Job scam quick guide: it's a scam if...

  • they want you to collect and forward money in any way (a "money mule" job). You'll wind up engaged in money laundering, personally defrauded via expertly forged cheques, money orders, etc, or defrauding someone else who pays for goods that never arrive.
  • they want you to receive packages and reship them somewhere else. The goods will have been obtained fraudulently, and they're just using you to make the shipping address appear local. You will be aiding fraud.
  • they want up-front payment (either to them or someone else) of any sort for anything before you can get the job. This is advance fee fraud: there is no job -- it's just a big con to extract money from you.
  • they want you to buy any kind of "membership" or "kit" in order to start. Forget it -- it's not a real job at all: they're trying to sell you something, and they're probably making a bunch of other false claims about it if they're pitching it as a "job".
  • it's a job offer, and it's spam. There are LOTS of these scams about, as you can see.

Thursday, May 24, 2007

Genevafinance

Well this is brief and to the point. They do a bad job of impersonating careerbuilder.com, and suggest that Genevafinance INC is interested in your resume, so go to their site. The site is slick enough, and -- guess what -- they have lots of vacancies for regional representatives (better known as "money mules" 'round these parts). Same old same old, really.

Domain Name:                                 GENEVAFINANCE.BIZ <-- scam
Domain ID:                                   D17706675-BIZ
Sponsoring Registrar:                        SCHLUND + PARTNER AG
Sponsoring Registrar IANA ID:                83
Registrant ID:                               SPAG-36008164
Registrant Email:                            john.albert55@yahoo.com
Name Server:                                 NS57.1AND1.COM
Name Server:                                 NS58.1AND1.COM
Created by Registrar:                        SCHLUND + PARTNER AG
Domain Registration Date:                    Thu May 03 03:23:10 GMT 2007 <-- recent
Domain Expiration Date:                      Fri May 02 23:59:59 GMT 2008

---------- Forwarded message ----------
From: amit_sigal[@]yahoo.com <amit_sigal[@]yahoo.com>
Date: 24-May-2007 19:20
Subject: Interest. CareerBuilder.
To: ideceive@gmail.com

Hello dear Jobseeker,



Genevafinance INC is interested in your resume. To learn more about this opportunity please visit www.genevafinance.biz . Available positions are posted in the Employment section.



genevafinance.biz



Tim Johnson

Careerbuilder Support Team

Amato Logistics Co

Scammers using random business name "Amato Logistics Co. Ltd" and freemail contact addresses seek suckers to perform money mule and reshipper duties on a short term basis until apprehended. This looks similar to many other scams, but not so similar to any of them in particular that I can draw a common thread between them.

---------- Forwarded message ----------
From: [redacted]
Date: 24-May-2007 20:12
Subject: We proudly present a chance for you!
To: [redacted]





Greetings.
Would you be interested in a home job that allows you to earn up to $10000 per month? No start up fees, no "envelope stuffing" nonsense.

We proudly present Amato Logistics Co. Ltd.

The job we offer will not affect your present career, it will only take a small part of your time.
The only things you need to have to start running your business with our company are reliable Internet/E-mail access and checking/savings bank account.
And of course your decency and willingness to earn.

The first vacancy is Transfer manager:
The nature of the job is payment processing.
It is related to online banking operating the funds from either our company or our partners to designated bank account approved by our
manager keeping specified money transaction fee as a commission for your services (usually between $150 to $500, no less than $150 per transfer).

You will receive the funds which our customers/resellers send directly to you and forward it to us or our agents (less your commission)via one of chosen money transfer agencies.
The job is rather simple and you won't need any special knowledge to become our partner, though we do require that you are able to act on a very short notice.
We can afford to pay such a decent commission only because we keep our customers happy with our promptness.

And the second is Shipment manager.
The job we offer is related to mail. It is an easy part time job that doesn't require leaving your main occupation.
You will be receiving mail and packages for our clients, either repack them or ship them further out following our manager's instructions.


For those who look for career opportunities it's a chance of becoming a part of our team in the future (based on your performance),
team in which you will be highly respected and decently rewarded - just think about this! We will be hoping to hear from you soon. ylbiz@businessmail.hk


If you would like to get our application form please email us with your request. No fees are asked, just leave your contact details: "random e-mail"

Write us to: ylbiz@businessmail.hk

We would appreciate your continued patronage and get in touch with you soon. Thank you!

FlyHorse

This scam is very short on details, but the paragraph I've highlighted has also appeared in the SDF Motors scam (which was similarly short on details). If anyone has been tricked into working for these scammers, please spill the beans on the details. I surmise from their website (which is very slick, by the way) that it is a money mule job, under the usual guise of handling "customer payments".

   Domain Name: FLYHORSETRAVEL.COM <-- scam
   Registrar: SCHLUND+PARTNER AG
   Whois Server: whois.schlund.info
   Referral URL: http://registrar.schlund.info
   Name Server: NS57.1AND1.COM
   Name Server: NS58.1AND1.COM
   Updated Date: 30-apr-2007
   Creation Date: 30-apr-2007 <-- recent
   Expiration Date: 30-apr-2008
registrant-email:                miroreti@yahoo.com

---------- Forwarded message ----------
From: Todd Robbins [redacted]
Date: 24-May-2007 09:14
Subject: Respone to your resume
To: [redacted]

VACANCY ANNOUNCEMENT


Dear ladies and gentlemen,

The "FlyHorse" Company is working in business tourism sphere for more than 13 years and is among leaders of the MICE market in USA, Europe and CIS. It is positioned as Destination Travel Management Company (DTMC) and Professional Conference Organizer (PCO).

We are happy to offer you the vacant position of "Customer oriented account manager".

