 8 Aug 2015 09:54:13 -0700 (PDT)
X-Received: by 10.112.64.38 with SMTP id l6mr1884738lbs.111.1439052853371;
Sat, 08 Aug 2015 09:54:13 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-lb0-x243.google.com (mail-lb0-x243.google.com. [2a00:1450:4010:c04::243])
by mx.google.com with ESMTPS id r1si6537829lah.103.2015.08.08.09.54.12
for <*********>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 08 Aug 2015 09:54:13 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c04::243 as permitted sender) client-ip=2a00:1450:4010:c04::243;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c04::243 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-lb0-x243.google.com with SMTP id nr7so5885384lbb.0
for **********; Sat, 08 Aug 2015 09:54:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=o4fG/Q6c+Kd+uGojQz3UlOiz1ExURl2A9uik4ldCH3Y=;
b=ZrOy7Dludn1PoWNT/SiVe5Ik6jpEjz+BEW4t61T0JMLmkDxvYZqJi6U3he/DGHyO+7
ZY6pGqj7dHT9Ir/91qFxmaKcPlzJWAbaPMB20Ow+4WD933JaS1u2bC5cu/Xl0NAyTl8o
fp0zQ7TpmYlDjRwxvCxyTY2rPXB/nCb2L4FVQXkatHy3L83MHoRCMUO0fKfPpmoIQRC4
cvNcBj4I+/qQB7URyIXzVpjanJ43MbEmRTaWY1W+aIhpmW7v5Wvqxj1iEP8nqZro4b1q
zugw52QHRQ3LBG/mU8wNw/nHsFEP8+b77jj0iAU+6eYrUacI/2FhjnVlrZoNLWdMbpsr
aANA==
MIME-Version: 1.0
X-Received: by 10.152.88.106 with SMTP id bf10mr13321880lab.82.1439052852554;
Sat, 08 Aug 2015 09:54:12 -0700 (PDT)
Received: by 10.25.144.132 with HTTP; Sat, 8 Aug 2015 09:54:12 -0700 (PDT)
In-Reply-To: <CAKWiV_EnmBctUiaNxraAUZqAqcKH=W860g3xbf194EKR2crArA@mail.gmail.com>
References: <CAMWA+3AGihBd_Yn-WJXYf=qUXaYbf5gF=TBWnfd3L0TZ7AOHWQ@mail.gmail.com>
<CAKWiV_EnmBctUiaNxraAUZqAqcKH=W860g3xbf194EKR2crArA@mail.gmail.com>
Date: Sat, 8 Aug 2015 12:54:12 -0400
Message-ID: <CAMWA+3B-9eAu6qntRoAcvP6MmNPcObPPubDO-HDOt=N2pCjKpg@mail.gmail.com>
Subject: Re: I just completed the Payment now
From: JULIET THOMAS <[email protected]>

Here is the header from the fake Paypal message --(is an .lv address in Latvia???)


