Welcome to Keep Safe On The Net.
The place where Romance Scammers And Online Scams started – before we ventured onto YouTube.
Our YouTube videos are now added automatically to this blog.
If you’ve fallen for a scam and would like to tell your story anonymously, email help@keepsafeonthenet.co.uk
Ways To Support The Channel.
Tap on the “Thanks” button under a video
Buy Me A Cuppa here https://www.buymeacoffee.com/romancescammers
Buy one of Annie’s novels about romance scams:
Seraphina – https://www.amazon.com/dp/B09QQLKS35
Denise – https://www.amazon.com/Denise-Morell-Investigates-Investigates-Romance-ebook/dp/B09VCWLQL3/
Scam Clothing Ads On Facebook And Social Media
Scam Clothing Ads On Facebook, Instagram, Twitter
More Fake Clothing Websites
The ads for cheap or fake or copied or scam clothing keep appearing on social media. Every day there seems to be a new crop of sites, all using the same stolen photos and all selling apparently luxury items and remarkably low prices.
This video was made after an unhappy customer contacted Keep Safe On The Net via our Facebook page.
All the cheap sites shown in this video us photos stolen from the websites of luxury clothing businesses.
If you have been taken in by one of these cheap sites, and would like to share your experience and photos of the goods you received, please email help@keepsafeonthenet.co.uk or leave a comment below. As an Amazon Associate I earn from qualifying purchases.
Fake Domain Name Renewal Notice
Fake domain name renewal notice. I’ve received quite a few of these meaningless notices – all designed to fool you into thinking they are domain name renewal notices. They aren’t. If you or your business owns a domain name (for use with personalised email or a website) make sure you know who your domain name is registered with so you don’t get taken in by these meaningless notices – which are only designed to do one thing, take your money. As an Amazon Associate I earn from qualifying purchases.
Romance Scam Victims – Victims Tell Their Stories
All the romance scam stories in this video have been left as comments on the main Keep Safe On The Net blog over the years, or emailed to me. You can read them all here http://www.keepsafeonthenet.co.uk
If you’ve been the victim of a romance scammer, and you’d like to tell your own story anonymously, contact help@keepsafeonthenet.co.uk As an Amazon Associate I earn from qualifying purchases.
Romance Scammer – John Williams
Romance scammers have been a recurring theme since I started Keep Safe On The Net. They are the scourge of social media and dating website and prey on the vulnerable.
A common theme is claiming to be a serving soldier, posted in a war zone. They will claim their husband/wife has died or left them and they have young children. They will send you hunky/sexy photos stolen from the internet. They will lavish you with love and affection and claim they want to marry you.
Then they will start asking you for money – for visas, medical bills, internet access, postage for lavish gifts. Any excuse they can come up with.
NEVER send money to someone you have met online, ever. They prey on the vulnerable, which many people who have joined dating websites are. They are looking for love and affection – the very things these scammers will pretend to shower you with.
My latest YouTube video is about 2 of these scammers. You can watch it here:
Serving Soldier Romance Scam – A Tale Of Two Scammers
Many scammers contact potential victims claiming to be serving soldiers posted to locations in the Middle East. They always tell their victim that they love them, want to marry them, want to be with them. They will often claim to be divorced or widowed with young children. Sooner or later they will tell you they need money for visas, school fees, to send you gifts, to pay for their internet access – a whole range of reasons. Please don’t send them money.
In the video I talk about a YouTuber called Pleasant Green. You can access his channel here https://www.youtube.com/channel/UCAPrhJwVweWZA8GEPoClSdw As an Amazon Associate I earn from qualifying purchases.
Philip Bennet – Advanced Fee Scammer
Philip Bennet wants to send me $10.5m and all I have to do is pay a $95 to receive my fund. Unlikely? Sure is. A classic advance fee fraud. It’s hard to believe that people still get taken in by these, but they must do otherwise the scammers wouldn’t continue working the scam. So if you know anyone that is vulnerable please try to explain to them that these funds aren’t real. Once you’ve paid a fee, the scammer will keep harassing you for more money. As an Amazon Associate I earn from qualifying purchases.
Comfirm Unsubscribe
I’ve received several emails asking me to confirm my “unsubscribe”. Unsubscribe from what? What happens if you click on Unsubscribe? As an Amazon Associate I earn from qualifying purchases.
Whicefashion (dot) com
Whicefashion.com have been advertising a lot on Facebook recently. The photos they use show high quality looking clothing that they are selling at cheap prices. But the photos they are using have been stolen from other websites. In this video we take a look at where those photos have been stolen from. What will you receive if you order from these cheap companies? I’ll leave you to decide – or find out the hard way! As an Amazon Associate I earn from qualifying purchases.
You’re A Winner – Test And Keep An iPhone – Amazon Voucher
I receive loads of these emails telling me I can “test and keep an iPhone”, or “Amazon has a surprise”, or “Boots has a surprise”, or any one of several other organisations will let me test and keep their product. They are all fake. They will all ask for your credit card details and sign you up to a monthly subscription service without you even realising what you have signed up for. Be careful. As an Amazon Associate I earn from qualifying purchases.
Congratulations! you’ve won
This fake Lotto was sent to me by a reader, who told me :
“I am a 55y/o, widow from the Philippines, I write here to make you know that I’ve just recently received a letter from Mrs. Tina Brown as you can see and read her letter that I forwarded through e-mail. Hoping you can get rid of this kind of scam.”
Sadly, I can’t do anything to stop the scammers writing their emails. But I can help raise awareness so that, hopefully, fewer people get taken in by these scammers.
No organisation anywhere ever runs random email draws or lotteries. They are all scams. This scammer wants your money and will try to get you to send money to claim your non-existent win.
SWISS LOTTO NETHERLANDS,UK
FRANCOSTRAAT 40,
3067DV,LAIDEN.
NETHERLANDSCONGRATULATIONS!!!…..YOU HAVE WON 750,000.00 EUROS
Ref: OS/73058-0015/2
Batch: 293/34/3473
You have been awarded 750,000.00 EUROS in the SWISS-LOTTO Satellite Software email lottery in which e-mail addresses are picked randomly by Software
powered by the internet through the worldwide website.
Your email address was among those chosen this year for the SWISS-LOTTO Satellite lottery. And this promotional program is proudly sponsored by
the SWISS-LOTTO organization, Bill Gates Microsoft Inc.
To file for your claim, contact our Trustee Processing Agent. Contact him with your Ref and Batch numbers.Contact information
REV. JIM PEARSON
(revjimpearson@hotmail.com)
Yours Sincerely,
Mrs. Tina Brown,
Promo Coordinator,
Scam Facebook Clothing Ads
There seem to be a lot of scam clothing ads on Facebook – for shoes, boots, dresses, t-shirts, clothing of all kinds. How to tell a scam Facebook ad from a legitimate one? A friend was recently taken in by an ad on Facebook for cheap slippers. He never received anything. Then today I saw an ad for what appeared to be a very lovely tunic – but it was cheap and seemed too good to be true. So I did some research. As an Amazon Associate I earn from qualifying purchases.
Subject: Important Information
A friend just received this email:
She forwarded it to me and I did what I always tell people not to do – I clicked on the link.
This is where it took me:
A page pretending to be BT (British Telecom). Look at the web address in the address bar at the top of the screenshot – that isn’t the real BT website.
I clicked on the “update my payment option” link and was taken to:
Again – look at the web address at the top of the screenshot. That isn’t the BT website. Most of the links on this fake page don’t work. You are asked for your BT account log-in details.
I didn’t go any further as my friend’s email address was pre-filled and the fake form wouldn’t let me change it. However, my guess is that the next page will ask you to “confirm” your bank account or credit card information. In other words, the scammer wants to steal your financial information.
If you think you have accidentally given your BT account info to this scammer, log into your BT account and change your password.
If you think you have accidentally given your financial details to the scammer, contact your bank or credit card provider immediately.
It Is You In The Video?
It seems the account of one of my Facebook friends has been hacked. It has just sent me this message:
I realised instantly it wasn’t a genuine message, but clicked on the link to see where it took me. No – it wasn’t immediately “non family friendly”.
This is where it took me:
Look closely at this screenshot. The web address displayed at the top is https://dullunderstatedarraylist.flashwoops.repl.co/ Definitely NOT a real Facebook page.
Then look at what you are being asked to do – “verify” your account information – in other words you are being asked to give your Facebook account details to a hacker.
If you think you might have accidentally given your account details to a scammer/hacker – log into your account immediately and change the password.
Welcome to Keep Safe On The Net
Welcome to the keepsafeonthenet.co.uk YouTube channel. Subscribe to our channel – we aim to inform viewers in an entertaining way to help keep you safe from internet scammers and fakers. Most of whom are after your money, or want to infect your device with spyware or malware. As an Amazon Associate I earn from qualifying purchases.
Scam Online Claim Agents
While researching these scam online claim agents, I was taken back to a post I added to Keep Safe On The Net back in 2010 – https://keepsafeonthenet.co.uk/verification-of-pch-winners1000000-usd/
No lottery, draw or sweepstake anywhere ever sends random prizes to someone that hasn’t entered. And none of them use online claim agents who ask you to send money in order to receive your (fake) prize. They are all scammers, but they haunt social media platforms looking for vulnerable victims. As an Amazon Associate I earn from qualifying purchases.
Fake Argos Giveaway On Facebook
A fake Argos TV giveaway on Facebook. These scammers are after page likes, they aren’t giving away anything. In a twist, these scammers ask you to share the page with 25 friends on Messenger – in other words, spam 25 friends with a fake giveaway. I’m sure they’ll love you for that!! As an Amazon Associate I earn from qualifying purchases.
Whirlpool Corpration – Hiring Online Money Mules
In this video we look at how money mules are hired to launder money for online criminals. The victims of these criminals are often older or vulnerable people who are tricked into handing over thousands of pounds or dollars. The money is received by a third party – the money mule.
These money mule recruiters claimed to be the Whirlpool Corpration (sic) and it didn’t take long for them to ask for personal and financial details.
These recruiters haunt many social media platforms. It’s easy for people who want a quick way of earning money to fall for these scams. If you do, you are responsible not only for helping criminals with money laundering, but you will also be helping them to steal thousands of dollars from vulnerable victims. As an Amazon Associate I earn from qualifying purchases.
Scam Giveaway on Facebook
The Rewards Store on Facebook are at it again. This is their second fake giveaway today – this time a scam River Island Giveaway.
To see why these fake pages are set up, watch this video https://youtu.be/ebTkxQ8NZl8 where I explain one of the reasons. As an Amazon Associate I earn from qualifying purchases.
The Rewards Store Are Scamming Again on Facebook
The Rewards Store are at it again. Today it’s a fake Victoria’s Secrets Giveaway on Facebook. No-one is going to receive a voucher and goodies. This page is just after “Likes”. Don’t make yourself look a little daft by sharing – your friends will realise it’s a scam.
Here is the previous Rewards Store video where I talk about why these fake pages want likes https://youtu.be/jTeKplECzHU As an Amazon Associate I earn from qualifying purchases.
The Rewards Store – Fake Giveaway on Facebook
Another Fake Morrisons Giveaway on Facebook
The Rewards Store – they seem to do fake Morrisons giveaways, fake Centre Parks giveaways and fake Subway giveaways – all on Facebook. There are so many clues that this is a scam page – watch the video to see what they are.
Cute vector created by freepik – http://www.freepik.com As an Amazon Associate I earn from qualifying purchases.
EU Business Register 2020/2021
From time to time I receive an email asking me to join the EU Business Register.
But what is it and is it a con?
I did some investigation and made a Youtube video
If you join the register this is what their small print says about the cost:
THE VALIDATION TIME OF THE CONTRACT IS THREE
YEARS……. …..THE PRICE PER YEAR IS EURO 995.
Yes – you read that correctly – it costs nearly 3000 Euros for an entry. Ok – so you’d think a Europe wide register that charges that much to join would have a really flashy website, with lots of enticing graphics and would make it really easy to search for what you want. Well you might think that – this is their website:
Does that make you want to use it? Do you think anyone ever finds it? Have you ever seen the EU Business Register website appear in the search results?
