Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 2 [3] 4  Thema versenden
Sehr heißes Thema (Mehr als 25 Antworten) Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net> <copjohnkudalor2@gmail.com> (Gelesen: 19722 mal)
 
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #30 - 06. April 2016 um 03:31
 
Zumindest scheint der "Scammer-Marathon" in Ghana noch zu funktionieren. 
Mr. Stephen Yeboah war gestern am Nachmittag bei seiner Bank und wollte vergeblich das zugesendete Geld für Bernice abholen.
"Leider" hatte ich einen "Zahlendreher" in der Money-transfer-code-number.
(wenn es gut läuft, dann schicke ich die Scammer grundsätzlich mind. 2 mal vergeblich zur Bank)

Mal sehen, ob ich den Personalausweis (ID-Card) von Bernice oder Mr. Stephen... auch noch in Kopie bekomme. 
Vielleicht stimmt ja Uli's Theorie zur 2. Zeile des maschinenlesbaren Teils des Reisepasses.
« Zuletzt geändert: 18. April 2016 um 21:30 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #31 - 06. April 2016 um 18:07
 
Neue e-mail ohne text, jedoch mit 5 Fotos. Ich sende in Originalgröße, so wie erhalten. 2 Fotos habe ich "verpixelt". 
Die mit MS-Explorer lesbaren Bilddaten (Datum der Bilder: Mai/Juni 2005 und Kameratyp) bleiben trotz verpixeln erhalten.
Die gleichen Fotos im Original habe ich nicht gefunden, aber zumindest ähnliche Fotos aus den gleichen Fotoserien von Lana Brooke (gleiches Motiv wie Sessel, Bett, Bettdecke etc).
Die Fotos scheinen "gekürzt" worden zu sein, damit der Namensschriftzug weg ist.

Laut WhatsApp-Konversation von/mit Tel.Nr. +233549030555 sollen die fast 11 Jahre alten Fotos von heute morgen sein (ganz "frisch" aufgenommen). 
Die WhatsApp-Profilfotos (ca. 10) und weitere per WhatsApp gesendete Fotos (ca. 30) erspare ich Euch hier, weil es sich lediglich um sog. "Postkartengrüße" aus öffentlichen Quellen handelt.
(z.B. von www.quotesandwishes.com oder www.GBPicsOnline.com)




Spoiler für Quelltext Yahoo Inline:
Delivered-To: xxxx
Received: by 10.25.29.200 with SMTP id d191csp803128lfd;
        Wed, 6 Apr 2016 00:25:40 -0700 (PDT)
X-Received: by 10.50.138.72 with SMTP id qo8mr21071191igb.81.1459927540489;
        Wed, 06 Apr 2016 00:25:40 -0700 (PDT)
Return-Path: <berniceadutwumwaa@yahoo.com>
Received: from nm32-vm3.bullet.mail.ne1.yahoo.com (nm32-vm3.bullet.mail.ne1.yahoo.com. [98.138.229.51])
        by mx.google.com with ESMTPS id rr6si1466278igb.87.2016.04.06.00.25.39
        for xxxx
        (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
        Wed, 06 Apr 2016 00:25:40 -0700 (PDT)
Received-SPF: pass (google.com: domain of berniceadutwumwaa@yahoo.com designates 98.138.229.51 as permitted sender) client-ip=98.138.229.51;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@yahoo.com;
       spf=pass (google.com: domain of berniceadutwumwaa@yahoo.com designates 98.138.229.51 as permitted sender) smtp.mailfrom=berniceadutwumwaa@yahoo.com;
       dmarc=pass (p=REJECT dis=NONE) Quelltext.from=yahoo.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1459927539; bh=Qu6wE6SkTitbX1SzC7Jha7ilt3i9I+J4nmHBwvmM9EU=; h=Date:From:To:Subject:References:From:Subject; c5Ct7MG0jfR5vvZqDiVdPnxg==
Received: from [127.0.0.1] by nm32.bullet.mail.ne1.yahoo.com with NNFMP; 06 Apr 2016 07:25:39 -0000
Received: from [98.138.101.130] by nm32.bullet.mail.ne1.yahoo.com with NNFMP; 06 Apr 2016 07:22:48 -0000
Received: from [98.138.88.232] by tm18.bullet.mail.ne1.yahoo.com with NNFMP; 06 Apr 2016 07:22:47 -0000
Received: from [127.0.0.1] by omp1032.mail.ne1.yahoo.com with NNFMP; 06 Apr 2016 07:22:47 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 573036.49685.bm@omp1032.mail.ne1.yahoo.com
X-YMail-OSG: LjPdw0AVM1kmmAm_xqXSqzYdy6UnOazKpsC3Wbnj.Q_OSzaJgc1XrKW0VopCqoX
tGVrGlTgmFj6SrJa54zfXYBNm5HqQ6A2vt.xfRaphUeJxg59Pdwc5cVgh.9pXiI5ubiJGTjvwlz6
4F3DV_nziBTlpy.yIqbG1rf1LKtA_p5GS8oA1YLyX1PATa9tOwc98aUo1ze8srs9rd9rvbOkFDvq
V23y2BDMi8r7J9JMZz0EAsnR794qOpsL1k1nxLn9xClmNblqzCr9L7oWYQEDwVM2Sx.a8JNzQ1pv
e_PAcuR5YunqtqUTTBCihD0HK1kReq_ub45hFlPg.OdRtIlh3fie.VEIVeebeu3Gl3Tq5fIaCQBh
WyHxHUb9dNWobW.ks1sDa0UkR7rKl6WxsByjoOgPk8PJKsudKmLbMIjhRKCMt48p9qs_lhmzWW9J
LiaFfvqZmiv08xvpraId1lLxIk5ZK08NNLsnvBceFFK5AgJ_jEilBXWua7vDFEUBc0UyLmUww6hE
8r7hb8mjxK41gEfNUyIG3qFnZ6E46sPJQyu9CtIJrJmc8bP0PstE-
Received: by 98.138.101.170; Wed, 06 Apr 2016 07:22:46 +0000 
Date: Wed, 6 Apr 2016 07:22:40 +0000 (UTC)
From: bernice adutwumwaa <berniceadutwumwaa@yahoo.com>
To: xxxx
Message-ID: <1427424061.3074380.1459927360228.JavaMail.yahoo@mail.yahoo.com>
Subject: Surprise for my love
MIME-Version: 1.0
Content-Type: multipart/mixed; 
     boundary="----=_Part_3074379_220696733.1459927360227"
References: <1427424061.3074380.1459927360228.JavaMail.yahoo.ref@mail.yahoo.com>
Content-Length: 819550

------=_Part_3074379_220696733.1459927360227
Content-Type: multipart/alternative; 
     boundary="----=_Part_3074378_262048195.1459927360225"

------=_Part_3074378_262048195.1459927360225
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit


------=_Part_3074378_262048195.1459927360225
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<img class=3D"ymail-preserve-class inline-image-......
   
« Zuletzt geändert: 18. April 2016 um 21:31 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #32 - 14. April 2016 um 03:24
 
E-mail vom 13.04.2016, 23:10 Uhr (Deutsche Zeit) ohne Text, jedoch mit Reisepass eines von "Bernice" neu benannten "Geldabholers".

