Scam Tip Report #25363 - Scam alert for Mary Kay Beauty Consultants
| Scam Reporter | Scam Tips Received
|
|---|
| Anonymous
Columbus, GA, United States
2015-10-21 11:22:03
|  +2 Scam alert for Mary Kay Beauty Consultants I was contacted with the possibility of a new customer. The language used tipped me to a scam. After doing a search I found this is common.
Message is below:
Interests:
Buying Mary Kay® products.
Hey,this's Sandy,I went through your store last night,I found good product i will love to order,I will be delighted if you can assist me it,back to me via skaggs2003@gmail.com,I wil be looking forward hear from you. |
Follow Ups/Extra Information. Most recent is listed first.
| Nina (Sanford, FL, United States) Added the following extra information on :2018-06-09 19:25:07 |
|
I received an email from this person a couple of weeks ago and sent my standard "thanks for your email" reply. This is what I received today:
----------
Good morning!
Thank you for responding.I enjoyed your email,I'm sorry I hadn't gotten back to you before now.My grandmother has been I'll and I was with her Okay, i will more than happy if you can help me and be my representative,
I will have ordered them from my former Mary Kay rep but she had a family emergency she has out of town also i didn't hear from her again i will love to make you my new Mary Kay Rep again thank you so much also i will want you to have payment in hand before ordering this items for me for security purpose.
Here is the list of the items i will like to order from you my daughter wedding as a surprise gift :-
• TimeWise® Miracle Set 3D™ Normal/Dry
Quantity 1
•TimeWise® Replenishing Serum+C® 1.5 fl. oz.
Quantity 2
I need your respond back with the total price and i will like to let you know that payment will be made i'm sure this works because cashier check is cash able instantly.
You should also email me with the full name and mailing address where to issue out the payment to you in a timely manner.
I look forward to hearing from you soon! my daughter address Mary Brauer 5871 colony Ct. Boca Raton Fl. 33433..
Thank you much.
---------------------
When I googled the individual's email, I ended up here seeing a post from 2015. She had originally contacted me through the Mary Kay website (sent THREE contact forms?!) and this is what they said:
------------------------------
Dear Nina,
A potential customer has sent you a message through Contact Me on your Mary Kay® Personal Web Site! Following is the information provided:
Name: Elizather Taylor
Phone: 3059346327 home
Email:elizathertaylor2002@hotmail.com
Contact Preference:
Interests:
Learning the latest in skin care and makeup news.
I will more than happy if you can help me and be my representative,Thank you!!
If you do not know this customer or feel you need more information to assist you with identifying fraud, we encourage you to read the Protecting Your Business from Fraud article located on Mary Kay InTouch® before responding to this message.
-----------------------------------
Now I wasn't worried about the lack of perfect grammar in the contact form because I deal with a population for whom English isn't a first language. So it didn't raise any flags. But the reply email today really did.
Scam EmailReturn-Path:
Received-SPF: pass (domain of hotmail.com designates 40.92.6.27 as permitted sender)
