Identity Theft TipOff Reports| Scam Reporter | Scam Tips Received | |
|---|---|---|
  | Anonymous Goonengerry, New South Wales, Australia 2013-05-16 04:18:35 Identity Theft Other Classifieds Site |  Car sales scam Scammer Information I placed an ad on Trading Post to sell my car then I received the following text message on my phone:
"Hi, am interested in your car. Pls confirm price & availability to my email address: nacrex@live.com. pls no sms bcos I wont b able to read it. Matt"
The source of the message is Matt instead of a phone number. The nature of the message and lack of phone number made me suspicious so I googled his details. It turns out that some people who have advertised their car have been … Read Full Report ⇒ |
  | Anonymous Salvador, Bahia, Brazil 2013-05-14 14:35:06 Identity Theft Other Auction site | Oriovaldo Pereira Lima Filho Scammer Information Be careful!Oriovaldo Pereira Lima Filho will send ilegal money out of Brazil He uses several companies like Previmil Previdência complementar S/A, CPM (Coordenação de Previdência dos MunicÃpios LTDA) among others, their main target are city halls and public employees! Falsifies documents and convince public employees to sign contracts, then takes the money and leaves the city with empty wallet!Oriovaldo Pereira Lima Filho is investigated in several states and h… Read Full Report ⇒ |
 | No Name Gnowangerup, Western Australia, Australia 2013-05-13 17:28:13 Identity Theft |  Gumtree car sales Scammer Information Replys to a car ad on gumtree and wants you to email him and send info on car...then when you email he explains he works overseas and he has read you ad and he will pay for the car via paypal and so you are to send him your details so he can pay immediately and one of his friends will pick up the car.....… Read Full Report ⇒ |
  | Anonymous Hemel Hempstead, Hertfordshire, United Kingdom 2013-05-13 14:08:37 Identity Theft | Online Business Pages / National Business Pages / BHB Marketing Ltd scam Scammer Information Operating as Online Business Pages.co.uk and National Business Pages.co.uk, they claimed they were from Google and tricked me into thinking that I had an account with them. They then took my card number to 'cancel'. At this point they took my money. They even sent me an invoice from National Business Pages and a cancellation notice from Online Business Pages. While they look genuine none of the documents are legal. After some investigation, BHB Marketing Ltd run Online Busin… Read Full Report ⇒ |
  | Anonymous Saint-Gilles, Brussels Capital, Belgium 2013-05-13 12:46:55 Identity Theft Yahoo | Untitled Identity Theft on Yahoo, ref:9735 Scammer Information Asking to send money because he can't cash his cheque right now in Greece to pay his workers.
Starts calling you ANGEL right away, promises you the world and so much more. Don't fall for this man. … Read Full Report ⇒ |
  | Anonymous West Palm Beach, FL, United States 2013-05-10 19:19:44 Identity Theft Other Job Site | Beyond.com is a scam and phishing ring Scammer Information I posted my resume on several other sites (careerBuilder, indeed, monster, etc). I never used anything called "beyond.com". Nonetheless, those idiots took my information from another website and sold it. They sold my email address, phone number and physical address. I am now receiving spam to an email address that never got spam until Beyond.com sold my information. I am on the Do Not Call list but now my cell is receiving calls from scams and con artists. Beyond.com sol… Read Full Report ⇒ |
| No Name Huntington, NY, United States 2013-05-09 15:23:41 Identity Theft | Did you get my message Scammer Information Bryan Lee … Read Full Report ⇒ |
 | Anonymous Somewhere in United States 2013-05-03 13:56:10 Identity Theft | +1 Re: Scammer Information Contacted in a reply message as if I had emailed first discussing things I have no idea what he is talking about.… Read Full Report ⇒ |
  | kasey Singapore, , Singapore 2013-05-01 02:43:02 Identity Theft | SMS - iPhone UK Splash Scam Scammer Information Have not pursued this further.
Already see info through Google about this URL.… Read Full Report ⇒ |
| Anonymous Mons, Hainaut Province, Belgium 2013-04-29 17:33:40 Identity Theft | holiday rental scam Scammer Information This guy leads you into believing he rents holiday homes. Always relies to emails ...until you pay. The internet site is really well done even with a link to www.companieshouse.gov.uk/ to verify the existence of the company. 856 euros...good bye. … Read Full Report ⇒ |
| Anonymous Somewhere in United States 2013-04-29 10:05:37 Identity Theft Autotrader (autotrader.com) | +2 Auto trader classics Scammer Information Auto for sale. Was contacted via email to purchase my vehicle. Sent me a link to PayPal but I didnt use his link. He made it sound like a need for a quick transaction. I sent him a request for payment and haven't heard from him again. He wanted me to use his link to hack my account. … Read Full Report ⇒ |
 | No Name Paterson, NJ, United States 2013-04-24 18:54:57 Identity Theft Other Classifieds Site | email scam Scammer Information Email sent to info@bea.com and landed in my inbox. Claims to be "searching for me".