I think I can safely say that the answer to all of those questions is no. If you make the mistake of handing over three thousand Euros you will get precisely zero new customers from your entry.
I did some more research, watch the video to see the results.
EU Business Register – What Is It? Is It A Scam?
What is the EU Business Register? Should you pay to join it? Have you ever heard of it? Does it show in the search results online?
Cute vector created by freepik – http://www.freepik.com As an Amazon Associate I earn from qualifying purchases.
Scam Mickail Fridman Charitable Donation + gatewayonlinebank.com
This scammer is pretending to be the Russian businessman Mickail Fridman. You are told you are to be given a charitable donation of 5 million dollars. No-one is going to randomly send you millions of dollars – the scammers all want one thing, your money. What excuse does this scammer use to try to get you to send money? Watch the video to find out. And no, there is no such thing as the gatewayonlinebank.com
Cute vector created by freepik – http://www.freepik.com As an Amazon Associate I earn from qualifying purchases.
Fake Marks and Spencer Giveaway on Facebook
There seem to be a bunch of fake large store giveaways on Facebook – the theme is the same – everyone who likes and shares by midnight will receive a £35 voucher and a bag of goodies. This is a fake Marks and Spencer page – it doesn’t have the blue tick to show it is a verified account. It’s a like farm, to get gullible people to like the page so that at a later date the content can be changed and reach an instant audience. As an Amazon Associate I earn from qualifying purchases.
Fake Morrisons Giveaway on Facebook
There seems to be a spate of fake store pages being set up on Facebook. In this post we’re going to look at a fake Morrisons supermarket giveaway. The theme is common – the store will give £35 plus a bag of goodies to everyone who likes and shares the post by midnight.
These are all fake. No organisation anywhere ever gives away cash and goodies to everyone that likes and shares. Yes, sometimes they will run a competition and pick one or two winners, but they never give things away to everyone.
These pages are “like” farms – designed to take in the gullible and get lots of likes. Then these pages can be sold (yes, I know it’s against Facebook’s T&Cs, but there are several websites where you can do this) or they can have their name and purpose changed. Either way, the new content instantly reaches thousands of people – thousands of people gullible enough to have been taken in by their fake giveaway. The very people who are most likely to interact with the new page content once the page has been changed.
Here’s a video I made about the fake Morrisons giveaway – and if you find it useful, please give it a like and subscribe to my channel.
Fake Morrisons Giveaway on Facebook – Again!
Yet another Fake Morrisons supermarket giveaway on Facebook. Don’t get taken in by these fake giveaw
“Mark Zuckerberg” fake email donation – USD4, 000 000.00
My online alter ego has been winding up a scammer who claimed to be Mark Zuckerberg and claimed they wanted to give me me $4m. Of course, it didn’t take long for the scammer to tell me how much money they wanted me to send them. Ignore all these long, rambling stories of why you are owed or are going to be donated millions of dollars. Absolutely none of them are real – they are all scammers who want you to send them your cash. As an Amazon Associate I earn from qualifying purchases.
Fake $10,000 Giveaway on Facebook
This scam $10,000 giveaway was shared in a local group I belong to on Facebook. I have no idea whether the couple in the video are connected with the fake giveaway – I suspect someone might have used their live video on a fake page. No-one is going to give large amounts of money to thousands of people who randomly type one word on Facebook. It doesn’t happen. They want you to “like” the page – don’t. Ignore these scammers. As an Amazon Associate I earn from qualifying purchases.
Scam Email Restricted Notice
This email claims that access to your email address has been restricted and asks you to “validate” your email. This scammer wants to gain access to your email so they can send dodgy links to your contacts. As an Amazon Associate I earn from qualifying purchases.
WARNING:Your you@yourdomain.com has been restricted
This email seems to have been sent to people who use an email address associated with a domain name that they own. Although this email claims to have come directly from your domain, this is the email address it was actually sent from: <fg@sosoibella.com>
Your online email provider probably doesn’t care which device you use to access your email, and if they do, they WILL NOT ask you to validate your email address.
I don’t know where you would be taken if the “Validate” link was working, but my guess is that you would be asked to enter your email password so the scammer could take over your email box and email a dodgy link to all your contacts.
If you do use email associated with your domain name, you will probably know that there is no such person/thing as your “Mail Service Administrator”. You own the domain name and pay for the hosting (or the email service) and YOU are the administrator.
If you think you have accidentally clicked on the link and given your password to the scammers, login to your domain hosting and change your email password.
SECURITY NOTIFICATION
We noticed an attempt to sign into your mailbox you@yourdomain.com from an unknown Device.
For security reasons, your account has been restricted. Click on VALIDATE to keep your you@yourdomain.com up
VALIDATE
Noted: Access to you@yourdomain.com will be restricted within 8 Oct 2020
Your security is our primary concern.
Regards,
yourdomain.com Mail Service Administrator
Fake Alton Towers Giveaway On Facebook
This fake Alton Towers giveaway popped up on Facebook. The account the scammer is using was created today and doesn’t have the blue tick beside the account name to show that it is a verified account. As an Amazon Associate I earn from qualifying purchases.
Scam TV Licensing Email
This fake UK TV Licensing email tells you that your Direct Debit has been declined. Don’t be taken in by these scammers. Read more at https://keepsafeonthenet.co.uk/processing-notification-september-2020-email-return-item-no-4709520417-58321-4322408/ As an Amazon Associate I earn from qualifying purchases.
View your bill now
This fake BT email doesn’t even bother to pretend to address you personally – it just says “Hello”.
If you click on the link to “log in to see your bill” it tries to send you to https://docs.google.com/forms/d/e/1FAIpQLScyEPqpt7h-CkjlQpZVZddDW5zCL0kaNYR7VDWSrvo6_bSbMQ/viewform
The link doesn’t work as it was a Google Doc and Google have removed it.
We’ve given your bill a makeover Hello, You can view your bill online or use the My BT app. To log in, you’ll need your BT ID. This is usually your email address. Log in to see your bill You don’t need to do anything to pay it. We’ll take your monthly payment as normal. We regularly check how much you’re using, to make sure you’re paying the right amount. If you’re paying too much or not enough, we’ll let you know and automatically change it. Find out how we adjust your payments. Changes to our privacy policy We’ve updated our privacy policy to reflect the changes in data protection laws. Thanks, Nick Lane Managing Director, Customer Care
Processing Notification September 2020 | Email return item No.4709520417-58321-4322408
This fake email was sent to a friend and claims to come from the UK TV Licencing authority. It claims to have been sent from info@lyfvaccines.com, which isn’t the email address of the TV Licencing.
It claims your bank has declined your last payment and sweetly asks if you’d “like to pay now”.
Clicking on the link to their “payment gateway” takes you to https://donnajacky.nl/tv – definitely not the TV licencing website. I don’t know what was there originally, but by the time I visited the site I just found a “website under construction” notice.
If you got taken in by this and gave your bank information to the scammers, contact your bank immediately.
DEAR CUSTOMER. TODAY IS YOUR LAST DAY TO REMAIN LICENSED. You won’t be covered if you let your licence expire. Your bank has declined the latest Direct Debit payment This payment is required for TV Licence number 036539188 WOULD YOU LIKE TO PAY NOW? PAYMENT GATEWAY › NOTE Renew your TV Licence before it expires on 27 September 2020 to remain legally licensed.
9/29/2020 10:47:50 a.m. e.Ticket #oterqd – Status: Unverified – Routine check – ‘Account Information Confirmation’ | ‘ Receiving Account Communications ‘ | Current Profile 9/29/2020 10:47:50 a.m. ` -> Residential Information
This was sent to my sister, from the very (un)convincing yypxwha@[telenet.be]
How did I know it was a fake?
Firstly, look at the email address it was sent from – that isn’t the DVLA
Secondly, it doesn’t address you by name, it just uses your email address
Thirdly, if you click on the link (please don’t) it takes you to https://2019.talantinua.com/modules/openid/tests/openid-test/bin/index.php. That definitely isn’t the web address for the DVLA.
By the time the email had been forwarded to me, none of my web browsers would let me access the site, but judging from the text in the email, they would have asked you to enter your bank account information.
If you think you might have accidentally given your bank info to these scammers, contact you bank immediately. Otherwise, delete this email and do not click on the link.
Please update your information for the account you@btopenworld.com Dear you@btopenworld.com, Updating Your Account Information THIS IS AN AUTOMATED EMAIL – PLEASE DO NOT REPLY AS EMAILS RECEIVED AT THIS ADDRESS CANNOT BE RESPONDED TO. Check to make sure your account information is up to date By keeping this information up to date, you’ll have an easier time working with your account, logging in, and receiving account communications. Our automated routine check has found some irregularities in your current profile which indicates that the information given is no longer accurate or up to date. Please click here and update your account information Additional Information You’ll be showed a form containing question regarding your personal or residential information. In some cases, you may be required to enter the previous bank account information as a security measure. Upon successful submission of first two steps, your profile will be updated and you’ll be shown a confirmation text. If you do need to send us evidence, it’s important that you send us everything we’ve asked for. If we have to contact you for any missing information or evidence it could delay your application further.
Romance Scammers – Jerry Morrison.
Romance scammers play on your emotions. Don’t get taken in by one of these people – whose only aim is to get their hands on your money. This is the most popular post on Keep Safe On The Net – https://keepsafeonthenet.co.uk/marine-engineer-romance-scammer-jerry-morrison/
Sorry the video cuts off shortly before the end. As an Amazon Associate I earn from qualifying purchases.
Fake Vodafone Text
This fake Vodafone text landed on my phone a couple of days ago. Never click on a link in a text like this – always go directly to your provider’s website. The scammers want your credit or debit card details. Don’t fall victim.
Here is the entry on Keep Safe On The Net – https://keepsafeonthenet.co.uk/vodafone/ As an Amazon Associate I earn from qualifying purchases.
Vodafone
This fake text arrived on my phone a couple of hours ago. I do use Vodafone, so my first instinct was to open my laptop and log in to my online account to see if there was a problem.
By the time I’d done that, my provider had marked the text as suspected spam.
Do not click on the link if you receive a text like this one on your device. Always open your web browser and go directly to your online account.
Looking more closely at the link in the text I saw this: vodafone.uk.mycontract60.com. Designed to fool into thinking it’s the vodafone website, but it’s actually mycontract60.com
A quick whois lookup tells me that domain was registered yesterday to someone in Zuid-Holland.
Software Licenses: New profile notification
This appeared in my inbox this morning. DO NOT click on the link.
This is what it says:
“software-licences.com. New profile notification. Hello Karla sent 2 unique messages https://ewufiuv.page.link/PTTw, Your profile has been updated USER ACCOUNT INFORMATION Login URL: https://software-licenses.com/ Email: myemail@email.com Password: *********** (Forgot your password?)”
How do I know this is a hoax?
1. If you click on the Facebook icon, this is where it takes you:
2. If you try to go to the website software-licenses.com this is what you see:
In the interests of research for you guys, I did click on the link – but using an Amazon Fire device as I felt that might be less prone to being infected with malware.
I was led a merry dance to survey sites, etc. I’ll add some screenshots below. One thing I’m sure of is that no-one is going to send you a £1000 Amazon voucher for doing little or nothing. Not going to happen.
If you did click on the link, I strongly suggest that you scan your device with some anti-malware software. If your device will run malwarebytes that is always my first choice (malwarebytes.com), otherwise go to your device’s app store and download some free anti-malware software and do a scan.
Here are some screenshots of where that link takes you:
Goodness, would you believe it!!! I’m the 5 billionth visitor. What are the chances??? (Probably one in 5 billion?)
Followed by this trail of nonsense:
And lots more after that. Just delete this bit of nonsense – I think they are after your email address so they can bombard you with spam.
IMF Compensation Scam
Your spam email folder probably receives dozens of these attempts to get money from you. All will tell you that you are due a compensation fund – some tell a story, some are just a garbled collection of words, as this one is. They all want one thing – your money. As an Amazon Associate I earn from qualifying purchases.
Bitcoin Scam – Alleged Viewing Of Unsavoury Videos
This is an attempt to frighten you and it has frightened several of my clients, who are told their computer has been hacked and the hacker has a video of them in unpleasant circumstances. It’s a hoax – designed to frighten you into sending money.
