Craigslist, Ebay and other online buying/selling scams.
by phishtaco Fri Oct 11, 2013 8:03 pm
Before I tell the story of what happened to me, I want to say that I do feel really stupid that I fell for a scam like this. I'm usually not gullible or over-trustworthy, but this was my first time selling something on ebay and I know that is why I was targeted. I wanted to share my story in hopes that it might help someone else.

I listed a watch on ebay on October 3rd. I had it starting at 50 dollars, with a buy it now option of $350. To my surprise, on Saturday the 5th of October I received an email from ebay saying that my item had sold. Granted, I was a little surprised as I expected to maybe have one bidder at most. However, I was excited at the prospect of getting the amount I had asked for. I then emailed an invoice to the buyer (through the legitimate email that ebay sends you), and waited for their payment. Instead of hearing anything through ebay, the person contacted me via email on Saturday night asking me how I would like them to pay. I found this a little odd, and looking back I realize that this is when the first red flag should have gone up. However, I answered them back stating that I would like to be paid through Paypal and to check the invoice I had sent them.

Things then went silent until Monday morning, when I woke up to 3 emails. The first was from ebay stating that the person's ebay account had been suspended due to unauthorized activity on their account. The next email was from the buyer, apologizing for this "mixup", saying that they were on vacation and had signed into their account on a device they didn't usually use. They then said they were trying to resolve things with ebay. The third email - which actually turned out to be a fake, which I unfortunately didn't realize until days later - was from "ebay" claiming that the issue with the person's account had been resolved. As I said before, I'm new to the whole ebay selling scene, so I didn't realize that this message should have also been in my ebay inbox. Looking back, this is when I should have cut things off. The buyer still had yet to pay me, so I emailed her again asking to be paid through paypal as soon as possible in order to ship her the item.

This is where things get messy. On Tuesday, I received a fake email from both ebay and paypal, saying that this bidder had paid for the item. Interestingly, the person emailed me again asking if I had received the email confirming that they had paid...and to check my spam folder. They also said this:

I have paid for the item and i want it shipped via Local Post or FedEx International Sign For Delivery to the following address below:

Name: Nicholas Patrick,
Address: 31 Aborishade Road
Lawanson, Surulere,
Lagos, 23401
Nigeria

I actually received 2 emails - the first from "paypal", saying a payment had been made through paypal with the total amount I had asked for plus shipping. There turned out to be another "paypal" email that went to my spam folder - which I didn't look at until later - which said the person had paid $350 plus $200 extra for "Fedex Priority Shipping".

Now, stupid me, I didn't listen to my intuition flaring up and saying something wasn't right. This address wasn't listed on their ebay account and wasn't confirmed. So, I proceeded to go to the post office and ship the package, paying $47. When I got home, I started looking at the emails on my computer, and realized they were not legitimate. I forwarded them to the spoof email addresses of both ebay and paypal and they responded to me by confirming these were phishing emails. I then called Canada Post to open an investigation and intercept my package, which thankfully hadn't left the country. The next day I also called the Canadian Fraud Agency and filed a complaint. Luckily for Nicholas Patrick, if that is his actual name, they have his full address.

I was also refunded from ebay for my seller fees, and they cancelled the transaction. I am really thankful that things didn't go farther than they did, because I know the next step they would have taken would have been asking me to refund them the "extra shipping" they "paid" me. I have since gotten a few more fake emails from "ebay" and "paypal", all which I have forwarded, as well as an email from the person asking for the tracking number, which I thankfully never gave them.

Hopefully I can get the package returned to me. I feel badly for the poor person whose ebay and email account was hacked, and for the people whom this person has probably scammed in the past. I hope that this story of mine helps even one person.
Advertisement

by Mike Wilson Fri Oct 11, 2013 8:11 pm
Hello phishtaco
Welcome to Scamwarners and thank you for sharing this information. Please post the email addresses and any telephone numbers used in this scam. This information will help others who may be searching for information on the scam.

If you have any additional questions please ask.

