{"id":320,"date":"2008-08-26T12:07:41","date_gmt":"2008-08-26T20:07:41","guid":{"rendered":"http:\/\/www.scamdex.com\/ScamBlog\/?p=320"},"modified":"2008-08-30T10:40:44","modified_gmt":"2008-08-30T18:40:44","slug":"anatomy-of-a-secondary-scam","status":"publish","type":"post","link":"https:\/\/scamdex.com\/ScamBlog\/2008\/08\/anatomy-of-a-secondary-scam\/","title":{"rendered":"Anatomy of a Secondary Scam – Taking down a Nigerian Scam"},"content":{"rendered":"

After receiving this email …<\/p>\n

Attention:<\/p>\n

This email is not in any manner directed to you, but its purposely and specifically directed to Nigeria Scam victims. . However, if you have fallen for Nigerian Scams, do not hesitate to contact us or visit our website for more details on how we can help.<\/p>\n

We shall be waiting to hearing from you been certain that you were truly scammed by a Nigerian and you have proves to back your claims. Please read the full report at our website: http:\/\/www.nigeria-scamvictims.itgo.com\/<\/p>\n

Yours faithfully,
\nBrian Adams
\nNigerian Government Reimbursement Committee<\/p><\/blockquote>\n

I was interested enough to play them along to see where it lead. so I sent this email in reply …<\/p>\n

I have been scammed by some Nigerians – they took $30,000 from me – how can I get it back?<\/p>\n

Mark<\/p><\/blockquote>\n

The reply was ….<\/p>\n

\n
\"Snapshot<\/a><\/dt>\n<\/dl>\n

Dear Mark,<\/p>\n

Thank you for responding to our mail, Please find the attached Application Form and fill it appropriately. Please complete the form and return to us for an immediate processing, ensure that you provide sufficient information that might lead to the arrest of the Scam Artist.<\/p>\n

Make sure that you attach all necessary proofs, facts and payment receipt made when transacting or communicating with the Scam Artist as this would help us to trace the true identity of the person behind the wall.<\/p>\n

Under this act, the Federal Government of Nigeria with an effort to fight internet fraud and other immoral and illegal use of the internet, the government has also complied with the United Nations regulations in a recent meeting held at Abuja, the Federal Capital of Nigeria, to reimburse 150 scam victims. This is done to redeem the image of Nigeria both home and abroad.<\/p>\n

We are hopeful that your Application meets the required standard and thus qualify you for the reimbursement which would be done without any problem.<\/p>\n

Moreover, ensure that there are no discrepancies in the information you are submitting because we are going to speak with you over the phone and ask you some few technical questions as regards your application in order to authenticate your request.<\/p>\n

If you need further assistance, please do not hesitate to contact us, and if you experience some difficulty downloading the Application Form, kindly let us know so that we can resend it in another format or you log on to our website to complete the form.<\/p>\n

Yours faithfully,
\nDavid Bamko
\nAnti Nigeria Scams Dept.
\nwww.scamsrefund.org<\/p><\/blockquote>\n

So, I filled in the form Scams Refund Form<\/a> and waited …<\/p>\n

<\/p>\n

Not wanting to be painted as a scam-baiter, I informed www.itgo.com that their servic<\/em>es were being abused and the website www.nigeria-scamvictims.itgo.com has now been shut down.<\/em><\/p>\n

In the meantime, I got my reply….<\/p>\n

Dear Mark,<\/p>\n

We have received your Application and we shall process it immediately, please allow 2 working days for the result, Thanks.<\/p>\n

David
\nAnti Scams Dept.
\nwww.scamsrefund.org<\/p><\/blockquote>\n

That was Monday, 25th Aug … I am still waiting for the result……<\/p>\n

\n
\"The<\/dt>\n<\/dl>\n
\n
The Microsoft Office Live free website service was used twice in this scam<\/dd>\n<\/div>\n

So, I reported the site and got this noce letter back from Microsoft to tell me ScamsRefund.org is no more…<\/p>\n