Type of job: Distance work

The mentioned employee will have to fulfill the following duties:

-       Contacting our clients via email or phone.
-       Processing of correspondence
-       Follow all instructions(indications) of the company
-       To monitor payments for hotels and other prepaid services
-       Give the report to the company about all work tasks

Desired Knowledge, Skills, and Abilities:

-     Interpersonal skills
-     Accuracy
-     Response to orders ("can do" spirit)
-     Skills for Internet surfing, e-mail usage and cooperation with postal companies

You will mainly conduct negotiations by means of e-mail and phone. Our company will reimburse the cost of international long distance calls and Internet access costs.

If interested, please send a letter of application along with a resume of experience and accomplishments. Include the name, address, phone number, and e-mail address of four people whom we can contact as references.

Candidates without previous experience are also welcomed.
You may also keep working in your main office.

Please, e-mail your CV to  hr_manager@flyhorsetravel.com

To find more about our company and present vacancies and our partners, please visit our web-site http://www.flyhorsetravel.com

Simple  resume: http://flyhorsetravel.com/simple_resume.doc

Yours faithfully
Todd Robbins
The Head of personnel department
FlyHorse Travel

Wednesday, May 23, 2007

ArtSolution

The text of this spam has been appearing in ads from phishing gangs seeking money mules for some time, usually under the name "I-Soldit" -- but such names are usually abandoned when they get a bad enough reputation. See in particular this case, dating back to August 2006. Now that they are targeting the USA, they may have changed their game slightly, since forged cheques are a major exploitable weakness in the USA.

---------- Forwarded message ----------
From: ArtSolution '07 id-192 <fedemur[@]e-kalmar.hu>
Date: 23-May-2007 18:07
Subject: Make money with your bank account.        REF: 2786
To: ideceive@gmail.com

 
We are happy to present you our new project.
 
Today our Internet auction bidding firm has finally begun successful collaboration with american bank authorities.
 
Our Online auction bidding system is secured with many american major financial organizations and this is why we as the official affiliate are proud to guarantee safety and security of every On-line auction transaction our firm processes in USA.
 
 
Existing Positions:
 
Client Support Assistant: 8 hours per day. 2600$ per month.
Requirements: car, PC, cell and home phones, Internet access.
Assist customers from your region with full time email and personal support.
 
 
Regional Assistant: part-time 2-4 hours per day. From 3300$ per month + weekly bonuses for successful completion of daily assignments with no delays.
Requirements: Internet access and be able to check your email several times a day, cell and home/work phones, personal/business checking bank account(s).
Age limit - from 18 y.o.
Be able to contact our managers and customers both with your cell phone and the email.
Assist customers from your region with funds processing from the initial bidder to the seller itself. Checking bank account is obligatory.
Become the initial third party between the seller and the bidder from USA region.
 
Transport Manager: 6-10 hours per day. 2300$ per month.
Requirements: car, PC, cell and home phones. Punctuality and responsibility.
 
 
Benefits:
 
1. Become our initial representative and a middleman between the seller and the buyer from your region
 
2. Gain authority with people from all parts of the world who really rely on your service
 
3. Possible career growth
 
4. Work efficiently with no holds and delays and get weekly bonuses besides monthly salary for outstanding performance of your duties.
 
 
For immediate and confidential consideration, please email the following APPLICATION FORM to HR Office
 
APPLICATION FORM:
1. Your full name:
2. Your country:
3. Your full address:
4. Your mobile contact phone:
5. Your fixed/home contact phone:
6. Your work contact phone (*):
7. Your contact e-mail(s):
8. Are you ready to begin working with our company? (must be 'Yes')
9. Are you ready to receive money payments to your bank account? (must be 'Yes')
 
 
Sincerely Yours,
Mark Huettman
Staff Manager

AlphaMarkets Ltd

This is the SaxoForex/UKFX scam under a new name, or so I surmise by the common text in the spam. Evidence so far suggests that this scam involves receiving money directly transferred from phishing victims, and forwarding the proceeds to the scammers via Western Union. This is illegal, and their cover stories about legal money transfers are exactly that: cover stories.

The following list of involved domain names is probably not comprehensive.

Domain ID:D146268911-LROR
Domain Name:OPEN-MARKETS.ORG <-- scam
Created On:17-May-2007 10:54:17 UTC <-- new
Last Updated On:17-May-2007 11:00:41 UTC
Expiration Date:17-May-2008 10:54:17 UTC
Sponsoring Registrar:Directi Internet Solutions d/b/a PublicDomainRegistry.Com (R27-LROR)
Registrant ID:PP-SP-001
Registrant Name:Domain Admin
Registrant Organization:Privacyprotect.org
Name Server: NS1.WSHOST.ORG
Name Server:NS2.WSHOST.ORG

Domain ID:D17867102-LRMS
Domain Name:OPEN-MARKETS.INFO <-- scam
Created On:17-May-2007 10:54:17 UTC <-- new
Last Updated On:17-May-2007 10:54:19 UTC
Expiration Date:17-May-2008 10:54:17 UTC
Sponsoring Registrar:Direct Information Pvt. Ltd. d/b/a PublicDomainRegistry.com (R159-LRMS)
Registrant ID:PP-SP-001
Registrant Name:Domain Admin
Registrant Organization:Privacyprotect.org
Name Server:NS1.WSHOST.ORG
Name Server:NS2.WSHOST.ORG

---------- Forwarded message ----------
From: noreply[@]site.careerbuilder.com <noreply[@]site.careerbuilder.com>
Reply-to:
vacancy@open-markets.info
Date: 23-May-2007 18:06
Subject: CareerBuilder.com Job Matches: An excellent oportunity to start a career.
To: ideceive@gmail.com

Alpha Markets Ltd.
10 Wellington Street.
BD7, Bradford, United Kingdom.
Tel/Fax: ++44 7092892742  (Our office hours are 9am - 5pm)

Our HR department has recently reviewed your info and forwarded it to me. I'd like to introduce you to Alpha Markets and it's open positions.