… Read Full Report ⇒ |
| No Name Exeter, Devon, United Kingdom 2013-04-24 16:30:21 Identity Theft | Wells Fargo Phish with malware: Subject: 1 New Message ; United Kingdom Source IP 88.215.4.165 Scammer Information Wells Fargo Phishing scam (https://www.phishtank.com/phish_detail.php?phish_id=1797591)
-----
Fraudulent email sent by noreply@sevinter.net with Malware 'ET RBN Known Russian Business Network IP (390)' (Source IP 86.35.15.212 - Suricata /w Emerging Threats Pro - see http://urlquery.net/report.php?id=2148605)
Scam sent from IP and Host name 88.215.4.165 and routed via server.kantenklaresite.nl ([109.237.218.212]) with link that redirects to phishing UR… Read Full Report ⇒ |
| No Name Exeter, Devon, United Kingdom 2013-04-22 17:21:30 Identity Theft | Royal Bank of Scotland Fraud.; verify your account activity;- cpanel.redrangerhosting.com : authenticated_id: abinstan Scammer Information RBS(Royal Bank of Scotland) Phishing scam sent by User(info1@rbspersonalbanking.rbs.co.uk) of IP 177.23.151.10 (host ns1.speedwebnet.com.br) via server: cpanel.redrangerhosting.com (authenticated_id: abinstan).
Supposed rbs.co.uk link in email redirects to http://www.brigadamirim.com.br/template/js/login.html
(DO NOT CLICK ON LINK)
Source IP: 177.23.151.10 (blacklisted cbl.abuseat.org and xbl.spamhaus.org)
Host Name: ns1.speedwebnet.com.br
ISP & Organization: SpeedWeb Net T… Read Full Report ⇒ |
 | Anonymous Basel, Basel-City, Switzerland 2013-04-22 05:41:35 Identity Theft | Untitled Identity Theft , ref:9275 Scammer Information From: jochen hudepohl
Date: Sun, Apr 21, 2013 at 3:12 AM
Subject: Re: reservation
To:
Hello,
Thanks for your reply and assistance so far. I have just concluded arrangements with the visitors for the trip to your place for that period. However, A Certified Bank Cheque for £ 3, 700 was issued by the company sponsoring the visitors to cover the cost of accommodation and transport for the 3 visitors who are being sponsored for this vacation.
I … Read Full Report ⇒ |
| No Name Exeter, Devon, United Kingdom 2013-04-19 10:13:22 Identity Theft | From: GLOBAL TRUST FINANCIAL GROUP; Subject: DO YOU NEED AN AFFORDABLE LOAN.; And Bank of Ireland Scam; Source IP 68.14.204.146 Scammer Information Global Trust Finance attempted ID Theft scam; plus Bank of Ireland Phishing Fraud sent by info@gtf.com (Authenticated sender: tony) with link redirecting to Phishing URL at www.voltacadimoixero.com/tinymce/iob.html( DO NOT CLICK ON LINK).
------
Source IP: 68.14.204.146
Host Name: wsip-68-14-204-146.no.no.cox.net
ISP & Organization: Cox Communications
Location: Metairie, Louisiana, LA, United States.… Read Full Report ⇒ |
| No Name Exeter, Devon, United Kingdom 2013-04-16 14:20:49 Identity Theft | Wells Fargo attempted scam; Subject: Security Issue; Source of Scam:- office.personalized-computers.com ([206.51.64.237]; Scammer Information Wells Fargo 'Online Banking' Scam sent by mailto:info@fargow.com with link redirecting to phishing URL at http://deniplant.ro/
.... (DO NOT CLICK ON EMAIL LINK)
NB. X-H-Notify: Remote host 206.51.64.237 (office.personalized-computers.com) incorrectly presented itself as fargow.com
------------
Source IP: 206.51.64.237
ISP: LightCore, a CenturyTelCompany
Host Name: office.personalized-computers.com
Organization: Tranquility
Country: Hallsville, Missouri, MO 65255, United Sta… Read Full Report ⇒ |
| Anonymous Upland, CA, United States 2013-04-16 04:40:31 Identity Theft Craigslist (craiglist.com) |  Phishing attempts Scammer Information This guy would offer you to buy your car and would tell you that he added $900 dollar in you paypal account in order for you to send money to a shipping company called DAS Auto Transport for $900 to clear the pending transactions. Below is the bogus receipts that he well send to you to make it look legit.
"You have received a PayPal Payment of $5,500.00 USD from Jeremy Cole (jearmycurve2050@gmail.com).