I haven’t put an age restriction on this video as it can be sent to anyone. If you are a parent or carer for underage internet users, make sure they understand that messages such as this are not real and should be ignored. As an Amazon Associate I earn from qualifying purchases.
Fake Facebook Pages And Profiles
There are a lot of fake pages and profiles on Facebook. Why are they set up and how can you tell if they are fake?
In the video I talk about a Facebook group that I belong to – That’s Nonsense – this is the link https://www.facebook.com/groups/370747733321739 As an Amazon Associate I earn from qualifying purchases.
Is That Ebay Email Genuine?
How to tell a real Ebay email from a fake one. Should you click on the link? And a side step into which website passwords to save so your browser can log you in automatically. As an Amazon Associate I earn from qualifying purchases.
Your Fixed Penalty Notice Ref:
Look closely at the image below. Look at the email it was sent from @cuponeria.com.br. That isn’t the real address of a UK Government agency.
Now look at the notice. Apart from your name and email the sender doesn’t know where you were when you (allegedly) used the road in a chargeable area. Nor does the sender know anything about the vehicle you were (allegedly) driving.
Plus they claim the contact number they have given you is “temporarily unavailable”.
All this scammer wants you to do is click on “Click here to pay” and give them your card details.
If you have accidentally clicked and filled in your card details, contact your bank immediately. Otherwise, just ignore this scammer.
Over 70’s Driver’s Licence Application
This isn’t a scam, as such, more a word of caution. It was brought to my attention yesterday by a client who was nearly taken in but realised in time that he was being asked to pay for something that should be free.
My client is over 70 and in the UK that means you need to renew your driving licence every 3 years. Here’s a quote from the UK government website “Renew your driving licence online with DVLA for free if you’re 70 or over ” – https://www.gov.uk/renew-driving-licence-at-70
My client did an internet search and found this website https://licenceportal.org/ where he clicked on the link inviting him to renew his licence if he is over 70
The website asks you to set up an account – so I did, using an email address that I used only for online scams. Once you are logged into the site you are asked for all of your personal details and licence details and then, at the bottom of the form, you are asked to pay by credit card.
In their terms they say that the cost for renewing an over 70’s licence is £40 + VAT.
So – be warned. Renewing your licence is free. There is no need to use a paid, online service.
To be fair, in small print at the bottom of the page the site does state (in poor, non grammatical English) “this is a commercial website to apply Driver Licence through Government Website, you will be charged a fee. To process your application, we will charge a service fee for providing consultancy, submitting applications and informing the status and results.”
There are also links to the government website which have been deliberately made to be almost invisible (blue on a dark grey background).
IMPORTANCE NOTICE
This fake domain renewal notice was posted as a comment on another post. But it seemed a shame to leave it there. After all, if you post your scam as a comment on an anti-scam blog, it must merit a post of its own, so that everyone can see that a) it’s a scam and b) the people posting it are too dim to realise that they have posted their own scam on an anti-scam blog. Gotta love ’em, eh?
If you read the text it is totally meaningless – and if you go to their website it is just more nonsense. Ignore these idiots and send the email to its rightful home – your trash box or spam box.
Notice#: 491343
Date: 2020-08-11
Expiration message of your keepsafeonthenet.co.ukEXPIRATION NOTIFICATION
CLICK HERE FOR SECURE ONLINE PAYMENT: https://domainworldset.com/?n=keepsafeonthenet.co.uk&r=a&t=1597066756&p=v1This purchase expiration notification keepsafeonthenet.co.uk advises you about the submission expiration of domain keepsafeonthenet.co.uk for your e-book submission. The information in this purchase expiration notification keepsafeonthenet.co.uk may contains CONFIDENTIAL AND/OR LEGALLY PRIVILEGED INFORMATION from the processing department from the processing department to purchase our e-book submission. NON-COMPLETION of your submission by the given expiration date may result in CANCELLATION of the purchase.
CLICK HERE FOR SECURE ONLINE PAYMENT: https://domainworldset.com/?n=keepsafeonthenet.co.uk&r=a&t=1597066756&p=v1
ACT IMMEDIATELY. The submission notification keepsafeonthenet.co.uk for your e-book will EXPIRE WITHIN 2 DAYS after reception of this email
This notification is intended only for the use of the individual(s) having received this message.
PLEASE CLICK ON SECURE ONLINE PAYMENT TO COMPLETE YOUR PAYMENT
SECURE ONLINE PAYMENT: https://domainworldset.com/?n=keepsafeonthenet.co.uk&r=a&t=1597066756&p=v1
Non-completion of your submission by given expiration date may result in cancellation.
All online services will be restored automatically upon confirmation of payment. Delivery will be completed within 24 hours.
CLICK UNDERNEATH FOR IMMEDIATE PAYMENT:
SECURE ONLINE PAYMENT: https://domainworldset.com/?n=keepsafeonthenet.co.uk&r=a&t=1597066756&p=v1
Have You Received?
This bit of ridiculousness came from the very (un)convincing diplmissionoffice@gmail.com. Because obviously diplomats use GMail. Or maybe not???? I wonder which “diplmissionoffice” this fool thinks he might be a member of?
Ignore this, this is just a scammer who wants to get his or her hands on your money.
Dear Sir,
The courier statutory report shown that fund ATM Card have been
delivered to your address yesterday.
Confirm if you have received your parcel so as to instruct the issuing
bank to forward the
Card pin number to enable you start making withdrawal in any ATM machine.
Please update me as time remains of essence.
Signed.
Sincerely Yours,
Comrade Johnson Collins
(Public Diplomacy Commission)
Fake BT Scam
A friend just received a phone call from 07683 525175. It was a recorded message, with an American accent, telling her that they were from BT and there were records of dodgy activity on their internet and phone line and they would be cut off unless they held the line to speak to someone.
My friends wisely hung up, whilst telling them to (expletive) off.
ATTN PLEASE
Oooooo look “the wealthiest organization in the world” has decided to give $1m. Only $1m — I get offered 10 times that every day by the Bank of Nigeria or the United Nations.
Of course an organization that has randomly decided to send you millions is going to start their email by saying “good morning” and asking “how are you doing”. Or perhaps not.
The Roman Catholic Church doesn’t randomly contact people out of the blue and offer to send them money. Nor does any other organization.
Ignore this scammer who is just after your money.
GOOD MORNING AND HOW ARE YOU DOING,
I am Jennifer Walter, from The Roman Catholic Church Rome. The Roman Catholic Church is almost certainly the wealthiest
organization in the world, giving arms to some individuals based on
embassy notification
Luckily your name is among the 3 beneficiaries to receive
usd$1,000.000 each ( USD$1M)
Kindly contact Your payment office Citi Bank express wire transfer
department London England for the release of your funds In the person
of Mrs. Sarah Email < citiban1010@gmail.com >
Stay bless and God bless you
Mrs. Jennifer Walter
Please i have an important Information for you
You Have Won US$1,320,000.00
Ooooooo – look – I’ve won lots of money on a lottery I didn’t enter. Does that sound likely???? No, of course it doesn’t. You cannot win a lottery that you haven’t entered.
This is a scammer who is after your cash. My online alter ego has replied, so I’ll let you know if s/he tells how much money I have to send in order to receive my (non existent) winnings.
Scroll down to read the scammer’s reply.
POWER BALL LOTTO
730 North 10th Street
Sacramento, CA 95811, U.S.A
Your e-mail has been selected for the Power Ball e-mail Promo of $ 1 , 3 2 0 , 0 0 0 . 0 0 . For Claim Send;
Name:
Address:
Tel No:
Date of Birth:
Occupation:
VAULT DEPOSIT NOS (DUC/OO9L2AC/SP )
Send the above details to your C l a i m Agent,Steve Donald on ppbblotto@indamail.hu
Thanks,
Linda Shayne
Powerball Lotto
Coordinator
The scammer has replied and told me that I need to contact CitiBank New York to receive my winnings. Obviously I’m going to do as instructed!! (In case anyone is wondering – I have an email address that I use only for contacting scammers and I give entirely false details.)
Attn: Annie Smith,
This is to confirm the receipt of your e-mail together with the Information which have been verified and processed for payment.
We have given instruction to the Paying Bank (Citibank New York) to handle the release of your Winning sum of $1, 320, 000.00 to you as a matter of urgency.
You are hereby requested to get in touch with the Citibank New York through e-mail with the below stated details of the Citibank and make sure you reconfirm your Name Address and Phone Number to them
Bank Name: Citibank New York
E-mail: account@inlcitius.com
Contact Person: Richard Mills
Do confirm to me if you received this e-mail
Do keep us posted.
Congratulations.
Steve Donald
Claim Agent
Citibank were quick to reply. They’ve offered me 3 options. I’m going to give them fake details for option 1 – direct transfer. I probably won’t get much further as I have no intention of giving them any genuine details.
I used a fake passport I found using google and just edited my fake name onto it.
File No: CITI/0012019/USD/055
Attention: Annie Smith,
RE: PAYMENT INSTRUCTIONOF US$1, 320,000.00
This is to bring to your notice of your file and instruction received from the Power Ball Lotto to handle the release of your fund of US$1, 320, 000.00 (One Million, Three Hundred and Twenty Thousand United States Dollars) to you.
However, you are requested to make your choice of receiving your Winning from the below stated options
1. Bank Transfer
2. Check Payment
3. Open an online account with our Bank
For Bank Transfer, you are to provide us with the below details, which will enable us commence with the transfer modalities of the said funds of $1, 320, 000.00
1. Bank Name:
2. Bank Address:
3. Account Holders Name:
4. Account Number:
5. Routing Number/Swift Code:
6. Your phone/Cell Phone Number:
7. Your Contact address
8. A scan copy of your Identification (ID)
For Check Payment, you are to provide the below stated details
1. Full Names
2. Contact Address (Not P.O.BOX)
3. Direct Phone Number (Cell Phone Number)
4. A copy of your Identification (ID)
For online account set up
To open the online account, Please follow the below instruction.
click on the link below and go to open an account, fill the form and submit it after.
As soon as the application is received, an account will be setup for you.
Waiting for your swift response to this e-mail.
Yours faithfully,
Richard Mills
Head Of Transfer Dept.
Citibank NY
Tel: 1 347 641 9239
Re…Payment Advice from the Union Bank Reply ASAP….
My online alter-ego has emailed mrs fenna liam, telling her which hotel I will be staying in at Schiphol and which flight I will be on. I will let you know what her instructions are.
Meanwhile – I’m sure you know as well as I do that you don’t have £2m sitting in a mysterious bank account, so delete this scam.
Attn: Dear Beneficiary,
We received an instruction from the Union Bank of Switzerland, Zurich
to pay you the sum of Two Million, Forty Five Thousand Euros
Only(€2,045,000.00),which is classified as your outstanding principle
amount and 0.001% interest accrued from the principle amount.
The said amount shall be paid to you by wire transfer or certified
Bank Draft prior to the signing of your payment documents for proof of
your payment in line with the terms of our agreement with the Union
Bank of Switzerland.
Your appointment has considerably been scheduled for February 18th, 2020
and our nearest airport is Amsterdam Airport, Schiphol.
Please note that the signing of your payment documents and its
notarization by the court takes minimum period of 48 hours upon your
arrival and it is extremely important for you to make a reservation
with any of the hotels within Schiphol for your stay.
We can provide you the names of the hotels close to our location, if
you so wish. Otherwise, do make your reservation with any hotels of
your choice and provide copy of your reservation, including your
flight itinerary to enable us accord you the necessary assistance for
your arrival, if you are a first time visitor.
For further inquiries and clarification on your payment, please
contact your assigned transaction manager, Ms.Fenna Liam via her
direct E-mail: mrs.fennaliam01@gmail.com
Yours truly,
Arjan van Diederik
Director,Operations Unit,
Keytrade Finance, Amsterdam, NL
www.keytradefinance.com
…. your Draft … Attention: Beneficiary, YourName
This scammer gets straight to the point, they want $150 as their initial payment. If you are daft enough to fall for their scam, they will continue asking you for more money, for more fees.