AlphaMarkets Ltd. customer service department is currently offering employment for 11 United States residents and 4 UK residents in order to provide it's new branch with qualified personnel.
*17/05/2007* We have already accepted several suitable resumes and hired 5 persons. Thus, only 10 vacancies are left.
The private client support desk is responsible for following up client enquiries, helping the clients to understand how AlphaMarkets can save them money on foreign currency transactions, and developing new business through referrals.
If you're a customer service fanatic, and enjoy working in a challenging and rewarding environment, please see below for our current list of opportunities.

Position: Customer service officer.
Salary:  Starting salary is $2500 - $4500 per month, which will be paid to you in accordance with our standard payroll procedures.
In addition, you will be eligible for monthly and annual bonuses.
Relevant work experience: Will be an advantage.
Location: USA (all states)
Education level: College degree is an advantage.
Insurance: 1 month after you begin work, you will be covered under our group health insurance policy, unless you advise us that you do not desire such coverage.
Please forward your full resume, contact information and questions to HR dept. e-mail: vacancy@open-markets.org
You will be contacted within 1-2 business days.

Should you have any questions regarding this letter, our offer of employment or anything else, please write me an e-mail.
We are excited to have you join our organization and look forward to working with you.

IMPORTANT NOTE: AlphaMarkets Ltd. does no CHEQUES CLEARING, ISSUES or PROCESSING.

Best regards,
Andrea Jacobson
Employment Manager
AlphaMarkets Ltd.

Monday, May 21, 2007

SDF Motors

This offer is short on details, but it's fairly clearly a money mule scam.

Domain Name: SDFMOTORS.HK <-- scam
Email: Jim-Connell111@hotmail.com
Domain Name Commencement Date: 31-03-2007 <-- recent
Expiry Date:  31-03-2008
Name of Registrar: HKDNR
Account Name: HK1858489T
Name Servers Information:
NS1.SDFMOTORS.HK
NS2.SDFMOTORS.HK

---------- Forwarded message ----------
From: ccmail[@]bellsouth.net <ccmail[@]bellsouth.net>
Reply-to:
tareg_ms@yahoo.com
Date: 21-May-2007 16:58
Subject: Great summer opportunity
To: ideceive@gmail.com

Dear ladies and gentlemen,

Our company - SDF MOTORS  is engaged in sales of second-hand (used) cars of highest quality from USA and Europe. The company is officially registered at the best auctions of America and Europe. Besides that, we can provide the wide assortment of business services, such as logistics and assistance in legally accurate filling in of the documents for import and export of cargo. Please, find more details at the website of our company http://www.sdfmotors.hk/ in section  About .

Due to the necessity for expansion of our company s operations both in American branch and in European offices we have announced an additional vacancies for new employees. We are happy to offer you the vacant position of  Field Sales Executive . You can earn up to solid 3,000$ per month, while you'll have to spend approximately 2 to 4 hours per day for productive work.
To find out more about our company, please, visit our official website http://www.sdfmotors.hk and register, our managers will contact you as soon as possible.


The mentioned employee will have to fulfill the following duties: processing of orders and instructions issued by the company; search for the necessary data in your Region (search for a certain make of a car and/or spare parts); interaction with postal services in your Region; approval and monitoring of fulfillment of our agreements with certain partner companies  on site  and processing of correspondence.

You will mainly conduct negotiations by means of e-mail and phone. Our company will reimburse the cost of international long distance calls and Internet access costs.

You will work at home at the initial stage. You will not have to spend too much time for this job. 2 or 4 hours a day will suffice, excluding particularly important days when the situation demands your personal presence (negotiation of an important and big scale deal with a supplier in your Region).

Later on, we will detect several regions where we will set-up real functional offices. We d like to note that the mostly successful regional employees will be offered positions of directors of the new offices.

You do not need any previous experience in this sphere, because we will provide you with the most detailed instructions for customer support provision and conduction of negotiations with the organizers. Besides that, we will assist you and consult at every stage of negotiations.

Sincerely Yours,

John Tronhill

* HR Manager

Tech World

Another spammy job offer with no details worth mentioning. The only real contact point is a Yahoo! freemail address. Presumably this is just another money mule scam, although it could conceivably be a reshipper scam.

---------- Forwarded message ----------
From: fchedid[@]ndu.edu.lb <fchedid[@]ndu.edu.lb>
Reply-to:
hutch_era[@]hotmail.com
Date: 21-May-2007 07:42
Subject: New Job offer
To: ideceive@gmail.com

Dear Sir / Madam, thank you for your attention!

Our company is expanding on-line shop. We are official partner of such companies as Toshiba, Apple, Samsung. A huge number of customers all over the world have already discovered the indubitable advantages of Internet shopping.

We are sure that the number of active Web buyers will only keep on growing. At the moment we are starting to collaborate with various American companies which is, in addition to the growing number of clients in the USA, the reason why we open several job positions in our e-shop

We would like to offer you an part time job. It guarantees the additional supplement to your family budget. You don t have to invest your money into anything in order to get started.
You will not spend money, you will earn them with "Tech World".

Send us a reply if you would like to get more information: techworldbranch@yahoo.co.uk

Best regards.

KATLENCO ENTERPRISES, INC

There is a real business called "Katlenco Enterprises" at katlenco.com. This, on the other hand, is just some scammer using the name at random in association with an AOL email address. Although the "job offer" is ludicrously lacking in detail as to the actual job, the mention of "check or direct deposit" suggests it's the usual money mule scam.