Spoiler für Quelltext Yahoo Inline:
Delivered-To: xxxx
Received: by 10.25.89.135 with SMTP id n129csp183629lfb;
        Wed, 13 Apr 2016 14:13:47 -0700 (PDT)
X-Received: by 10.107.15.141 with SMTP id 13mr12353590iop.193.1460582027775;
        Wed, 13 Apr 2016 14:13:47 -0700 (PDT)
Return-Path: <berniceadutwumwaa@yahoo.com>
Received: from nm41-vm4.bullet.mail.ne1.yahoo.com (nm41-vm4.bullet.mail.ne1.yahoo.com. [98.138.120.220])
        by mx.google.com with ESMTPS id d19si777144ioj.120.2016.04.13.14.13.47
        for xxxx
        (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
        Wed, 13 Apr 2016 14:13:47 -0700 (PDT)
Received-SPF: pass (google.com: domain of berniceadutwumwaa@yahoo.com designates 98.138.120.220 as permitted sender) client-ip=98.138.120.220;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@yahoo.com;
       spf=pass (google.com: domain of berniceadutwumwaa@yahoo.com designates 98.138.120.220 as permitted sender) smtp.mailfrom=berniceadutwumwaa@yahoo.com;
       dmarc=pass (p=REJECT dis=NONE) Quelltext.from=yahoo.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1460582026; bh=KwDxs420/LVP1kS7W04oB1vb77ZfHIH8SGmAGFkNZgM=; h=Date:From:To:Subject:References:From:Subject; Ls8sj3+0p/N2vwtZ3+j3yzAg==
Received: from [127.0.0.1] by nm41.bullet.mail.ne1.yahoo.com with NNFMP; 13 Apr 2016 21:13:46 -0000
Received: from [98.138.100.116] by nm41.bullet.mail.ne1.yahoo.com with NNFMP; 13 Apr 2016 21:11:05 -0000
Received: from [98.138.88.236] by tm107.bullet.mail.ne1.yahoo.com with NNFMP; 13 Apr 2016 21:11:05 -0000
Received: from [127.0.0.1] by omp1036.mail.ne1.yahoo.com with NNFMP; 13 Apr 2016 21:11:05 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 250571.49537.bm@omp1036.mail.ne1.yahoo.com
X-YMail-OSG: .pR3hjUVM1lR01DgXicUkRF0fjNZids97JubOybipzgoaSYPJMGheCMGcVCDy6A
B4uq8nVDrF_dZSOgxFkW4uO_qMt.hhtYCz2JJEpx8icchtyp_ac_KV1l052ZqLDBOYiKItP8NKBS
TARvSn8MwgNhknMC7EUWg9.7p.WLJN_pCRD.SxflVTqMqUiEmKUQOBrfUGZYYheQaDF7bkFp3Tmk
L9Hg3QC6tPwD4Yr8qmfKjvt6dCoKfGj_cp4WGlKIj9aKk2zV7uhQNHiLnYDJ6XDjIjSRmj9t4NlF
sq1PkUWFaKcfZnM3S1n78eZPxkReQesgd4e_zI2EKIHX0omlAP.Z_2w6eTBEUjW7MeHyUnnEcXQJ
OCWlnfFbEgF0Tdx_g11DWQs71m5w61PcP8BQS_ceKmLTgjlyKydPnP4vOVA8LWxuzFGTF0dJVwxi
5sQZDXrktFJHvm1ZK8D2OZdxa.O8JTCbQ2qmemRbfZq25gKbhJYwEoNbgKYZzOG5BK6GbcIO5D6j
vzIxjeVaVoVcWXvjUsOEAyUE7nNPewM53oTFuFR2V7e6ssWVB
Received: by 98.138.101.170; Wed, 13 Apr 2016 21:11:04 +0000 
Date: Wed, 13 Apr 2016 21:10:55 +0000 (UTC)
From: bernice adutwumwaa <berniceadutwumwaa@yahoo.com>
To: xxxx
Message-ID: <755334645.42812.1460581855132.JavaMail.yahoo@mail.yahoo.com>
Subject: Passport
MIME-Version: 1.0
Content-Type: multipart/mixed; 
     boundary="----=_Part_42811_320859002.1460581855132"
References: <755334645.42812.1460581855132.JavaMail.yahoo.ref@mail.yahoo.com>
Content-Length: 169494

------=_Part_42811_320859002.1460581855132
Content-Type: multipart/alternative; 
     boundary="----=_Part_42810_1242544895.1460581855131"

------=_Part_42810_1242544895.1460581855131
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit


------=_Part_42810_1242544895.1460581855131
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<img class="ymail-preserve-class inline-image-guid-35B68484-500E-459F-AE16-F8C72858FD90 rte-inline-saved-image" src="cid:35B68484-500E-459F-AE16-F8C72858FD90" data-guid="35B68484-500E-459F-AE16-F8C72858FD90" alt="Inline image" style="width: 100%">
------=_Part_42810_1242544895.1460581855131--

------=_Part_42811_320859002.1460581855132
Content-Type: image/jpeg
Content-Transfer-Encoding: base64
Content-Disposition: inline; name=35B68484-500E-459F-AE16-F8C72858FD90; 
     filename=IMG_4458.JPG
Content-ID: <35B68484-500E-459F-AE16-F8C72858FD90>
 


E-mail vom 14.04.2016, 00:56 Uhr (Deutsche Zeit) ohne Text mit neuem "vollständigem" Foto des Reisepasses.
[leider nur die untere Seite des Passes. Ich habe kein 3. (vollständiges) Exemplar angefordert]


Spoiler für Quelltext Yahoo Inline:
Delivered-To: xxxx
Received: by 10.25.89.135 with SMTP id n129csp220154lfb;
        Wed, 13 Apr 2016 15:59:48 -0700 (PDT)
X-Received: by 10.107.169.228 with SMTP id f97mr12617085ioj.192.1460588388150;
        Wed, 13 Apr 2016 15:59:48 -0700 (PDT)
Return-Path: <berniceadutwumwaa@yahoo.com>
Received: from nm50-vm3.bullet.mail.ne1.yahoo.com (nm50-vm3.bullet.mail.ne1.yahoo.com. [98.138.121.147])
        by mx.google.com with ESMTPS id j14si3600316igd.85.2016.04.13.15.59.47
        for xxxx
        (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
        Wed, 13 Apr 2016 15:59:48 -0700 (PDT)
Received-SPF: pass (google.com: domain of berniceadutwumwaa@yahoo.com designates 98.138.121.147 as permitted sender) client-ip=98.138.121.147;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@yahoo.com;
       spf=pass (google.com: domain of berniceadutwumwaa@yahoo.com designates 98.138.121.147 as permitted sender) smtp.mailfrom=berniceadutwumwaa@yahoo.com;
       dmarc=pass (p=REJECT dis=NONE) Quelltext.from=yahoo.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1460588387; bh=D3qU9Qciuu54O8kh5fc9O36rnPHLQ4qqQ8LGw4it5f0=; h=Date:From:To:Subject:References:From:Subject; dcjM5dmtzHGxSA6jWN4uWYRA==
Received: from [127.0.0.1] by nm50.bullet.mail.ne1.yahoo.com with NNFMP; 13 Apr 2016 22:59:47 -0000
Received: from [98.138.100.102] by nm50.bullet.mail.ne1.yahoo.com with NNFMP; 13 Apr 2016 22:56:54 -0000
Received: from [98.138.89.199] by tm101.bullet.mail.ne1.yahoo.com with NNFMP; 13 Apr 2016 22:56:54 -0000
Received: from [127.0.0.1] by omp1057.mail.ne1.yahoo.com with NNFMP; 13 Apr 2016 22:56:54 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 595669.14093.bm@omp1057.mail.ne1.yahoo.com
X-YMail-OSG: YGysiOgVM1n37RmZhU03WKfxwCEYH.UYKaVnEytE_XrTfj8z9C1ZoZPrWztiFCD
a8OC_f51KJpEq_7WkAA5rBFbgbGPdJ75hUg5cVC8z6KV3Llleaeu90PsxWMQFr5rDoZdNky3RUlO
l.XfNr4_SLt8C5s5qz9nrYvnLmKVaR4jOsMRxGZepyYK4gO5AvhYN5NEEbJ4ia91.BiOUDRU5PQG
ni6RqIY8xZm8HngCQfV0csBqr_43Ervun0NMXYT435Rncq28PWyOF1Q5_lLYzXmRFf0g1IMD4Xwp
Bl_Haq1DqWpOvH9BgN3FZ.Xa9ROex2C26WBF9F4AD8lg3ZBVCxgVqxd1ysSyL2K.m71gkve7CFN3
mgow0jBsjZH.qbF.pvUyQxW7ChdZbQioyWgPs3XAOeJ2IjFY8Fkf3otUlvSvt3DwDGmBgwt7nGk4
O0NqHNN1EcTbhnA1lgyN19qO2vapGG42ZISWd_4mrySdKbAAxBGg_Ii_zh1WfzgBF8KoQ2LUAepr
IV0Fu7zM6H6xL2ybhax098TOzNYE.f0FX.kd69kkwXb.7kkGi
Received: by 98.138.105.205; Wed, 13 Apr 2016 22:56:54 +0000 
Date: Wed, 13 Apr 2016 22:56:52 +0000 (UTC)
From: bernice adutwumwaa <berniceadutwumwaa@yahoo.com>
To: xxxx
Message-ID: <1542435763.110525.1460588212745.JavaMail.yahoo@mail.yahoo.com>
Subject: New passport
MIME-Version: 1.0
Content-Type: multipart/mixed; 
     boundary="----=_Part_110524_1062899721.1460588212745"
References: <1542435763.110525.1460588212745.JavaMail.yahoo.ref@mail.yahoo.com>
Content-Length: 164471