Received: by 10.76.83.35 with SMTP id n3csp1006457oay;
Sat, 8 Aug 2015 09:38:39 -0700 (PDT)
X-Received: by 10.107.3.67 with SMTP id 64mr16285419iod.152.1439051919212;
Sat, 08 Aug 2015 09:38:39 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm38-vm7.bullet.mail.ne1.yahoo.com (nm38-vm7.bullet.mail.ne1.yahoo.com. [98.138.229.151])
by mx.google.com with ESMTPS id k10si11074979ioi.60.2015.08.08.09.38.38
for <*********>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Sat, 08 Aug 2015 09:38:39 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 98.138.229.151 as permitted sender) client-ip=98.138.229.151;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.138.229.151 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=fail (p=QUARANTINE dis=QUARANTINE) header.from=inbox.lv
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1439051918; bh=65uhoXsJU6EUzpIMAjILnKcJeDG7p6ryqzMufVc+DZ8=; h=Date:From:Reply-To:To:Subject:From:Subject; b=Kbb7zCQD/MZZ7Vu7IkqNLKP2XPoK5UvY4tKOMdnkpa/knkrv978XcZUWSgsMz5RZckCdIb/booTVgFOxTxzrhI8k7AnDauQopLFmYQkNJyvG8uuPo4tYbRBOg9rb773K7aA0u6qQikojko/hf3pUUnrO/2uTBT/CA9JdGpNMi6llb8M7EMSE2vhIXT5zeXmPTPvAnP53KbdedcU/RYX2fc5yjUuODn+rIOVshy2RFWTEBeD0qq+enGeWyRwnIBDXiXKqIhuZ5YgTltLDddDFOQzqSDYPCUzqeMd1UcFpiiuMcQ5ZrCb+ACXuY0zF3gyY1w0eicIPCXSIEf6wve7uBQ==
Received: from [127.0.0.1] by nm38.bullet.mail.ne1.yahoo.com with NNFMP; 08 Aug 2015 16:38:38 -0000
Received: from [98.138.101.129] by nm38.bullet.mail.ne1.yahoo.com with NNFMP; 08 Aug 2015 16:35:48 -0000
Received: from [98.138.89.162] by tm17.bullet.mail.ne1.yahoo.com with NNFMP; 08 Aug 2015 16:35:48 -0000
Received: from [127.0.0.1] by omp1018.mail.ne1.yahoo.com with NNFMP; 08 Aug 2015 16:35:48 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: IxiGuiQVM1mD16B5d1vCyp7L_5KrfqHoBHAu4zwlx3.zFY4bbaKoc1rPAFeQgR1
N5X6rwueIMmJMMZzJG.PLxoME41WzJrSbzXHnRmoD8oYC9RLc8IwCQkEmIm.68FVj.lNuerT8l_J
9qWG4bFivn_gqBYK7kM7EgkmWbBqnM5L4P8gahwIibnHAh3Jzaq1irOeeH.mdpwCQVDeQ3.tM9hQ
D9O2UBmPmxDxQy4.CNjrmWl2whnCt2rZNz_8d_ju37_Tt.qdQ2.WYx.j.fde_CSU14knHcJ6sKqN
DoBXXL4oCFXHVWWAViXC0Lja4OxfTAYBt2pHGWqKOJBrCVyoRNP5K0C4eeJxJ_Wg0jA31xDBMEtp
dRAuLSVA.SujadJlw_le4U6rJyzzNKuGwDTLPsVHvypQ4N3h7e3uP5ZhunMkOZv2HAW3NajeM4EX
mjHjEjsAB_9JQiOcc6b6Erig6Wwp4JnZ3kuMYeyQ7nj0c8Jqm40LiFuX.mGA.B73svneNfMaEvNN
TEndL17bMDw44yLDHCLphDWFGxg--
Received: by 98.138.105.214; Sat, 08 Aug 2015 16:35:47 +0000
Date: Sat, 8 Aug 2015 16:35:35 +0000 (UTC)
From:
=?UTF-8?Q?Service=40paypal=2Ecom=C2=AE?= <[email protected]>
Reply-To:
=?UTF-8?Q?Service=40paypal=2Ecom=C2=AE?= <[email protected]>
To: ******************
Message-ID: <[email protected]>
Subject: You've received an Instant Payment (0001) From Juliet Thomas
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_1315393_505794011.1439051735029"
Content-Length: 91435

------=_Part_1315393_505794011.1439051735029
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable




|=20


Hello ********
You've received a secured payment of $22,600.00=C2=A0USD from Juliet Thomas=
.


| Payment=C2=A0Receipt:
|=20
|=20
|=20
|
|=20
Transaction Date:=C2=A0August 8, 2015
Transaction ID:=C2=A08R2719348E8048815 |=20
|=20
|=20
|


| Payment Status:=C2=A0Secured | PayPal Charges:=C2=A0Paid
|=20
|=20
|
|=20
|=20
|=20
|=20
|


| =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Vehicle Amount :
| $21,500.00.USD
|
| Shipping Agent Charges :
| $1,000.00.USD
|
| =C2=A0 =C2=A0 =C2=A0 =C2=A0 Money Gram Fee :
| =C2=A0=C2=A0$100.00.USD |
| =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Total : | $22,600.00.USD
|



|=20
|=20
|=20
|

|=20
|

A temporary hold has been placed on this payment, follow the verification p=
rocedures below and get back to us with the requirement for the release of =
your fund.

