Payment with scotiabank - [email protected]

Hey, i've Sold an item and the buyer wanted to use scotiabank. It worked well so far but somehow i think i got scammed.

The last E-Mail i got:

We have already confirmed that the shipment is genuine,and the funds are ready to be credited on your account but we cannot transfer the €340,00 EUR into your account because the minimal transfer fund from Mrs Laura G. Lopez's account to an International bank account is €550,00 EUR which we had to add the remaining €210,00 EUR from the management's fund before we could make the transfer. We have placed the €550,00 EUR on your bank account, but you will not receive the money until we confirm that you have paid the excess €210,00 EUR back to us.

You have to make the payment to the accountant in charge of your transaction via Western Union which you have to log onto http://www.westernunion.de to pay the money online to the western union address below with a valid credit card or online bank account and you can also pay by cash at any post office around you as there is always a western union section at the post office.

-----------------------------------------------------

There are some Bank informations After That.
The email they use is <[email protected]>

Hello,

Yes, you were scammed.

Stop all contact and do not send anymore money for any reason.

Please post the emails from the fake buyer and the email address.

Remove your personal information from them prior to submitting.

Domain Name: SCOTIABANKPAYMENT.COM
Registry Domain ID: 2232110348_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.psi-usa.info
Registrar URL: http://www.psi-usa.info
Updated Date: 2018-02-25T10:21:03Z
Creation Date: 2018-02-25T10:21:03Z
Registry Expiry Date: 2019-02-25T10:21:03Z

Domain Name: scotiabankpayment.com
Registry Domain ID: 2232110348_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.psi-usa.info
Registrar URL: http://www.psi-usa.info
Updated Date: 2018-02-25T10:21:40Z
Creation Date: 2018-02-25T10:21:03Z
Registrar Registration Expiration Date: 2019-02-25T10:21:03Z
Registrar: PSI-USA, Inc. dba Domain Robot
Registrar IANA ID: 151
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +49.94159559482
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Stefan Minich
Registrant Organization:
Registrant Street: F&#252;rstenm&#252;hlstra&#223;e 11
Registrant City: Sulzbach-Rosenberg
Registrant State/Province: DE
Registrant Postal Code: 92237
Registrant Country: DE
Registrant Phone: +49.746645576
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Stefan Minich

Please post the emails from the fake buyer and the email address.

[AlanJones]

That's an email address. We want the actual email text from the fake buyer when they contacted you.

Also posted a name and address with no evidence.

I have removed them since we have no evidence.

Poster can post the emails from the bank and now is clueless how to post the emails from the fake buyer.

i get it now.
First message:

I am interested in this phone so how much do you want for it, last price? Get back to me as soon as possible

My Answer

as you can see you are able to make commandments for another 5 days. Starting price is at 260€ there is no "last price" entered at all

Second message:

Okay, I don't want any waste of time so i will pay you with bank transfer so i will pay 300euro plus 40euro Dhl shipping cost with insurance to USA so i will pay the total of 340euro into your account. okay

Send me

Account Holder:
Account Number:
Bank Name:
Iban:
Bic:
E-mail Address:

after i told her that we switched to yahoo (previously on ebay)
3 message:

I just got the payment confirmation from the bank and i hope you have also received the payment confirmation so check your e-mail inbox/spam. okay.

You need to go and ship the phone then send the shipment proof to the bank for confirmation . Contact the bank at [email protected]

so i send the shipping proof to that fake email of scotia bank
Answer:

We have received the shipment proof and it has been forwarded to the verification department for processing. The verification process takes 12-48 working hours depending on your courier service as we have to get the necessary information from them for confirmation. We ask for your patience for us to complete the shipment verification and complete the funds transfer on your account instantly.
We appreciate your understanding and cooperation, thus we look forward to serve you best.

After i asked them where the money is cause 3 days passed i got the email you can see in the thread

Please post the emails from the fake buyer and the email address.

No you do not get it. ^^^^^ Now I require email headers.

See the link in my signature line for information on email headers.

Post them with the emails. Remove your personal information prior to submitting.

Do not post the emails you sent.

ok now i really got it..
sadly i cant do that since it was always me starting the conversation and yahoo somehow won't let me look it up since she only replied (that damn new konversation thing)

Now i found it.