You know as well as I do that the Bank of Nigeria is not holding $10.5m in your name. Just ignore this scammer.
Access Bank Plc., Head Office
Plot 999c, Danmole Street
Off Adeola Odeku/Idejo Street
Victoria Island, Lagos, Nigeria.
Attention: Annie Smith
Do you know that you have an outstanding US$3.5M USD accrued Interest
payment from your $10.5M Principal fund credit on-hold with Central
Bank of Nigeria. It is this amount therefore that we have been
mandated today to release to you by Draft. The aim of the draft
payment is to eliminate excess charges associated with transfer mode
of payments.
The Draft is approved for Payment under two (2) Standard Collection Basis;
(1) We have the honour to invite you to Our Bank Information Center at
the bank premises in Lagos to enable you pick the Draft with prove of
ownership. Representatives not honoured.
(2) We can alternatively arrange to deposit your Draft with our Bank
upon your intention to operate a Domiciliary Account Balance with us
to enable us deposit your Draft in your own account name. On this
particular arrangement, we shall forward to you our Account
Registration Form to enable you fill the necessary information for the
registration of your account with our bank.
After your accounts approval and registration, you will be required to
activate your Account Balance with a Minimum Cash Deposit of $150 only
to make your account operational to accommodate the volume of Draft
since the Draft cannot be deposited on a Zero Account.
Access Bank has a standing tradition of recognizing and protecting the
privacy of its customers. The Bank maintains strict privacy policies
to reasonably safeguard customer information from unauthorized
intrusions. In other words, your account with us is safe and
convenient as Deposit of cash and cheques are allowed.
You will receive a monthly statement from our bank regularly. All your
Account information including an Access ATM Swift Card will be
forwarded to you after the account registration to enable you access
your Account from your location.
We will dispatch to you our Account Registration Form as soon as you
make your intentions known to us in this option to enable you fill and
return to us the FORM for proper documentation and approvals.
We shall decline to further communications with you on your failure or
inability to respond positively to our instructions which may
precipitate the expiration of your Draft, thereby making it prone to
cancellation.
It is our sincere obligations to offer you our satisfactory services.
Faithfully,
Mr. James Iroh
Remittance/Foreign Operation Manager.
INTENDED ONLY FOR: (VICTIM’S EMAIL)
This scammer clearly failed the Level 1 Scam exam at scam school. The bit where the title and text says (Victim’s Email) is clearly intended to contain the victim’s email address.
But hey – there’s nothing like telling your intended target that they are a victim. Why not just add a message saying “Hi – I’m a scammer, send me your money”.
Or to put it another way – this idiot is after your money. Ignore him or her.
Security Notice. Someone has access to your system.
Yet another scammer who claims to have access to your system (they don’t).
Nothing in this email is true. The scammer can’t access your system, hasn’t been using your webcam, hasn’t infected your computer with malware. They don’t have access to your contacts and they can’t send a video that doesn’t exist.
This scammer is after your money. Don’t send them anything. Delete this evil bit of rubbish.
Hello! I am a hacker who has access to your operating system. I also have full access to your account. I’ve been watching you for a few months now. The fact is that you were infected with malware through an adult site that you visited. If you are not familiar with this, I will explain. Trojan Virus gives me full access and control over a computer or other device. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it. I also have access to all your contacts and all your correspondence. Why your antivirus did not detect malware? Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent. I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched. With one click of the mouse, I can send this video to all your emails and contacts on social networks. I can also post access to all your e-mail correspondence and messengers that you use. If you want to prevent this, transfer the amount of $500 to my bitcoin address (if you do not know how to do this, write to Google: “Buy Bitcoin”). My bitcoin address (BTC Wallet) is: 3GrDwbsANqj8HSDDCRhBFMtcCTKtf716fZ After receiving the payment, I will delete the video and you will never hear me again. I give you 50 hours (more than 2 days) to pay. I have a notice reading this letter, and the timer will work when you see this letter. Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address. I do not make any mistakes. If I find that you have shared this message with someone else, the video will be immediately distributed. Best regards!
You got recorded – monday
Another one of those nasty emails claiming that the sender has access to your computer (they don’t) and they have seen you in a compromising position (they haven’t).
Then demanding you pay them in a cryptocurrency. Fortunately, most of the people that send these to me wouldn’t know how to pay in DASH or bitcoin or any other cryptocurrency.
Ignore these evil emails and delete them.
Hey, I know your password is: monday Your computer was infected with my malware, RAT (Remote Administration Tool), your browser wasn’t updated / patched, in such case it’s enough to just visit some website where my iframe is placed to get automatically infected, if you want to find out more – Google: “Drive-by exploit”. My malware gave me full access and control over your computer, meaning, I got access to all your accounts (see password above) and I can see everything on your screen, turn on your camera or microphone and you won’t even notice about it. I collected all your private data and I RECORDED YOU (through your webcam) SATISFYING YOURSELF! After that I removed my malware to not leave any traces. I can send the video to all your contacts, post it on social network, publish it on the whole web, including the darknet, where the sick people are, I can publish all I found on your computer everywhere! Only you can prevent me from doing this and only I can help you out in this situation. Transfer exactly 1400$ with the cryptocurrency DASH (DSH) to my DASH (DSH) address. It’s a very good offer, compared to all that horrible shit that will happen if I publish everything! You can buy DASH (DSH) here: www.cex.io , www.binance.com , www.bitpanda.com , or Google for other exchanger. You can send the DASH (DSH) directly to my address, or create your online wallet first here: www.cryptonator.com , www.freewallet.org or download and install your hardware wallet EXODUS first from: www.exodus.io and then send to mine. My DASH (DSH) address is: XnfypYUMso855erq8vmsdGcFPcnWeUh1G4 Copy and paste my address, it’s (cAsE-sEnSEtiVE). I give you 2 days to transfer the DASH (DSH). As I got access to this email account, I will know if this email has already been read. If you get this email multiple times, it’s to make sure you read it, my mailer script has been configured like that and after payment you can ignore it! After receiving the payment, I will remove everything and you can life your live in peace like before. Next time update your browser before browsing the web!
Your new mails has been placed on hold!!
Apparently I’ve changed my name to “info”.
Nobody’s “system” has detected “unusual activities on your account”. This email doesn’t even tell you who is supposed to have sent it.
I’m guessing that if you click on the link you will be taken to a fake website and asked to enter your email address and password.
If you have accidentally done this, change your password immediately so that the scammers do not have access to your email.
Dear info
All your incoming mails has been placed on hold , due to our system detects unusual activities on your account
which violate our usage policy, your email has been blacklisted, and will be terminated if proper steps are taken.
To ensure account safety please Click Here to unblock your mailbox and to remove your email from blacklist immediately .
Please note: This service if free no charges apply.
System will now wait for few hours if above step is not taken, your account will be deleted and you
will no longer have access to your mailbox, all files and folders associated to your email account will be lost.
Thanks.
keepsafeonthenet.co.ukTeam.
Copyright © 2019 All rights reserved.
Your personal data is at risk! Change your password immediately!
DO NOT send these scammers anything. They have no idea who you are, nor have they hacked your site. Changing your password is always a good idea – you should change it regularly – but these guys have no idea what your password is and cannot see if you change it.
Even if your webcam was turned on (which it wasn’t) it cannot record your screen.
Ignore this bit of scaremongering.
Hello!
I am a representative of the Chaos hacking group.
In the period from 30/06/2019 to 23/09/2019, we gained access to your
account myname@mysite.co.uk by hacking one of the MYSITE.CO.UK mail
servers.
Have you changed your password yet?
Good! But our program intercepts it every time. And every time I we your new
password!
By accessing your email account, it was easy to connect to your device’s
operating system.
At the moment all of your contacts are known to us. We also have access to
your messengers and your correspondence.
All this information is already stored on my pendrive.
We are also aware of your intimate adventures on the Internet.
We know that you love adult sites and we know about your sex addictions.
You have very interesting and unique taste (do you understand what I mean?).
When browsing these pages, your device’s camera turns on automatically.
What you watch is recorded and saved on our server.
At the moment, several compromising video recordings have been collected.
From the moment you read this letter, after 120 hours, all your contacts in
this email inbox and in messengers will receive these clips and files along
with correspondence.
If you do not want this, transfer 2,000.00 GBP to our unique Bitcoin wallet.
Send exactly:
0.29260278 BTC
to our Bitcoin wallet:
36uV1ZaKSGwSndwgdkYMq8ySThnEdi4X7a
The address is case-sensitive – copy it.
As soon as your transfer is confirmed, all your contacts and video recording
will automatically delete immediately.
If no money arrives on time, the video and correspondence files will be sent
to all your contacts.
You decide … Pay or live in hell with shame …
We believe that this whole story will teach you how to use the gadgets
correctly!
Everyone loves adult sites, but you are out of luck.
For the future – just stick the sticker on your device’s camera when
visiting adult sites!
Take care of yourself!
Save Yourself
No, not an invitation to find God or Allah or another deity. This evil little threat comes courtesy of one of my clients.
These bitcoin scammers make their threats sound nasty. Always telling you they have webcam footage of you in compromising, sexual, circumstances. They don’t. They don’t even know who you are.
However, this IS a lesson in ensuring that you use robust passwords. You’ll notice that the (very old) password quoted was a simple word. Make sure all your passwords are strong – make them long, use numbers, upper & lower case letters and characters. Change them regularly.
Meanwhile, ignore this scammer who just wants your money – in bitcoin to ensure that they cannot be traced. There is no way that a bitcoin address can be tracked down, unlike a bank account or Paypal account.
Hello, I know your password: monday
Your computer was infected with my malware, RAT (Remote Administration Tool), your browser wasn’t updated / patched, in such case it’s enough to just visit some website where my iframe is placed to get automatically infected, if you want to find out more – Google: “Drive-by exploit”.
My malware gave me full access and control over your computer, meaning, I got access to all your accounts (see password above) and I can see everything on your screen, turn on your camera or microphone and you won’t even notice about it.
I collected all your private data and I RECORDED YOU (through your webcam) SATISFYING YOURSELF!
After that I removed my malware to not leave any traces.
I can send this video to all your contacts (email, social network), on the whole web, I can publish absolutly everything I found on your computer!
Only you can prevent me from doing this and you know that’s no joke – you got the proof above!
Transfer exactly 1200$ with the current bitcoin (BTC) price to my bitcoin address.
It’s a very good offer, compared to all that horrible shit that will happen if I publish everything!
You can easily buy bitcoin here: www.paxful.com , www.coingate.com , www.coinbase.com , or check for bitcoin ATM near you, or Google for other exchanger.
You can send the bitcoin directly to my address, or create your own wallet first here: www.login.blockchain.com/en/#/signup/ , then receive and send to mine.
My bitcoin address is: 12EMaHiZG75ztkjUjuPZhQDcyW89qRJVuR
Copy and paste my address, it’s (cAsE-sEnSEtiVE)
I give you 3 days time pay.
As I got access to this email account, I will know if this email has already been read.
If you get this email multiple times, it’s to make sure that you read it, my mailer script is configured like this and after payment you can ignore it.
After receiving the payment, I will remove everything and you can life your live in peace like before.
Next time update your browser before browsing the web.
Greetings From Pam ******
I’ve answered, and I’m waiting to see if I get a reply – presumably the scammer will tell me they are stuck at the airport, lost their passport, money stolen etc.
Meanwhile I’ve rung my friend and told her to change her password and email her contacts to warn them that it is a scam.
(My friend uses hotmail. It’s been my experience that most scammers hack into hotmail or yahoo email accounts. So make doubly sure to use a strong password if you use either of these email providers.)
Hello,
Where are you presently?. I need your help for something very urgent so please get back to me via email as soon as you get this message.ThanksPam x
As I hoped, the scammer has replied. Interestingly, they have set up a new email address which is similar to, but not the same as, my friends in order to receive the replies. (My friend has updated her password)
This is the reply. (I have, of course, replied to ask how much the scammer needs.)
