3017414870

First time I've seen this particular scam/phishing. Received in response to my Craigslist ad.

Same message as Jeff posted above, only mine came from Anddy Moore at moreformoney6767@gmail.com.

Busy Maria! Here is what she said to me (replied verbatim to two ads) from Maria Holmes holesholme@gmail.com
---
Hello, I would like to know,if this is still for sale,pls reply me back or call me on this number:(301)741-4870 though i wouldnt be able to pick your call because of my dissability but i will mail you back as soon i get your reply here on mail.Thanks

Holmes
---

Here are the long headers - I tried to track the IPs 10.227.153.203 and 10.227.69.148 but no luck -- it is a private network that could be from anywhere in the world.

---
From:     holesholme@gmail.com
    Subject:     Rustic Table 8 ft length w/drawers - $1500 (near Boulder)
    Date:     May 28, 2010 12:12:09 PM MDT
    To:     sale-h767b-1750626381@craigslist.org
    Status:     U
    Return-Path:     <bounce-anon-elev8296=earthlink.net@craigslist.org>
    Received:     from mx-roseate.atl.sa.earthlink.net ([127.0.0.1]) by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1oi42w3gb3Nl34f0; Fri, 28 May 2010 14:12:12 -0400 (EDT)
    Received:     from mxo4p.craigslist.org ([208.82.236.169]) by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1oi42v4Wq3Nl34f0 for <elev8296@earthlink.net>; Fri, 28 May 2010 14:12:11 -0400 (EDT)
    Received:     from mail-ww0-f51.google.com (mail-ww0-f51.google.com [74.125.82.51]) by mxi3p.craigslist.org (Postfix) with ESMTP id 87E95316E4 for <sale-h767b-1750626381@craigslist.org>; Fri, 28 May 2010 11:12:10 -0700 (PDT)
    Received:     by wwb24 with SMTP id 24so19827wwb.10 for <sale-h767b-1750626381@craigslist.org>; Fri, 28 May 2010 11:12:09 -0700 (PDT)
    Received:     by 10.227.153.203 with SMTP id l11mr627386wbw.11.1275070329452; Fri,  28 May 2010 11:12:09 -0700 (PDT)
    Received:     by 10.227.69.148 with HTTP; Fri, 28 May 2010 11:12:09 -0700 (PDT)
    Dkim-Signature:     v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received📅message-id :subject:from:to:content-type; bh=AKaRMFbPrjjn3NWVndq+ZMUZjH2njka1yrSALGCeFr4=; b=qscHCPuDeAh8dfAWdkqV671gGXUsxMSDQDN1Qyq7C7aDkS85bCaJocnIvVZ/XtNVCd HEvy9ss90y6QmMe+fPuH6C0lZtq3E1hBgkghxneXrnvK5rwFjDpse/6CGlpSbh7Nek9b Vp827YncVdl7Ym7GWmjOVeo6YVpKBReC2CZJs=
    Domainkey-Signature:     a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version📅message-id:subject:from:to:content-type; b=ec/11FjDctlM0DJyDCe6eZBXRYc0X7YGyuUwAx+WMaD/fv3bZpNwZmrUz4g7EYY6CE HOHekreilBmqGClTtMIFDQmtPUyE+SXaCfwgSyD/5ZNlLx8H5/USuQbd5HFpbbM/BgNu GViwDUWJ/8klgq7P8Y8RA9l7fkhfhvQECtoK8=
    Mime-Version:     1.0
    Message-Id:     <AANLkTim4RhSyDfxOt-xRn9mjcS5Zb4yCTktJp5LD4FNe@mail.gmail.com>
    Content-Type:     multipart/alternative; boundary=0016364d2b070cf9100487ab72ba
    X-Elnk-Received-Info:     spv=0;
    X-Elnk-Av:     0
    X-Elnk-Info:     sbv=0; sbrc=.0; sbf=00; sbw=000;
---

i got the same thing today. lame-o's!  although, sadly, some people do fall for this. i dont know what these jerks are after; identity theft, theft, etc... but i've heard that what they're doing is sending a check that's way more than what the item's price is that they're "buying."  then they want you to send them back the difference in case or certified funds.... glad this site is here and people are googling suspicious emails, names, and phone numbers :)

I just received the same email and immediately got the impression that it was fugazi. Did a quick google search, and found this forum. Thank you to those who have taken the time to warn others and confirm my suspicions. I would assume they are simply selling your name and email address, which I think there is money in these days, but now I see they are taking it a step further by mailing fraudulent checks. Law enforcement should be able to bring federal charges against who ever these people are. It shouldn't be hard to determine the IP address(es) these emails are originating from. Has anyone had any luck with getting law enforcement involved?

I guess they are using different names. This one is from Northern Colorado in responce to my post.


Hello, I would like to know,if this is still for sale,pls reply me
back or call me on this number:(301)741-4870 though i wouldnt be able to pick your call because of my dissability but i will mail you back as soon i get your reply here on mail.Thanks

Holmes

got the same message..... using John Wright this time....

Hello, do you still have this? When can I come check it out? Shoot me an email back as soon as possible pls or you can leave me a message here on my phone number (301) 741-4870, I'm speech disabled though, remember to leave your name and email address when you call.

