Identity Theft TipOff Reports| Scam Reporter | Scam Tips Received | |
|---|---|---|
  | Anonymous Melbourne, FL, United States 2013-02-12 22:19:13 Identity Theft |  ON BEHALF OF MRS FIONA CRAWFORD Scammer Information
Cheryl L. Carlson
4:35 PM (42 minutes ago)
to undisclosed recipients
I am sending you this email on behalf of Mrs. Fiona Crawford and in regards to her wish. She has been diagnosed with cancer for a very long period and she has been touched by God to donate from what she has inherited from her late husband to you for Humanitarian work rather than allow her greedy relatives to use her husband's hard earned money in ungodly way. For … Read Full Report ⇒ |
 | Anonymous Eden Prairie, MN, United States 2013-02-12 21:09:32 Identity Theft |  Steam Scammer Scammer Information This Steam user (fromthelandoftheice) will purchase a Steam title and have it added to her inventory. The scammer will then find a target using the Steam discussion boards looking to trade the recently purchased item and allowing the target to view the item from the inventory page.
Once theis scammer and the target come to a trading agreement, the scammer will send the steam title to the target using the steam trading system to make an exchange that looks authentic.
The scam… Read Full Report ⇒ |
 | No Name Bideford, Devon, United Kingdom 2013-02-12 12:53:06 Identity Theft | From: "Santander Bank Plc"; Subject: Account Update Notification; SourceIP: 62.194.254.104 Scammer Information Santander Bank attempted scam sent by User of blacklisted IP 62.194.254.104 (Host h254104.upc-h.chello.nl) via servers edge03.upcmail.net and fep11.mx.upcmail.net, with redirect phishing link to www.ybat.org (do NOT click on this link).
--------------------
Received: from fep11.mx.upcmail.net ([62.179.121.31]) by COL0-MC4-F18.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Mon, 11 Feb 2013 08:05:24 -0800
Received: from edge03.upcmail.net ([192.168.13.238])
by viefep11… Read Full Report ⇒ |
 | Anonymous Somewhere in United States 2013-02-11 20:08:14 Identity Theft Yahoo | email phishing private person's email Scammer Information posing as friend: M Malone. email address used to be good, may or may not still be in use by the real M Malone. saying stranded in the Phillipines--send money. also using Bill Malone at same email address.… Read Full Report ⇒ |
| No Name Bideford, Devon, United Kingdom 2013-02-10 11:56:49 Identity Theft | Santander Bank Phishing; Subject: New Security Message; from User ([95.97.140.2]) Scammer Information Santander Bank Phishing: Subject: New Security Message.
User (mailto:validate@santander.com) of host mail.holtrop.nl (IP: 95.97.140.2 ) sending scam emails from host viefep20-int.chello.at , via servers- edge03.upcmail.net ([192.168.13.238]) and fep20.mx.upcmail.net ([62.179.121.40]).
-----------------
Source IP: 95.97.140.2
ISP: UPC NL
Host Name: mail.holtrop.nl
Organization: UPC NL
Country: Amsterdam, 07 Noord-Holland, Netherlands
-------------------------
Received: from f… Read Full Report ⇒ |
  | Dean Harstdale Edwin Kuala Lumpur, Kuala Lumpur, Malaysia 2013-02-06 15:51:23 Identity Theft | Email Scam Scammer Information 4th February, 2013
CPA Global wishes to inform you of the results of the Special Big-Break! Program (SBBP) - United Kingdom. Your email account has been selected as a winner.
Details:
Ref No.: XF-WQ69114JAN13
Batch No.: Q93-GB47
Amount: 739,350.00 Pounds Sterling
Where to Claim:
Cheque payment at CPA Claim Center located at:
87 Higher Bridge Street, Bolton
Lancashire
BL1 2HA
Monday to Friday, 9.00am to 5.00pm (excluding Public Holidays).