Good to hear from you, I’m Currently in Turkey (Istanbul)due to some urgent matters to help my sister she was diagnosed with (Acute Lymphoblastic Leukemia) a type of Blood Cancer and had been undergoing treatment lately.The hospital management is demanding for a deposit before they can carry out the surgery operation to save her life and I traveled down here with little money because I never expected things to be the way it is right now. Can you assist me with a loan ? I’ll surely pay back as soon as I get back home. Please, let me know if you can be of help. I’ll be happy to hear from you soon regarding my request and please remember to keep this private.
The scammer has told me how much they want. I’ve replied that I can lend part of that and asked where I should send the money.
So glad you are willing to help, all I need is a short term loan of about 6,850 euro to settle the bills at the hospital . But do help me with what you can raise if not everything because this is really urgent and important in saving a life. Kindly get back to me so that I can advise you on the payment information.
62226
This fake Paypal text was sent to my phone:
“Paypal security alert. Did you sign in from Doncaster, DNC, UK at 04.01 AM PDT, 23-Apr-2019? If yes reply 1. If no, reply 2. Text and data rates apply”.
How do I know it’s fake?
It doesn’t say it’s from Paypal – just that it’s from 62226.
I don’t live in the US, so why would I be asked if I signed it from a UK location using PDT?
I regularly sign into Paypal, they don’t text me to ask if I signed in.
It warns me that data rates will apply if I reply.
I have no idea what will happen if you reply – but I’m fairly sure you will be charged at a premium rate. Just delete the text.
If you have any reason to think that your Paypal account might have been compromised go directly to the Paypal website on your device and change your password.
Yourdomain.com Alert: YOUR NAME We have NOT received your payment
There is no such thing as “search engine registration”. This is a relic from the days when the internet was new and you did have to submit your domain name in order for the search engines to find you.
Life has moved on just a little (!!) and Google, Bing and other search engines regularly trawl the web to find and index new sites, pages and content.
Failure to pay this scammer will not “it difficult for your customers to locate you on the web.” Paying this scammer WILL mean you are sending money to a thief who has no intention of doing anything.
Interesting that this scammer seems to be operating in a time warp. S/he starts by telling me that I must “Reply Before January 7, 2019” but finishes by telling me that this notice “will be terminated on January 4, 2018” Woops – back to scam school.
Just ignore these notices, they mean nothing and are just a way for scammers to steal your money.
Attention: Important, DOMAIN SERVICE Domain Name: YOURDOMAIN.COMCall: 1-518-684-5177 ATT: Domain Owner YOUR NAMW ADMINISTRATIVE CONTACT YOUR ADDRESS AND DETAILS Requested Reply Before January 7, 2019 PART I: REVIEW SOLICITATION Attn: Domain Owner YOUR NAME As a courtesy to domain name holders, we are sending you this notification for your business Domain name search engine registration. This letter is to inform you that it’s time to send in your registration and save. Failure to complete your Domain name search engine registration by the expiration date may result in cancellation of this proposal making it difficult for your customers to locate you on the web. Privatization allows the consumer a choice when registering. Search engine subscription includes domain name search engine submission. You are under no obligation to pay the amounts stated below unless you accept this proposal. Do not discard, this notice is not an invoice it is a courtesy reminder to register your domain name search engine registration so your customers can locate you on the web. This Notice for: YOURDOMAIN.COM will be terminated on January 4, 2018 Act today! [ ] 1 year 01/07/2019 – 01/07/2020 $75.00 [ ] 2 year 01/07/2019 – 01/07/2021 $119.00 [ ] 5 year 01/07/2019 – 01/07/2024 $199.00 [ ] 10 year -Most Recommended- 01/07/2019 – 01/04/2029 $295.00 [ ] Lifetime (NEW!) Limited time proposal – Great value! Lifetime $499.00 Payment by Credit Card or Check Call our New York main office: (518)684-5177
[ID: 487352954] [akor@forthnet.gr] 21-11-2018 04:57:02 I extremely recommend you to study this letter, simply to ensure not a thing may happen
This glorious piece of rubbish comes with a “clacking” clock. Seriously though – for anyone who has actually been visiting p**n sites, emails like this could be frightening.
Fortunately most people are unable to pay in bitcoin, but those that can should be aware that these are scams. The writer has no idea what sites you have visited, or what you were doing – they are just after your money.
Just delete this email. If you have accidentally paid one of these scammers I doubt if there is anything you can do. Bitcoin is unregulated and untraceable so there is no way you can get your money back. You will have to learn from your mistake and not fall for the scam again.
Greetings.. .
This letter won’t acquire a lot of your study time, so direct to the issue. I acquired a video clip of you jackin’ off when at the pornpage you’re visited, thanks to a fantastic arse software program I’ve been able to put on a couple of web sites with that kind of content.
You press play button and all of the cameras and a microphone start working in addition, it saves every damn thing through your computer system, including contact information, security passwords and crap like dat, guess just where i obtained this email address from?) Therefore now i know just who i will send that to, in case you not necessarily going to compensate this along with me.
I will place a account wallet address under so that you can throw me 850 bucks within 1 days utmost via bitcoin. Notice, it isn’t that big of a sum to pay, guess that tends to make me not that awful of a man.
You’re welcome to complete what ever the shit you would like to, but in case i will not see the amount within the time period mentioned above, clearly… u already realize what may happen.
Therefore it is up to you now. Now i’m not going to go through all the details and stuff, just don’t have precious time for this and you most likely know that web is loaded with mail like this, therefore it’s as well your choice to trust in this not really, there may be only one way to find out.
This is the btc wallet address:133kstFMcy4u9BrHU6tSywSjdPvKD99XXH
Have a good time and bear in mind that time clock is clacking)
Facebook Message Scam
A fellow member of a small Facebook group received this message from someone who had recently joined the group. It’s a variation on the classic email scam claiming to come from someone with a terminal illness who wants to send you their money.
Don’t get taken in by it. This scammer doesn’t want to send you anything, they just want to take your money which they will do by telling you that you need to pay “fees” before they can send you the donation.
The message comes from “Stefanescu Jorge” (I’ve reported the account to Facebook). If you receive a similar message report the profile it comes from to Facebook and delete the message.
It reads:
“Hello, I apologize for this way of communicating with you. I just saw your profile and you are the right person In summary, my name is Gorge Stefanescu American origin and I live in FRANCE. I suffer from a serious illness that condemns me to death.
It is cancer of the throat and I have a sum of 60 000 Euros. I would like to donate to a serious honest person. I am owner of a car accessories import company.
And I lost my husband only 3 years ago, I had a lot in question and I could not remarry so far ,we did not have children. I would like to donate this amount before my death. Maybe my days are guilty of this disease and I have had no recourse.
I do not want knowledge to continue, if you can enjoy this gift here is my address.”
”
Weekly Payment Statement
Dance Basics are a legitimate company and have absolutely nothing to do with this scammer. I suspect that their mailing list details have been hacked.
The rest is rubbish. You haven’t made a weekly payment to them (or anyone else whose list has been hacked). I suspect this hacker wants to infect your device with malware – as if you click on the link you will find yourself downloading a .zip file.
Just delete this email. If you accidentally opened the file, download and scan your device with the appropriate version of malwarebytes (https://www.malwarebytes.com/)
Weekly Payment:
Payment: 894.30 GBP
Please view Weekly Payments Statement.View now eclosed payment statement.
Copyright © 2018 Dancebasics, All rights reserved.
You are receiving this email because you supplied us with your email address.Our mailing address is:
(Removed for privacy)Add us to your address book
Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list.Email Marketing Powered by MailChimp
URGENT INFO
Oh yes – brilliant way to introduce yourself. Tell me you are dishonest, a liar and thief. And then expect me to believe that you want to share $8.6m with me.
Let me think about this…………
………….. oh yes – I know – you’re a scammer. Let me guess – you want me to pay you a “fee”??? Then I won’t hear from you again and you will have stolen my money.
Just delete this email – this scammer is just after your money.
Attn:
URGENTLY AND EXTREMELY CONFIDENTIAL
By introduction, I am Engr. Steve Nkhoza and the Chairman of the Tender Board Committee which awards contract in the Department of Petroleum Resources of Sasoil Oil & Gas Int’l Energy Company, Johannesburg, South Africa . I sent you email some time ago informing you of a plan to transfer the sum of US$8.6 Million (Eight Million, Six Hundred Thousand U. S Dollars only) to your account, and have been waiting to hear from you ever since, but to no avail, hence this particular message by way of reminder.
I want you to know that these funds originated from an Over-invoiced contract sum which was awarded to a foreign firm in 2012. At that time, I used my position as the Chairman of the Tender Board Committee and purposely inflated the actual cost of the contract with the extra value of US$8.6 Million. However, the original contractor has fully executed the contract, the project commissioned and the contractor paid his actual contract worth, leaving behind the over-invoiced sum which is US$8.6 Million. So, it is based on this that I now want you/your company to come forward to stand in and claim this sum in my behalf.
You may wish to know that I am a Civil Servants working with the Sasoil firm and by law, I am not allowed to operate foreign bank account while still in office and equally cannot claim the money in my name as that will expose me, So you are to act as the one who had executed the sub-contract worth the sum of US$8.6 Million for my Department and you now want your payment settled. Remarkably, this deal is 100% risk free. Prior to contacting you, I have worked out modalities that would guarantee a hitch free transfer of this fund to your account fully free of any illegal act or encumbrances and are clean, clear and non-criminal origin. I will guide you on how to go about it upon your return mail and we shall claim the fund without any difficulty.
If you are interested in the proposal, and you are a trustworthy person who would not sit on this money if it is transferred into your account, kindly indicate by contacting me through my E-mail and you can as well send your bank account details for this transfer. Please note that this deal must be kept absolutely confidential till we have concluded it. I have also mapped out 35% of the total sum for your compensation for your help and assistance to receive the fund.
NOTE again that upon completion of this transaction, I shall visit you immediately to collect and invest my share in your country. Therefore, you will equally assist me to identify and advise me on any viable business which will have a good return on investment in your country. Please send your response through my private email address: EngrSteveNkhoza@outlook.com for my urgent attention.
Thank you as I look forward to your anticipated co-operation.
Yours faithfully,
Engr. Steve Nkhoza
Secure Account
What a load of old rubbish. Dear “User” – as in, this scammer has no idea who I am. They very sweetly want to “Avoid
Your Domain from being Deactivated from Our server”. What domain??? Why would any domain that I own (including this one) be on the Microsoft server?
If you click on the link, you are taken to outlyer.date/office365/office/. The domain “outlyer.date” was registered this year to a proxy in Panama. In the interests of research my friend Roger Rabbit signed in using a fake email address and password and was then sent directly to the real Microsoft website. It seems these scammers are after your Microsoft account details.
If you think you might have accidentally given these scammers the log-in details for your Microsoft account, log in and change the password immediately.
Sign in Activity Update
Dear [User]
Microsoft Alert: We want to Ensure your safety regarding your Account to Avoid
Your Domain from being Deactivated from Our serverWe recommend you to sign in from your usual location and Secure Account to
protect your Domain from being deactivatedSecure Account
Action will be effective briefly
This is a mandatory communication about the service. To set communication preferences
for other cases.This message was sent from the email address is not monitored. Do not reply to this message.
Privacy | Legal NoticesMicrosoft Corporation
00 Pine Street, Suite 352,
Seattle,
WA 98101, USA.
Fake ESTA sites
What is an Esta?
It stands for Electronic System for Travel Authorisation. It is requirement for entry into the United States for citizens from certain countries who can apply for an ESTA instead of a Visa.
How To Apply
Apply through the official US government website – https://esta.cbp.dhs.gov/esta/
There is a fee of $14 to apply for an ESTA
What’s the Scam?
There are several websites that will charge you an added fee for this service. (This is similar to the UK EHIC scam where many websites charge a fee for what should be a free service.)
At the time of writing this ( Sept 2018) I did a quick Google service and came up with the following list of sites (all on page 1 of the search results) charging a premium for selling you the exact same service as you will get via the official US governement website:
https://www.estaapplication.us/en/ charges $50
https://apply-esta.us.com/ charges $79
https://www.estavisa-org.com charges $99
https://www.estavisas-us.org/esta/en/ charges $79
(interestingly, all the above websites are using paid Google advertising to ensure they appear above the official government website in search results)
https://www.esta-registration.co.uk/ charges £32.40
https://www.evisaonline.com/en/usa/esta.html charges $88
In fairness all these sites include links to the government website and all claim they offer a checking service.