---------- Forwarded message ----------
From: mark.delozier[@]atco.com <mark.delozier[@]atco.com>
Reply-to:
iris[@]mis.hevra.haifa.ac.il
Date: 21-May-2007 06:00
Subject: Career solution, write us today!
To: ideceive@gmail.com

KATLENCO ENTERPRISES, INC



JOB OFFER



KATLENCO ENTERPRISES, INC , Inc. is pleased to offer you a job as a client service  manager. We trust that your knowledge, skills and experience will be among our most  valuable assets.

Demands:

* 20 years and older

* USA location

* basic education

* 3 hours per day - worktime

* Internet, cell phone



Should you accept this job offer, per company policy you'll be eligible to receive the  following beginning on your hire date.



    * Salary: Annual gross starting salary of $103,500, paid in weekly installments by  your choice of check or direct deposit

    * Performance Bonuses: Training courses, Up to 8% percent of your processed orders.

    * Benefits: Standard, Acme-provided benefits for salaried-exempt employees,  including the following

          o 401(k) retirement account

          o Annual stock options

          o Sick leave

          o Vacation and personal days



To accept this job offer send us your name, address, phone number, CV and profile, we  will contact you during 24 hours.

Write according this address: KATLENCO@aol.com



Regards Andrew Walgate, CEO, KATLENCO ENTERPRISES, INC.

Thursday, May 17, 2007

North Atlantic Trade Company

Based on descriptions given on the website, the actual job duties offered by this organisation involve reshipping electronic goods. Contrast this with the description given in the spam itself, which makes no sense at all. This is not a company: it's a front for organised crime, and the goods received and reshipped are obtained fraudulently. You are likely to be charged with criminal offences if you participate in fraud of this kind.

Domain Name:                                 BIGREVIEW.BIZ <-- scam
Domain ID:                                   D17478471-BIZ
Sponsoring Registrar:                        GO DADDY SOFTWARE, INC.
Sponsoring Registrar IANA ID:                146
Registrant ID:                               GODA-030546054
Registrant Email:                            embesman@yahoo.com
Name Server:                                 NS47.DOMAINCONTROL.COM
Name Server:                                 NS48.DOMAINCONTROL.COM
Created by Registrar:                        GO DADDY SOFTWARE, INC.
Last Updated by Registrar:                   GO DADDY SOFTWARE, INC.
Domain Registration Date:                    Sat Apr 21 17:09:59 GMT 2007 <-- new
Domain Expiration Date:                      Mon Apr 20 23:59:59 GMT 2009
Domain Last Updated Date:                    Sat Apr 21 17:10:02 GMT 2007

   Domain Name: N-A-T-C.COM <-- same scam
   Registrar: ESTDOMAINS, INC.
   Whois Server: whois.estdomains.com
   Referral URL: http://www.estdomains.com
   Name Server: NS1.ART-HOST.ORG
   Name Server: NS2.ART-HOST.ORG
   Updated Date: 26-mar-2007
   Creation Date: 24-jan-2007 <-- recent
   Expiration Date: 24-jan-2008

---------- Forwarded message ----------
From: no_reply[@]careerbuilder.com <no_reply[@]careerbuilder.com>
Date: 17-May-2007 23:17
Subject: Vacancy: Inner Sales Manager
To: ideceive@gmail.com

Company Name
 
North Atlantic Trade Company
 
E-mail
 
 
Company site
 
 
Contact Person
 
HR manager
 
Job title
 
Inner Sales Supervisor


 

Job description
 
North Atlantic Trade Company announces a vacancy on the position of Sales Supervisor.
 
 
Requirements:
Being trained in sales area is preferable.
Knowledge of PC (Word, Excel, PowerPoint, mail programs, Internet).
Personal car.
 
Personal qualities:

Good communication skills
Managerial skills
Ability to interact with people easily

Duties:
1. Providing high level of distribution inside the company
2. Fulfilling the volume plan.
3. Supporting topicality of the database.

 
 
Payment
 
$50-$100 per week
 
Deadline
 
May 1 2007
 
Registration
 


 

Wednesday, May 16, 2007

Financial Alliance

A very boring company name and a website that was born yesterday trying to look like a serious institution. Just another boring scam.

Domain ID:D146157621-LROR
Domain Name:FALLIANCE.ORG <-- scam
Created On:15-May-2007 19:18:12 UTC <-- fresh!
Last Updated On:15-May-2007 23:07:19 UTC
Expiration Date:15-May-2008 19:18:12 UTC
Sponsoring Registrar:OnlineNIC Inc. (R64-LROR)
Registrant ID:ONLC-2716763-4
Registrant Email:info@falliance.org
Name Server: NS1.OURHOSTING.CN
Name Server:NS2.OURHOSTING.CN

---------- Forwarded message ----------
From: no_reply[@]careerbuilder.com <no_reply[@]careerbuilder.com>
Date: 17-May-2007 03:28
Subject: Career Opportunity at Financial Alliance
To: ideceive@gmail.com

Good day,



We have found your resume on careerbuilder.com. And we wish to offer you work.

Financial   Alliance  Company, one of the fastest growing financial group

in USA. With over six years of specialized experience has openings for

courier place.

Company was established in 2000 year, currently is based in USA and

provides mergers and acquisitions consultation and policy consulting

for all clients across the entire range of wealth management and

financial services businesses worldwide.

We are seeking individuals who are interested in building a profitable

and rewarding business with our help and support, while achieving a

balanced lifestyle that offers both personal and professional growth.

This job, if approached correctly is an opportunity for almost

unlimited income potential, and very fast-growing career.

And the Job itself is not that hard one may think, on a contrary it as

easy as one-two-three, as we already have mentioned our company works

with the clients worldwide, many of them deposited their money in our

dividends and we are paying them every month, the point is that there

are too many clients (more then 5,000) and our managers can not do

all job that is why we are hiring the courier as indeed one of the

main parts of the company work-chain, and the courier will have

responsibility for receiving company funds and dividends and sending

them to the company clients and will receive payments from every

transfer they did . The Financial   Alliance is growing and we again

need an open-minded people with the ambition to become successful and richer

indeed.