------=_Part_110524_1062899721.1460588212745
Content-Type: multipart/alternative; 
     boundary="----=_Part_110523_1289089881.1460588212743"

------=_Part_110523_1289089881.1460588212743
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit


------=_Part_110523_1289089881.1460588212743
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<img class="ymail-preserve-class inline-image-guid-82242258-1309-434D-8363-908D72739050 rte-inline-saved-image" src="cid:82242258-1309-434D-8363-908D72739050" data-guid="82242258-1309-434D-8363-908D72739050" alt="Inline image" style="width: 100%">
------=_Part_110523_1289089881.1460588212743--

------=_Part_110524_1062899721.1460588212745
Content-Type: image/jpeg
Content-Transfer-Encoding: base64
Content-Disposition: inline; name=82242258-1309-434D-8363-908D72739050; 
     filename=IMG_4460.JPG
Content-ID: <82242258-1309-434D-8363-908D72739050>



Der Reisepass von Mr. Stephen Osei Baffour sieht nach meinen "laienhaften" Kenntnissen relativ echt aus.
Die "Bildersuche" hat zunächst nichts ergeben. Erst nach Eingabe des vollen Namens habe ich ein Google-plus Profil gefunden (sehr dürftig und ohne Foto). 
Bei FB ist dieser Name nicht bekannt

Da dieser Mann = "next room mate Nurse" (benachbarter Krankenpflegeschüler) der Krankenschwesterschülerin "Bernice" das von mir erwartete Geld (Euro 3.000,--) 
ja unter Vorlage seines Ausweises bei W.U. oder Moneygram abholen möchte, wird er wahrscheinlich zum "Mitarbeiterstab" des Scammers gehören.
Ein Wohnungsnachbar ist er sicherlich nicht, denn es hat von meiner Anfrage nach einem neuen Pass bis zum Erhalt per e-mail in beiden Fällen mehr als 1 Stunde gedauert.
[beim 2. Mal schrieb Bernice per WhatsApp zudem, dass sie erst den Eingang der e-mail mit dem neuen Reisepass abwarten müsste, bevor sie ihn mir schicken könne]
« Zuletzt geändert: 18. April 2016 um 21:31 von Stiray »  

G1121536_-_Baffour.JPG ( 89 KB | Downloads )
G1121536_-_Baffour.JPG
G1121536_-_Baffour2.JPG ( 76 KB | Downloads )
G1121536_-_Baffour2.JPG
Zum Seitenanfang
 
IP gespeichert
 
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #33 - 14. April 2016 um 20:18
 
Ich habe heute kein Geld (Euro 3.000,--) nach Ghana überwiesen, sondern die Beziehung per e-mail und WhatsApp für beendet erklärt (wegen ihrer "Männerfreundschaften" usw.). 

Zunächst hat der/die ScammerIn "Bernice" dies akzeptiert, nach ca. 20 Minuten "Funkstille" dann doch noch mal nachgehakt. Anbei die Abschrift der wesentlichen WhatsApp-Texte:


16:21 Uhr  Bernice:  Do you want to break my heart so soon?
16:22 Uhr  xxxx       Bernice, please leave me some time to get a clear mind.
16:23 Uhr  Bernice:  Okay my dear, think about it again what you want to do now.
16:30 Uhr  xxxx       Bernice a first step could be that you send me copies of the documents I had asked for as:
                               - your nursery diplom
                               - your certificate of the German school 
                               - your passport
                               - your driving licence
                              We will have to start again and for the moment I do not trust your words. You will have to proof your words.
16:31 Uhr  Bernice:  Okay that's not a problem for me. I will proof you wrong. I will get all these copies soon.
16:33 Uhr  xxxx       Ok. I will see and will be very glad if you could proof it.
16:34 Uhr  Bernice:  Okay my Dear. I will make them for you so don't worry.
16:35 Uhr  xxxx       ........
« Zuletzt geändert: 18. April 2016 um 21:32 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #34 - 15. April 2016 um 21:30
 
Wie es aussieht, ist der Pass echt. Möglicherweise handelt es sich dabei um den Scammer selber. Da sie in Ghana vor Strafverfolgung recht sicher sind, besteht für ihn auch nur Gefahr, wenn er einmal mit dem Ausweis ins Ausland fliegen sollte.!
« Zuletzt geändert: 18. April 2016 um 21:32 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #35 - 18. April 2016 um 02:31
 
Da der Scammer offensichtlich die von mir geforderten Dokumente nicht liefern kann oder will, ist er auf eine neue Idee gekommen:
Erpressung mit der Veröffentlichung von kompromitierenden Fotos in der Zeitung "Daily Graphic" (Ghana) sowie auf Facebook, Twitter und anderen "Social Medias".
Nachfolgend der Skype Chat vom 17.04.2016 zwischen "Bernice" und mir (= Xxxx)