The UK Post Office website offers some helpful information on how and where to apply for an ESTA and also explains who needs one, how long it lasts and what will happen if your application is initially rejected.
https://www.postoffice.co.uk/electronic-system-for-travel-authorisation
I’ve collected some very interesting content about you.
This is a cut price bitcoin scammer. The last one wanted 399$ in bitcoin See Here. Sometimes these scammers use a username or an old password they’ve found for you from a hacked list. This one seems to have purchased a dodgy list – that’s not a username I’ve ever used.
Just ignore this fool. Most people don’t own bitcoin, but if you do please don’t send them to this scammer who has no idea who you are.
Hi, sacrifice.
This is my final warning.
I write you inasmuch as I buried a trojan on the web page with pornography which you have visited.
My trojan grabbed all your private information and turned on your webcam which recorded the act of your masturbation. Just after that the virus saved your contact list.
I will remove the compromising video records and information if you send me 350 USD in bitcoin. This is address for payment : 1GW7R8sy4YXYuHVtR1SUbMZq26ztKZRhuTI give you 30h after you open my message for making the transaction.
As soon as you open the message I’ll see it immediately.
It is not necessary to tell me that you have sent money to me. This address is connected to you, my system will erased automatically after transfer confirmation.
If you need 48 hours just answer on this message with +.
You can visit the police office but nobody can’t help you.
If you attempt to deceive me , I’ll know it right away!
I don’t live in your country. So no one can’t find my location even for 9 months.
Goodbye. Don’t forget about the disgrace and to ignore, Your life can be ruined.
Free pulse oximeter
I received this message in my “Filtered messages” folder on Facebook:
Free pulse oximeter for my UK friends, ur best personal health monitor or carer.
We will full refund after shipped by pp, so if you buy it , maybe you could receive refund in the same day.
Or “maybe” you won’t receive a refund and will have sent money to a scammer who will send you nothing in return.
I’ve said I’m interested. I’ll tell you how much this scammer thinks I should send.
“Nathaniel Clark” has replied:
we will ful refund after review and cover pp fee and 3 commision.
if you interested it please give me your pp and profile link
Scam HMRC Phone Call
I just received a phone call from 0161 818 7299. It was a recorded message, claiming to be from HMRC. Obviously it wasn’t. It was a recorded message, not a person. I was told that I should contact my solicitor and phone them back immediately.
I was told that if I did not call them back, and they did not hear from my solicitor I should “get ready to face the legal consquences”.
They finished by saying “good bye and take care”!!!!
I recorded the message, which I’ve uploaded below.
Please folk – don’t get taken in by these scammers, who just want your money. If there is a problem with your tax return to HMRC they will write to you. But if you do receive an official looking letter, make sure it addresses you by name and make sure you look up the real phone number of HMRC on the official government website.
I called them back, using a free internet calling service. I was told to open internet banking on my computer and transfer over £2000 pounds to the scammers.
Invoice from EDF Energy Inc.
Nice try sunshine. I don’t have an account with EDF Energy and I’m a private household, so at most my bill would be a few hundred pounds. Which is what this scammer is relying on. They are hoping the person receiving this will panic at being told they owe over £27k and will click on the link. I don’t know where the link was meant to take you because it’s been removed. I’d guess either to a site infected with malware, or to a site where you are asked to confirm your credit card details.
Ignore this email and delete it.
company_logo
EDF Energy Inc.
INVOICE
77608783
DUE DATE
14/07/2018
BALANCE DUE
27539.00
View invoice
Dear Customer,
Here’s your invoice! We appreciate your prompt payment.
Please note: details for the payment have changed and can be found on the bottom of the invoice.
Thanks for your business!
EDF Energy Inc.
Unsuccessful submission for Reference 475-VB22516
What are you supposed to have submitted? The scammer can’t be bothered to say. S/he just hopes you will fall for the scam and click on their link – which will either take you to a page where you are asked to fill in your financial information so the scammer can his/her hands on your money, or will take you to a site infected with malware.
Just delete this fake email.
Unsuccessful submission for Reference 475-VB22516
The submission for reference 475-VB22516 was successfully received but unfortunately failed HM Revenue & Customs data checks and could not be accepted.
Please use the link below to view your submission, correct it and send again.
View submission for reference 475-VB22516
If you continue having problems, please contact the Online Services Helpdesk.
Telephone 0300 200 3600, Textphone 0300 200 3603 or email helpdesk@ir-efile.gov.uk
We are open:
Monday to Friday – 08.00 to 20.00
Saturday – 08.00 to 16.00
(We are closed Christmas Day, Boxing Day and New Year’s Day).
Learn to be responsible for actions ID houBnwyb8i
This very (un)convincing bit of ridiculous rubbish arrived in my inbox a couple of days ago. Somehow I think I might regret asking what the writer meant by saying “you have been flog the dummy”.
If you do happen to own bitcoin – please don’t send any of them to this scammer.
Just ignore this daft email and delete it.
At the time when you have been flog the dummy in front ofyour device screen when you visited porn web site your notebook get malicious program amid secure vulnerability the browser.
The malicious program records all the activity at your device and among others it is informed about coockie of the resources that you run over.
But the best asset of the named hostile program is that it have a chance activate WebCam and upload all the Contacts from your email.
At the same time I possess username to your email and SNSs.
Now I possess video and snap shots where you jack off and naked.
If you don’t want that photos to give to the world and to be dispatched to all the guys loved ones I recommend you the next alternate solution.
You should send to my Bitcoin address 1MVAaxAQj1HuQkK13sZvDiPrqUQLViXYYP 399 $ in BTC.
After having received of cash I would remove ammunition against you and you will never again heard about this unpleasant situation.
Failing this in a case if I don’t receive this money within 23 hours after have read that mail I shall send all that weirdoammunition against you to your family members and colleagues and at the same time through social media platforms for overall estimation of your actions.
P.S. My my English knowledge is not far from perfect because I am not native speaking nevertheless you should to understand me.
I ask you and don’t reply to this mailbox I shall never use to it again.
Harry Pike – Rental Scammer
This scam warning was posted on a Facebook group that I belong to. I have the poster’s permission to reproduce it here.
Gumtree is a hotbed for scammers. Anyone can post and anyone can answer. Do some serious research before parting with your money for anything that you haven’t seen in person.
If anyone sends you photos of a property, holiday home, goods do a Google image search to see if you can find the originals.
It’s an easy thing to do……
a) Go to https://images.google.com
b) upload the image you have been sent.
c) look through the results and see if you can find the original of that image. Then follow the links if the image has been found.
d) Ask yourself if the website(s) you are taken to belong to the person who has contacted you. Take the precaution of using any contact details on the website and try to speak to the person to see if they sound genuine. (This particularly applies to holiday villa scams and entire websites full of fake villa rentals. If it sounds too good to be true, you know what to do.)
WARNING – GUMTREE SCAM!
Just to warn others that I placed an ad on Gumtree on Saturday for Property/Land wanted to rent in Lewis/Harris. I was contacted by text by a person called “Harry Pike” who was offering his South Galson home for rent. He sounded genuine and even sent me pictures of the house in question and details of it. My partner and I were relieved and thankful as we are desperate to live on the Island, having given notice on our rented house and having sold most of our belongings to fund the move.
The man suggested sending the keys to us upon receipt of an initial deposit of £300, which I agreed I would transfer on Tuesday. He pushed for it to be done yesterday or today and that’s when alarm bells began to ring with me.
I asked him for proof of his identity and ownership of the property and he initially agreed then went quiet.
I have since googled him and found out that this “Harry Pike” is a serial scammer who has made it his business to scam unsuspecting people out of anything up to £300 a time.
Re: Domain Availability Notification: lyourdomain.com
(The web address on “click here” is http://www.excitingtweet.com/domain/yourdomain.com, which if you click on it takes you to http://maximdomains.com)
This domain has not “recently become available”, it has never been registered. If you would like to purchase the domain suggested to you, DO NOT pay $49 or whatever price is being asked. Go to your regular registrar and buy and the normal price – which is $10 in this case and the domain is available.
yourdomain.com has recently become available on the market. This domain might be useful for you, since you own a domain similar to this domain.
To express interest in owning this domain, please click here.
Тicкet#294335236: 27/03/2018 04:20:15 Concentrate and do not be angry
Not many scams make me laugh so hard that I spit my tea, but this one did! Nice try sunny Jim.
Unfortunately bitcoin wallet addresses are virtually anonymous, so there is no way of catching this idiot by trying to find where he is asking for money to be sent.
Think about it. You are being asked to send money to an anonymous address – and the scammer is not asking you to identify yourself, so has no way of knowing who sent the money. So IF they did hold information about you (which they don’t), they would have no way of knowing whose information to delete.
Just ignore this idiot. And DO NOT open a bitcoin account in order to pay him (or her).
Delete this email.
Good Morning my victim.
I represent a group of web criminals from Vietnam. We use your working email because I know that you will check it.
Last month I uploaded a malicious program in porn site and when you tapped on a play button your system began recording your screen and switching on camera to capture you masturbating.So I believe you understand which data Ive got.
Also, my software caused your device operate as rdp with plenty of abilities as keylogger,parser etc. To sum up, my soft compiled all evidence,especially all your contacts from messengers,mails,social networks.If you wanna make me silent you have to make a payment of 500 dollars using bitcoins (cryptocurrensy). We are sure that you have this sum.
It is Bitcoin wallet for payment – 12DTFTHPKpfzjqXYCHZaaoUjC8kFhj4k7CYou should copy and past it. If you send bitcoins We will delete everything about you.
Watch youtube manuals about methods of buing BTC. For example you can buy them at coinbase .com. If you have a problem with this, you can search comfortable ATM for bitcoin through coinatmradar.I give you only one day from the time you open my letter for making a payment.You can complain cops, but they can not find us we use bot network, also we do not live in your country.If you want proofs I can show it to 7 your contacts after that you will be given their links. So you will ask them if they have received something or not.If you have some problems write me back.
Good luck.
Facebook Giveaways
I’m often amazed at how many people will blindly “like and share” a fake giveaway on Facebook. They rarely even read the original post let alone the legions of comments where people are trying to warn that the post is a scam.
There is a repeated one, that I have to say I’ve not seen recently, where a page claims to be giving away luxury motorhomes that can’t be sold.
But today I’ve seen this one:
The page is named “P&O Cruise” but if you go to the “about” information is says it is for “fans of P&O Cruises”. The page has just one post – the one pictured above.
The photos used for these fake giveaway cruises is a photo of envelopes containing nominations for the Oscars.
There are no cruises to win. But as ever, the page is asking you to share the post and “sign up”. At the time of writing around 65k people have done so.
Please folk, if you are going to share something on Facebook do the following:
- Stop
- Think
- READ the original article
- Look at the page/post/organisation you are being asked to share.
MOST articles, etc that ask you to “like” them are doing so for one reason only, to make the page appear to be more popular than it is.
If you share a post/page/article without reading it first – you become complicit in the scam. You become a scammer. so – Stop; Think; Read; before sharing with your friends and making a fool of yourself.
FST: [you@youremail.com] 06-03-2018 07:59:58 Anyone can make a mistake
This glorious bit of ridiculous rubbish landed in my inbox yesterday. All I have to do is send money to the scammer’s bitcoin account. Yeah, right.
The email claims they will send proof to 5 of my contacts if I reply, so in the interests of research my online alternative persona has replied to see what, if anything, is sent.
Meanwhile, ignore this fanciful scammer who claims that he is “from Estonia” so he “dgf”. Not sure what the connection is there!!!!
Good day,
If you were more careful while caress yourself, I wouldn’t write dis message. I don’t think that playing with yourself is really bad, but when all colleagues, relatives and friends receive video record of it- it is definitely news.
I seized virus on a porn site which you have visited. When the object press on a play button, device starts recording the screen and all cameras on your device begins working.
Moreover, soft makes a remote desktop supplied with key logger function from ur device , so I could collect all contacts from ya e-mail, messengers and other social networks. I’m writing on this e-mail because It’s your corporate address, so u should check it.
