NewBasfordlad 3,599 Posted September 25, 2015 Report Share Posted September 25, 2015 I have today received a e-mail supposed to be from Virgin media telling me my monthly payment has not gone through and they will be cutting me off tomorrow. It asks you to click on a button to make payment. DO NOT CLICK ON THE BUTTON...........I have spoken to Virgin and they have confirmed it is a scam and that it has been sent to thousands of their customers. It looks very authentic but DO NOT CLICK THE BUTTON Quote Link to post Share on other sites
Ayupmeducks 1,730 Posted September 25, 2015 Report Share Posted September 25, 2015 With emails, there should be a "Full Header" selectable from the email menu above the emails. You can verify the validity of all emails using it. It shows the email address of whom sent the email, plus tons of other data. Chances are these emails come from "free" email servers, so in your case, ie "dave@yahoo.com" would be a dead give away as a scammer . Quote Link to post Share on other sites
mick2me 3,033 Posted September 25, 2015 Report Share Posted September 25, 2015 Would be interesting to see the headers, can you post them? Quote Link to post Share on other sites
loppylugs 8,429 Posted September 25, 2015 Report Share Posted September 25, 2015 It warn't me!!! Dave. Quote Link to post Share on other sites
Ayupmeducks 1,730 Posted September 25, 2015 Report Share Posted September 25, 2015 You asked for it.... I changed my email addy to a different one From "SeniorApartmentsDaily-ForYou" Fri Sep 25 17:00:42 2015X-Apparently-To:dog@yahoo.com; Fri, 25 Sep 2015 17:01:34 +0000Return-Path: <SeniorApartmentsDailyForYou@seperatenexttriumph.com>X-YahooFilteredBulk: 67.209.154.130Received-SPF: none (domain of seperatenexttriumph.com does not designate permitted sender hosts)X-YMailISG: yXkv22gWLDuC092OoNdINm3pxYzxJoF956ji4oDc2amLUCgt cCqTf.3KqeqqnQk2B.K82.kkL6w3hop2ITdhB9ZLRg3rEfGNP6p.zHFfrAYw dqngrla14DBh6pNYMvzwUcMt64l5p8mlWSz1noJRhaUKpzJksaO0UjtJrKEu mFvUvVVP4csc5F9KqWG924Glw1k0kLJDlZL.1j20mmTgVk.JP47jkWblv5pL 7j0zND0WtBnIn5PC3.klUaURXJJAoEJXwEDp6tbZwpR6mKnsYG.Dkc5wJRYg OsWhsbQcQGNAUQbcTtZpOhNogzQYxoQXHE1Xj1b2M64eX1d0z0XYTDz4k7hQ YhS5jnO.AfJh2ZrccgYdVTQikYgToNWt.NExhCu78aOGT1MN_9SP8qSnrViQ IvTYR2UsYXi0AJpB9eOvGqF42tZ9DcX_ynmuEZNqBckedNaW_sl4Vc4ZVcG7 pYl8M86suwUSGbDQ1__ygYOF7FYUpKbE222BHMB51A0avvPGESLj.CDjuLGP HkejCeDY8atrWZxVSaJ5vipojpBcGGdAoT6FOVrxpTZfmbiMGC5u6SGrRvdG G3oByfJfwQ20wQDYbpll1MQXaGLwSOkNQ_JgByjuqqH9LCTjRT.4eGDs6X2p DdVv3WWTfwB12ezJFTh32_oy_mj9Lz2lKbAXcgx_y7ilYrt3wxZYMFBxEhcG eLjPbAGkNz8JUII.eauYW4aponjUmgVqmJtVa049vkufo8aWGndLrDD.fYXZ VbFENcWZBTdOREkQ3MiVeshpbIV07.d5jLXUC2tIHYOtPOn7ZVqPJ5dzCmLz 7uIlMbQUWAOQw6h3uCb6pxoH9TMPueATaB51k2av1zdXl92Gytq7lhCMeDB8 Q2Z6WTWQRh_rkYoe13NuXX9tG5s7ywFEc4DQRFWI1l_RIi1qXPmqshDRbztF _TZGK9VjZV3LDF0_fppC2xHu7KMnyVAwtJmbVY.mQcH1VQ5q9UdttEs4JH45 nI5bsF7hzMF7D7342dMmulclBV3A6Jc0U.kFsHivDG2vj.wLDtO2eMgTD2RS rdWgSn9DIHHGmNkFV0NjpTb_N2BgEAL8lXTgfpuBfe7wHePNEYsspCM5.jvP