This is to let you know that the payment you received now from=C2=A0Juliet =
Thomas has been secured and held at our payment verification team desk prio=
r verification, because this is your first time of receiving this large pay=
ment into your PayPal=C2=A0account and being a payment for vehicle. The tot=
al sum of=C2=A0$22,600.00=C2=A0USD has been deducted from=C2=A0Juliet Thoma=
s's account, including the shipping fee and=C2=A0Money Gram=C2=A0charges to=
send it to the mover.You are to go to the nearest=C2=A0Money Gram=C2=A0off=
ice in your area with cash and send the added shipping fee to the mover nam=
e and address and email us the=C2=A0Money Gram=C2=A0money transfer receipt =
(scanned copy) in order for us to complete our verification process and rel=
ease the total fund to your account.
NOTE: PayPal =C2=A0protection is to secure both buyer and seller from losin=
g their money or goods. This makes you protected,safe and secured, and we c=
an assure you that you will not lose your money if you follow our instructi=
ons and send the shipping fee up front, because Juliet Thomas=C2=A0will not=
be permitted to reverse or stop this payment now or after you have sent th=
e shipping fee to the mover and email us the requirement for verification.=
=C2=A0We will be guaranteed that Juliet Thomas=C2=A0will get the vehicle he=
paid for if you send the shipping fee up front and email us the money tran=
sfer receipt. Your account will be credited immediately you email us the=C2=
=A0Money Gram=C2=A0money transfer scan copy receipt,picture or the details =
on the receipt, if you do not have a scanner or camera. Below are the requi=
red details which you will write out of the=C2=A0Money Gram=C2=A0=C2=A0rece=
ipt.
Sender's Name:=C2=A0Sender's address:Money Transfer Control Number:
Find below the name and address of the mover where the shipping fee of=C2=
=A0$1,000.00=C2=A0USD would be sent to via=C2=A0Money Gram.

|=20
SHIPPING AGENT'S INFORMATION |



| =C2=A0 | Name | =C2=A0City | State | Zip-code | Country |
| =C2=A0 =C2=A0 =C2=A0

| =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Kerry Lewin | Baltimor=
e | =C2=A0=C2=A0MD
| 21230 | USA

|


Address Status:=C2=A0Confirmed=C2=A0
How To Know The Status Of Your Transaction



To track this transaction, send either the Transaction ID. ''=C2=A08R271934=
8E8048815=C2=A0'' or the Reference ID. ''=C2=A0PP307=C2=A0''=C2=A0=C2=A0as =
S.M.S/TEXT=C2=A0to=C2=A0=C2=A0=C2=A0=C2=A0202-733-6431=C2=A0and the transac=
tion status will be automatically generated via our payment data base. Do n=
ot call the number because its a payment tracking system number and=C2=A0yo=
u have one time access to this payment tracking system daily, if you need m=
ore information,you can=C2=A0E-mail us at:[email protected]=
v=C2=A0



Thank you for using PayPal.The PayPal Team.
Copyright=C2=A9=C2=A01999-2015 PayPal. All rights reserved. PayPal (USA) Li=
mited is authorized and regulated by the Financial Services Authority in th=
e United States as an electronic money institution. PayPal FSA Register Num=
ber: 226056

Hello. My name is Deniz Feimov and I do have a problem. I decided to sell my car and post an advertise on the internet. On the next day I received an email by Catherina Wilson that she would like to buy my car for her cousin but she is on a wheelchair and that's why she would like to pay me through PayPal. I've trusted and said Okay. There was some money transferred on my account. She said that she arranged a transport agency and asked me to go to pay for the service and send the Moneygram transaction paper through PayPal. I did it. But PayPal kept asking me for money, they told me there was a problem, that Ms Wilson's account is a business account, they made a mistake and if I want to take dispose with my money I should send them some more, so this is how I made 3 transactions and the total amount that I send is around £1500. But they still keep asking for money, today they asked me for £400 VAT and I have the feeling that I'm screwed up. Can you please help me with some advices ? Thank you.

i send Brown Williams in France

Hello Denis Feimov,
I am sorry to hear that you lot money to these criminals. PayPal will never ask you to send money to anyone via Money Gram, Western Union or any other means.
The best course of action now is to stop all communication with the scammer by ignoring all emails and telephone calls.
Please post the email asking for the payment to be sent and include all email addresses and telephone numbers the scammers are using in this scam.

I go to the police. Could they help?

I write I am still with them. they still want money from me. I will continue to talk to them and I got the couch police.

Hello,

Just posting this so others can be aware that I was contacted by these scammers when trying to sell my car on Autotrader.

Here is the second email exchange. It originated from email address [email protected]. He claimed that he was in Iraq and that he was buying the car for his father as a birthday gift:

I am glad to inform you that the payment has been made to your PayPal account and you ought to have received the payment confirmation from PayPal by now. Kindly remove the ads and check your PayPal email address inbox or spam folder for the payment receipt. I had a little problem with the mover they said they can only schedule the pick up date and time after they receive their money for the pick up fee via Money Gram in there head office in Baltimore, Maryland. So l included $1,450.00 USD that they charge for the pick up and $150 for the Money Gram charges. Making total payment of $13,850.00 USD PayPal will instruct you on how to get the money sent to my mover. The payment has been made and the money has been deducted from my account. Kindly get the shipping fee sent to the name and address below and send the details to PayPal email customer care for your total funds to be credited. I believe that since payment has been made, the advert should be taken off the site and please do let me know the best time so that I can give it to my mover for them to schedule the date and time they will be coming for the pick up in your location.

