| |
Job offer spam: Processing payments
Who sends these job offers and why?
Maybe you've received this kind of spam before: Some company is looking for people who can receive payments from the company's customers. They will then have to wire those funds to the company by Western Union, minus a fee they receive for every payment forwarded. The position is often described as a "Correspondence Manager", "Transfer Manager", "Financial Agent" or "Shipping Manager".
The conditions seem good: You can work part time, need no prior experience. You just can't have a criminal record. This may sound quite attractive to people out of a job, but there's a catch.
This type of scam involves criminal activity and the job seeker is needed to break the money trail so police can not investigate the true criminal. Whenever you electronically transfer money between bank accounts there is a "paper trail". You can tell whose account the money came from and whose account it went to. That makes solving crimes fairly easy. When a criminal uses Western Union to shift money between cities and countries, there is no paper trail. As long as the recipient possesses the wire transfer details provided by the sender, he can pick up the money in at any Western Union agent in the receiving city and then walk away. Sometimes there can hundreds of offices for him to chose from, for example postal bank branches at post offices.
With these fraudulent job offers, the "employee" may receive an illegal fund transfer from an account that was the target of a "phishing" attack. Or he may collect a payment from an unsuspecting eBay-buyer who will never receive the goods, while the "employee" already sends the money to virtually untraceable criminals in another country. The key to cracking this type of crime, other than warning the public, is to monitor these crimes while they are in progress, before the money has disappeared.
For a typical example of this scam, see our page about the alpenantique.com fraud.
See the following articles for more information about this type of scam:
Please be aware that:
- No legitimate company will use bank accounts of private individuals for processing payments from its customers.
- No legitimate business will pay 5% and more for international money transfers (for example, $250 out of $5000), when banks provide such services for only $30-50 per transaction and businesses and individuals can set up their own bank accounts in other countries if needed.
- No legitimate company uses private individuals to receive parcels and remail them.
Any job offer that involves any of the above activities is a fraud!
Job offers on the internet such as the ones listed here involve stolen money and stolen goods. If you participate in these scams, even without criminal intent, you could be held liable and face criminal charges. If you have been recruited, contact the police and notify your bank. Do not withdraw any cash wired to your account! Do not forward any parcels mailed to your home! Talk to the bank and the police first!
Phishing, money mules and botnets
To obscure the traces, phishing websites are often hosted on hacked websites. Furthermore, many of the websites used to recruit "money mules" to forward cash from hacked accounts are hosted on botnets, along with phishing websites. Botnets are remote-controlled networks of hijacked computers, also often referred to as "Zombies". These are used to send spam, host fake sites and also to attack other websites. Botnets used for providing webhosting and DNS-hosting mostly on home computers are known as "fast flux" networks.
Articles on fast flux botnets:
Here are some examples of botnets used in money mule scams:
The following comments on spamwatch.codefish.net.au describe exactly what happened during the subsequent "alpenantique.com" fraud:
So it's the standard mule recruitment drive. For those who haven't seen one before the aim is that the "company" hires you to make these supposed bank transfers for them. What you are actually used for is to transfer money from exploited bank accounts offshore for them. Essentially laundering the cash for them.
What happens is you get hired by them. The scammers then withdraw a lot of cash (usually a couple of thousand) from another bank account usually with the same bank as you and transfer it to your account. The account money was transferred from was in fact an exploited bank account that phishers have gained access to via either keylogging trojans or traditional phishing emails.
Once you have the money in your account you are usually then asked to withdraw it in cash and wire it via a method such as Western Union to another country. Minus your "wage" of course. Once the money is traced you, the mule, will not be allowed to keep the "wages" you accumulated through this "job". If you suspect you are currently a mule in this scam contact your bank and the police directly. They will understand the situation and help you out. Far better than potentially being charged with fraud when the money is traced.
