Attempted Scam Alert – Identity Theft
I’ve had the dubious privilege to have a “R*** K***” call my phone using a private number. Speaking heavily accented and broken english I was asked for my email address. The reason for this was confusing at best. He said something about they wanted to send me money but needed $350 to send it.
The crude attempts to impersonate the US Marshals Service are nearly comical, however sadly real.
- Why would an official send an email through a gmail.com address?
- Misspelled words and improper English abound in the communication both verbally and in written form.
- The line breaks and replaced words in the email text show that this is a cut-and-paste email. I believe that he literally was pasting it up and replacing words as needed while I was on the phone with him.
- Urgency expressed in making sure the information was sent as quickly as possible. When asked for verification of anything, even asking for what number he called to reach me, never had a significant reply to offer proof.
- He offered a phone number to reach him 407-45*-**** which is for a T-Mobile phone based out of the Kissimmee, Florida exchange. Why would that be used for US Marshals Service based in “North Darkota”?
- I’ve tracked down the assumption of identity on the part of the caller, and I’m contacting them – hence their name and address are obscured in this post. How did I find this? Listed as results from Google that passed through a White Pages search using the name and address. This provided even more identifying information.
Email Received
Subject: I am R*** K*** The Acting Director of U.S. Marshals Service
From: david harlow <usmarshaldavidharlow@gmail.com>[ref]Why is the email address using gmail?[/ref]
Recieved: Tuesday, September 22, 2015 at 7:34pm EDT
Attn: Stephen Boyle,
I am R**** K*** The Acting Director of U.S. Marshals Service (UMS)[ref]US Marshals Service abbreviates as USMS, not UMS[/ref] District of North Darkota in alliance with economic community of World Bank Swiss (ECWBS) with afliated Office here in North Darkota. We have been working towards the Track Down Of Fraudsters and scam Artists in Western part of Africa With the help of United States Government Secret Agents glued with Anti Money Lundering Squad.[ref]Never heard officials call an operation “Track Down of Fraudsters”. How exactly have Secret Agents been “glued with” an “Anti Money Lundering[sic] Squad”?[/ref]
We have been able to track down so many of this scam artist in various parts of west African countries which includes (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA, CAMEROUN, BURKINA FASO, MALI, SENEGAL, COTE D IVOIRE AND LONDON) and they are all in our custody here in North Darkota Usa.[ref]Incredible that everyone being sought is in custody, and brought to North Dakota of all places! Interesting that the Ivory Coast is known by the French origin name Cote D’Ivoire. And even more interesting are references to locations going through a change of regime – Benin / Burkinga Faso. These are likely tips as to the originator’s location.[/ref]
We have been able to recover so much money from these scam artists. The United Nation Anti-crime commission and the United State Government have ordered the money recovered from the Scammers to be shared among 500 Lucky people around the globe for their compensation as scam victims.[ref]I wonder how I became one of these “500 lucky people”. I asked during his call if they had identified me as a victim of scams, there was no comprehendable reply.[/ref]
This email is been directed to you because your email address was found in one of the scam Artists file and computer hard disk in our custody here in North Darkota. you will only pay $350 follar insurance so mr john will deliver
You are therefore being compensated with $1.1 Million Dollars. We have also arrested all those who claim that they are Barristers, Bank Officials, Lottery Agents who
has money for transfer or want you to be the next of kin of such funds which do not exist. Since your name appeared among the lucky beneficiaries who will receive a
compensation of $1.1 Million, we have arranged your payment through our Swift card payment center [ref]Apparently Swift has been identified by others in scam schemes (1). Swift is a prepaid card service available through Discover Card Services. [/ref]. Feel free to contact the processing officer JOHN CARL ROES. The
swift card has been specially prepared to enable you withdraw your money in any ATM machine in any part of the world, but the maximum is Six Thousand Dollars Only per
day.
So you are advice to contact the swift center officer MR R K*** with your provided information’s as required.
CONTACT PERSON: MR JOHN CARL ROES
CONTACT ADDRESS: 5061 New Land Road Newark MD USA [ref]Appears to be a fictious address, can’t find as given using Google Maps.[/ref]
CONTACT TELEPHONE +1 410 6322 291 [ref]phone number has too many digits.[/ref]
CONTACT EMAIL ADDRESS carddelivery_postagent@yahoo.com
Provide the information bellow to enable him prepare your ATM Master Credit Card including your Pin code to access it.
1)YOUR FULL NAME.
2)YOUR RECEIVING ADDRESS.
3)YOUR TELEPHONE NUMBER.
4)YOUR PROFESSION.
5)YOUR ID/AGE.
Best Regard,
R*** K***
As a person that has been scammed in the distant past I’m keenly aware of what identity theft looks like. The final 5 items requested are exactly what constitutes an attempt to secure your identity.
I would not have received this email without offering an email address to recieve it. The email address used is one which I’ve let languish for a long time.
Repeat Calling Behavior
It seems R*** is excited that he was able to “speak” with me for 23 minutes – as I was trying to decipher what he said, who he was, and what his purpose ultimately will be. In the end none of this was really answered.
The call was followed up by another at 7:47pm to make sure I got his email. Eventually during the call I grew frustrated, he asked if I wanted to speak with someone else when I asked him to give me the phone number for the US Marshals HQ office in North Dakota. I replied “sure”, he seemed to hestitate, fumble around a little, then I got another email. If he was truly working for the USMS he would have been able to find that number easily, it was never produced.
Second Email Requesting Information
Using same subject and origin email sender as above:
Received Tuesday, September 22, 2015 at 7:59pm
HELLO DEAR
IN RESPECT TO OUR TELEPHONE CONVERSATION BELOW IS THE INFORMATION TO SEND THE $350 DOLLARS FOR US TO PROCEED WITH THE DELIVERY OF YOUR VISA CARD BY TOMMOROW REGARDING THE DELIVER RECORDS
NAME JOHN CARL ROES
ADDRESS NEWARK MARYLAND
AMOUNT $350 DOLLARS
TEXT QUESTION WHAT FOR
ANSWER FOR VISA CARD
I AM WAITING TO HEAR FROM YOU SO THAT I WILL SEND THE PAYMENT INFORMATION TO THE CARD DELIVERY CENTER INCLUDING YOUR PHISICAL ADDRESS OF LOCATION SO THAT YOUR CARD WILL BE PROPERLY DELIVERED
THANKS AND BEST REGARDS
MR R*** K***
On Tue, Sep 22, 2015 at 12:34 PM, Fuzzytek <****@****.com> wrote:
Best place to find me is at http://fuzzytek.com
More Repeat Phone Calls from Private Number
Since this I’ve had calls at 7:51pm, 8:11pm. and 8:35pm – these were not answered or sent to voicemail. I’m wondering how to block a private number and it doesn’t seem possible. Although I do believe my phone provider *could* find out what number and location if pressed by federal authorities.
Why So Much Interest?
I believe R*** is pursuing me because he senses that I’m educated and have opened a dialogue. Unfortunate for him the dialogue is now over. I’m documenting what has been sent and said. Any future “private caller” calls are going into voicemail.
If you know people who are adept at pursuing identity theft, fraud, and marketing harrassment – please leave a comment. Wednesday morning I will give a call to the US Marshal’s Office in North Dakota and turn information over to them.
Resources
Curious to know what scamming looks like? Check any of these resource websites:
- 419 Awareness
- Consumer Fraud Reporting
- Fraud.org – National Consumers League
- Identity Theft – MyFICO
