Under Construction

Here is an example I encountered. Name and email address has been changed.


From: "mark moore" <mrkmoore29@gmail.com>

Date: June 11, 2009 12:35 AM
Subject: $250 / 2br -  Cabin 
--
Hello,

Can you please check if we can use 3 nights at your Unit ? (June 25th-27th) . I want you to email me the availability and cost.My Wife and I are coming for our honeymoon. we dont smoke and we dont drink and no pets....Awaiting your quick respond Asap....Thanks


From: "mark moore" <mrkmoore38@gmail.com>
Date: June 11, 2009 12:11 PM
Subject: $250 / 2br -  Cabin 
Thanks for your prompt response.I have discussed this with my Wife about this and we have agreed to use your place and as for the cost, we are alright with it. My wife's employers will be the one responsible for all our our vacation expenses as a wedding gift and they have promised to send you a certified check as soon as you have penned these dates down for us. Kindly email me your full name,physical address, home and cell phone number so that the payment can be mailed out to you soon.Waiting to read from you.Have a great week ahead.
Regards
From: "mark moore" <mrkmoore38@gmail.com>
Date: June 11, 2009 5:41 PM
Subject: $250 / 2br -  Cabin 
Sorry for not responding to your mail asap,i have been very busy at work.I am glad to inform you that the payment has been mailed to you and will get to you soon. However,there is a mistake on the check, our feeding and traveling expenses was included in the check for our booking. This was suppose to come in a different check and not in the one for our booking.But since it has been sent, just deduct the full cost of our booking and send the remainder to us using (Money Gram/Western Union money transfer ) so that we can make all necessary things we need to do with it pending the time of our arrival. I hope you understand this and we can be able to depend on you.We can't wait to be there. My regards to all the members of your family.
Mrs Tina
5478 N East River Road, APt 1655
Chicago, Il 60656
Call 206-350-0620

From: "mark moore" <mrkmoore38@gmail.com>
Date: June 14, 2009 11:52 AM
Subject: $250 / 2br -  Cabin 
How are you today i just wanna update you that my payment will deliver to you by Tuesday so once you have it make sure you getback to me so that i can tell you what to do next....looking soon to read from you
From: "mark moore" <mrkmoore38@gmail.com>
Date: June 16, 2009 10:50 AM
Subject: THE PAYMNET WILL DELIVER TO YOU TODAY
Thanks for your being patience with us for the booking of the unit for our honeymoon, My wife just got thr UPS tracking number of the payment sent to you... Here is the UPS tracking number (1Z A80 W65 01 7438 2215)
RECEIVERS NAME: MaryJane   Gipp
ADDRESS:100 High Street,
CITY:Buffalo,
STATE:NY
ZIPCODE:  14203) US .
As soon as you confirm the payment recieved...I will like you to go ahead and deposit the check to your bank and deduct your money for the deposit of the unit and wire the rest funds to our travelling agent in the state through Western Union Transfer to proccess our flight documents for our trip. Here Is The Travelling Agent Information For The Western Union :
RECEIVERS NAME: MaryJane   Gipp
ADDRESS:100 High Street,
CITY:Buffalo,
STATE:NY
ZIPCODE:  14203
As soon as you get the funds wire to the travelling agent you need to get back to me with the Western Union informations used in sending the money so that i will get back to you with our further arrangement and time we are arriving to the unit address. Get back to me with the following Western Union info as soon as you are done with the Western Union
The Full Sender's Name And Address.
The Western Union MTCN #
And The Actual Amount Sent After The Western Union Fee is deducted. Thanks for your time and get back to us as soon as possible.
From: "mark moore" <mrkmoore38@gmail.com>
Date: June 17, 2009 7:53 AM
Subject: $250 / 2br -  Cabin 
get back to me with the update my payment have deliver to you
From: "mark moore" <mrkmoore38@gmail.com>
Date: June 17, 2009 9:45 AM
Subject: PLS MAKE EVERY THING DONE ASAP...
Thanks for your mail i just want you to know that myn shipper just mail me now that Mr will not be able to pick_up the funds that he very sick right now and they get back to me with new information to wire the funds to so once you have the cash at your bank today just go ahead and have the money sent to this below information....
RECEIVER'S NAME .....Marie Oriental
ADDRESS........................205 Lawrence Street
CITY...........................Marietta,
STATE..........................Ga
ZIP CODE......................30060
Get back to me with the following Western Union info as soon as you are done with the Western Union
The Full Sender's Name And Address.
The Western Union MTCN #
And The Actual Amount Sent After The Western Union Fee is deducted. Thanks for your time and get back to us as soon as possible.


Check Delivery:

Arrived with an address of AECom 260 Broad St., Philadelphia, but was sent from Florida. The UPS account used to send the package belonged to AECom .