You will be required to provide t… Read Full Report ⇒ |
| Anonymous Somewhere in 2013-02-06 08:14:26 Identity Theft | ADP - Reference #463148762851 Scammer Information We were unable to process your recent transaction. Please verify your details and try again.
If the problem persists, contact us to complete your order.
Transaction details are shown in the attached file.
Reference #463148762851
This e-mail has been sent from an automated system.
PLEASE DO NOT REPLY.
The information contained in this message may be privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an … Read Full Report ⇒ |
 | tammy Bernville, PA, United States 2013-02-06 06:01:56 Identity Theft Paypal (paypal.com) |  Untitled Identity Theft on Paypal (paypal.com), ref:7927 Scammer Information Calls saying you have been approved for a government grant. Wants all your personal info. A bank card no. For a processing fee. I know for a fact. Beyond a shadow of a doubt, that the government does not charge processing fees. They apply for grants in your name. And keep the money if the grant is given. And rip you off for $.
… Read Full Report ⇒ |
| John Connelly Rochdale, Rochdale, United Kingdom 2013-02-05 20:14:38 Identity Theft | Untitled Identity Theft , ref:7920 Scammer Information Internet job offer from Multimedia paying GBP 1500 per month plus bonuses.
Given bank acount details in an attempt presumably loot bank account.… Read Full Report ⇒ |
 | Maggie Charleston, WV, United States 2013-02-02 17:34:04 Identity Theft Other Classifieds Site | Mystery Shopper Scammer Information Market Survey Inc
93 S Jackson St Pmb 62790
Seattle WA 98104-2818
The FedEx envelope contains 1 Pcs of $920 Money Order, You are instructed to have the payment deposited in your account and Cashed out or your bank might ask you to deposit and wait for 24 hours for funds to clear at your Bank for record purpose, feel free to have it deposited.once you have the cash you can go ahead with Wal-Mart Evaluation and Then Western Union Evaluation.The payment you received covers… Read Full Report ⇒ |
| No Name Bideford, Devon, United Kingdom 2013-01-27 14:14:58 Identity Theft | Paypal Identity Scam; Subject: Warning Your Account Has Been Limited; www-data@NIXWEB01.DANDOMAIN.NET; Scammer Information Attempted Paypal Identity theft scam with link to unsafe site.
sent from:-
IP 194.150.113.81
ISP: DanDomain
Host Name: nixweb01.dandomain.dk
Organization: DanDomain
Location: Randers, 18 Midtjyllen, Denmark.
Received: from nixweb01.dandomain.dk ([194.150.113.81]) by SNT0-MC4-F22.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sun, 27 Jan 2013 04:01:55 -0800
Received: by nixweb01.dandomain.dk (Postfix, from userid 33)
id 2BDF322E2AD; Sun, 27 Jan 201… Read Full Report ⇒ |
| No Name Oxford, Oxfordshire, United Kingdom 2013-01-27 11:36:03 Identity Theft | Prospective Applicant, a new career's waiting for you! January 24, 2013 1:22:54 PM Scammer Information I received an email offering a post called 'FINANCIAL SERVICES OFFICER' but it sounds like a strange job - possibly an identify theft scam?
… Read Full Report ⇒ |
| Anonymous Brighton, Brighton and Hove, United Kingdom 2013-01-24 18:03:16 Identity Theft | Santander UK phishing scam: from User ([95.97.166.50]) by edge03.upcmail.net with edge id rVq01k01l15a5l303Vq1hX Scammer Information
Santander phishing scam with link redirecting to phishing URL, http://www.mantuatownship.com/Forms/index.php
. .
Constant and numerous phishing scams etc by User of Netherlands IP 95.97.166.50 sent via upcmail.net servers
-------------------
IP: 95.97.166.50
ISP: UPC NL
Host Name: 095-097-166-050.static.chello.nl
Organization: UPC NL
Country: Eindhoven,06 Noord-Brabant, Netherlands
---------------------
Received: from fep12.mx.upcmail.net (… Read Full Report ⇒ |
| Anonymous Brighton, Brighton and Hove, United Kingdom 2013-01-23 12:21:12 Identity Theft | Co-operative Bank Scam: Subject: Account Suspended Scammer Information Co-operative Bank scam email with link to phishing site paranaibaweb.com. (DO Not click on any link or enter confidential info!)