It is ALWAYS a scam
If the pet seller or shipper asks for money to be sent via Western Union, Money Gram, any brand of gift card. Walmart To Walmart , Zelle , PayPal friends and family option, or mentions Cameroon
by phishtaco Fri Oct 11, 2013 8:23 pm
Here are all of the email addresses that contacted me:

[email protected] - the "buyer"

addresses of the fake ebay/paypal emails:

[email protected]
[email protected] (via bellsouth.net)


I am pretty sure Cheryl's ebay/email got hacked. However, her confirmed ebay address was in California, and when I tracked the ip addresses from these emails they were located in California as well.
by christopherjack Fri Nov 15, 2013 11:15 pm
Same thing happened to me. First time eBay seller, was initially delighted when someone clicked buy it now. Only to find a few emails later fake eBay & PayPal emails. Frankly I would not have noticed if it were not for the little green verified shield a few posts down.

Fake PayPal email address was [email protected]
Fake eBay email address was [email protected]
Brian Chapman -claimed name.
[email protected]
Nicholas Chiemeka, -name on fake PayPal email
10 Odusin Street,
Lawanson
Mushine
Lagos
23401
Nigeria

Here's what he initially said in the official eBay invoice request:
Hi mate, glad I won your item. I'm currently in New Zealand at the moment. Please email me [email protected] confirming the exact condition of the item I will be going for an appointment now and will be able to access my email from my iphone, so email me at [email protected] using the item number as the subject: [email protected] Regard

I would like to have the item posted to the address below:
Brian Chapman
99 Woodmansterne Road
Carshalton, Surrey SM5 4EG United Kingdom


Here's what he said that threw out the red flags & made me check the validity of my recent eBay & Paypal emails
Hi

My account was accessed by a third party and eBay have restored it back to me. Am now the real owner of the account and i have already bought your item before the whole thing happened. Kindly get back to me if you receive this messageso i will be making the payment right now.

Regards


Fake eBay message
Image

Fake PayPal message
Image

In short I'm kind of glad this happened. Incredibly stressed & annoyed & would have preferred it to be the real deal & even better someone within my own damn country but in the end it was just another reminder to double check the senders official information before responding. Just because it says that it's from eBay or PayPal don't believe it unless it has been certified & make sure it is using the official email adress of the sender- not something similar but the real deal- copy & paste the damn thing to make sure that it's a lower case "L" & not an upper case "i" for example.
by Bryon Williams Fri Nov 15, 2013 11:39 pm
Welcome to Scamwarners christopherjack,

Thank you for posting for everyone to see. Further has been replied to in PM.

Please contacta moferatorstor if you have a question or information about this post.



Please do not tell the scammer he is posted here.


Please remember the fallen. https://www.odmp.org/
by Mike Wilson Sat Nov 16, 2013 2:37 am
The fake email domain was registered in September for one year.

[email protected] is in the process of being reported for fraud.

It is ALWAYS a scam
If the pet seller or shipper asks for money to be sent via Western Union, Money Gram, any brand of gift card. Walmart To Walmart , Zelle , PayPal friends and family option, or mentions Cameroon
by Bryon Williams Sat Nov 16, 2013 3:02 am
@Mike sorry I missed that. Poster also reported same to Paypal and Ebay.

Please contacta moferatorstor if you have a question or information about this post.



Please do not tell the scammer he is posted here.


Please remember the fallen. https://www.odmp.org/
by Fionavdw Wed Jan 01, 2014 4:58 pm
I almost also got scammed by this guy. I listed an item on eBay, and being a first time seller i didn't realise that you weren't supposed to email them personally. The person took several days to agree to pay, but this morning they sent me an emailing, informing me that he had sent the payment. I recived, what looked like an email from eBay telling me that the payment was accepted, from a fake email address. I also received an email from PayPay, which is when i realised it was a scam, because my PayPal account is linked to a different email address.