[17.04.2016, 13:00:50] *** Bernice Adutwumwaa möchte Sie auf Skype hinzufügen    Hi, I'd like to add you on Skype. ***
[13:02:14] *** Xxxx   hat Kontaktdetails mit Bernice ausgetauscht. ***
[13:02:46] Bernice: I'm with you now   hope here you can see it clearly   We have no time now....that's why I want to get you on Skype for a faster chatting
[13:05:05] Xxxx   : Yes i see your words.
[13:06:13] Bernice: I promise you I will surly kill my self if this newspapers are published around the world on Internet and social media....
                              My Mum will also feel very ashamed of me doing this on the Internet and your family and other people will feel ashamed for you
[13:06:50] Bernice: Honey I don't want this to happen that's why I want you to negotiate with Mr Ebenezer 
[13:07:56] Xxxx   : Darling i will sent him a e-mail after our chat. I cannot do both at the same time.
[13:08:33] Bernice: Okay honey    Do your best for us and save my life honey    All my hard work I have work for will be useless if this gets out
[13:10:23] Xxxx   : Yes Darling i will do my best. Should I just accept his amount or try to lower it. What do you think?
[13:15:21] Bernice: Honey I think you have to accept this amount that you will get it paid....And you can get it half paid by tomorrow (50 percent or 70%) for him to settle the papers 
                              and later get the rest paid to them....Because we can't lower the amount because that's the fix graphics they have printed so we must get all burnt
[13:16:59] Bernice: As the manager told if we delay, latest by Wednesday this news will be published out       So we must negotiate with them as soon as possible
[13:17:48] Xxxx    : Ok Darling i will write the e-mail now. Till later.
[13:18:14] Bernice: Okay honey when you finish writing the mail send me a copy too
[13:18:49] Xxxx    : Yes Darling i will send you a copy too.
[13:19:00] Bernice: Okay will be waiting ....      Till later honey
[14:14:06] Xxxx    : Hello Darling, please check your e-mail. I have sent you the copy of my today e-mail to Mr. Ebenezer.
[14:28:52] Bernice: Okay my love       I'm checking it
[16:33:44] Bernice: Hello honey      Are you there
[16:34:56] Xxxx    : Yes my Dear I am still online
[16:51:23] Bernice: Okay dear     Have you taken you lunch honey     Hello are you there
[16:55:18] Xxxx    : Yes i have and i am here.
[16:56:00] Bernice: Why what were you doing honey
[16:56:30] Xxxx    : I work with my laptop.
[16:56:45] Bernice: Oh okay      Have you heard from Mr Ebenezer again honey
[17:00:07] Xxxx    : Yes Darling. He has sent me the data and driving licence of one of his workers to send the money to this name.
[17:01:52] Bernice: Okay honey        So honey what do you think now
[17:05:03] Xxxx    : Nothing special. He told me that i could send 2 x Euro 5.000,--. Therefore I will go to a W.U. Office tomorrow to send him Euro 5.000,-- as first part.
[17:08:18] Bernice: Okay honey thanks for showing love and caring to me ...Now I am feeling fine and I know that things will be fine soon
[17:10:54] Xxxx    : Yes Darling. I think Mr. Ebenezer will be very glad to receive the money.
[17:12:12] Bernice: Honey this money will be used to pay off the graphics so why are saying Mr Ebenezer will be glad to receive the money ?
[17:14:08] Xxxx    : That's the same for me. He gets money for not publishing the photos.
[17:14:50] Bernice: Yeah that's right     Honey you have to make sure that any receipt or mail you send to Mr Ebenezer you have to make me a copy too, to prove it here 
                             when we are done with the payment they are requesting
[17:16:55] Xxxx   : Yes Darling i will send you my e-mails to Mr. Ebenezer in copy.
[17:17:34] Bernice: Okay honey       Honey can you send me a copy of Mr Ebenezer reply to you now
[17:21:08] Xxxx   : Yes
[17:21:27] Bernice: Okay I'm waiting ...
[17:23:55] Xxxx   : I have just sent you the e-mail. Please check your e-mails now.
[17:24:11] Bernice: Okay honey I'm checking it  
[17:44:34] Bernice: Honey I have finish reading the mail      You have to also reply to him
[17:46:03] Xxxx   : no not up to now
[17:51:45] Bernice: Okay then you have to write to him and inform him when you will be making the transfer so that he can be aware of it
[17:53:52] Bernice: And honey is it possible for you to transfer the 5000 without dividing the money into two....Like 2500 and another 2500 EUR ?
[17:56:03] Bernice: I'm asking this because we don't have to have any problem in sending it because we just have a limit time now
[17:56:52] Xxxx   : Darling he wants 10.000,--
[17:57:57] Bernice:  Yeah that's right, so the best option is to first send part of 5000EUR
[17:58:31] Xxxx   : Yes Darling. But now i am leaving for dancing. Till later.
[17:58:58] Bernice: Okay honey    Take care and have a nice day    When will you get back home?

« Zuletzt geändert: 18. April 2016 um 21:32 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #36 - 17. April 2016 um 17:05
 
Good Evening  Sir,
I hope this email reaches you today in due time.I am contacting you in respect of some vital information of you that I have gotten hold here at my office of the Daily Graphic,Ghana when I encountered with a computer repairer who had all that on a hard drive stored.To be honest with you sir,this is really not permitted here in Ghana as the law forbids internet sexual abuse and things of that such which the Inter Pol can hold you responsible of this crime.I published the daily news and have you on the front page as the government expects me always and also carrying out my journalist duties.

What is most important at this moment is for you to respond to me on time so we can find a way to solve this before its gets out of hand since they intend to publicize it on the entire social networks as Facebook,BBC News, CNN news ,  MySpace,hi5.YouTube and such which in my way is not proper to your reputation that is why I am contacting you secretly as the editor in my own way.I have several tapes of you masturbating on a video which is very awful to watch,the entire Graphic department has it stored at the safe now,but I would like you to respond as soon as you can now so we find a way to retrieve it before it is published on Wednesdayas its set.I hope I receive your urgent responds.I attached the sample of the graphic printed to be published on Wednesday..Thank You.
Best Regards

Sent from daily graphic heard office(Ghana) 

Spoiler:
Delivered-To: xxxx
Received: by 10.25.89.135 with SMTP id n129csp161946lfb;
        Fri, 15 Apr 2016 13:19:34 -0700 (PDT)
X-Received: by 10.140.165.205 with SMTP id l196mr29728515qhl.58.1460751574410;
        Fri, 15 Apr 2016 13:19:34 -0700 (PDT)
Return-Path: <dailygraphicgh@socialworker.net>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.201])
        by mx.google.com with ESMTPS id m79si35254653qgd.126.2016.04.15.13.19.33
        for xxxx
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Fri, 15 Apr 2016 13:19:34 -0700 (PDT)
Received-SPF: pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.201 as permitted sender) client-ip=74.208.4.201;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.201 as permitted sender) smtp.mailfrom=dailygraphicgh@socialworker.net
Received: from [197.220.169.154] by msvc-mesg-gmxus003.server.lan (via
HTTP); Fri, 15 Apr 2016 22:19:33 +0200
MIME-Version: 1.0
Message-ID: <trinity-538d0ebc-d306-444f-85b1-712d9782bc8b-1460751572250@msvc-mesg-gmxus003>
From: dailygraphicgh@socialworker.net
To: xxxx
Subject: urgent!!!!!
Content-Type: multipart/mixed;
boundary=kenitramv-2872a6de-8d0d-4f54-b564-85ddf6ba35dc
Date: Fri, 15 Apr 2016 22:19:32 +0200
X-Provags-ID: V03:K0:PkGa+iu0EfHufhGA7y1sqq/skCwdgb4O5s3Zi42G1sd
OQS6FMl8n4hjXrYTsf9iVATqu/CllG9wFZnJ/FRCQn3Y9+vCgt
yWhNaUA+RReYHO3F1CiqIvoBJ+Zoms87d/G3VVLqC4vWNF6pXn
2VKLw49JgtuYYN9xU5FRhDWHGT5yDMD7kGqo75+SL86e3CC2xh
D1ktHCo5GHKruWZmHtVGdqOWXO3ePjjEtNE7S/4QW/o0Bb5lBa
X6bytdmo38/OP3mT1JzclFz7iKyirFgLQq+HGL0Rn2YnYxeRCe
li/r6/Ecnw6DD7eZqnLgKctRSwh
X-UI-Out-Filterresults: notjunk:1;V01:K0:7XdZlq34jiM=:gXi3xHmP/i5ZYSML0Bc2V8
q3a1T2OURLk4c3YqTyKMr9OSGSSlmfdnDYet+0dfOAmGhTgcWZW5AkyGKGlh2Wn2kgQsMQEBr
dIiDipzqBwh7hK6l/+tQgJ46mHMNWUX3RUFOhueArkolf+2Jj6MNPP8SWgpCmlhetfgg7jjK8
KIef4NjY9Qaihy0f8aoeAe/+RpCEhoL73Wr8GvLKLXVsg5Wwc2nf4xF2mstLt2rrDNBPhuPh/
fZPtGWpbkvBOjWOd7wtUxDAYYqEPEfunp6CxpFXoTBoKEU3fG/bnVtBiaMmeKT5GF0izWmVQk
2TMEXm+7L0TCf3zF7QePvaaqppfY98jiDaYn/5ppGHGLMBb/YSyoQM5fmCCIhM2dmK2skD396
SPbP0GkSE4nsM5/HY9eieGSexCYKfoQEeSpus5V9qBJsZw4oxVftssw6jHyA70Wah2TPK3sWF
3ua8Mwpyog==