X-YMailISG: 3WjvsjcWLDvistVIqvgzfQJV0taDcMsnrQi7cZnxZoUbPHVk
vKj8ISmfj6X_qhxvjt.QQF4aOyeolr83J3.qTW7vOzn2cLdzJpdxZUuT7C39
D6w2Z4Wf.NsAimzXZqecG_zaWfzJddHmctwl_Rd9otJratkLLQ7CqV9HP6SS
RGsBM9Huz0kwlpqkkdzHrbtRgaWeFYz0a2RHds4s8TJCLKEoW8yy3f7P50nj
KaikWo_N8LEgYy5SXSDLYGnRhvszR1SmVhmtFskZc9pNJ4GvzL2oxdxjL4Zn
99Gh.wzb1GI9EwkhqEDgcjgBB1Bv.Na5NQJhAxBcsd6vbUnvZqL8Yl_B78SZ
XTPgMhwTYGnfUzocp3mYnVZwWdaG3DecOigShMS2ubvqKTkdlDivHXgWJ81p
xwxWsUp1Dtp5GPJRgu2QQsTwvnBkE94CHvE8jbhoD4vXszqLCPFkYeUaKRZj
a_7eRnmBOYsAI4L4Z7oKlu_x5rDYiqi6F6o4w_QZY892a9znzZ1hpmYq9Jdk
DKSLUTa..raNQXjMWKowg3M3pDtOQTWfsNrpCXSSHCOSostZ_GfdKsXbWi1f
MtKqz23kGE8tvNSDehv2hAvmhSWQGFp799cGUnciHXucPBkcocEtdj0L4ASz
_hJpZrj5R0DlfQnAFXebeGmzb7t8tnjesFtMXYbHYq33w9dEwAOSJYLl39Y8
4_0EgOfeZgKeSj258qFTpSW4_N6_RaEPIhCP8xcMtjF.Kf1MMhDAs2QJ4i4M
QCYfAC7_l4OExHrboTmCqpnQ6cz5CKgHmpQKECelb.L0p5kfuoXHhzlXeWAq
1ucqg840rP59dpaq5nQ3vvv5_ruK.5qFYKhha1FmCOtWrbWGDpcJJNO8R7le
g0u.MN6YxZ_6.MHP1qdH5P4rub3LZVJMEL6nmUrG3EJ2EnKCYjGmifspnmFl
j0XZX8L5EhD4bSQneiIR7IEhg9afQtd_t0FVXr8JinHoDYsC8uWpIvCkhtcv
Jlk.4exu_CRHvqkdsSqHV_coxPExreVimj1BbvWUWc3eg3u7nqW7qsOh9IwP
UFQH6zsszVs_mfs.ECSAwThuw1P3HMrRMPOfSbpqxtl3k3yv
X-Originating-IP: [40.92.6.27]
Authentication-Results: mta4253.mail.ne1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO NAM03-BY2-obe.outbound.protection.outlook.com) (40.92.6.27)
by mta4253.mail.ne1.yahoo.com with SMTPS; Sat, 09 Jun 2018 09:54:30 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=iD8E/qqAdmjYqmjUb/FeV7j/9RK31Q2DenRQ/iJ3q1g=;
b=jxJOk15zbadBXJpV2xt6TWqeTyx17ayfXlwpBtJSXf32CHvev9+U2gnNhVoJZ359Der0PmPFgFtCwzMVlbAn+MzyLZFi/tbklQo0E5VeqnEnO4azdtGLQ3FQamEiHjxrqlc2Y2QqVLFqPW6gUIHSxVQ4j5jmf+aVu2PsGq1GmZrTXJHrZvY0EPLQIYnN6C/GdKGh2qLM81sjavY4BWgpnpJKmqD3r4KQBmhe2bCuBJ2Op2jZ4edhVqvbFGeMKDdrOSXHX83zYn9czYc5bL1J5jVe8VIp/dDeioCBzGR9l50mZEg7G22O7KwSp7lKsZlhx3l2L9x5K8sdZfTRCgnaAA==
Received: from BY2NAM03FT063.eop-NAM03.prod.protection.outlook.com
(10.152.84.55) by BY2NAM03HT147.eop-NAM03.prod.protection.outlook.com
(10.152.85.151) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.841.10; Sat, 9
Jun 2018 09:54:28 +0000
Received: from CY4PR19MB1045.namprd19.prod.outlook.com (10.152.84.57) by
BY2NAM03FT063.mail.protection.outlook.com (10.152.85.182) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
15.20.841.10 via Frontend Transport; Sat, 9 Jun 2018 09:54:28 +0000
Received: from CY4PR19MB1045.namprd19.prod.outlook.com
([fe80::4cf3:d082:2fad:94df]) by CY4PR19MB1045.namprd19.prod.outlook.com
([fe80::4cf3:d082:2fad:94df%5]) with mapi id 15.20.0841.018; Sat, 9 Jun 2018
09:54:28 +0000
| Anonymous () Added the following extra information on :2015-11-01 18:40:26 |
|
I'm also a MaryKay Consultant and I did a search of the phone number and found that this number had been used in a previous scam attempt under a different name. I'm adding the new info to help other people avoid the scam. Below is the message the person used to try to get me to participate.
__________________________________________________________________________________
Hey,this's Elizabeth,I went through your store last night,I found good product iwill love to order for my daughter Wedding,I will be delighted if you can assist me it,Response back elizathertaylor2002@hotmail.com,I will be looking forwardhear from u.
Scam Emailelizathertaylor2002@hotmail.com