|
Scams sent before 2007:
- insurance-aug.net
- insurance-aug.org
- impexconsult.biz
- eldorado-work.com
- Sergej Lutashenko (rodex.finance@mail.ru)
- Victor Drujkov, Eurosoft Co. (directeurosoft@aol.com)
- wowowo-support.com
- partner-home.com
- bartonnescrow@aol.com
- findjob-online.bz
- George Metway Inc (georgemetwayinc.com)
- iqp-dk.com
- Offshore-Billing LTD. (offshore-billing.com)
- glaubeinveco@aol.com
- MarlonNewbiggin.ebayaffiliate@yahoo.co.uk
- reliable-partners.biz
- rpm-comp.biz
- ritm-trust.com
- AleksejKurilin@fxt.ru
- jobcenter-online.org
- medianfactory.biz
- partners-trust.biz
- attocompanypart.com
- sunwaycorp-europe.com
- online-carrer.com
- partners-atto.com
- atto-partners.com
- euroimperial1.com
- euroimperial2.com
- firstjobdeal.com
- atonoffshore.com
- afbls@gawab.com
- finservicex.com
- NTT Pty Ltd (commercing-xtbjj.com)
- vicua5@gala.net
- RITM Company (ritm-guarant.biz)
- idljob.com
- carelloinc.net
- delizy.im
- lanomaxint.com
- galina_frolova@gawab.com
- acrossworldfinance.org
- expressinvestus.com
- smc-soft.com
- numarkets.us
- ldpost-trade.com
- headfirm.net
- wc-group.net
- euro-uk-debt.net
- Porex GmbH (porex-gmbh.com)
- job-advertisement.net
- partners-ritm.com
- Renaissance Capital Advisors Ltd. (RCA, Ltd.) (renaissance-advisors.com)
- CANWEST COMM. (canwestcomm@aol.com)
- PLATINWAY Corp. (platinway.net)
- RAPID TRANSFER Group (rti-finances.com)
- P.R.O. INFOSOFT (victorinfosoft1@aim.com)
- P.R.O. INFOSOFT (infosoftgodunov@aim.com)
- hrescrow@aol.com
- ladisa.us
- direct-goldusa2.biz
- EEA LLC (usdivisionmail@aol.com)
- onlineassociatesdirect.info
- tt-tech.net
- Norway Consulting Group (group-norway-consulting.cn)
- RITM Company (partner-ritm-us.com)
- Shark Logistics (shark-logistics.org)
- Shark Logistics (shark-logistics.net)
- B & C Consultative (BCConsultA@aol.com)
- Berger Strategy Consultants (BergerSyCs@aol.com)
- Bain Consalting Group (BainConsgGp@aol.com)
- Booz Hamilton Services (BoozHamiltonSs@aol.com)
- goldjobdeals.com
- highlinejob.com
- gadzinowski.net
- gadzinowski.biz
- expat-belg-financial.com
- ATTO Company (atto-us.biz)
- business-vector.biz
- expat-fran-financial.com
- Clark Smith Ltd (ClarkSmith44@aol.com)
- Lukaz Cargo Inc. (lukazzkargoinc@aol.com)
- ellionusgroup.biz
- france-direct-gold.biz
- direct-goldgermany.biz
- direct-goldusa5.biz
- direct-goldusa4.biz
- Oliver & Arney Company (OliverArneyCo@aol.com)
- AMC Solutions Inc (AMCSolutionsI@aol.com)
- Barton Services Ltd (BartonSerL@aol.com)
- INTERSOFT TECHNOLOGIES, INC (techintersoft.com)
- Ascot International LLC (ascot.group@gawab.com)
- Logistic Sense Inc. (logisticsenseinc.com)
- TezTourInc@aol.com
- Maraton Associates (MaratonAssociat@aol.com)
- Norway Consulting Group (consulting-group-norway.cn)
- Get Assisted Co. (g-assisted.net)
- Lukaz Cargo Inc. (lukazcarginc@aol.com)
- Lukaz Cargo Inc. (Lukazcargo@aol.com)
- jscmitronltd.com
- mitronltd.com
- comdex-ag.com
- sdbmanager03@aol.com
- RF MED Inc. (rfmedinc@aol.com)
- gtrussia-vacancy@rambler.ru
- onlinejobcenter.org
- Locher Company (LocherCompy@aol.com)
- gas-company.cn
- g-ted.biz
- jamindexer.com
- Gindermann Plc (Gindermann@aol.com )
- EastCollect (eastcollect.com)
- Modulus Invest (modulus-invest.biz)
- theantiqueworld.net
- Swiss Invest Ltd (swiss-invest-ltd.cn)
- Steinberg Investments Ltd. (jobs-bank.org)
- Francesco Carusi (antsoftinc@aol.com)
- SirenisToursInc@aol.com
- au-fastjob.com
- Funders Online (funders-ger-online.net)
- Expert Bid Company (exprtbid.biz)
- gold-job.biz
- pservs.net
- escrowaddress@aol.com