X-Apparently-To: xxxxxxx; Sun, 25 Mar 2018 16:00:48 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of yahoo.com designates 74.6.128.34 as permitted sender)
X-YMailISG: IwJO.uoWLDsO8Dq6HH5s4VOa3BEX9hgzCADOal2cCLo7Jauj
sBDkcROKU6BT3cAqvxN4ioQqyjL8GAD86iOEMg_9vOeK2dJLuJhuby1G1DWS
Xfn9cVcP.tByJ1wKRNPtpH9o09UICZJOycL.8EPXvrT_uZoVCjyJ0PWJeznO
6vy30v3hsPlY4cnxtMHU.UXWrCX7lMV017CCSnKl6f.xnQtP645zk.iMGmSw
MmS7JB06I2y6jRCIACWDU0RO63WDjHDgmKZgZ6v5M2Xl4SjfHZD.VNtIhFQO
0GOETpO.AkTx3Ckf7F2vFUjwk9l6GQ8Iv6l8P83uT8yEno5_bpZPfnfB3GIg
HUjuaeRkAx6xrnzvlP1jbW58nNsQpAmbtEe14kluRvWirZwprf2VWPHgHShI
048gYTQL6VpculZQSVzBKvz9iEbPtF2e_fYPmJ5vWC79e7RbOy.mWnD.sHo6
5hYfFbAk5OO1FXofBf4jrfBKDjw8zpFm9MqE7Us_cncLaVz6_1ut8tli1_24
c6ICDlP_h5J4qiimpMMDv1nXOKRnD7M7xc_YWB6jBsgIm0_OAPhNn3Upe5W4
uMArCPL.zu2Tpm0SggLEsEjEjP_FW2HBOILvn26xx4YsANy6Sk7UCd7XcsaI
rPxemvxAbZCEWP6HPvtkaFAtLGlwRNj4l16FFqZQJk6nHFuKx.m4SFMVxMTb
sNXfEnxu71oxU_ymdxhLMgLv6M0xZH2Hy75MtItSrVqy7IJg1w6g_A4Aos5p
MIpXEs7yIdYqpggkRIxbP1hcRz9cbJuVtS7UivlLAVWORo6pgrNhn038IxEc
tt.mSr6pUzKddoyuoeLq_LBhIxKUUmSxabynrp_WIPUDSdSYoinPgt6W3ipa
JjDq.6CAjGo4FCEvVvYzD3r5oi5adQXnR7DSCikGNxG_Ucn8l0HpGDu_w6Cj
nCp.EML6KjGlxjB74EkB54WTkhc9t1j4sUCY8HVtOqGTXgFiVXPQ9ipZnizc
zn9cRDv2ZrzgKtrHt9Zd7YJqBCC.FUtHif5E6vD97VYqgQx6W2mFjhFqbaIr
awzWetFjww5x0nFZ9lQVov4vSvO2wjGbxIU3IoOGqy9kF2tVCGRJmZZclhe1
kYZcOU._8jgoq8pJPtaVxu12Kl58_gCwG9T8jwgcPBqah5bjQigYIctuKe3C
300jFWclvV0rypxbkIeO3TIl2V_M6oRGPfmlUO_Q_Ds-
X-Originating-IP: [74.6.128.34]
Authentication-Results: mta1164.mail.ir2.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO sonic304-11.consmr.mail.bf2.yahoo.com) (74.6.128.34)
by mta1164.mail.ir2.yahoo.com with SMTPS; Sun, 25 Mar 2018 16:00:48 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1521993647; bh=AhGuudjDhImhE1Dtdq7gEfBQJo25YEeHi3OKDXLHfwA=; h=Date:From:To:In-Reply-To:References:Subject:From:Subject; b=sKtKY4A3SwxCGWCSpnAuqtKotVj3yHBw0zHhVUbFVG/ojl9ZiINClOX8BcP6pUoOMLdecvn3AYokbB69XXnJO75rjmMygTH0nmekfn6kv7H7N8yEdGzTASaITBiE3wiJY7WjeEBllzKiAUgECmsVnImyXrz2nDeFwj+MzlprbPnkUOlKw3107iMebIzcA1kwfvY4O3QiclGC7behDL4BEgOEttsRF+1zDw0xPoCmpTuZzB7pCN3eTHEdNe0V68f67eDSnfGAEurKP5GLcHGsEziSLXOCx5P6RPZXbKl3Uud4W3jkemt+n34S24f4cSNyAmcrOmHUuHetDdeBwgu00w==
X-YMail-OSG: aOUe380VM1mqI7yO_7rVTMHkdNgxOYHD798AMB..6eBdiavW6Y.5RigYjpiR4UV
KuL0fvuR6ZU94BvsJhX3TPVrTRRSTtnTNENBdyWnaq_e_kbjSDtYxfLV.7O3NmD3id5ZTpYn49dk
rbc.srdtnJ.zv5fJqHMehflMKAOi4GgEFET4HJOk2Aiv9zhRy8ERuiYDocqH0AkPDD_NOFJ7xqHY
GJyCak8uBxfO5fVWAG5T2o3A3G0nXxu5wGnXUQ2oH3Ivy1B_JDTTYl2zw0HFKnBq5.B0hs7kQtxE
P.LaDv5P8.8rT6KtsvVeXPvRR4R6MFd2GBB.v5HdFq_0FnkRdNSabGp2PisC1UuFadixfsCKYiju
1gonFvzJyFlxCVHXgMPKJnt3pidrHdfOexYNIUzpER_aZJOllup3shIeFS_bXt5Fp9cVtDZZRlzA
evXmh69Q.TUjG4ULXybQ7zgFoVRt_CgtURQ--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.bf2.yahoo.com with HTTP; Sun, 25 Mar 2018 16:00:47 +0000
Date: Sun, 25 Mar 2018 16:00:42 +0000 (UTC)
From: "Laura G. Lopez" <[email protected]>
To: xxxxxx>
Message-ID: <[email protected]>
In-Reply-To: <[email protected]>
References: <[email protected]> <[email protected]>
Subject: Re: phone
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_193486_999463046.1521993642022"
X-Mailer: WebService/1.1.11643 YMailNorrin Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Content-Length: 3958