I think that 320 usd is pretty enough for this little false. I made a split screen video(records from screen (u have interesting tastes ) and camera ooooooh… its awful AF)
So its ur choice, if u want me to destroy ur disgrace use my bitсoin wаllеt аddress: 16n9apBAR83Qi7s7PDwFdp3szs2a9VTfyx
You have one day after opening my message, I put the special tracking pixel in it, so when you will open it I will know.If ya want me to show u the proofs, reply on this message and I will send my creation to five contacts that I’ve got from ur contacts.P.S. You are able to complain to police, but I don’t think that they can solve ur problem, the inquisition will last for one year- I’m from Estonia – so I dgf lmao
Notification of Vehicle Tax DD Payment Schedule (Ref: 000000-000006-723890-002)
What a load of old rubbish. Don’t open the attached file – it contains a virus.
Your “Vehicle registration number” hasn’t been “(protected for your security)”. This scammer has no idea who you are or what your vehicle registration number is. They are just trying to infect your device with their malware.
Delete this bit of rubbish.
Important: Confirmation of your successful Direct Debit
Vehicle registration number: ****** (protected for your security)
Thank you for arranging to pay the vehicle tax by Direct Debit.
Please can you check that the details below, and your payment schedule are correct:
Account name: See attached file
Account number: See attached file
Bank sort code: See attached fileIf any of the above financial details are incorrect please contact your bank as soon as possible.
However, if your details are correct you don’t need to do anything and your Direct Debit will be processed as normal. You have the right to cancel your Direct Debit at any time. If you cancel your Direct Debit the vehicle will not be taxed. A copy of the Direct Debit Guarantee is included with this letter.
Enclosed is a schedule of your Direct Debit payments showing the amounts and dates for collection. We recommend that you retain this schedule for your records. You do not need to wait for the first payment to be taken before the vehicle is used on the road.
For your information, the collections will be made using this reference, and this is how your payments will be detailed on your bank statements:
DVLA Identifier : See attached file
Reference: See attached fileYour vehicle tax will automatically renew unless you notify us of any changes. We will send a new payment schedule at the time of renewal.
Yours sincerely
Rohan Gye
Vehicles Service Manager
Notification About Account !
A sneaky Paypal scam – which amounts to total identify theft. They even ask for a photo of yourself and your ID card – see below. If you think you have accidentally given your bank details to these scammers, contact your bank immediately.
Dear Cutomer
We Have Noticed That Someone Tried To Log Into Your Account
To Avoid This Problem You Need To Confirm Your Personal Information >From The Following Button Below
When you click on the button you are taken to a fake Paypal website. Look at the web address in the address bar at the top of my browser. Not the real paypal website.
My friend Roger Rabbit entered his fake email and fake password and was then asked for his credit card details
He lives in a cosy rabbit burrow so entered its address. The scammer had a clever script running on the Card number field which meant that a random set of numbers didn’t work – so I (woops Roger Rabbit) had to use an online, fake Visa card number generator.
He was then asked to create a verified by Visa password
Then the clever bit to complete the identify theft – he was asked to submit a photo of himself along with his ID. The scammer even gives instructions on how this should be done.
As the scammer gave a helpful example, Roger Rabbit did a quick copy and paste job and submitted the picture given as an example.
Once this was submitted he was re-directed to the real Paypal website.
Complaint Filed Against You
This sounds like a scam that usually happens in the US. This is the first time I’ve heard of it happening in the UK.
A Facebook friend posted this and has given me permission to add it here.
Anyone else received a scam call from 01273 917063? Didn’t hear the first part but a female voice said that a complaint has been filed against me and that my house is under surveillance. I need to ring 01273 917063 without delay or I will be prosecuted.
Quite a scary message! Especially as it is a Brighton number. Do not be fooled! I’ve checked it out and it’s a scam!
Sensibly, she ignored it. if she’d rung back I suspect that she would have been told that the Police were on their way and she had to go to her nearest shop and buy iTunes vouchers, or send money via Moneygram or Western Union to stop herself from being arrested.
Fake John Caudwell Phones 4 U Restart Investment Opportunity
While I’m on the subject of people impersonating John Caudwell (see previous post), this is directly copied and pasted from his genuine Facebook account.
My online, alter ego, has replied expressing interest. So I will let you know what the scammer says below.
“FRAUDULENT USE OF MY NAME
WARNING!
URGENT- PLEASE SHARE
Please do not invest thinking this is me!!!!!
I became aware of the following, offering profit from a reborn Phones 4 U in my name.
!!!!!!!!!!THIS IS NOT ME!!!!!!!!
“As you may know my name is john caudwell, I decided to add some people up because I want to share my plans to bring back phones4u and this time make it bigger and bigger. It will cost much but money is not the problem. I decided not to post this on my wall because I want just a few people to be part of this and enjoy in the benefits. In the past I have had partners in the Phones4u business that ended up betraying the company by stealing from it and that is one of the reasons Phones4u is not what it use to be. I have promised my self not to go in partnership with any investors or private companies. So I am here to give you an opportunity to be an investor in the Phone4u business. We only take investors who are interested in putting from £500 and above in the business. I encourage you to be a part of this because whatever amount you invest in will be multiplied by four and you will receive it in just 2 weeks after your money have been placed. All we need from you is a valid email address and the bank details you want you money to be paid into
Write me back whatever you think right here or my email at johncaudwell4u@gmail.com
It’s compulsory it’s optional. I have done lots of good for the world and I will continue to touch as many of you that I can.
If your are interested, write me back and I will send you our official site to sign up.
Thank you, God bless you
Happy Holidays “
Please EVERYONE share this post TO PROTECT OTHER PEOPLE.
PLEASE ASK YOUR FRIENDS TO SHARE IT.
I don’t know how many messages are going to my connections but it has now come to my attention 3 times in the last few hours so it appears to be a serious attempt to take money off a lot of people!
Other media platforms may be used but at the moment it only seems to be face book.”
This scammer was quick off the mark and replied quickly to my online alter ego:
Thank you very much Mrs xxxx, I am very glad that you want to be a part of this.
You have to write us back notifying how much you want to invest
We apologize if this message is coming late, we have been receiving email all week
Thank you for your time and write us back as soon as possible
Fake John Caudwell Facebook Account
I have Lyme Disease so belong to several support groups on Facebook.
The millionnaire John Caudwell has done a lot of work recently with raising awareness of Lyme Disease and associated co-infections. You can read about his work on the website.
His charity also has a Facebook page, which you can see here. Note the address of this page
https://www.facebook.com/johndcaudwell/ Also note that it has more than 8000 followers at the time of typing this.
However, a scammer has set up a fake page using John Caudwell’s photo. I won’t dignify it with a link, but I’ll just type the URL so you can see the difference
https://www.facebook.com/John-Caudwell-124135931116322
This profile has just 42 likes and only one post, from 2013. Yet a Lyme sufferer has been contacted by this page recommending a particular doctor and offering to help get an appointment if she transfers a large sum of money to a bank account to start treatment.
The Caudwell charity has asked that if anyone is approached in this way, please to contact them.
NEVER transfer money to anyone you don’t know. It’s easy for ill and ignored people to be taken in by an offer of help when they have been previously ignored. Stay safe. ALWAYS ask on a reputable group of forum if you are approached to find out if the person approaching you is legitimate.
You need to update your informations for your last order!
This sneaky little email is designed to make you panic and click “here” as instructed to cancel the order.
If you click you are taken to a web address that is NOT the apple website. (I won’t add it here as I suspect the scammer has hacked a genuine website).
You are then asked for all your financial information. My friend Roger Rabbit hopped to it and filled in the forms.
This is the first page he saw:
All he had to do was click on “unlock now” to supply missing information. Like a dutiful little bunny, he clicked. Then he was asked for his address and credit card details:
After he’d filled in his financial information, including his date of birth he was taken to a fake “verified by visa” page where he was asked for all his verification data. How do I know this was a fake page? 2 reasons – 1) Roger Rabbit is not yet 2 years old and is far too young to have a credit card. 2) All the details he filled in were totally made up – there is no such card.
If you think you have accidentally filled in your details and given these scammers your credit card details, contact your bank immediately and ask them to stop your card.
Apple Receipt
APPLE ID
#e-mail#
This receipt confirms payment for Candy Crush Soda Saga
You will be billed each month unless you cancel now : Click HereTOTAL
$18.35
DATE
NOV 15, 2017
ORDER ID
MGKJXLVVD8 DOCUMENT NO.
123104902066
App Store TYPE PURCHASED FROM PRICE
Candy Crush Soda Saga, S Gold Bar package Candy Crush Soda Saga, S Gold Bar package
Report a Problem In-App Purchase DarkNet iPad $4.99
Candy Crush Soda Saga, XS Gold Bar package Candy Crush Soda Saga, XS Gold Bar package
Report a Problem In-App Purchase DarkNet iPad $87.99
Candy Crush Soda Saga, XS Gold Bar package Candy Crush Soda Saga, XS Gold Bar package
Report a Problem In-App Purchase DarkNet iPad $87.99
Candy Crush Soda Saga, S Gold Bar package Candy Crush Soda Saga, S Gold Bar package
Report a Problem In-App Purchase DarkNet iPad $4.99
FarmVille: Harvest Swap, Bag of Diamonds FarmVille: Harvest Swap, Bag of Diamonds
Report a Problem In-App Purchase DarkNet iPad $4.99
Subtotal $190.95
Tax $1.40
TOTAL $192.35
Review or change how often iTunes, iBooks, & App Store purchases require your password on iOS by going to Settings > iTunes & App Store > Password Settings. In iTunes for Mac, go to iTunes > Preferences and click Store. In iTunes for Windows, go to File > Preferences and click Store.Apple ID Summary � Purchase History � Terms of Sale � Privacy Policy
Copyright � 2017 Apple Inc.
All rights reserved
Online Tax Refund
This DOES NOT come from the Inland Revenue. They will NEVER email you and tell you about a refund. To find if you are due for a refund you must log in to your online account and request it from there.
DO NOT fill in this form – which is identity theft – stealing not only your credit card details, but your name, address and date of birth.
If you think you have accidentally given your details to these scammers, phone your bank immediately and ask them stop your card.
Refund Form – ID 791827938
After the last annual calculations of your fiscal activity we have discovered that you are eligible to receive a tax refund of GBP 643.55.
Kindly complete the tax refund request and allow 1-3 working days to process it.
Please download the form attached to this email and confirm your tax refund.
A refund can be delayed for a variety of reasons.
For example: Submitting invalid records or applying after the deadline.
Yours sincerely,
Edward Troup
Tax Assurance Commissioner.
Please do not reply to this e-mail as this is only a notification.
Mail sent to this address cannot be answered.
© Crown Copyright
Scam Domain registrars and web hosts
After I wrote the previous post about a scam email from China claiming that someone wants to register several variations of one of my own domain names, I did some delving into the, so called, domain registrar that emailed me.
This is the website/domain name they are using. Here’s their website:
It’s domain is http://cnygdomain.com. They claim to be China’s favourite domain registrar – yet their site is entirely written in English.
So I copied a sentence from the site and pasted it into Google. Hey presto, that came up with another domain registrar’s site – this time a site that claims to be based in Canada.
It’s an interesting site. A lot of the links don’t work and although it claims they’ve been in business since 1998 apparently they haven’t managed to finish their website yet as much of it is still the latin “lorem ipsus” text that WordPress uses as a place marker.
I’m not going to include a screenshot as the scammers have copied the website of a legitimate Canadian web host/registrar and then hacked into another legitimate site to upload it.
“yourdomainname”
I haven’t seen this scam for a while. No-one can register an internet keyword – they are just the words or phrases that search engines use to find your website – and depend entirely on what people searching for your site enter as their search term.
There are dozens, if not hundreds, of domain extensions these days and you can’t register them all.
My online alter ego has emailed back saying that she has no business partners in China. I’ll bet they reply and asking her for money to register those useless domain extensions.
Just ignore this bit of rubbish. No-one wants your “keyword” and no-one has any interest in registering those domains – it’s just a made up bit of rubbish to get you to part with your cash.