- WestPay Inc. (westpay-inc.com)
- Expert Bid (expbid.com)
- Europe-TRCompany (europetransfers.net)
- Magnat Trading Group (magnat_trading@km.ru)
- Drop & Gain Int (dgpersonnel.com)
- globalshipworks.com
- global-job.org
- rse-au.net
- Andersson & Kinner Inc (AnderssKinn@aol.com)
- Bower Investments Ltd (openvacancy@mail.com)
- barceloinc@aol.com
- celista.net
- sangudo-uk.net
- sangudo.net
- tripll.biz
- Web Click Company (asktteu12sq@yahoo.com)
- Liberty Financial Union (lib-f-union.com)
- Barcelo Travel Inc. (barcelotravel@aol.com)
- uhmcargo.net
- intermailinc.net
- anypayfinance.net
- inworld-job.com
- stp-partnership.com
- mailorderworldwide.net
- ldpostonline.com
- KeiraMotors Inc. (KeiraMotors@aol.com)
- UPS Group (ups-group.com)
- Darren Robinson Ltd (DarrenRobins78@aol.com)
- Instant Exchanges, Inc. (instant-exchanges.com)
- Siegel Group Ltd (SiegelGroup20@aol.com)
- gtrussia-vacancy@rambler.ru
- ShipItInc.net (shipitinc.net)
- WestBCompany (transportunion.info)
- XEX ltd (rogakopita@gala.net)
- airshippingco.com
- 2ww-awards.com
- Drop & Gain Int (dgrecruit.com)
- Drop & Gain Int (dgrecruitment.com)
- CMSE Trading (cmsetrading.com)
- House-Worldwide (easy-rental.net)
- Brandon Group Ltd (BrandonGroup98@aol.com)
- house-worldwide.com
- Martin Emmers Consulting Ltd (MEConsultLtd@aol.com)
- DigitalExchanges, Inc. (digitalexchanges.com)
- New Age Escrow LTD (financion-corp.com)
- Fidelity Alliance LLC (fidelity-europe.com)
- euroemperealz.com
- XEX ltd (alex2006ltd@hotmail.com)
- lftsecurity@googlemail.com
- KeiraMotors@aol.com
- valuemetalstock@yahoo.com
- leader-post.net
- Swiss Invest company (swis-invest.com)
- E-WEB STUDIOS, Madrid (ecommerce-websolutions.com)
- Signroom Solutions Inc (SignrmSolut@aol.com)
- East Pacific Investors Union (ep-investment.net)
- Global Mail Order Ltd. (global-mail-order.com)
- eco-swiss-ltd.cn
- ibs-inc.net
- Noncommercial Enterprise "Harmony" (harmonya93@mail.ru)
- Euroimperial, LLC (euro-impereals.net)
- Baikal Finance, Ltd. (baikal-finance.net)
- AnyPayFinance Ltd (anypayfinanceltd.net)
- VDI Clearton Services (VDIClearServs@aol.com)
- Safe Sales Inc. (safesalesinc.com)
- Quick-Transfer.net (quick-transfer.net)
- swiss-ecolife.net
- Optima Inc. (optimaco.com)
- opportunities4you.net
- Signage Consultants Ltd (SignConsult@aol.com)
- west-eco.com
- World Wide Invest Zone (wdinvestzone.net)
- Transit Systems (transitsystemsltd.com)
- Irina Nikolaeva (btrus@km.ru)
- cashinhands.net
- EcoLife Company (swiss-eco-life.be)
- World Wide Invest Zone Company (wdinvestzone.com)
- PSA (psa-de.com)
- EcoLife Company (swiss-ecolife.cn)
- Bower Investments Ltd. (bower-jobs.com)
- WorldTrans Inc. (deworldtrancinc@aol.com)
- PS Lamport Inc (PSLamport@aol.com)
- bookiecom_mellisa@hotmail.com
- wdinvestzone.com
- Helixgroup Inc. (HelixgroupInc@aol.com)
- eco-swissltd.com
- wc-job-service.com
- cashinhends.com
- competitive-finances.com
- SWOK Corporation / swokcorp.com
- Johns UDS / johnsuds.com
- le-trans.org
- MyFairPay INC / myfairpayjob@msn.com
- ecoswissltd.net
- WilsonRoss Group / WilsonRossGrp@aol.com
- psa-4you.com
- uftsolution.com
- Scanlon Group Ltd / ScanlonGro@aol.com
- Howard Seaman Group Ltd / HowdSeamGr@aol.com
- fastjobtrans.com
- LORIMEX WATCHES
- RETEX LIMITED / retex-limited.co.uk
- EJGF / ejg-careers.com
- m-tcorp.com
- AdamantFinancing LTD
- Bookie company
- ecoswiss.com
- ecoswiss.net
- ecoswitzerland.net
- weldon-bs.com / Weldon Business Services
- ufis_resume@hotmail.com / UFIS (Ukrainian Folk Instruments Sales)
- instant-cash.net / Instant Cash Inc.