--kenitramv-2872a6de-8d0d-4f54-b564-85ddf6ba35dc
Content-Type: text/plain; charset=UTF-8




« Zuletzt geändert: 18. April 2016 um 21:33 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65753
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #37 - 17. April 2016 um 17:13
 
Mail über Ghana mobil

Code
Alles auswählen
IP:	197.220.169.154
Decimal:	3319572890
Hostname:	197.220.169.154
ASN:	37341
ISP:	Glomobilegh
Organization:	Glomobilegh
Services:	None detected
Type:	Wireless Broadband
Assignment:	Static IP
Continent:	Africa
Country:	Ghana
State/Region:	Greater Accra Region
City:	Accra 



Zitat:
from [197.220.169.154] by msvc-mesg-gmxus003.server.lan (via HTTP); Fri, 15 Apr 2016 22:19:33 +0200
From: dailygraphicgh@socialworker.net
Date: Fri, 15 Apr 2016 22:19:32 +0200
« Zuletzt geändert: 18. April 2016 um 21:33 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #38 - 17. April 2016 um 17:20
 
Good day Mr.
Well am very pleased with your humble message
To answer your question about what I can do for you and your girlfriend !

First of all ,Yes there is a solution but it comes with only one possibility !which is destroying all the needed information and pictures against you and your girlfriend

But in my power I will only be doing my Job if I am to publish the news to the world which will be in our top most Graphic papers and other online stuff

I hope you wouldn't want that to happen .
I can only propose if we are to pay the other head Authorities off to cancel this publishing which If you have a positive mind I could manage that but it wouldn't be for free !
I put it to you this, if is a Yes or No ?
To work on aborting the papers from coming out or publishing them

Don't hesitate to response  to this message as soon as you get it

Thank You

Spoiler für Quelltext wie vorheriger:
Delivered-To: xxxx
Received: by 10.25.89.135 with SMTP id n129csp516269lfb;
        Sat, 16 Apr 2016 08:23:16 -0700 (PDT)
X-Received: by 10.140.18.114 with SMTP id 105mr31442620qge.41.1460820195967;
        Sat, 16 Apr 2016 08:23:15 -0700 (PDT)
Return-Path: <dailygraphicgh@socialworker.net>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.201])
        by mx.google.com with ESMTPS id v91si17970117qgv.74.2016.04.16.08.23.15
        for xxxx
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sat, 16 Apr 2016 08:23:15 -0700 (PDT)
Received-SPF: pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.201 as permitted sender) client-ip=74.208.4.201;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.201 as permitted sender) smtp.mailfrom=dailygraphicgh@socialworker.net
Received: from [197.220.169.154] by msvc-mesg-gmxus002.server.lan (via
HTTP); Sat, 16 Apr 2016 17:23:14 +0200
MIME-Version: 1.0
Message-ID: <trinity-53934c15-403c-4ee6-a64d-0b19b1acb317-1460820194277@msvc-mesg-gmxus002>
From: "Daily Graphicgh" <dailygraphicgh@socialworker.net>
To: xxxx
Subject: Re: urgent!!!!!
Content-Type: text/plain; charset=UTF-8
Date: Sat, 16 Apr 2016 17:23:14 +0200
In-Reply-To: <CAEhB6=+OpV1-J-mrAsb4gcwchgahuENQjVaPncCWEeeGdvBebQ@mail.gmail.com>
References: 
<CAEhB6=+OpV1-J-mrAsb4gcwchgahuENQjVaPncCWEeeGdvBebQ@mail.gmail.com>
X-Provags-ID: V03:K0:JMsXvENjl9JgEV5zaZAW4G/7N+uIRvz1DEmAGNp83gk
jDnOpAnmm2712KorkeT3SuAb2V8fcVyP1AMcuxE/K823zqgPlr
Uv5G110KWv3uKUbXhmc0iaZvngPODRde8/Evs7XiFlcc0aPrZ5
58nX3senTKhb+m0MdaIuAmx7aGDlIFzo3e6QehqzztoP0V3TlB
ImNO3Oe0D6nWFVWTGH3lKKHQRTjIVgnSwtdhabsmZDmTivmW4b
B0OQBv7xMxaxel46pkx5TEiUzlHmAmwcbItj5wkDRfPCYtMqWk
Ol4s2WVRcUjvbIOMSKsBi+/kar4
X-UI-Out-Filterresults: notjunk:1;V01:K0:IJRmi3lDDeY=:4AwiJOqAilAEOmA9g8eUUQ
PSNwDnvny6ju8gnCLpNpLiWXRf1j6lKZeRUDdlVPYjaMGwqKQ8FVc7aLTwxkvyY/hNI7WcKej
yKMiJT21GWjFeoDdSSlcyrnCOsTb21P1enlOI6OOuPRuXu8/BoAkD9E+PEyHNRhaMxRJzcb0+
uu7e9QkpttPB0Ln1VCBjeBH107TmMeHZDbGoUARjKaZCHdJF8o0vrfqOFYa1qsEzsUSoIT7Eo
MB6bqL51JihkI5ScY3gmhOAzX4H2j/vfcSbxvlOfe9UJkX1My5Df1tq+ldux5PluWr5kdq2kY
Ge/3t27meh32xncb4b4tdh6GuvB/fRMlXc150SPX4QuPJET7mu+Gm8ojlIjuhEv547Q36fdAM
P2e8Si8KXnXnyStDcFu0Swu6BA9VxUwTjSz6+JAwg6MBfSp2W0bywtkBnV1WSMQYR/B1fb+SM
+HdcVxp08EWvvRKO1TX0qino6WKw4HObkn9gUrgqy93nEFXc/b5R
« Zuletzt geändert: 18. April 2016 um 21:34 von Stiray » 
Grund: Tags schließen nicht an 
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65753
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #39 - 17. April 2016 um 17:25
 
Daily Graphic (Ghana) https://en.wikipedia.org/wiki/Daily_Graphic_(Ghana)

http://www.graphic.com.gh/

Als Socialworker erwarte ich eigentlich etwas mehr Dunst im Hirn und nicht solche bimbolesische Schreibweise.