You can read more here:

http://falliance.org

And register here:

http://falliance.org/contacts/information.php





Best regards,

Richard Fougley

Chief manager of Financial  Alliance Company

US Finance Group


This is a money mule scam with no distinctive or interesting features. It's very much like many other such scams, but is not obviously linked to any of the others I've documented, specifically. The website has one amusingly bad piece of forgery that I noticed: an award certificate supposedly for the year 2005, but with a signature that's dated 2002.

   Domain Name: US-FINANCE-GROUP.COM <-- scam
   Registrar: WILD WEST DOMAINS, INC.
   Whois Server: whois.wildwestdomains.com
   Referral URL: http://www.wildwestdomains.com
   Name Server: NS1.AGAVA.NET.RU
   Name Server: NS2.AGAVA.NET.RU
   Updated Date: 20-mar-2007
   Creation Date: 20-mar-2007 <-- recent
   Expiration Date: 20-mar-2008

---------- Forwarded message ----------
From: no_reply[@]careerbuilder.com <no_reply[@]careerbuilder.com>
Date: 16-May-2007 10:32
Subject: Job Work at Home
To: ideceive@gmail.com

JobSeeker !

US Finance Group, a premier wealth advisory firm, seeks a Financial Manager/Assistant Financial Manager. Recently ranked by Bloomberg Wealth Manager as one of the top wealth management firms in the country, US Finance Group is a dynamic and growing wealth advisory firm in Boulder dedicated to giving talented and motivated people the chance to do the best work of their lives. We specialize in serving successful entrepreneurs and business leaders and have a select group of clients nationwide. Our culture is one of opportunity. We offer highly competitive salaries, excellent benefits and a chance to be part of a driven, passionate and successful team.

We are looking for a Financial Manager/Assistant Financial Manager who will support client advisors and be responsible for research, analysis and reporting, assisting with client report preparation, client portfolio analysis and more.

This vacancy is suitable for persons who is willing to earn additional salary out of office.You may be working at home by using your PC.
Become acquainted attentively with the demands which are presented on our website.

Requirements to candidates :

1 - the age is more than 25 years old!
2 - availability of PC & Internet !
3 - begining practice in Word & Exel !
4 - the phone number by which you are available during the day !
5 - daily availability of Internet for checking of e-mail messages sent by your manager!

In connection with our company service promotion we declare the next vacancies:

1) Financial Manager.

- Please visit our site : www.us-finance-group.com
- Read operating conditions in section : For Employees
- Further follow instructions.

Sincerely yours,
Michael Berry

U.F.I.S. PE

I recognised this scam the moment it arrived, but I didn't realise how old it is: over a year! The last time I mentioned UFIS, the "Suckers Wanted" blog hadn't been started yet. It's just another elaborate lie to cover the basic money mule scam.

---------- Forwarded message ----------
From: [redacted]
Date: 15-May-2007 23:40
Subject: Job U.F.I.S. PE
To: [redacted]



Hello. My name is Dmitry Sergeev and I am the manager of a Human Recourses departament of U.F.I.S. PE (Ukrainian Folk Instruments Sales).
The purpose of this message is to draw Your attention to a vacant position of a financial manager.
About us:
We are a Ukrainian company producing specialised hand made Ukrainian folk instruments, such as Trembita, Bandura, Tsymbaly.
We have been producing exclusive instruments for collectors from all around the world, for over 15 years now. Some of our clients prefer to receive an instrument with gold strings or inlaid with diamonds and rubies and we take the highest pride in our workmanship.

Now we are a company with 15 years experience. During this time more than 15000 people have purchased high-end items from us.

Now we have started our activity in the territory of the Australia and we need to employ people who will work as our representative in the Australia. Any interested person can become our manager.

Our vacancy is opened for you if you are:
- Age: from 18 till 70 years
- Located in the territory of the AU.
- Have a skill to communicate and access to the Internet.
- Able to check your e-mail several times a day

Job Description:

Obligation of the manager is to work with the payments of our clients in Australia with daily inspection. It means that you are authorized person to receive payments from our clients in Australia to your bank account and transfer them to us in the fastest way (Western Union or Money Gramm).

Why do we need you:
It takes more then two weeks for Australia bank to transfer money here because our bank system is not perfect. That is why we are ready to pay you 5% to receive money the same day.

You will earn from $2000 up to $7000 AUD dollars per month, working only some hours per day.You can work part time or full time. Any person located in the AU can become our employee.

If you are interested in our offer send us your application and resume by e-mail to: sevcomp@gawab.com

Best regards.

Tuesday, May 15, 2007

Patar White

This "Patar White" sounds suspiciously similar to Ms James Allen and Mr Larry Potterss, both of whom were check forgers seeking money mules to defraud.

---------- Forwarded message ----------
From: PATAR WHITE < patarwhite_12@yahoo.com>
Date: 16-May-2007 04:37
Subject: JOB OFFER.................
To: [redacted]

 
CEDJONES INTL ART WORLD
UNIT 11, FEATHER STONE
INDUSTRIAL ESTATE
15 DOMINION ROAD
SOUTHHALL , MIDDLESEX
UB2 5DP
TEL+4407024021583
EMAIL :patarwhite_12@yahoo.com
 
Hello,
          My name is patarwhite and I am an artist.I saw  your profile on the  websites andfelt you could do apart time job for us . I live in United  Kingdom, with my two kids, four cats, one dog and the love of my life. It is  definitely a full house. I have been doing artwork since I was a small  child. That gives me about 23 years of experience. I majored in art in high  school and took a few college art courses. Most of my work is done in either  pencil or airbrush mixed with color pencils. I have recently added designing  and creating artwork on the computer. I have been selling my art works for  the last 3 years and have had a lot of my works featured on trading cards,  prints and in magazines.
     I have sold in galleries and to private collectors from all over the  world and i get paid without hassles. I am always facing serious  difficulties when it comes to selling my art works to Americans,owing to the  fact that they mostly offer to pay with a US POSTAL MONEY ORDER, which is  difficult for me to cash here in The United Kingdom.
 And also the cost of  coming to the state and getting payments is very expensive,though i am  currently working on setting up a branch in the States.
 