Sender:)
id 1Txvjk-0000Dv-KB
---------
Received: from linux7.web4world.com ([199.38.113.107]) by BAY0-MC2-F24.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Wed, 23 Jan 2013 00:31:12 -0800
Received: from nobody by linux7.web4world.com with local (Exim 4.80)
(envelope-from … Read Full Report ⇒ |
| Marilyn Hunt Prenton, Wirral, United Kingdom 2013-01-23 09:37:11 Identity Theft | email telling us there is a parcel for us at the Fedex office that they could not deliver. Scammer Information email telling us that there is a parcel for us to collect from Fedex that they could not deliver. I see from you site here, that it is identical to the other quoted scams. this has helped me a lot.… Read Full Report ⇒ |
| Jenna Gilbert, AZ, United States 2013-01-22 15:24:24 Identity Theft | Priority Mail Service <user-ta@reno.com> Scammer Information
Fed Ex
Order: SGH-8100-71128836
Order Date: Thursday, 17 January 2013, 11:10 AM
Dear Customer,
Your parcel has arrived at the post office at January 18.Our courier was unable to deliver the parcel to you.
To receive your parcel, please, go to the nearest office and show this receipt.
GET & PRINT RECEIPT
Best Regards, The FedEx Team.… Read Full Report ⇒ |
| Anonymous Brighton, Brighton and Hove, United Kingdom 2013-01-18 10:42:11 Identity Theft | SourceIP: 95.97.166.50 ;From: "Santander Bank Plc"<security@santander.co.uk> ;Subject: Account Update Notification Scammer Information Santander phishing scam with phishing link to site,
http://mmw.pure.com.tr/js/index.php
(Do NOT click)
sent by user of IP 95.97.166.50 via server edge03.upcmail.net with edge
id pLXB1k00f15a5l303LXBJA .
----------------
IP: 95.97.166.50
ISP: UPC NL
Host Name: 095-097-166-050.static.chello.nl
Organization: UPC NL
Country: Eindhoven, 06 Noord-Brabant, Netherlands
------------------
Received: from fep12.mx.upcmail.net ([62.179.121.32]) by COL0-MC3-F6.Col0.hotmail.com w… Read Full Report ⇒ |
| Anonymous Brighton, Brighton and Hove, United Kingdom 2013-01-17 20:27:51 Identity Theft | From: "Haliofax Bank Plc"<security@halifax.co.uk> ; Subject: Your Debit Card Scammer Information Halifax Bank Scam email.
(NB: Constant attempted Cyber-crime emails in recent months from user(s) of hosts (static.chello.nl) operated by Netherlands ISP: UPC NL .
------ -------
Received: from fep19.mx.upcmail.net ([62.179.121.39]) by COL0-MC3-F2.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Thu, 17 Jan 2013 09:53:44 -0800
Received: from edge04.upcmail.net ([192.168.13.239]) by viefep19-int.chello.at (InterMail vM.8.01.05.05 201-2260-151-110-20120… Read Full Report ⇒ |
| Anonymous Brighton, Brighton and Hove, United Kingdom 2013-01-17 16:47:58 Identity Theft | Subject: You have 1 new Security Message Alert! From: Co-operative Bank <customerservice@co-operativebank.co.uk> Scammer Information Co-operative bank phishing scam.