Zitat:
I could manage that but it wouldn't be for free!


Die Katze ist aus dem Sack. Dann soll er mal seine Rechnung aufmachen und seine Kontodaten übermitteln.
« Zuletzt geändert: 18. April 2016 um 21:34 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #40 - 17. April 2016 um 17:37
 
Nachtrag: die Telefon-Nr. von Mr. Ebenezer: +44 7424 885217  (Mobil)  [ich habe WhatsApp-messages mit fast gleichem Wortlaut erhalten]

Hello
Thanks also for the quick response
Well give me tomorrow I will be able to talk to them and get back to you so expect mail from me in the morning by then all will be okay

Spoiler für Quelltext wie vorheriger:
Delivered-To: xxxx
Received: by 10.25.89.135 with SMTP id n129csp558106lfb;
        Sat, 16 Apr 2016 10:29:09 -0700 (PDT)
X-Received: by 10.55.80.136 with SMTP id e130mr33102158qkb.28.1460827749176;
        Sat, 16 Apr 2016 10:29:09 -0700 (PDT)
Return-Path: <dailygraphicgh@socialworker.net>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.200])
        by mx.google.com with ESMTPS id c8si16607050qkb.35.2016.04.16.10.29.08
        for xxxx
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sat, 16 Apr 2016 10:29:09 -0700 (PDT)
Received-SPF: pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.200 as permitted sender) client-ip=74.208.4.200;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.200 as permitted sender) smtp.mailfrom=dailygraphicgh@socialworker.net
Received: from [197.220.169.154] by msvc-mesg-gmxus001.server.lan (via
HTTP); Sat, 16 Apr 2016 19:29:08 +0200
MIME-Version: 1.0
Message-ID: <trinity-008aa8a3-1b09-4637-8c3e-9caaf683f961-1460827747545@msvc-mesg-gmxus001>
From: "Daily Graphicgh" <dailygraphicgh@socialworker.net>
To: xxxx
Subject: Re: Re2: urgent!!!!!
Content-Type: text/plain; charset=UTF-8
Date: Sat, 16 Apr 2016 19:29:08 +0200
In-Reply-To: <CAEhB6=+13XOAK==BYyx+3QW5Si-2LRm-nCLm3U8yru2ZMOggMw@mail.gmail.com>
References: <trinity-538d0ebc-d306-444f-85b1-712d9782bc8b-1460751572250@msvc-mesg-gmxus003>
<CAEhB6=+OpV1-J-mrAsb4gcwchgahuENQjVaPncCWEeeGdvBebQ@mail.gmail.com>
 
<CAEhB6=+13XOAK==BYyx+3QW5Si-2LRm-nCLm3U8yru2ZMOggMw@mail.gmail.com>
X-Provags-ID: V03:K0:vM01PsLar6Sc6lwdvUcO+maJCoMIL09TS/YVuPPmxK4
4zl3VCvojeFqjxMYecSdeOYsBHQBr8TIQ/Lwp2qadxjOvJq3bR
nJO9WgHkmQsDeyCkIksptezqCI7JYpqT1DtYvR+vy/9b8fg6nQ
a3wqQ1Fipyux8OUyoToTApMeV9Yzl89k4vwjn44k44CHNAbK4B
X55xDC4xtJ1Dkzvy5IGbbP2Zij5HSRobMt1mYRbw0SI+UswdhY
gD+PKBYkywaPjpgI4i4U2VB1vflTyAv9iSm/o+jCRjsvuLMopd
2VeNz9pI+93E7qCop3QFeSQ3D74
X-UI-Out-Filterresults: notjunk:1;V01:K0:S1vOKVCWS18=:Wxu7xDQV4xXalLgFAUV/QT
kKFusWv7IG6J+QxlZoaxHl+R51+aHSIB5+erUJ0eUNGectDugmS9TwIZkLQ8Gmw1ime1flFDG
GrcrqSsZNJkzVG3vUpj2o4l1KdfF0RwZ1P6tvmNTvTfd+YHNzTNcbDoUC22tBkIGRlDu7P54i
52QltZnZUaeAR9v0jfy1Fbhn/NyfZHd/0CrEdmcs6r06fvJqoY0mQCL/UGh8wVB70cj1ldmmR
NVhq0eiGfH9YcJrGH++tkpZSmRxEV/UU4Sz2Iws7L020rBQoE+qM1JsKEIhYST6huqy2tNlF2
crE/ibKGVzoA8NqDcU7y9hd/m0GN5oiVA3txLc/xWSMK5TFBnTjw8xXbMExuXwJle3NdcCh2U
t3dxehhpPIWSCvfMxk5FhT3YTwTzwZj921QjOWd2npn4ZBH249QyTn7mzRt7BSLQJ3Cmgznae
UfDXlGVkYSvGad4tjBuN31lh4s/OYmtpxK2irVEkDanevkycNI09



Greetings
We have  chance of aborting the  pending publishing of the leak pictures of you and your partner
As you know information like this is very important to media ,Because it can promote our market of delivering information.

It was  a long chat with the Authorities in convincing them with the abortion of the publishing .
Considering the help am giving was because of the nice and polite way I had your message and also you contacting me direct , But note aside reducing your reputation it will also cause a big problem to your partner(girlfriend)and will face a punishment for that .

okay we came into a conclusion of billing you with an amount of 10,000EUR for the loss incurred because the Editor has already been paid and also with sample printout

Please don't hesitate to give a quick response because they will call on a meeting in the afternoon and also to hear from me

Spoiler für Quelltext wie vorheriger:
Delivered-To: xxxx
Received: by 10.25.89.135 with SMTP id n129csp781148lfb;
        Sun, 17 Apr 2016 02:35:09 -0700 (PDT)
X-Received: by 10.140.100.225 with SMTP id s88mr34485107qge.76.1460885709119;
        Sun, 17 Apr 2016 02:35:09 -0700 (PDT)
Return-Path: <dailygraphicgh@socialworker.net>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.200])
        by mx.google.com with ESMTPS id l80si26884446qki.14.2016.04.17.02.35.08
        for xxxx
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sun, 17 Apr 2016 02:35:09 -0700 (PDT)
Received-SPF: pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.200 as permitted sender) client-ip=74.208.4.200;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.200 as permitted sender) smtp.mailfrom=dailygraphicgh@socialworker.net
Received: from [197.220.169.154] by msvc-mesg-gmxus003.server.lan (via
HTTP); Sun, 17 Apr 2016 11:35:08 +0200
MIME-Version: 1.0
Message-ID: <trinity-cddaeede-76d0-4554-a953-d95243c4c8fb-1460885707426@msvc-mesg-gmxus003>
From: "Daily Graphicgh" <dailygraphicgh@socialworker.net>
To: xxxx
Subject: Re: Re2: urgent!!!!!
Content-Type: text/plain; charset=UTF-8
Date: Sun, 17 Apr 2016 11:35:07 +0200
In-Reply-To: <CAEhB6=+13XOAK==BYyx+3QW5Si-2LRm-nCLm3U8yru2ZMOggMw@mail.gmail.com>
References: <trinity-538d0ebc-d306-444f-85b1-712d9782bc8b-1460751572250@msvc-mesg-gmxus003>
<CAEhB6=+OpV1-J-mrAsb4gcwchgahuENQjVaPncCWEeeGdvBebQ@mail.gmail.com>
 