   In view of the above i am in urgent need of a representative in the united  states who will be handling the payment aspect,by recieving my payments on  my behalf from my American clients .It is as a result of the above that we  came up with the idea of looking for a responsible and competent person(s)  who will be of assistance to me in this area,whom i can entrust my payments  upon and who will cash them immediately he/she recieves them and forward the  Money to me here in the U.K via Moneygram Or Western Union International  Money Transfer.
 
         What i need from you is just to recieve the payments and take them to your local bank or check cashing facility and cash them immediately  and deduct your own commission. I are prepared to offer a commission of 10%  to you persons on any payments recieved and cashed,and i shall increase the  commission from time to time based on your competence and efficiency.
 
     This does not stop you from doing your normal job,it's just for you to  take deliveries of payments and cash them and transfer the money to me here  in the U.K via Moneygram Or Western Union International Money Transfer. May  i not fail to inform you that you have to assure me  that any payments  you  recieve will be instantly cashed and transfered immediately,as i are just  starting this set up and i would not like a situation where people will make away ou squander my hard earned money,so please asure me that all will be well in this business arrangement.
 
 What the job entails is for you to:
 
(A) Receive Payments on our Behalf from out American Debtors;such payments shall come in the form of Official Checks,Cashiers Checks ,Postal  Money Orders and Bank drafts,all of which shall be issued in the USA.
(B) Cash such payments
(C) Transfer the monies via Moneygram Or Western Union International Money  Transfer.
 
    It wouldn't cost you any amount, You are to receive payments which will  be sent to you by fedex or usps courier service from my debtors, which would  come in form of a United States Postal Money Order then you are to cash it  deduct your own 10% commission and send the balance to me via western union  money transfer or , all transfer fees should be deducted from the money.
 On acceptance of this offer please get back to me with the following:
 
 (A) Your FULL NAMES
 (B ) YOUR AGE
 (C) ADDRESS DETAILS,PLEASE NO P.O BOXES
 (D) HOME AND WORK PHONE NUMBERS (INCLUDING CELL
 PHONE NUMBER)
 (E) AGREEMENT AND ACCEPTANCE OF THIS REQUEST.
 
    Once I get these details I will forward them from time to time to my  clients who will then issue out the payments in your favour and send it to  you for cashing.
 
   This is a completely legal thing in as much as you prove your honesty by  acting to instructions,people have made away with my money in the past and  i am trying to be carfeful this time around.
 
    You can cash the check wherever you choose,i know they charge commission  at the cashing facilities,it's okay if you go cash them there.
   Please get back to me immediately as i have a lot of  payments to recieve  and as soon as you send me your home address details i will instruct that my  debtors start issuing out the payments to you.
 
patar
white
 


Be a better Heartthrob. Get better relationship answers from someone who knows.
Yahoo! Answers - Check it out.

Yiwu Menglei Import & Export (not)

Money mule scam with possible reshipping scam as well. This scam uses a different name but the same address as the Menglei Import & Export Co., Ltd. scam seen earlier. What does that tell you, boys and girls?

---------- Forwarded message ----------
From: Brad Smith < bradsmith010@yahoo.com>
Date: 16-May-2007 02:02
Subject: Get Back To Me Soonest!!!
To: ideceive@gmail.com

Reply-To:

MIME-Version: 1.0

Content-Type: text/plain

Content-Transfer-Encoding: 8bit

Message-Id: <20070515160234.DF1C410390F58@colo47.mia.colo-cation.com>
Date: Tue, 15 May 2007 12:02:34 -0400 (EDT)



132 Wuai Road,

Yiwu City,

Zhejiang Province. China





Dear Friend,

Compliments of the day, and my best wishes to you. I am Mr Brad

Smith, the Public Relations Officer (PRO.) of the above company. This

company is into the supply of Home Textiles, Toys and Stationery. This

company was established in 2006 under the Company and Allied Matters

with the

Corporate Affairs Commissions of China. Having gone through a

methodical search, I decided to contact you hoping that you will find

this

proposal interesting. we are interested in employing your services to

work

with us as a private payment agent that can help us establish a medium

of receiving payment for goods that was supplied to our customers in in

your location as,  the company is already experiencing difficulties in

receiving payments from them.



Most of our customers pay out in cheques and money orders and we do not

have an account in your

country that will clear this money. It is upon this note that we seek

your assistance to stand in as our representative in your country. It

is

important to let you know that, as our representative, you will receive

10% of whatever amount you clear for the company and the balance will

be for the company.



Please if you are interested to work with us in good faith and honesty,

Contact Mr. Scott Anderson the Chief Executive

Officer (CEO.) of this company whom is presently in the UK.Through this

email address: bradsmith010@yahoo.com, also send him the

informations

below for easy communication.

(1) Your full names...

(2) Age.............

(3) Sex.............

(4) Contact address...

(5) Country..........

(6) Phone number...........

(7) Fax number.............

(8) Company name and address if any..........



Endeavour to let him know that I directed you to him; Please let him

know your decision rather than keeping him waiting because I will

inform

him about my contacting you. The CEO. Will tell you more on receipt of

your response. If you are not interested, kindly pardon me for

contacting you. Thanks for your time and remain blessed.