Authentication-Results: hotmail.com; spf=none (sender IP is 174.133.228.90; identity alignment result is fail and alignment mode is relaxed) smtp.mailfrom=ptpturbo@youssef.theplanet.host; dkim=none (identity alignment result is pass and alignment mode is relaxed) header.d=co-operativebank.co.uk; x-hmca=none
X-SID-PRA: mailto:customerservice@co-operativebank.co.uk
******
Received: from youssef.theplanet.host ([174.133.228.90]) by COL0-MC1-F30.… Read Full Report ⇒ |
 | Anonymous Long Beach, CA, United States 2013-01-16 03:18:19 Identity Theft | Tracking Detail (U)EWT62 689 689 1328 1328 Scammer Information Fed Ex
Order: JN-4154-39349152
Order Date: Thursday, 3 January 2013, 11:23 AM
Dear Customer,
Your parcel has arrived at the post office at January 6.Our courier was unable to deliver the parcel to you.
To receive your parcel, please, go to the nearest office and show this receipt.
GET & PRINT RECEIPT
Best Regards, The FedEx Team.
I have never ordered a package within the past 30 days from anywhere. Nor shared my "email address" with FedEx. It wants me to click … Read Full Report ⇒ |
 | Anonymous II Salol, MN, United States 2013-01-14 05:32:35 Identity Theft | Fake delivery attempt notice Scammer Information Received delivery notice from Fedex, claiming a package could be picked up at the Post Office, click on the receipt below for a receipt. I suspect the click on file is an executable malware file..........
Fed Ex
Order: JN-9594-77590660
Order Date: Thursday, 3 January 2013, 11:23 AM
Dear Customer,
Your parcel has arrived at the post office at January 6.Our courier was unable to deliver the parcel to you.
To receive your parcel, please, go to the nearest office and sh… Read Full Report ⇒ |
 | Loretta Somewhere in United States 2013-01-12 04:09:10 Identity Theft | Tracking Number (B)SLN14 693 335 1197 7996 Scammer Information
Fed Ex
Order: JN-0953-84035124
Order Date: Thursday, 3 January 2013, 11:23 AM
Dear Customer,
Your parcel has arrived at the post office at January 6.Our courier was unable to deliver the parcel to you.
To receive your parcel, please, go to the nearest office and show this receipt.
GET & PRINT RECEIPT
Best Regards, The FedEx Team.
FedEx 1995-2012 … Read Full Report ⇒ |
| anonymous El Paso, TX, United States 2013-01-09 16:44:46 Identity Theft Other Classifieds Site | Priority Mail Postal Service Scammer Information IP look up came back as IP Address: 97.67.194.42
ISP: ITC Deltacom
Organization: Boxley Bolton Garber and Haywood LLP
Region: Raleigh (US)
(Body of email):
FedEx
Order: JN-1255-67986209
Order Date: Thursday, 3 January 2013, 11:23 AM
Dear Customer,
Your parcel has arrived at the post office at January 6.Our courier
was unable to deliver the parce(~)+l to you.
To receive your parcel, please, go to the nearest office and… Read Full Report ⇒ |
 | Kaye Findley Somewhere in United States 2013-01-08 09:15:35 Identity Theft | Norply@direct.nacha.org Scammer Information Herewith we are notifying you, that your most recent Direct Deposit via ACH payment (ID074176019812) was rejected, because your business software package was out of date. Please use the link below to enter the secure section of our web site and see the details::
Details
Please consult with your financial institution to get the updated version of the software.
Kind regards,
ACH Network Rules Department
NACHA | The Electronic Payments Association
15672 Sunrise Valley Drive… Read Full Report ⇒ |
 | Anonymous Avalon, NJ, United States 2013-01-06 21:03:06 Identity Theft | Untitled Identity Theft , ref:7218 Scammer Information Re: Tracking Detail (850)51-850-3211-3211
FedEx
Order: HJF-8879-39047716
Order Date: Thursday, 27 December 2012, 10:41 AM
Dear Customer,
Your parcel has arrived at the post office at December 31.Our courier was unable to deliver the parcel to you.
To receive your parcel, please, go to the nearest office and show this receipt.
DOWNLOAD POSTAL RECEIPT
Best Regards, The FedEx Team.
… Read Full Report ⇒ |