I entered the address of their website – and it takes you to domain registrar and hosting website which claims that “We are China’s favourite and most trusted domain name registrar”. Interestingly, the website is entirely written in English – obviously a language widely spoken in China – or maybe not!
Dear CEO,
(If you are not the person who is in charge of this, please forward this to your CEO, because this is urgent. If this email affects you, we are very sorry, please ignore this email. Thanks)
We are a Network Service Company which is the domain name registration center in China.
We received an application from Hua An Ltd on October 26, 2017. They want to register ” yourdomainname ” as their Internet Keyword and ” yourdomainname .cn “、” yourdomainname .com.cn ” 、” yourdomainname .net.cn “、” yourdomainname .org.cn ” 、” yourdomainname .asia ” domain names, they are in China and Asia domain names. But after checking it, we find ” yourdomainname ” conflicts with your company. In order to deal with this matter better, so we send you email and confirm whether this company is your distributor or business partner in China or not?Best Regards,
Mike Zhang | Service Manager
Cn YG Domain (Head Office)
8006, Xinlong Building, No. 415 WuBao Road, Shanghai 201105, China
Tel: +86-2161918696 | Fax: +86-2161918697 | Mob: +86-1582177 1823
Web: www(dot)cnygdomain(dot)cn
Fw:Re: Payment confirmation
Don’t open the attachment to this – it almost certainly contains malware. This scammer doesn’t know who you are, doesn’t say which company they represent or what they are paying you for.
Just delete this email. If you accidentally opened the attachment and think your computer might have been infected with malware, download and scan your computer with the free version of Malwarebytes.
Good morning,
Attached swift copy of our payment, please confirm when you
receive funds in your bank account.Best Regards,
Kirsten Buermans
Account OfficerTel. +32 3 202 92 33 – GSM +32 470 90 10 43 – Fax +32 3 202 91 94
– Internal 374119233KBC Bank NV – BC Antwerpen Corporate
Eiermarkt 20, 2000 Antwerpen
Bill SM-004807 from Peyton & Byrne Limited is due soon
You’d think that a company to whom you owe money might know your name, rather than resorting to addressing you as “Dear Valued Customer”.
The domain name associated with the email address that this was sent from – acm.somerset.sm@aeoncitimart.vn – is Vietnamese.
This scam has NOTHING to do with the legitimate restaurant business.
I didn’t download the .pdf document as I suspect it might be infected with a Trojan.
Ignore this scammer.
If you did accidentally download the document and think your computer might have been infected, download and scan your computer with the free version of malwarebytes – available from www.malwarebytes.org
Dear Valued Customer
This note is just to make sure that you have received a copy of our invoice for £491.40 which will become due for payment on 18 Oct 2017. A copy is enclosed, just in case it has not reached you.
If there is anything you need us to do please let us know. Otherwise, we look forward to continuing our work with you.
Thanks and Regards
Peyton & Byrne Limited
+44 (20) 7839 6674
RE: P.O No.4031450122
I didn’t even try to open the attached file, which probably contains a Trojan and may not even be openable.
I’ve omited the web address and phone numbers from the bottom of this email, as I suspect they relate to a legitimate business that have no connection with this scam.
Just delete this bit of rubbish – which if you look was sent to “undisclosed recipients” ie as many email addresses as this scammer could get their hands on.
Dear Sir,
Could you please provide price and delivery time for this Purchase Order (P.O.) No.4031450122 .
In case you have a replacement for this item, please send me that price too.The shipping will be to Florida, USA.
Also, please provide for the item/s above:
* DELIVERY TIME
* F.O.B
* WEIGHT
Dear Winner!
Yeah, right. Obviously a Canadian lottery is going to randomly email and use a Brazilian email and a “fun, free email address” from Freeola (direct quote from their website) for you to reply to.
No organise anywhere ever holds random email draws. You cannot win a lottery or prize draw that you have not entered.
This is just a scammer who is hoping to take your hard earned money to pay his fake “fees”. Ignore him (or her).
Lotto 6/49
70 Foster Drive,
Suite 800 Sault Ste.
Marie, Ontario
P6A 6V2 Canada
Congratulations!
Your email ID has won $800,000.00 CAD {Eight Hundred Thousand Canadian Dollar} in the Ontario 49 Draws lottery promotions held in Canada, Ontario Toronto to be precise.
Five (5) email addresses were selected from over One Million email addresses and your email address is among the five winning email addresses in the winning pot, which was attached to Reference Number: 075 that ultimately has won you the lump sum mentioned above.
Draws Date Sat, October 14, 2017 – Lotto 6/49 draws, with winning number: 6, 22, 28, 29, 32, 34 and Bonus number: 43
Your fiduciary agent would process the release of your cash prize through our payee bank by means of Electronic Fund Transfer (EFT) into your nominated bank account. Be informed that funds cannot be deducted because of the insurance policy place on it until the mentioned cash prize reaches the sole winner/beneficiary’s nominated bank account for security reason(s).
This promo is approved by the Canadian Gaming Board and also licensed by the International Association of Gaming Regulators (IAGR). To process the release of the above-mentioned cash prize, contact the fiduciary agent through the two email details below:
WELSHHOME FIDUCIARY 20 Dundas St W, Toronto,
ON M5G 2C2, Canada
Name: Kevin Rothmans (Mr)
Tel No: +1 705 242 3303
Fax No: +1 705 242 3303
E-Mail: kr@welshhome.net
E-Mail: krothmans1@bol.com.br
You are advised to send your “Reference Number” to your broker agent Mr. Kevin Rothmans with the above-mentioned details to facilitate the release of your cash prize. Keep your claim information confidential to avoid double claim which could lead to cancellation of your cash prize.
Yours in service,
Mark Boyce.
Please Read
Look at how my “dear friend” signs her email – “your in vineyard”. I suspect she might have been more than a little tipsy on the produce from this vineyard when she wrote.
She also sent this to “undisclosed recipients” which makes me think I might not be that much of a “Dear Friend”. That or she has $10.6m dollars to give to everyone that she has written to. I think that’s unlikely, don’t you?
“Mrs Linda Hardy” isn’t confined to a wheelchair dying of cancer. He or she is skulking behind a computer somewhere hoping you will be daft enough to fall for her scam. If you are this scammer will start asking you to send them money. Just delete this bit of nonsense.
My Dear Friend,
I don’t really know who you are, but I hope that peace is with you as you read this letter. My intuition tells me that I can trust you with my proposition. I received your contact through my email directory and my inner voice suggested that I send this money to you. I am a widow and a devoted Christian. My name is Mrs. Linda Hardy, and I am from the city of Joplin Mo. Since my husband died, I have been suffering from arthritis. Just this summer, my doctor has diagnosed me with terminal cancer. I have approximately twelve months to live. I am currently confined to a wheelchair, and am being cared for by a nurse.
Before my husband died, he left me a large sum of money, to the tune of $10.6m Dollars. He made me promise that it should be used for humanitarian work. We have no children you see, and my husband didn’t want his brother to inherit it. This money is currently being held by the bank, awaiting the proper recipient. It is up to me to decide who will gain access to it. If you promise me that you will use this money to achieve the wish of my Husband and I, then I will instruct the bank to release the contents of the vault in your name.
If you agree to use the money for humanitarian purposes, I will need the following information from you:
Your full name, contact address, occupation, age, and phone number.
God bless you as you walk in the light and glory. Please kindly send your reply to my
private email address:( mrs.lindahardy@gmail.com )
Yours in Vineyard,
Mrs. Linda Hardy.
mrs.lindahardy@gmail.com
New BT Online bill
Goodness me – I’ve had two “new BT Online Bill” emails today. The first was for £257.90 and the second was for £179.02. Both claim to be from BT Business.
I don’t have an account with BT – that’s the first clue that these are fake. The second is the link that you are taken to https://extremedentsptyltd-my.sharepoint.com/personal/sandra_extremedents_com_au/_layouts/15/guestaccess.aspx?docid=02788674b4fca4cc89483219441ebd0af&authkey=AUHkDADGlPYGVd79AF7-98g
Take a look – that isn’t the address of the BT website -it’s a file sharing website where someone has uploaded a .zip file that will be infected with malware.
DO NOT open the .zip file. If you have accidentally opened it, download the free version of Malwarebytes (www.malwarebytes.org) and scan your computer.
New BT Online Bill
Your bill amount is: £179.02. This doesn’t include any amounts brought forward from any other bills.
We’ve put your latest BT bill online for you to view. See your bill here.
The PDF version of your bill might not be available for download yet. It can take up to 48 hours.
We’ll take your payment from your account as usual by Direct Debit.
Reduce paper waste
You’re still getting paper bills by post. Why not go paper-free, and stop storing and shredding them once and for all?When you log in to your account, you can also see your recent usage, call costs and bills.
Get more from our App
Did you know you can view and pay your bills and manage your orders via the BT Business app?
Download now
An Accident That Wasn’t Your Fault
Usually when I’m phoned by the no fault accident scammers they have a strong India/Asian accent.
But I’ve just been phoned by a lady with a very English sounding accent. She claims the address she was phoning from is in Norbury Cross sw16 4jq. I won’t give the rest of the address in case it’s the address of an innocent third party.
The number she was using was 020 8087 9136 – which will almost certainly be a free or cheap internet phone number. So she could have been calling from anywhere.
One day I must engage one of these scammers and try to find out at what point they start asking for money.
Horrible New……………
There are so many things wrong with this garbled bit of rubbish, allegedly sent by a friend, that it’s hard to know where to start. So I won’t.
This is from a hacked (or spoofed) email account. My friend hasn’t left the country and would never ask me to loan them nearly £3k.
NEVER respond to one of these heartfelt pleas for money from a friend. No true friend would ask you for money by email. If they genuinely needed cash (and I know that happens) they would ask you in person, either face to face or they would phone you.
This is scammer who is hoping you will take pity on your friend in need and send them large amounts of cash.
Even if this was my friend, I don’t have that kind of money sitting in my bank waiting to send.
Hello!
I’m sorry you’re getting the mail from me at this Point in time,my family and I came down here to Vinnitsa Ukraine for a short vacation unfortunately we were mugged at the Iet would like to open up one secret in my heart to you once you have promises to help, i am assuring you it is not going to bring any problem now or future About us., life here in Ukraine is very difficult to me, I cannot eat three times a day, Ever I have not eat for some day now, I am really suffering here, it makes me cry each day and night when i look at my condition here, but I know that with you i will soon come out from this my present condition and have a new life with you,all cash credit cards and cell were stolen off but luckily for us we still have our passports with us.hotel bills and the hotel manager won’t let us leave until we settle the bills.I need you to loan me £2,850Pounds or whatever amount if not all?. I promise to refund it in full as soon as I return. let me know if you can be of any assistance. Please,
I have been to the embassy and the Police here but they’re not helping issues at all and our flight leaves pretty soon from now but we’re having problems settling the let me know soonest.
Thanks so much..
RTI filing complete
I have removed the link from this email as it almost certainly leads to a download infected with malware.
DO NOT click on the link. If you have accidentally opened the file, download and scan your computer or device with Malwarebytes (www.malwarebytes.org)
RTI Filing
Hello,
We have completed RTI filing for your company. The details are below.
Tax Year 2017-18
Period M5
RTI Filing Type FPSTo view the full submission details, Click here.
Your Xero Invoice INV-0003677
Do NOT click to view your bill – you will be taken to a site with malware.
This email has nothing to do with xero.com, which is a perfectly legitimate website. Look at the links in this email. The information ones (help, question, update) take you to the real website.
BUT – the “view your bill” link does NOT take you to the Xero website – it takes you to sharepoint.com
Now look at the email address this email claims to come from. subscription.notifications@xeronet.org
I looked up xeronet.org – it was registered today (16 Aug 2017) to someone in China. Here is the who.is information
Dear Client
Here’s your Xero subscription invoice for the previous billing period.
View your bill: INV-0003677
You’ve already provided us with your payment details so unless advice to the contrary is received from you by 23 Aug 2017, the amount will be debited from your credit card on or after 26 Aug 2017.
Need help updating your payment details or understanding how Xero bills you? Click here
Need help with your online subscription invoice? Click here
Need a question answered about Xero? Ask it hereRegards,
The Xero Billing Team