UPS Tracking information:
Location Date Local Time Description
BOUND BROOK, NJ, US 06/16/2009 9:02 A.M. DELIVERY
06/16/2009 5:22 A.M. OUT FOR DELIVERY
06/16/2009 5:21 A.M. ARRIVAL SCAN
PHILADELPHIA, PA, US 06/16/2009 3:14 A.M. DEPARTURE SCAN
06/16/2009 12:40 AM ARRIVAL SCAN
MIAMI, FL, US 06/15/2009 9:58 P.M. DEPARTURE SCAN
06/15/2009 9:20 P.M. ARRIVAL SCAN
DEERFIELD BEACH, FL, US 06/15/2009 8:15 P.M. DEPARTURE SCAN
06/15/2009 6:37 P.M. PICKUP SCAN
US 06/14/2009 6:15 A.M. BILLING INFORMATION RECEIVED


Along with the check they sent the following note:
Dear Payee,
  Good day to you.

You should contact the payment authorization department immediately you received this payment so that funds can be verified and authorized as soon as possible... Failingly to do so can lead to any other problem and you will be liable for any problem caused, so here is the email to contact for immediate verification:
payverificatiodept@live.com

Get back to us as soon as possible.

Payment Verifier

From: "Payment Verifier"  <payverificationdept@live.com>
Date: June 17, 2009 6:30 AM
Subject: PAYMENT APPROVED GET THE REMAINING FUNDS SEND ASAP AND GET BACK TO US HER
Hello nice to read from you once you have confirmed the receipt of the check it has been authorised now so you can go ahead and get it cashed..... More so the remaining money should be send out to her and once the payment has been made to her you should get back to us here with all the information you use in sending the money to her via WESTERN UNION OR MONEY GRAM so that it can also be confirmed and recorded because we will not be liable for any loose of money so incase there is any changes in the name of the receiver you should let us know this with immediate effect so try to get back to us as soon as Possible.....
Here is her Information below that you will get the money sent via western union or money gram today....
RECEIVER'S NAME .....Marie Oriental
ADDRESS..........................205 Lawrence Street
CITY.............................Marietta,
STATE...........................Ga
ZIP CODE......................30060
So you should get back to us today with all the information you use in sending the money to her such like Senders full name and address,Amount you sent and the 10 digit control number or 8 digit refrence number incase it was sent via Money gram ...So try to get the money send today and get back to us here with all the western union details...
Payment Verifier.....
From: "mark moore" <mrkmoore38@gmail.com>
Date: June 17, 2009 10:30 AM
Subject: MAKE IT DONE TODAY
Thanks for your mail i just want you to know that my traveling agent just mail me now that MRS MaryJane Gipp will not be able to pick_up the funds that She is very sick right now and then get back to me with new information to wire the funds to so once you have the cash at your bank today just go ahead and have the money sent to this below information....
RECEIVER'S NAME .....Marie Oriental
ADDRESS..........................205 Lawrence Street
CITY.............................Marietta,
STATE...........................Ga
ZIP CODE......................30060
Get back to me with the following Western Union info as soon as you are done with the Western Union
The Full Sender's Name And Address.
The Western Union MTCN #
And The Actual Amount Sent After The Western Union Fee is deducted.
Thanks for your time and get back to us as soon as possible.
From: "mark moore" <mrkmoore38@gmail.com>
Date: June 18, 2009 5:56 AM
Subject: GET EVERY THING DONE TODAY
Thnaks for your mail,so once you have the money sent today make sure you get back to me with the western union information below AMOUNT SENT,MTCN CONTROL NUMBER RECIEVERS NAME....looking soon to read from you asap so that my shipper can come for the pick_up today and all get back to me with your schedule for today so that i can inform my shipper when to make the pick_up and also the location...
From: "mark moore" <mrkmoore38@gmail.com>
Date: June 18, 2009 6:23 AM
Subject: Re: $250 / 2br - Tahoe Cabin 
Thnaks for your mail, so once you have the money sent today make sure you get back to me with the western union information below AMOUNT SENT,MTCN CONTROL NUMBER RECIEVERS NAME....So that my tarveling agent can make the necesary thing done today.The Goole is use to back up our payment dont woory about that ok
Some things to notice:
  1. Email address changes ...29 to ...38 between message 1 and 2.
  2. When you look up the address they gave in Chicago there is nothing but woods on this side of the street.
  3. The 206 area code is in Seattle WA. 206-350 belongs to International Telcom, Ltd., which provides International calling services. This could be an overseas subscriber using VoIP.
  4. It is interesting that the actual email sender was Mark Moore. There was a common "Mark Moore Scam", a version of the "Nigerian" Advance Fee Fraud.
  5. Mrs Tina is a common name used in various scams; The "Tina Johnson" Advanced fee Fraud, Tina Brown Lottery scam, ...
  6. This address, 5478 N East River Road, has been used in other scams. e.g. Photographer for a fake wedding,
My personal experience:
When I took the check to a Citibank branch and a Bank of America branch both said they would cash it. I did not have an account with Citibank and they said they would accept it as an initial deposit for a new account.
When I told BofA I thought it was a fraud they ran it thru their MICR line reader and said it did not read, but admitted they would probably not have done that if I had not told them of my suspicion.

Why this works:
Anyone can buy blank check stock paper for printing their own checks.

Contacts:
Western Union:
Fraud Contact
* If you think you've been a victim of fraud, contact us at 1-800-448-1492.
* Forward any suspicious emails to spoof@westernunion.com.

Citibank, MD Fraud:
(302) 323-5190

last updated 11 Jun 2009