Very Respectfully,

Brad Smith

PRO.Yiwu Menglei Import& Export

Co., Ltd.Goods for Import,

Freight Fwdg. Svcs

SaxoForex Ltd

This appears to be the UKFX scam again under a new name. Presents itself as being from careerbuilder.com , but isn't: the source IP was 209.62.14.18, which is allocated to a hosting service in Brazil. If anyone cares to talk to these scammers, I'd be interested in hearing more information about what they want you to do, since the spam itself gives away no details, and claims that there is no "cheques clearing, issues or processing" involved, and yet the job title is "account officer".

---------- Forwarded message ----------
From: noreply[@]site.careerbuilder.com <noreply[@]site.careerbuilder.com>
Date: 15-May-2007 16:50
Subject: CareerBuilder.com Job Matches: Start earning working on a flexiplace.
To: ideceive@gmail.com

SaxoForex Ltd.

7, High St, Ashford, Kent TN24 9TH

Tel/Fax: +44 7092892496 (Our office hours are 9am - 5pm)



Our HR department has recently reviewed your info and forwarded it to me. I'd like to introduce you to SaxoForex and it's open positions.



SaxoForex Ltd. customer service department is currently offering employment for 11 United States residents and 4 UK residents in order to provide it's new branch with qualified personnel.

*10/05/2007* We have already accepted several suitable resumes and hired 5 persons. Thus, only 10 vacancies are left.

The private client support desk is responsible for following up client enquiries, helping the clients to understand how SaxoForex can save them money on foreign currency transactions, and developing new business through referrals.

If you're a customer service fanatic, and enjoy working in a challenging and rewarding environment, please see below for our current list of opportunities.



Position: Account officer.

Salary: Starting salary is $2500 - $4500 per month, which will be paid to you in accordance with our standard payroll procedures.

In addition, you will be eligible for monthly and annual bonuses.

Relevant work experience: Will be an advantage.

Location: USA (all states)

Education level: College degree is an advantage.

Insurance: 1 month after you begin work, you will be covered under our group health insurance policy, unless you advise us that you do not desire such coverage.



Please forward your full resume, contact information and questions to HR dept. e-mail: staff@SaxoForex.org



You will be contacted within 1-2 business days.



Should you have any questions regarding this letter, our offer of employment or anything else, please write me an e-mail.

We are excited to have you join our organization and look forward to working with you.



IMPORTANT NOTE: SaxoForex does no CHEQUES CLEARING, ISSUES or PROCESSING.

IMPORTANT NOTE: We will never ask you for your credit card details.



Best regards,

Olivia Williams

Employment Manager

SaxoForex Ltd.

Monday, May 14, 2007

Animal Reserve (fake charity)

This is a money mule scam: the only thing that's different about it is the cover story. In this case, the scammers pretend to be a charitable organisation dedicated to saving pandas. Cute, cuddly pandas. Who could say no to that? Sorry, it's a pack of lies: do a little research and you'll find that none of the names they drop (like "WWF" and "Greenpeace") recognise their existence.

   Domain Name: ANIMALRESERVE.NET <-- scam
   Registrar: ONLINENIC, INC.
   Whois Server: whois.OnlineNIC.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.LUCKYFLINT.COM
   Name Server: NS2.LUCKYFLINT.COM
   Updated Date: 10-apr-2007
   Creation Date: 04-jan-2007 <-- not exactly new, but recent enough to be suspicious
   Expiration Date: 04-jan-2008

Domain ID:D137215819-LROR
Domain Name: ANIMAL-RESERVE.ORG <-- same scam
Created On:13-Jan-2007 13:32:14 UTC <-- same vintage
Last Updated On:15-Mar-2007 04:42:08 UTC
Expiration Date:13-Jan-2008 13:32:14 UTC
Sponsoring Registrar:EstDomains, Inc. (R1345-LROR)
Registrant ID:DI_5367900
Registrant Email:merleslie@yahoo.com
Name Server:NS1.DOCLOGS.BIZ
Name Server: NS2.DOCLOGS.BIZ

---------- Forwarded message ----------
From: 2bo9d7@hotmail.com <2bo9d7[@]hotmail.com>
Reply-to:
1203_1[@]msn.com
Date: 14-May-2007 13:10
Subject: free vacancy
To: ideceive@gmail.com

Everybody had ever thought of starting to work and to earn a lot of
money. But as often happens there is a lack of time and opportunity or
even the desire to sit in the office all the days. At first glance seems
that this is impossible!

But you haven's seen what we can offer yet.
-       free schedule of work
-       work almost at home
-       earnings about $2000 per month + bonuses!
-       friendly stuff
-       free training
-       and its not all yet:

The point is that our company is in close association with WWF, Green
peace and other unexplored wilderness life-saving organizations. Our
company attends to takings for the sake of PAND.
So you will also carry out an important function for the welfare of
your planet.

Join us, there are more the 200 people!
Join us and stand for you and your planet in good stead!
Join us and you won't regret!

All detailed information is at our site

http://animalreserve.net

Best regards,
animalreserve.net

Sunday, May 13, 2007

NuCardio Pharmaceuticals

This is an old money mule scam with a new name. Most recently it was known as ProActive Pharmaceuticals, and prior to that it was known as ProGenic and NuMark. Scammers change names when they figure the old name has developed too big a reputation as a scam.