SKl8CFUKV2U0Wb0OUz0iYhqKdjjAAc7Zv2Aa.lLn1rTjsCdUob6O1XmRZDjc HGHAkTkSEV7Q47J_v15PYuz21excNU89nIfPgtobqjJEh_iWIAOW9uMaHlkX 6iWHYugNEMBNFk5HpYk1aN5H7g2rl2vGbwoY2MO6R8bvoXq9mUzfH3s9x0TL 7YE9sgcyDo501SSJytzK.BHu9Ci1T8585nfJvl0mH.twjsluk9YT7hBiKp3Y 6wHvenmBIG_yfS5dmlc8NqcSYy6LUtX.CtnxZCctJcoA3HrI85gP2b5Qr9_N 5yU4ZMoCgjQBcoWTx5AAx1MrXeOShPaMArl091sP0DoR1eQ6qubSz7poxZhd DzpVtMoU1HxkMl3K3ha7PxfUYQ01BvqyDfDcRK30rxI9yad8tINHzCX7TT8r C_LJkmr4f7wkIHQoIHPB6.AigsSXFeS0wMWNARhWTuEOnL2d.Jm520pDy64b wHwGDf2zIFIszwZsrUTPL0hc8KWLAtnX.N4V8G6kbWIQ7hxYEifHEcMFNhvJ z_RW3YUGw23hMUci.K2NxhbnX-Originating-IP: [67.209.154.130]Authentication-Results: mta1031.mail.ne1.yahoo.com from=seperatenexttriumph.com; domainkeys=neutral (no sig); from=seperatenexttriumph.com; dkim=neutral (no sig)Received: from 127.0.0.1 (EHLO seperatenexttriumph.com) (67.209.154.130) by mta1031.mail.ne1.yahoo.com with SMTP; Fri, 25 Sep 2015 17:01:26 +0000To: "SeniorApartmentsDaily-ForYou" <SeniorApartmentsDailyForYou@seperatenexttriumph.com>From: "SeniorApartmentsDaily-ForYou" <SeniorApartmentsDailyForYou@seperatenexttriumph.com>Subject: Senior Independent Living May Be The Right Choice For You!Date: 25 Sep 2015 13:00:42 -0400Message-ID: <1443200442.jlkaqvpydhplgkmnna@seperatenexttriumph.com>MIME-Version: 1.0Content-Type: text/html;charset=UTF-8Content-Transfer-Encoding: 8bitContent-Length: 1712 Quote Link to post Share on other sites
catfan 14,793 Posted September 25, 2015 Report Share Posted September 25, 2015 And just exactly what are people looking at / for ???? Quote Link to post Share on other sites
Ayupmeducks 1,730 Posted September 25, 2015 Report Share Posted September 25, 2015 The "path" the email took and where it originated, the one above is just a spam advertising mail, I didn't have any " scam spam" in my junk mail box to use as an example. Quote Link to post Share on other sites
Ayupmeducks 1,730 Posted September 25, 2015 Report Share Posted September 25, 2015 This is the header from one of those multi million dollar scams, send us $65 to access your money via your ATM card account. I've altered my email addy to dave @yahoo.com. Note, it's from a man and the sender has a womans name on the free email account, also note all the email addresses in the text of the header. This is on the email.. Like I'm going to send ANYTHING...LOL. I wouldn't send my dog via Western Union either.. Receiver Name: John OdikeCountry:Benin Republiccit :CotonouText Question: God Bless?Answer: YouAmount: $65 From Mr John Don Fri Sep 25 21:14:12 2015X-Apparently-To: dave@yahoo.com; Fri, 25 Sep 2015 21:14:14 +0000Return-Path: <sharonbradley14@gmail.com>X-YahooFilteredBulk: 183.79.56.147Received-SPF: softfail (transitioning domain of gmail.com does not designate 183.79.56.147 as permitted sender)X-YMailISG: M7NS36kWLDuahORy10ibYG71zG2nFDFvJPJevxKlj_8Uo8jL pk1PE6HeW5MtyhASaf3AE3Bbbsd0Xgbrpsn9yulsTEIIifjD9VSeg0QD.iRF