- MerlonseGruppe / infoMG@km.ru
- wc-alex.info
- bestjobtime.com
- ecolifeswiss.com
- eco-switzerland.com
- innotech-company.net
- ecolifecompany.biz
- orviscareers.com
- safe-sales-inc.net
- bestphotosoft.net
- globalfinancesgroup.com
- jobformin.com
- fastseekjob.org
- euro-rolex-trader.com
- equitydps.com
- fastbusiness.org
- antiquar@mail15.com
- honda-equipment.net
- easy-transfers.net
- bain-doucses.net
- hondaworldwide.net
- f-servs.com
- f-servs.net
- euro-ventures.net
- premium-invest.net
- m-techcorp.com
- realbizjob.com
- servicefinance-usa.com
- mtraxgroup.net
- fin-servs.com
- fastjobseek.org
- investin-germany.com
- global-transfer-form.com
- norbixgroup.com
- solidtradez.com
- careerbuilder-free.com
- globalfinances.org
- 2tradecompany.com
- global-cash.org
- miratekinvest.com
- safesalesinc.info
- austria-arbeit.com
- honda-worldwide.biz
- Sarkony Incorporated / sarkony.com (2005-11-13
- Vision International People Group / ipgvizion.com
- frxtrader.com
- ec-group.biz
- agnitech-service.com
- makepay.biz
- honda-worldwide.info
- jscepitech.com (2005-10-25)
- GlobalDesignArt@aol.com
- transporteza.com
- digitalsplanet.com
- appliedcash.org
- finance-serv.net
- inst-exchanges.com
- odono.net
- odono.org
- trinity-service.biz
- firebirdequity.net
- honda-worldwide.org
- verimer-au.com
- kiloh-postal.net
- solidjob.org
- "Italy Representative Group" / jobpost@whoever.com
- nationsf.org
- Italian SoftWare Group Inc. / italiansoftinc@aol.com
- iinstantexchanges.com (2005-10-10)
- irwinghighland.com (2005-10-10)
- trustbizjob.com (2005-10-04)
- realjob-inworld (2005-01-04)
- Sergio Cinzano / softgroupinc@aol.com
- education-russia.com
- childrenhelpfoundation.net (2005-10-04)
- Viktor Krasin / Softcom LTD / Softcomltd@gala.net
- sc-mikron.com (2005-09-30)
- wacompany.org (2005-09-28)
- waterengines.net
- judy-promotion.com (2005-10-01)
- Capital Collect,Inc.