This was the email i received from him -
Hi

I have paid for the item and i want it shipped via Park & Send or fedEx International to the following address below:
Name: Nicholas Chiemeka,
Address: 10 Odunsin Street,
Surulere,
Lagos, 23401
Nigeria
Have you receive a confirmation of payment? if not kindly check your junk mail.
Regards


The three email address he used were -
fake email from eBay - [email protected]
fake email from PayPal - [email protected]
Inae Marshell's email - [email protected]

The other obvious point too look out for - there is a disclaimer in the fake PayPay email - Important Note : PayPal payment for eBay Item 111244313830 has been Verified and " APPROVED" But due to security reasons on both sides of the buyer and the seller, the status of the payment is pending. Most sellers do not ship out the exact item listed on eBay . We are keen on securing the eBay community.You will be required to post out the item and email us its shipment reference number, We will then verify the status of the shipment within 24Hrs with the courier service used.Once we have completed verification, your account will be credited instantly.

As soon as shipment is carried out,Kindly get back to PayPal Team by responding to this message with the shipment tracking number so that we can confirm and then credit your account immediately.
**PLEASE NOTE**
Once item has been shipped and the tracking number sent to us,
You will receive a "CONFIRMATION EMAIL" from PayPal Team informing you that the Fund has been credited.
by Bryon Williams Wed Jan 01, 2014 5:12 pm
Welcome to Scamwarners Fionavdw,

Yes, it is a scam I am happy to hear that you have learned to keep all your messaging within Ebay's mail system.

Could you please post the email from the fake Paypal along with its header? You can look at my signature for a link to locate headers.

If you have further question feel free to ask.

Please contacta moferatorstor if you have a question or information about this post.



Please do not tell the scammer he is posted here.


Please remember the fallen. https://www.odmp.org/
by Fionavdw Thu Jan 02, 2014 11:42 pm
Hi Brian! yes a very important lesson to learn. This is the header from the fake PayPal email address.


Delivered-To: XXXX
Received: by 10.216.204.201 with SMTP id h51csp843840weo;
Thu, 2 Jan 2014 09:37:05 -0800 (PST)
X-Received: by 10.180.187.72 with SMTP id fq8mr55122001wic.26.1388684225514;
Thu, 02 Jan 2014 09:37:05 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-wi0-f196.google.com (mail-wi0-f196.google.com [209.85.212.196])
by mx.google.com with ESMTPS id j1si4213384wjy.148.2014.01.02.09.37.05
for <XXXX>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Thu, 02 Jan 2014 09:37:05 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.212.196 as permitted sender) client-ip=209.85.212.196;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 209.85.212.196 as permitted sender) [email protected]
Received: by mail-wi0-f196.google.com with SMTP id hi5so4651058wib.7
for <XXXX>; Thu, 02 Jan 2014 09:37:05 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:date:message-id:subject:from:to
:content-type;
bh=rcr4jzJy4dQiLblQVUg0pMC5FRTbClZEfTdsbDQsEa0=;
b=dw0a1fzLwL+Sbt8CWE+h9g5m21jq5kieP4UhubKIuPVGqkS1olmW39SQCKZ2IeUB1/
gQNlN0U5R94YGNQrrPTduSyI1Go4I8CIeVFbAD5aDkDfvC5s+HWIvDDbhDZM6Rb+CFH0
7ApNfjjE4+BGp8wnaK9syFBxMwhvfIfnk0FDRbMvm+7ml/rX5ygZl+NvMYu8CxVmjfR7
kgxEWhLMLE4mmqwPEjMukes9TNaq1bk/hD/sziSVTDt/ZinYZIQZD6K32/0pzFKm8+CE
KgvyjLhyjaK+OH2vHcrdXjvjpW8bEWRHyXljPSTpP7SHtnsuVKwJ92Eq52SuVkfa09XQ
BVtw==
X-Gm-Message-State: ALoCoQkuUIAq+F3GHSnVZ11kQoHBE0+DY8Zr132MK3sQjkpunTfTFTMrRo/HJRCwTsa2Ru1rrj3v
MIME-Version: 1.0
X-Received: by 10.194.82.68 with SMTP id g4mr5695382wjy.85.1388684225200; Thu,
02 Jan 2014 09:37:05 -0800 (PST)
Received: by 10.217.138.204 with HTTP; Thu, 2 Jan 2014 09:37:05 -0800 (PST)
X-Originating-IP: [41.138.185.195]
Date: Thu, 2 Jan 2014 18:37:05 +0100
Message-ID: <CAG7byjRHOZdnX+Wv8RQinP-LjwURXfwSaBC3MQo2tHd-EiepVA@mail.gmail.com>
Subject: Your Payment Is Guaranteed
From: PayPal Service <[email protected]>
To: Xxxxxx <XXXX>
Content-Type: multipart/alternative; boundary=047d7bea41fef2d82604ef003d18