A temporary hold has been placed on this transaction!
As men… Read Full Report ⇒ |
| No Name East Riding of Yorkshire, East Riding of Yorkshire, United Kingdom 2013-04-11 18:43:38 Identity Theft | MBNA Banking Scam; From: "MBNA Europe Bank Limited"; Subject: Your MBNA credit card Statement; Scammer Information User of host, fl102.sinspam.com [64.95.245.102] sending MBNA Bank phishing scam with link redirecting to phishing URL at http://www.upessenciasminas.com.br/cache/feeds/WelcomeScreen...(DO NOT CLICK ON LINK - see http://www.phishtank.com/phish_detail.php?phish_id=1783814).
-------
Scam is routed through server fp02.domain.fongprean.com.tw ([210.68.62.165])using SMTP id FXZ6K32D ;
-------
Source IP:64.95.245.102 - This IP address belongs to a High Risk Hosti… Read Full Report ⇒ |
| No Name East Riding of Yorkshire, East Riding of Yorkshire, United Kingdom 2013-04-11 16:29:25 Identity Theft | Chase Quickpay Scam; From: "Chase QuickPay Team"; Subject: You Have Received QuickPay Money; USA IP Scammer Information Chase scam alert :-
u.s.bagnaia2006@alice.it (team@team.com) sending 'Chase Quickpay' phishing scam with a link redirecting to Phishing URL: http://test.cekapartemen.com/wp-content/plugins/qp/chs/chasequickpay.html(page now suspended but do not click on link - see https://www.phishtank.com/phish_detail.php?phish_id=1787463).
Source IP: 108.62.211.35
ISP & Organization: Nobis Technology Group, LLC
Host Name: 108.62.211.35.rdns.ubiquityservers.com
Country: Phoenix, Arizona, AZ… Read Full Report ⇒ |
| No Name Wellington, Somerset, United Kingdom 2013-04-08 10:01:32 Identity Theft | Santander/Alliance&leicester Scam; Netherlands Source IP; 95.97.143.48 with edge id M68Z1l02S12rmNP0368Z2C Scammer Information Santander/Alliance&leicester Phishing scam with link redirecting to phishing URL at blacklisted phishing site, http://zonafantasma.tv/wp-content/uploads/index.html(DO NOT CLICK ON LINK- see http://www.phishtank.com/phish_detail.php?phish_id=1783782).
----------------
Source IP: 95.97.143.48
ISP: UPC NL
Host Name: 095-097-143-048.static.chello.nl
Organization: UPC NL
Location: Amsterdam, 07 Noord-Holland, Netherlands.… Read Full Report ⇒ |
| No Name Wellington, Somerset, United Kingdom 2013-04-04 17:30:37 Identity Theft | BANKING SCAM; Subject: Lloyds TSB Online Access Re-activation; From: Lloyds TSB Bank; Korean IP 222.231.24.77 Scammer Information LloydsTSB SCAM with redirected link to phishing URL at USA site: viajeslepsa.com/_vti..... (DO NOT CLICK ON LINK)
-supposedly from customerservice@lloydstsb.co.uk; but actually sent by daemon@server4-77.com id r34BhmNl024608
Source IP: 222.231.24.77
ISP: LG DACOM KIDC
Host Name: 222.231.24.77
Organization: GABIA
Country: Seoul, Republic of Korea.
--------------------… Read Full Report ⇒ |
 | Anonymous Auburn, MA, United States 2013-04-03 04:02:17 Identity Theft Other Payment Site | Untitled Identity Theft on Other Payment Site, ref:8927 Scammer Information I get email saying a package was deliverd by Fedex This guy and his freinds call and threaten me too.… Read Full Report ⇒ |
| No Name Wellington, Somerset, United Kingdom 2013-03-31 10:37:33 Identity Theft | SourceIP: 77.251.139.246 ; From: "Alliance&Leicester/Santander"; Subject: Your Account has been blocked Scammer Information Alliance&Leicester/Santander phishing scams from securityupdate@santander.co.uk:
User ([77.251.139.246])by edge03.upcmail.net with edge id Hx6Q1l02F5K9rNt03x6RHx ;… Read Full Report ⇒ |
 | Anonymous San Jose, CA, United States 2013-03-31 04:25:00 Identity Theft | Shipping Service from Manager Anthony Haley <service@postalsevice.com> Scammer Information
FedEx
Tracking ID:7048-96843792
Date: Monday, 24 March 2013, 11:05 AM
Dear Client,
Your parcel has arrived at March 27.Courier was unable to deliver the parcel to you at 27 March 05:48 PM.
To receive your parcel, please, print this receipt and go to the nearest office.
Print Receipt
The Print Receipt will put Virus in your computer which steal your information
… Read Full Report ⇒ |