- kempersinsurance.com
- NCC Group / nccmail.us (2005-09-15)
- ace-cash-express.org (2005-09-18)
- orbitztravel.biz / orbitzcareers.biz (2005-09-22)
- lifeprofit.com (2005-09-18)
- transporttrinc@aol.com
- artvisionlabs.com (2005-09-12)
- Nova Finance LLC / nova-finance.com (2005-09-11)
- avangar.com (2005-09-11)
- verimer-australia.com (2005-09-09)
- esolutions-online.net
- avasoftline.net
- colorphotomix-joboffer.com (2005-08-18)
- optima-jobs.com (2005-09-05)
- any-trans.com (2005-08-18)
- gm-trade.us (2005-08-17)
- easytransfer.us (2005-08-09)
- europeancharityunion.com (2005-08-05)
- athens-consulting.com (2005-08-06)
- gm-trade.net (2005-08-05)
- "World Logistic AG / logisticworldinc@aol.com"
- ifsd.biz (2005-08-02)
- mikro-tech.com (2005-07-31)
- gmtrade.us (2005-07-31)
- realcapitalz.net (2005-07-24)
- silverisecorp.net / silverise.co.uk
- Finance Service Inc / maurojobs@hotmail.com
- kaere-jewellery.com (2005-06-22)
- MoneyTransCorp
- velocityglobalinc.com (2005-07-23)
- joboffer-colorphotomix.com (2005-07-21)
- Private Travels / privatetravels@aol.com
- Carlo Chelinni / italiantravelinc@aol.com
- Easy Payments Company / Richard Bates
- mikron-systems.com (2005-07-23)
- International Trading Place (euwire.co.uk)
- ModaTex Co. (managermodatex@aol.com)
- "Vib Fortex Inc." (VibFortex@aol.com)
- honda-worldwide.net ("Honda Handle AG Company", 2005-04-27)
- sateny-group.com (2005-06-24)
- aegismedical.net (2005-07-17)
- world-exchange-2005.com (2005-07-17)
- beech-street-consulting.com (2005-07-11)
- intermed-corp.net (2005-07-07)
- camronfinancial.com (2005-07-04)
- ship-and-pay.com (2005-07-04)
- euro-express.biz (2005-07-01)
- alfigroup.com (2005-07-01)
- altintsol.com (2005-06-30)
- sbcelectronics.net (2005-06-28)
- Mark in Moldova
- marketbond.us (2005-06-28)
- Worldwide Delivery Parcel Service of America, Inc (emda.us, 2005-06-28)
- forwarding-company.com (2005-06-27)
- paysde.com ("Yann Hoffmann / Yann Hoffman", 2005-06-27)
- intmed-corp.net (2005-06-23)
- SteinerGround inc / July Smith, SteinerGroundinc@aol.com
- ipfinanceink.com (2005-06-08)
- exchange-office@mail.ru / ICQ: 311151 oder 868579
- usbestegoods.com (2005-06-09)
- bcipartners.biz (2005-06-06)
- max-pays.net
- wrlexchange.com (2005-06-05)
- Cargo Transport Group / transpgroupinc@aol.com / tel/fax +390295441485
- icic.us (2005-03-02)
- liquidmoney.org ("Liquid Money Inc.", 2005-06-01)
- mikro-n.com (2005-06-01)
- world-cash-transfers.us (2005-05-28)
- silverisecorp.com (2005-05-26)
- leeyance-inc.com ("Leeyance, Inc", 2005-05-22)
- max-payments.com (2005-05-21)
- elitejobseek.com (2005-05-21)
- m-pays.com ("Max-Pays, Steve Dauman", 2005-05-18)
- elitebusinessseek.com (2005-05-13)
- E-Qwells Group S.P.A / e-qwells.com (2005-05-12)
- ifa-llc.com ("International Financial Association", 2005-05-12)
- elitebusinessjob.com (2005-05-11)
- idelivery.biz (2005-05-10)
- bflogistics.biz (2005-05-10)
- uj-finance.com (2005-05-08)
- wilson-company.us (2005-05-08)
- tif-company.com (2005-05-08)
- usg-jobsupport.com (2005-05-07)
- usg-managers.com (2005-05-05)
- expressmail.biz (2005-05-09)
- vipstrade.com (2005-05-05)
- swisspharm.com ("SWISS Pharm AG", 2005-05-05)
- swiss-pharm.com ("SWISS Pharm AG", 2005-05-05)
- Evrovision LLT (eurovisiontv.net, 2005-05-05)
- exportersco.com (Leiko Pulkonnen, 1-800-420-5442, Zoom Group, Helsinki, Finland)