--047d7bea41fef2d82604ef003d18
Content-Type: text/plain; charset=ISO-8859-1

[image: PayPal] <https://www.paypal.com/us>
Dear Merchant Seller,

We the PayPal would like to inform you that the payment is currently
On-Hold with us due to the fact that some seller's do receive their money
and will not ship out the item, In this regards we have placed a high level
of security on this transaction on both the side of the seller and the
buyer.

This has arisen due to reports filed in by numerous casualties customers on
the issue that some eBay Sellers have taken the advantage of the
old-fashioned way of making payment where Items paid for by eBay Buyers are
only shipped after payment has been made and cleared. This interception
means eBay Sellers will ship eBay Items as payment been held up by us
remains until Shipment has been verified. This places none under any
unnecessary disadvantage(s).

You are required to ship the item out to the address below.:

Nicholas Chiemeka,
10 Odunsin Street,
Lawanson
Surulere
Lagos
23401
Nigeria


As soon as you ship the item send the shipment tracking number to us for
verification of shipment.Once the shipment has been verified within 5
minutes your account will be credited.You are in no circumstance required
to send the shipment tracking number to the buyer until we have authorized
that you do so.

Thank you for using PayPal!

The PayPal Team

--047d7bea41fef2d82604ef003d18
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><a rel=3D"nofollow" href=3D"https://www.paypal.com/us" sty=
le=3D"color:rgb(0,51,153);font-size:13px;line-height:1.2em;outline:medium n=
one;font-family:arial,helvetica,clean,sans-serif" target=3D"_blank"><img al=
t=3D"PayPal" src=3D"http://images.paypal.com/en_US/i/logo/email_logo.gif" s=
tyle=3D"border-width: 0px; line-height: 1.2em; outline: medium none; border=
-style: none;" border=3D"0"></a><table style=3D"color:rgb(34,34,34);font-si=
ze:13px;line-height:15.9333px;outline:medium none;border-collapse:collapse;=
font-family:arial,helvetica,clean,sans-serif" align=3D"center" border=3D"0"=
cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">


Thanks,
Xxxxxx
Last edited by Bryon Williams on Thu Jan 02, 2014 11:57 pm, edited 1 time in total. Reason: Removed personal information.
by Bryon Williams Thu Jan 02, 2014 11:54 pm
^^^Thank you.

The fake Paypal email originates in Lagos, Nigeria.
Originating IP: 41.138.185.195
Originating ISP: Visafone
City: Lagos
Country of Origin: Nigeria

Please contacta moferatorstor if you have a question or information about this post.



Please do not tell the scammer he is posted here.


Please remember the fallen. https://www.odmp.org/
by Jearbear Fri Jan 03, 2014 7:49 pm
I was just sent a txt message through craigslist add I have saying they wanted to by my merchandise and was going to pay me more then what I was asking through paypal. They sent me an e-mail saying that payment was sent to my paypal acct and deducted from theres . Don't fall for it it is a scam I logged into my paypal acct and there was no payment received so I called them and they said it was a scam. NEVER SEND YOUR MERCHANDISE TO ANYONE WITHOUT CALLING AND CONFIRNING IT WITH PAYPAL First. Don't just go by the email it is a fake.

Who is online

Users browsing this forum: ClaudeBot and 10 guests