August 27th, 2008
\nHello Mark,<\/p>\n

Thank you for writing to Microsoft Office Live Support regarding the abuse query. My name is Mahendra Singh Bora and I am creating the Service Request # 107xxxxxxxx8 so that we can track this query.<\/p>\n

I understand from your email that Microsoft Office Live domain name: scamsrefund.org is being used for fraudulent activities. I realize this might have caused inconvenience to you.<\/p>\n

Please note that after verifying all the information regarding the domain we have taken appropriate action against the website and the email accounts used for fraudulent activities. We extremely appreciate your diligence in making us aware of the activities of these sites.<\/p>\n

We appreciate you contacting Microsoft Office Live. If you have additional questions, concern or need further assistance, please be sure not to change the subject line so that we can urgently address any remaining concerns.<\/p>\n

Thank you for contacting Microsoft Office Live Support,
\nHave a great day, Mark!
\nRegards,
\nMahendra Singh Bora
\nMicrosoft Office Live Support<\/p><\/blockquote>\n

Finally! I got my reply. This one came from:
\nINVESTIGATION DEPARTMENT [cyberfraud.department@gmail.com]<\/strong> – an obviously free email account, which I will now attempt to get closed.<\/p>\n

Dear Mark,<\/p>\n

This is to notify you that your application was successfully processed, you are advised to write a letter to Bank PHB which is responsible for the reimbursement of funds, quoting your Application Number, Name and the Subject: Application for Scams Refund Transfer, send the letter to: services@phb-mail.com<\/a><\/p>\n

Also, your application has been processed by our department and a copy of the confirmation letter has been sent to Bank PHB. Please contact Bank PHB for an immediate reimbursement of your funds.<\/p>\n

The Federal Government of Nigeria is working hard to fight internet fraud and other related issues. We use this opportunity to congratulate you as you claim your refund. If you need help as regards this issue, do not hesitate to contact us again.<\/p>\n

Yours faithfully,
\nDavid Bamko
\nNigerian Government Reimbursement Committee<\/p>\n

Click here to see the approval notice:approval-for-scams-refund1<\/a><\/p><\/blockquote>\n

The other email address – services@phb-mail.com is yet another Microsoft OfficeLive account – another email goes to MS to close that one.<\/p>\n

August 28th 3:46pm – Microsoft did the right thing …<\/p>\n

Hello Mark,<\/p>\n

Thank you for writing to Microsoft Office Live Support regarding the abuse query. My name is Mahendra Singh Bora and I am creating\u00c2\u00a0the Service Request # 10xxxxx6 so that we can track this query.
\nI understand from your email that Microsoft Office Live domain name: phb-mail.com is being used for fraudulent activities. I realize this might have caused inconvenience to you.<\/p>\n

Please note that after verifying all the information regarding the domain we have taken appropriate action against the\u00c2\u00a0website and the email accounts used for fraudulent activities.<\/p>\n

We extremely appreciate your diligence in making us aware of the activities of these sites.
\n<snip>
\nThank you for contacting Microsoft Office Live Support,
\nHave a great day,
\nMark!<\/p>\n

Regards,Mahendra Singh Bora
\nMicrosoft Office Live Support<\/p><\/blockquote>\n

By now I must be the most unpopular of people over there in Lagos. I’ve spent a few hours doing all this so in a way, I’m a victim too.\u00c2\u00a0 I’ll see how far these scammers go – I have a feeling that this isn’t the end of things…..<\/p>\n","protected":false},"excerpt":{"rendered":"

After receiving this email … Attention: This email is not in any manner directed to you, but its purposely and specifically directed to Nigeria Scam victims. . However, if you have fallen for Nigerian Scams, do not hesitate to contact us or visit our website for more details on how we can help. We shall […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[10],"tags":[51,52,146,150,48,49,50,53],"_links":{"self":[{"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/posts\/320"}],"collection":[{"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/comments?post=320"}],"version-history":[{"count":11,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/posts\/320\/revisions"}],"predecessor-version":[{"id":324,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/posts\/320\/revisions\/324"}],"wp:attachment":[{"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/media?parent=320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/categories?post=320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/tags?post=320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}