PS: - You can just reply this email, I'm always with my computer

Maria
(301) 741-4870

That why I checked before i called it.

Craigslist scammer. Got an email about my guitar for sale, same message received as everyone else.
So glad I checked, thanks all.

I just got the same request from "Maria" from an ad posted on Craigslist. Below is her message:

Thanks for writing back...but I'm sorry I won't be able to come see it anymore, embarking on a 3 month business trip to  Chicago tomorrow morning, was gonna be coming to your town that got changed but I still want it anyway,getting it for my cousin for her upcoming birthday. If you could sell it to me when I get to Chicago I will mail you a bank official check to cover the cost and also add funds to cover the shipping to where it will be needed. I'll arrange for a shipper/mover to handle the pick up and delivery so it doesn't stress you. I really need this, quite important and urgent. I will be more than glad if it can be sold to me. Email me back with a name, address and your phone number for the check,write back soon. Thank you.

I have the same thing...both messages.
Now, the scam is they have to pick up the item. Notice she sez she will arrange for pick up.

Well, isn't that the time where the law is waiting to jump in. The shipper has to know where the item is going...and someone has to pick it up. Busted, right?

I got the exact same message as "Annoyed" in response to furniture for sale ad over the weekend.  Also using the name Holmes.  There was a second response I got from an "Eva Knight", and I wouldn't be the least bit surprised if this was the same person too.

this "maria holmes" is now "ann bayer" according to craigslist, I just received one of the citibank checks as well and it does not look authentic. Has no one considered this is grounds for a lawsuit?

thank god for this site i got a check from this person to and in the triangle of three person scam the names are maria holmes ally johnson and edna faye wade  at 102 oakland street lot #5 sounds good but just think street lot #5 lol what a scam triangle three way scam i am going to the bank and see if this check is good and if it is i wont send the cash back and keep the things i had for sale thanks

i don't know but i have a different but rare case. I thought this check was a fake check in the first place.I called Citibank and they told me it was their check but it has insufficient fund. I told maria who sent the check and she told me to go back the next day. I called the next day as told and to my surprise was told that there is money it the account and that i can cash it right away.I did this and it worked and her mover picked this up the third day. A contrary story, isn't it?

I posted and ad on craiglist and got this message from "Gary" that listed this number:

Hello, do you still have this? When can I come check it out?
Shoot me an email back as soon as possible pls or you can leave me a
message here on my phone number (301) 741-4870, I'm speech disabled
though, remember to leave your name and email address when you call.
    PS: - You can just reply this email, I'm aways with my computer
  garry (301) 741-4870

As soon as I saw "speech disabled" it had scam written all over it.  This ploy has dual goals (1) to keep them from having direct contact with you since they are scamming thousands, so just leave your information for their database (they do a reasonable job keeping track of who they are trying to scam), and (2) to get the seller to start feeling sorry for the person which leads to empathy and let's your guard down.  So i decided to google the number and found that it is truly a scam.  

Also, when i get contacted from craiglist, i pay attention to the email address.  Typically if it is from a .net or .gov, it is a legit human being.  The scammers create all sorts of fake email accounts on gmail, yahoo, hotmail, etc.  I once tracked down a "Mike Nelson" using gmail and found he was really a nigerian by the name of Ola Dray.  

I will play with them a little bit... :)

No i called the FBI. They said there is nothing they can do because much of this is not inside the USA.  The scammers set up  western union accounts that they can set and close. These cannot be tracked well.  All they need is for victims to "deposit" the fake check, think the money is in their account, then wire the money through WU to the scammer who may be in Nigeria.  The scammer gets the money wired to them and is good to go.  Meanwhile, in a few days your bank will let you know the check you "deposited" was fake, and you are out of all the money.

Oh, and the shipper is a fake too.  It is all a ploy.  There is no real valid address they give to you.  The whole point is to get you to wire the money as soon as possible before you find out the whole thing is a scam...     check, buyer, shipper, address, speech impediment... it is all fake.

OMG I got the same thing from her. A citibank check which I called about and it said finds were not available so I emailed her back and she said PLEASE just deposit it.. I knew it had to be a scam. She sent me way more then my items were. So now I have a bank fee because her check did not clear. I saw we get a suit going... Oh and she also said she could not answer that phone number she gave me because of her disability..

Hi Hanna. I hope you don't mind s contacting you but we just got a response for a posting on Craigslist from "Eva Knight". Do you know if this is a scam?

I got the exact same msg as BeeBow/J/everyone else. Sounded weird but responded anyway. Then I got this:
Thanks for writing back...but I'm sorry I won't be able to come see it anymore, embarking on a 3 month business trip to New York tomorrow morning,I was gonna be coming to your town that got changed but I still want it anyway,getting it for my cousin for her upcoming
birthday. If you could sell it to me when I get to New York I will mail you a bank official check to cover the cost and also add funds to cover the shipping to where it will be needed. I'll arrange for a mover to handle the pick up and delivery so it doesn't stress you. I really need this, quite important and urgent. I will be more than glad if it can be sold to me. Email me back with a name, address and your phone number for the check, write back soon. Thank you.
Knew it had to be a scam and decided to google the number and got you guys; thanks for the heads up.