   Domain Name: NU-CARDIO.NET <-- scam
   Registrar: THE REGISTRY AT INFO AVENUE D/B/A IA REGISTRY
   Whois Server: whois.iaregistry.com
   Referral URL: http://www.iaregistry.com
   Name Server: NS1.AH-NIGHT.COM
   Name Server: NS2.AH-NIGHT.COM
   Updated Date: 10-may-2007
   Creation Date: 10-may-2007 <-- new
   Expiration Date: 10-may-2008

Domain Name:                                 NUCARDIO.BIZ <-- scam
Domain ID:                                   D17968624-BIZ
Sponsoring Registrar:                        THE REGISTRY AT INFO AVENUE
Sponsoring Registrar IANA ID:                123
Registrant ID:                               DI_6393991
Registrant Email:                            thomaslovette8j@yahoo.com
Name Server:                                 NS1.AH-NIGHT.COM
Name Server:                                 NS2.AH-NIGHT.COM
Created by Registrar:                        THE REGISTRY AT INFO AVENUE
Last Updated by Registrar:                   THE REGISTRY AT INFO AVENUE
Domain Registration Date:                    Thu May 10 16:04:55 GMT 2007 <-- new
Domain Expiration Date:                      Fri May 09 23:59:59 GMT 2008
Domain Last Updated Date:                    Thu May 10 16:06:37 GMT 2007

Domain Name:                                 NU-CARDIO.BIZ <-- scam
Domain ID:                                   D17971345-BIZ
Sponsoring Registrar:                        THE REGISTRY AT INFO AVENUE
Sponsoring Registrar IANA ID:                123
Registrant ID:                               DI_6394478
Registrant Email:                            constancesmithhf@yahoo.com
Name Server:                                 NS1.AH-NIGHT.COM
Name Server:                                 NS2.AH-NIGHT.COM
Created by Registrar:                        THE REGISTRY AT INFO AVENUE
Last Updated by Registrar:                   THE REGISTRY AT INFO AVENUE
Domain Registration Date:                    Thu May 10 17:09:03 GMT 2007 <-- new
Domain Expiration Date:                      Fri May 09 23:59:59 GMT 2008
Domain Last Updated Date:                    Thu May 10 17:10:59 GMT 2007

Images have been removed from the spam sample below.

---------- Forwarded message ----------
From: human resources <[redacted]>
Date: 14-May-2007 03:28
Subject: Genuine JOB offer - [redacted]
To: [redacted]

NuCardio Pharmaceuticals Ltd. emerged in pharmacy and cardiology market in late 2002. Their inexpensive but advanced coronary stents made a revolution in cardiology, now these stents are main production and export product throughout the world. While operating more than three facilities in USA easily gained leadership in this field.

NuCardio have more than 200 Administrative Coordinators all over the world and more than 2,000 workers at four main factories.

NuCardio has now opened Regional Administrative Coordinator vacancies in Australia

Main duties are:
Coordinating internet sales projects.
Contacts with company's clients
Operating within prescribed budgets
Managing cash and balancing receipts

Wage Details: 52k AUD + benefits

Main requirements for the candidates are:

�  Effective interaction with customers;
�  Willingness to work at home;
�  The ability to operate with more than one task effectively, and have an adaptable, flexible, professional attitude;
�  Honesty, responsibility and promptness in operations;
�  The ability to create good administrative reporting;
�  The ability of stable communication with our company and on-time and detailed reporting;
�  Prior customer service experience is a good benefit but not a must ;
�  Effective dealing with tight deadlines and frequently changing priorities;
�  Must have good leadership skills and be ethical, polite, tactful;
�  No medical education is necessary

To the successful applicants we offer a position on a trial period (2 weeks starting from the beginning of work). This is the period when you will be trained. You will receive online support while working and being paid. The evaluation of employees on a trial period is usually done at least 3 days prior to the end of their trial period. During the trial period, the supervisor can recommend termination. At the end of the trial period, supervisor makes his final decision.

If you are interested in this vacancy and you feel, that your qualifications correspond to our requirements, please visit www.nu-cardio.net to fill in an application form.

Thank you for your interest to this job.
Sincerely,
NuCardio Pharmaceuticals Ltd.

 

Please do not reply to this email. This mailbox is not monitored and you will not receive a response.

DIGIFOX Corp

"Digifox Corp" appears to be a new name, not seen before. Other than
that, it's a pretty ordinary-looking money mule scam. There is some
sort of flash thing installed on the website, and I haven't bothered
to view it yet. The "from" address is probably irrelevant: the
"help@digifoxcorp.hk" address in the body appears to be the real deal.

Domain Name: DIGIFOXCORP.HK <-- scam
Email: digifoxincs@yahoo.com
Domain Name Commencement Date: 27-04-2007 <-- recent
Expiry Date: 27-04-2008
Name of Registrar: HKDNR
Account Name: HK1876585T
Name Servers Information:
NS1.ENTERKY.COM
NS2.ENTERKY.COM

---------- Forwarded message ----------
From: DIGIFOX Corp. <Dailey[@]grungecafe.com>
Date: 14-May-2007 06:11
Subject: Join our team and earn money!
To: [redacted]

Good afternoon,

Can we try and make you interested in a home based job that may pay
up to AUD2500-3500 per month? No envelope filling nonsense, no start
up charges, this is a straightforward offer.

You don.t have to give up your present career; it will only take a
small part of your time. All you need to have to start running your
business with our company are reliable E-mail access and a bank
account. And your willingness to earn, of course.

The job is transaction handling. You will receive the transfers our
customers/resellers send directly to you and forward it to us or our
agents via one of chosen money transfer agencies. The job is pretty
simple and you won't need any special knowledge to start, though we do
require that you are able to act on a very short notice. We only pay
such a decent commission because we keep our customers happy with our
swiftness.
And if you are looking for career there.s a chance of becoming a part
of our team in the future (based on your performance), team in which
you will be truly respected and honestly rewarded - just think about
this! We hope to hear from you soon.

Please email back help@digifoxcorp.hk and we will be glad to provide
more information.
Thank you!