<CAEhB6=+13XOAK==BYyx+3QW5Si-2LRm-nCLm3U8yru2ZMOggMw@mail.gmail.com>
X-Provags-ID: V03:K0:xM1Y8zlRUzVC08JJyvP/pM+DrWmsALolaMGsLd7kAwN
Etqd8fuUwUGNugUAxqnYRXCA7+dFHZHCKR7l+B2dsKrH3lRICH
fTc3HpHvhxgIEkgib7DK0U7wrFd7yJTLM9vpW3op4ozGlqbkhj
orJ0OrcXyT8X82tiv7/DxjxBMUNTFiF88uzTrZgqopSZ7puKF4
brjbZbN9CkLnY5CWc2uVcGyFOmyt3nwd1WIvlum6YqKYKieavO
pTyjpkXwvYhKob+LICRfX3d7Ndf2Dlkfn5wfegu/w1Pk3flana
3w/LogmijQ7/xHhsBgJTFq2FdvM
X-UI-Out-Filterresults: notjunk:1;V01:K0:Y71fBVYvKjY=:5LCaN+ngAsgWtrpgMT0M6X
I6d99+j0sOrUGGd9+7xms/9nMxIiqMERiM34ZxrWPa6xhU5SvAfLGd0Vakxr+CZ5sMbChPYZT
i7H8eKAIwPFO/ikeuKyafCZkuyOsMPhajZZAHLBuB9FJzf7HWnMpXF7DUs1xyk5SFUAyOPRDX
tiRy5akvLHxXpeBWzpkkFIvehz+QXWKy88oQI038MDH5Y2Jl5xOIp/9eOpm5ETzKBS0Dfa0+4
3olQCIKW4gjXQO1SSsE0DI0c03wjWgJncKywVyC0vpuubh42HMocaYSzn1zqR04hnyhO/FCzs
qSjvWIejJRjo4J55zhR3QoAXYTh7ST71ClxjwrxEPQiTJmbf1A0ZTYVAYX53XwhFaKaRCQpIq
NXwB7PQAOg6HwwVbkW25kxGOMnlFkYJKQ6hoQUMcvZxHVmE32aIvq06n5Zn+L60oFJvgzALpM
jp7G2s59cUzrg5Fr6Ri2azeGOBl3iJH04L6SME94qke4iyKKMXLo
« Zuletzt geändert: 18. April 2016 um 21:35 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #41 - 17. April 2016 um 17:44
 
Hallo Stiray. Dein Wunsch sei des Scammers Befehl [inklusiv driver licence, die ich komprimiert habe, weil im Original 2448 x 2448 Pixel]


Good Afternoon
Is  2:30pm here when we just got off from a meeting even though is Sunday and they had to conduct this meeting off working days to make a back door decision concerning the abortion

Well concerning the money as it fixed Yes that will be all needed 10,000Euro
There wouldn't be any cost of problem concerning the transaction either in cash or a Bank Transfer

But to your notice and as it secure mode I advice of an instant money transfer either western Union or Money Gram .
Reason, Fast and wouldn't delay any of our times since we both need peace and the earlier the better .

Yes the will be a name of one of my workers here and its information concerning the transaction with a scanned I D card as follow :
-Sadick Moro
-Country Ghana
-city kumasi
-zipecode 00233

You can make the transaction in any beneficial batches concerning your country law if they won't allow to transfer all together either 5+5  etc.

NB:Look the attach picture with a scan id I really hope that was necessary !
Please need a quick needs from the beginning of the week .

Spoiler für Quelltext wie vorheriger:
Delivered-To: xxxx
Received: by 10.25.89.135 with SMTP id n129csp874948lfb;
        Sun, 17 Apr 2016 07:33:04 -0700 (PDT)
X-Received: by 10.55.80.136 with SMTP id e130mr37758748qkb.28.1460903584216;
        Sun, 17 Apr 2016 07:33:04 -0700 (PDT)
Return-Path: <dailygraphicgh@socialworker.net>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.200])
        by mx.google.com with ESMTPS id t132si18747101qhb.1.2016.04.17.07.33.03
        for xxxx
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sun, 17 Apr 2016 07:33:04 -0700 (PDT)
Received-SPF: pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.200 as permitted sender) client-ip=74.208.4.200;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.200 as permitted sender) smtp.mailfrom=dailygraphicgh@socialworker.net
Received: from [197.220.169.154] by msvc-mesg-gmxus002.server.lan (via
HTTP); Sun, 17 Apr 2016 16:33:02 +0200
MIME-Version: 1.0
Message-ID: <trinity-ab367b0e-9c6f-4cae-8056-d8780b1a7d63-1460903581801@msvc-mesg-gmxus002>
From: "Daily Graphicgh" <dailygraphicgh@socialworker.net>
To: xxxx
Subject: Re: Re2: urgent!!!!!
Content-Type: multipart/mixed;
boundary=sgnirkm-6b86e58c-2ac1-483d-92d3-038e50512ef4
Date: Sun, 17 Apr 2016 16:33:02 +0200
In-Reply-To: <CAEhB6=KLQytGEeYRLRRC2bNityNHJMkJBhj0-ikFT4e0W5oCsw@mail.gmail.com>
References: <trinity-538d0ebc-d306-444f-85b1-712d9782bc8b-1460751572250@msvc-mesg-gmxus003>
<CAEhB6=+OpV1-J-mrAsb4gcwchgahuENQjVaPncCWEeeGdvBebQ@mail.gmail.com>
<trinity-53934c15-403c-4ee6-a64d-0b19b1acb317-1460820194277@msvc-mesg-gmxus002>
<CAEhB6=+13XOAK==BYyx+3QW5Si-2LRm-nCLm3U8yru2ZMOggMw@mail.gmail.com>
 
<CAEhB6=KLQytGEeYRLRRC2bNityNHJMkJBhj0-ikFT4e0W5oCsw@mail.gmail.com>
X-Provags-ID: V03:K0:VE88bqNHkud6k09Vi7A5ecUQmMKiJBlLkLSueL71dNJ
hQ/mnM6a0k3bzej6WOSZTmqaBgK9AUUxSKxrTu44332LxztAK6
GeiIgRSQmtrUSyYpiTPFzpfSOrJTep6UUIC3PQJ/rjzBGZoBDn
GPOz/LxIiS2BdRSr8dMzqwQNWpgI1xGKz8OxfbuD3jI3DhIt1a
O49pY8ODghfnZs4qvo9sAcyeA/xMuDnP1Ycns3RGGdBHKVD4XN
N/sZcMCBMufDEIWfX8Q5TDzzdOQkL0VOHWCiuSrGGJtfpYyM9w
MAIMjD8zjQ99V5Jjbm+rl+UB1o6
X-UI-Out-Filterresults: notjunk:1;V01:K0:G5QSmKT+O8c=:03r6nQBjLwwCxGFY5vFbwX
Q2mzeaovcxPwuQnm1j5VcJRp9tDzgol9A8ui9zFsxdDG1JJswGlg0i6jg8dKaSCWCMkMUTvoD
L04GekC0BRD7STrOYMMrenylpvbpM7ttbVW2hVm6DHgOXGoS6HjEdJzE8/igZP3wtoUvNXbv1
y6vKK4/YHs7uF45ogQWs7GQNYFzhqqlfbAJFkdMRW4d6iXRemnCFgpd6OdEJHldniKI7ZTmKz
GhwwuuMhQieaLOBAcdJFBABARr8UZ+8SuR86ptqoFkAFLG5kgkxPG/p8pBW/Sew7bzFeBAH1E
Tp2Yk/IqZLbhE3+5AXsuQeT2mzwL41jgGDKHYNL2IvFKxUG6ioEoev4kadp6ElUTxmfol7

--sgnirkm-6b86e58c-2ac1-483d-92d3-038e50512ef4
Content-Type: text/plain; charset=UTF-8


« Zuletzt geändert: 20. April 2016 um 12:06 von Uli »  

Driver_License_Moro_Sadick.jpg ( 60 KB | Downloads )
Driver_License_Moro_Sadick.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65753
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #42 - 17. April 2016 um 17:51
 
Zitat:
Telefon-Nr. von Mr. Ebenezer: +44 7424 885217  (Mobil)


Bis jetzt kannte ich hauptsächlich nur Ebenezer Scrooge aus den Geschichten von Charles Dickens.
Inzwischen ist Mr. Ebenezer mit verschiedenen Zweitnamen in der Scamszene bekannt.