Agent details:

Name: Kerry Lewin
121 S. Fremont Avenue
Baltimore, MD 21201

Beware!

Thanks to this forum, I did not fall prey to this scam.

I received two of these in response to my auto trade.com ad. Email addresses were:
Ryan Seltmann [email protected]
Mark Nicolaides [email protected]

BEWARE

Email I received:

From: Ryan Seltmann <[email protected]>

Do you have the extra keys, Do you have the spare tire, Where did you get your car serviced, Have you ever had any transmission repairs and Is there any rust on the vehicle? I'm ready to pay your asking price but not cash in person because I am serving in the US army and currently been deploy to NATO Air Base Geilenkirchen, Germany and calls are restricted at the moment and my only quickest payment option is PayPal, its safe fast and secure and i will be responsible for the PayPal transaction charges so you can get your expected amount. If you don't have an account with PayPal, its pretty easy to open one, Just log onto www.paypal.com and sign up. I hope we can make the purchase as fast as possible? As I am buying the vehicle for my dad and I'm very sure he will love this vehicle, his a mechanic and a handy man, so if there is anything that need to be fixed in it just let me know he will handle it. I have a mover that will come for the pick up once payment clears in your account and he will handle the title for me.I would appreciate if you email me with more pictures (if available) too since i won't be able to see this in person. I look forward to hear from you with the information below. I look forward to hear from you with the information below.

Your PayPal e-Mail Address :
Full name:
Firm Price:
Zip code for pickup:

Thanks
Ryan

I got the same scam from Ryan Seltmann and Justin Anderson
[email protected]
Do you have the extra keys, Do you have the spare tire, Where did you get your car serviced, Have you ever had any transmission repairs and Is there any rust on the vehicle? I'm ready to pay your asking price but not cash in person because I am serving in the US army and currently been deploy to NATO Air Base Geilenkirchen, Germany and calls are restricted at the moment and my only quickest payment option is PayPal, its safe fast and secure and i will be responsible for the PayPal transaction charges so you can get your expected amount. If you don't have an account with PayPal, its pretty easy to open one, Just log onto www.paypal.com and sign up. I hope we can make the purchase as fast as possible? As I am buying the vehicle for my dad and I'm very sure he will love this vehicle, his a mechanic and a handy man, so if there is anything that need to be fixed in it just let me know he will handle it. I have a mover that will come for the pick up once payment clears in your account and he will handle the title for me.I would appreciate if you email me with more pictures (if available) too since i won't be able to see this in person. I look forward to hear from you with the information below. I look forward to hear from you with the information below.

Your PayPal e-Mail Address :
Full name:
Firm Price:
Zip code for pickup:

Thanks
Ryan

Justin Anderson
[email protected]
Thanks for getting back to me, I would like to ask some details concerning this vehicle before before making a purchase: How long have you owned it? Do you have the spare tire? Is there any rust on the vehicle? Have you owned it from new? Have you ever had any transmission repairs? Where did you get your vehicle serviced? Do you have the extra keys? I'm wanting to get the car as a birthday gift for my dad, It's priced favorably compared to others so I want you to consider it sold to me because I’m satisfied with your firm/advert price but not cash in person because I'm serving in the US Marine cop and currently serving at Camp Taji in Iraq and calls are restricted at the moment and my only quickest payment option is PayPal, its safe fast and secure and i will be responsible for the PayPal transaction charges so you can get your expected amount. If you don't have an account with PayPal, its pretty easy to open one, Just log onto www.paypal.com/ and sign up. I hope we can make the purchase as fast as possible? As I am buying the vehicle for my dad and I'm very sure he will love this vehicle, his a mechanic and a handy man, so if there is anything that need to be fixed in it just let me know he will handle it. I have a mover that will come for the pick up once payment clears in your account and he will handle the title for me, I would appreciate if you email me with more pictures (if available) too since i won't be able to see this in person. I look forward to hear from you with the information below.

Your PayPal e-Mail Address :
Full name:
Firm Price:
Zip code for pickup:

Thanks

Also contacted by [email protected] who hasn't responded yet. Asked for a picture of the engine.

Ryan Seltmann is still active on car scams, now using text too from +1(512) 355-6187 (Austin number)........not only using an active duty cover story but posting a picture of a soldier on his gmail page....as ever if it's too good to be true then it probably is. Reported to Autotrader fraud and pointed out to them they may want to contact the real Ryan Seltmann in Texas in case he is a victim too!