yybej.V0InYyIFs4w.Z2dAw97cCVfne4shQqzO66sr1hSmZBmSqRKexNb3lV 0rhxZgaxLVJ8lnkIF9j7UeSV0QURPXPmQ1IH.UN14x_1rkhOjZzFUL4u4VS5 LRMro4n7dXlPfVECvT5WClrUgBsY1S5K3gncuV67BgTBIdOaURf3rTe3NQ5L BVUDq7XCwhFwjw6uJwMqKh1Q0SazpSh3qs57EoeW8bD0GcLrZpEqfg1fqdKS hXLBeHvnr0FSnG7kvEhIPkupeOv7p_ssEUfP3uKLqNEp3VzwiJLb9G.lP3nP pamj1BP05JjGw9nOO8PKXhr8ySyo0uIXoxvL91mT6bcv5yrsIGCOByk_WQOt k6MoXZIsQ5DBhfjY1b9wgNU9AS7S7Mk_yBaF0UtS2nNXpzEi6N2KEUs7AFcm njOOEvRN.z0CcstCAOJ1O57fK347quxxWjlIqQPfov.O7zNMCVA_ZLP.lP2Z kg4ue6XKt_MEo6ofV2HcvwBsikrmcAEF8M4aHdkAa8ftdHnPJH_EqG_rLclG d4zMrNYUuJcoiB2hY8aGlDrrB4CTc0YG3jEHTtIpBSwA66YlrA_hfjUXxusQ mmfQIQNtFjq9cT4J6wKYJtGlYbBsEOIkQ.jM3zJI.V0SyW2Cbez6zbPdIbO3 mvMLxuU8LTQ4yAB6s5WqsXmAqQtOvtMgDKF4Ha6o8Soej78bxyUM4LevPmj4 hPjoaxoHVPHAwpX4NtU2pMNgSOtkeHLkbJq8eKgpb0ey_eB4z.C9JiuU4Lfv kc9pAmdVe3_lYuFAfIYGIdH_touF9VLDxSJNA5WlDRYR7brlTLPKdxCxFDFy Hh6myBFX0xGGtIme7StbaYBPnRX6CymprzsewG9wXXIDeSMNAUYz3StNk2gS Q6vAdfLghUc.vFMkZLKfb9XsRDxC0y0l4GldItBhMHsgEPj52bDvCLuXch3C 4J8p54wExCBXuVArwvNqN5AIgmwagx7uml52mjv2KsUYCowEXQp3NPrnEiqA o8zzv7ZqJdD5QoYLuaKD4jpbwlQWLQV3SnSDGf7k0HbUPyRJ6SXv4xhhHsLM JqNgqlj1i395hqVObN.h6YTGFBq59de6gnTSVjbSMvJqtiljpBYgZfmaUAz8 duK52j1ykamijg_qr.Y5lf5p3Ib20Qk.Ve3R5iLWD893E7NgFEB4bGK5d2qs Lerv_s13lO8uijHBVClabp5bwEI1UQYgfp4ick4Bh8XUipy.tEBlqTRed2iE YFNLc8brdrpRuFNtqipk_ZuIy_wTaCInEyyUJhI.dYhhSocFEb6crS837JVJ r8OF1cNnZLIhjSGqQzC9yAF7FN2LqzY4L5UTrlhz3GcFIj4OlU_iVBYT8lwJ P17m0Hp5CBSKN_oGbvxSXoCJUxqER4ucOPaE0IWwGrqsX0Q7MRClR954Qydw 1F8s6grBTpr567qQTH9ezA--X-Originating-IP: [183.79.56.147]Authentication-Results: mta1574.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)Received: from 127.0.0.1 (EHLO nh502-vm2.bullet.mail.kks.yahoo.co.jp) (183.79.56.147) by mta1574.mail.gq1.yahoo.com with SMTP; Fri, 25 Sep 2015 21:14:14 +0000Received: from [183.79.100.139] by nh502.bullet.mail.kks.yahoo.co.jp with NNFMP; 25 Sep 2015 21:14:13 -0000Received: from [183.79.100.132] by t502.bullet.mail.kks.yahoo.co.jp with NNFMP; 25 Sep 2015 21:14:13 -0000Received: from [127.0.0.1] by omp501.mail.kks.yahoo.co.jp with NNFMP; 25 Sep 2015 21:14:13 -0000X-Yahoo-Newman-Property: ymail-3X-Yahoo-Newman-Id: 399216.27452.bm@omp501.mail.kks.yahoo.co.jpReceived: (qmail 68108 invoked by uid 60001); 25 Sep 2015 21:14:13 -0000Message-ID: <257283.32260.qm@web100803.mail.kks.yahoo.co.jp>X-YMail-OSG: fjHy_4cVM1n12ZCSntuXKSyAqirJMP6K571fnqpBIMY5gi1Nu.zir3IFQI1n7eGOzaV6j4uqwjTTZoYmCBKzapB__aS88fV7RxvrCM8IKeLGERTTpz19klC9YQIfQ4GO2S49oj5U7K6WVTOctjg72RdLpCIyT5Hli2u_dbpBh_0q3lPHXdE_seljHS3y5lf5mJhFcRa3ggog2_UCn6fZjapzohp255OM2di7irbr707X2_IwkkQhaK6Yy2Pl9ukjkIMqVkWG2ru06gFPFBGdaJ.Unlj5T44WyjDQx7Sz8PzphCcS9haKwsEornqoz0xM.mz5K8fTX3UpoTwrS7x_1T.isMu_bHkGdr6mHZzqMD0bHSMP3.HOblEj04iUE8ESUwxNTO86Fv1j4_2VIHpeYBxIDjq9u_ijcRQj5_DnWOcqqA8tqBXEYZgUIHDX2IMDh0a3l_09TqXXvwEExsamb_8q2DHdbmAI2JEA4g_wRvTLdNG2R_Li5zNG7LszP7iSr0lwRIMCpLBN52wEr9mu4QfB5IM.M.Jh9TygH5ewlNUUQj0hQojO432Xn6P_eMsKuJCgQsVFi_kQ3wa82sUVY8Up7XWEUIYwNCvieq8VjkASdaHYuv4IqsJAT0lTas0hASclA03KbeKhIKJdCiJ4tBq206raBwis2ZX1KCAA_SMiaVUnf7qVfu_GHSksReceived: from [41.138.90.66] by web100803.mail.kks.yahoo.co.jp via HTTP; Sat, 26 Sep 2015 06:14:12 JSTX-Mailer: YahooMailWebService/0.8.111_67X-YMail-JAS: _NlvUY0VM1l7lcl1sOzPVwnZLUdEBOMHh17ny4kaUfL_ibfInAYi5nw9Saqh2NkY6Zq3StMNUhFdClY7NW6_yexw2PFPYAVF65mzFvk76l9AGJEDB2SDTzqPY0nrU.Sc8qN3Sender:Date: Sat, 26 Sep 2015 06:14:12 +0900 (JST)From: Mr John Don <sharonbradley14@gmail.com>Reply-To: Mr John Don <walter_jeneth@yahoo.com>Subject: Good news, Quote Link to post Share on other sites
barclaycon 569 Posted September 26, 2015 Report Share Posted September 26, 2015 I am sure they must send hundreds of thousands of these things out. I guess they've only got to fool a small percentage of people in order to still make a tidy sum. It angers me that none of the major players (Microsoft, Google, Yahoo) do ANY effective work in tracing these irritating scrotes. As you've shown above, examining the header can yield the whole route map of where these things have come from. But they don't do anything - and security is so lax with open relays etc. that the scammers can operate with total impunity. It costs nothing. They just hijack accounts to send out this garbage. There's one guy that makes spam and phishing people (particularly from Nigeria) jump through hoops. He expresses an interest in their scheme but says that he needs more proof of their identity before he will send money. The paperwork and videos that he makes them do are on his website. They are hysterical! If only we all time on our hands to humiliate and irritate these low-lifes. Quote Link to post Share on other sites
Ayupmeducks 1,730 Posted September 26, 2015 Report Share Posted September 26, 2015 Funny you should mention someone who "plays" them. There used to be a woman who had a site where she showed how she dealt with one scammer in Nigeria. It went on for months, she played him for all he was worth and not once did he see how he was being played. I sometimes play with them for a bit, until I get bored with them...You can only play for so long with a brain dead person before boredom sets in. 1 Quote Link to post Share on other sites
barclaycon 569 Posted September 26, 2015 Report Share Posted September 26, 2015 I can't remember the guy's site, but it is very, very funny. He's posted a lot of the replies from these people, and they are shockingly stupid. It's sad that complete numbskulls can invade our lives with this garbage. I'm all for making the pathetic lives of these Spammers a misery. It's a time-consuming activity though. Quote Link to post Share on other sites
NewBasfordlad 3,599 Posted September 26, 2015 Author Report Share Posted September 26, 2015 I had an e-mail from a 82 year old mate today to thank me for warning him, he told me he would have been sucked in. He is the only other person I know off that has received this phishing scam. Virgin now have a warning on the web site. Quote Link to post Share on other sites