Hier ein Beispiel:

Ebenezer <ebenezerodonkort@yahoo.dk> <Members@JewishConnection.com> <anonymous@simpatico.com> <odonkorebenezertt@live.com>

Sein Büro müßte er laut Telefonnummer nicht in Ghana sondern in England haben.

Zitat:
Information on phone number range +44 74248XXXXX
     
Number billable as      mobile number
Country or destination      United Kingdom
City or exchange location      
Original network provider      Lycamobile UK Limited


Deine Freundin hat er hier gefunden: http://galleries6.petiteteenager.com/1/totalsupercutieslanawhtieskirt/

Die angeblichen Bilder von Dir können wie die ID zeigt, nicht von seinem angeblichen Mitarbeiter sein. 

Sicher hat der  Smiley  auch einen viel kleineren Schniedel.  Zunge
« Zuletzt geändert: 18. April 2016 um 21:35 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65753
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #43 - 17. April 2016 um 18:08
 
Zitat:
Yes the will be a name of one of my workers


@ ALBU55

Das lehnst Du bei dem heiklen Thema ab. Du verhandelst nur mit Mr. Ebenezer und ihm überweist Du das Geld.
Also brauchst Du seine ID und keine weiteren Mitwisser. Vielleicht bekommen wir noch etwas für Uli`s Sammlung.
« Zuletzt geändert: 18. April 2016 um 21:36 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
ALBU55
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Like Anti-Scam

Beiträge: 941
Standort: Rosenheim
Mitglied seit: 04. März 2016
Geschlecht: männlich
Re: Bernice <berniceadutwumwaa@yahoo.com> <dailygraphicgh@socialworker.net>
Antwort #44 - 18. April 2016 um 00:26
 
Thanks for your massage sir. Try and get things done early in the morning.
  Thank you

Spoiler für Quelltext wie vorheriger:
Delivered-To: xxxx
Received: by 10.25.89.135 with SMTP id n129csp920945lfb;
        Sun, 17 Apr 2016 09:58:23 -0700 (PDT)
X-Received: by 10.140.225.199 with SMTP id v190mr32156154qhb.4.1460912303161;
        Sun, 17 Apr 2016 09:58:23 -0700 (PDT)
Return-Path: <dailygraphicgh@socialworker.net>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.200])
        by mx.google.com with ESMTPS id s201si25896858qke.3.2016.04.17.09.58.22
        for xxxx
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sun, 17 Apr 2016 09:58:23 -0700 (PDT)
Received-SPF: pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.200 as permitted sender) client-ip=74.208.4.200;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of dailygraphicgh@socialworker.net designates 74.208.4.200 as permitted sender) smtp.mailfrom=dailygraphicgh@socialworker.net
Received: from [197.220.169.154] by msvc-mesg-gmxus003.server.lan (via
HTTP); Sun, 17 Apr 2016 18:58:22 +0200
MIME-Version: 1.0
Message-ID: <trinity-d647e285-ec9f-471d-abcd-719c8b0f3e37-1460912301659@msvc-mesg-gmxus003>
From: "Daily Graphicgh" <dailygraphicgh@socialworker.net>
To: xxxx
Subject: Re: Re-4: urgent!!!!!
Content-Type: text/plain; charset=UTF-8
Date: Sun, 17 Apr 2016 18:58:22 +0200
In-Reply-To: <CAEhB6=J9FhLganApNgTpFtufmG_8kKTQ6=7_UMH_0q5Ag7z2BQ@mail.gmail.com>
References: <CAEhB6=J9FhLganApNgTpFtufmG_8kKTQ6=7_UMH_0q5Ag7z2BQ@mail.gmail.com>
X-Provags-ID: V03:K0:eKyjo7WDPHBhCcUd5ejKrIyNapnOJNlXv8ZcptDXRst
Maub+dKj9ZWmlqU237tH81kw7jMlDRismBz3GJC+B3edlCaXhh
koX9lbPYdz6PvwXU4q8uExt4HxG17/pK2OFTB/puQFIurzur2l
z8E4X1QdFYJNGu9g5swtUpZHcvk/6t6aQVi0zXtyL3bao4jz6x
TXnOy84dp8O7iJ4RU2R956zH2vfceU3rJdkNAskuASLT1phssJ
LCCbvdiywt6++nixWPYPkOJ3FPKFn7zgfZuDDmqS5iOkKk2GhV
j7hR2ejdOoUYCnVjP3NNdEBl1rw
X-UI-Out-Filterresults: notjunk:1;V01:K0:/yF2VAT51T0=:jzz6QneKAdJikBNHwYfStG
Z1YqGyAlAti+WkD87B7wWxJRB752NXmvtSk4k4NF9hlEVr7S6mvHgAS9YTbxhCmxHtfzEcura
tN1AuZH/ASw7o/WFXVInwBSBhkLzi22oZmAVjtL1sU01RcsN829zb+KN75g8/POKnIB2d/zQd
1b4jNhjxi4a0IJNVrTQlGHgWGH/olMqG65vxRrMbbS0HQdIQ6B4hzymnItgTfhD+HHQlNylKi
qmRSMJHkzgUrxOJMLJEmiAYLVfBhHgb+aOgwpvehNipTtt7Z9SdqcNEIabzl/IpId+72v8clS
PjRiXLGA74uBaTumaigXkfLARYbL867czhI8gCQPkS5ASdQCIwM/LvvxSvTQ+4Mc3XidW2Uzs
Z16H5Sy47ZMlsOFs8BX7l81Xo3LxMhbVvzktXGA9daWkA0O6auJn/p2IpniYQFKuM3Z71CaPK
yLYVh6VWtpRIevcAtJSJYsUFL0I543SaxWdCIUp10unAv3qny5bl

Thanks for your massage sir. Try and get things done


Nachtrag zur englischen Telefon-Nr.: Die Nummer scheint inzwischen nicht mehr aktiv zu sein. Meine gestrige Antwort per WhatsApp wurde bis heute nicht zugestellt.
(ich habe nur den Haken, dass meine WhatsApp-message abgesendet, aber nicht empfangen wurde)

Hinweis zu "Bernice Adutwumwaa": Im obigen "Zeitungsartikel" stand mein Klarname, meine aktuelle Telefon-Nr. und meine e-mail-Adresse. [von mir vor dem posten ausgepixelt]
Diese Daten kann "Ebenezer" nur von "Bernice" erhalten haben !! ==> wahrscheinlich in beiden Fällen der gleiche Scammer oder zumindest das gleiche "Team".
« Zuletzt geändert: 18. April 2016 um 21:36 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1 2 [3] 4 
Thema versenden
Link zu diesem Thema