- East Pacific Investors Union (pacificinvestgruop.com, 2005-05-06)
- Transfer System Astra (Astra-Weber@yandex.ru, 2005-05-02)
- intmed-corp.netintmedicalcorp.net (2005-04-28)
- honda-worldwide.net ("Honda Handle AG Company", 2005-04-27)
- John Magust, Latvia (goldaudit.com, 2005-04-27)
- John Magust, Latvia (goldaudit.net, 2005-04-27)
- John Magust, Latvia (litemarket.com, 2005-04-27)
- John Magust, Latvia (litemarket.net, 2005-04-27)
- safe-sales.biz ("Safe Sales Inc", 2005-04-26)
- usabestegoods.com (2005-04-25)
- jobsfromabroad.com (2005-04-24)
- vonateks.com (2005-04-24)
- eutransfers.net (2005-04-23)
- kf-logistics.biz (2005-04-21)
- interpay-job-offer.com (2005-04-16)
- necomputersinc.com (domain created 2005-04-11)
- yoursafeway.com (2005-04-07)
- digital-perfection.us (2005-04-05)
- zemrus.com (2005-04-03)
- streamsjobs.com (2005-03-28)
- heartofelectronics.com (2005-03-27)
- globaltransfer.org (2005-03-21)
- globaltransfer.us (2005-03-21)
- globaltransfer.net (2005-03-20)
- job-at-shop.com (2005-03-20)
- oulu-company.com (2005-03-14)
- Alexander Renin, OAO Fineko, Moskau
- highdecash.com (2005-03-18)
- utp-biz.org (2005-03-11)
- baltiacapital.com (2005-03-09)
- utp-biz.com (2005-03-09)
- rebus-finance.com (2005-03-07)
- acecheckexpress.biz (2005-03-06)
- waterman-paris.com (2005-03-07)
- harwell-partners.com (2005-03-07)
- 24hourpills.org (2005-03-06)
- rizhaorltd.com (2005-03-01)
- financedeal-inworld.com (Domain created: 2005-02-28)
- synbank.com (2005-02-27)
- realfinance-worldwide.com (2005-02-27)
- bussmailex.biz (2005-02-24)
- transfer-guarantor.com (domain created 2005-02-12)
- a-i-k.com (2005-02-04)
- azfinance.org (2005-02-25)
- paycompany.net (2005-02-20)
- exbus-mail.net (2005-02-20)
- intmedcorp.com (2005-02-18)
- intmc.org (2005-02-16)
- swisspharm.org ("SWISS Pharm AG", 2005-02-09)
- silverise.org (2005-02-08)
- mckenell.org (2005-02-06)
- obois.org (2005-02-03)
- ultra-co.com job offer fraud (2005-01-31)
- labian-corp.org (2005-01-31)
- antiquitaeten-schwaighofer.com job offer fraud (2005-01-21)
- mckenell.com (2005-01-20)
- transfergate.com (2005-01-17)
- westernpoint.org job offer fraud (2005-01-13)
- troy-com.com ("Troy Communcations GmbH", 2005-01-10)
- decasher.info (2005-01-04 21:30:42 UTC)
- job-mail-express.org (Work@Home) job offer (2004-12-28
- jtexport.org (2004-12-27)
- JTExport.biz (2004-12-17)
- planett-design.com / Artur Vovan (2004-12-17)
- outsourceline.org (2004-12-16)
- outsourceline.net (2004-12-14)
- itcearnmoney.com (2004-12-10)
- Fraudulent job offer: itcearnmoney.com (created 2004-12-10)
- a-pharm.net (2004-11-12)
- JCExport.biz (2004-11-29)
- Express-mail.biz (Work@Home) (2004-11-21)
- Alpen-antique.com (2004-11-20)
- stechco.com (2004-11-14)
- P-Pharm (2004-11-12)
- AICD.org (2004-10-30)
- Lionder.org (2004-10-28)
- Alpenantique.com (2004-10-21)
- "Plasma Project Inc" (2004-08-21)
- infotechcom.com (2004-07-22)
- troycom.org ("Troy Communcations GmbH", 2004-07-12)
- shipandpay.com (2004-07-07)
- post-service.org (Post Financial Company, 2004-06-06)
- safe-sales.com (2004-04-27)
- safe-sales.net (2004-04-27)
- "Pro Screen AG" job offer fraud
- "ICG Commerce" (ICG)
- "Ameritrade Finance"
- shultz-cars-part.net
- cert_plus@inbox.ru (Michael Grin, Certification Plus)
- JOB HOME.INC
|