FLY2 10,108 Posted November 3, 2017 Report Share Posted November 3, 2017 Just received a dubious email, supposedly from PayPal, saying that my account that I use for eBay purchases has been suspended, and asked for bank details and password. I immediately suspected a scam, as there was a glaring spelling errors. I didn't open any links and deleted it immediately. Just to test its validity, I attempted to purchase a CD, and the sale went through successfully. Quote Link to post Share on other sites
philmayfield 6,127 Posted November 3, 2017 Report Share Posted November 3, 2017 If it looks even remotely dodgy just bin it. 2 1 Quote Link to post Share on other sites
radfordred 6,284 Posted November 3, 2017 Report Share Posted November 3, 2017 Just filled one in from Pay Pay looked genuine to me? 1 Quote Link to post Share on other sites
catfan 14,793 Posted November 3, 2017 Report Share Posted November 3, 2017 Never. Ever click on any link from Paypal. Any bank etc. I get these scam emails from Paypal yet I.ve never dealt with them.& never would delete em. Quote Link to post Share on other sites
FLY2 10,108 Posted November 3, 2017 Report Share Posted November 3, 2017 I deleted it immediately. Quote Link to post Share on other sites
Brew 5,413 Posted November 4, 2017 Report Share Posted November 4, 2017 Ooooo you mean there are nasty mesters out there trying to steal from us, I hope the gentleman in Nigeria who is holding 3,5 million pounds for me isn't one of them, I have told all my friends and have big plans for when it arrives.. 1 Quote Link to post Share on other sites
Willow wilson 894 Posted November 4, 2017 Report Share Posted November 4, 2017 I've recently had emails and paper mail from my bank and card provider. They are "Opening access to Third Party Providers, TPPs". Quote: A TPP is a 3rd party service provider that's authorised with your express agreement to access your online payment accounts to obtain and consolidate information about your finances. This may include info about accounts you hold with us and other banks and building societies. You may also give payment instructions thru a TPP. You'll be able to give permission to certain TPPs (FCA authorised) to access information and to make payments from current accounts. The payments will be treated as if authorised by the account holder. A payment cannot be stopped once authorised by a TPP. If this has been brought up elsewhere then I think it's worth repeating. It seems to me like another avenue for scammers to infiltrate. Quote Link to post Share on other sites
Ayupmeducks 1,730 Posted November 4, 2017 Report Share Posted November 4, 2017 With Ebay, you can contact them via their customer service toll free number, it can be found on their site, if you have any doubts about the validity of emails "from them" call customer service. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.