Job scam quick guide: it's a scam if...

  • they want you to collect and forward money in any way (a "money mule" job). You'll wind up engaged in money laundering, personally defrauded via expertly forged cheques, money orders, etc, or defrauding someone else who pays for goods that never arrive.
  • they want you to receive packages and reship them somewhere else. The goods will have been obtained fraudulently, and they're just using you to make the shipping address appear local. You will be aiding fraud.
  • they want up-front payment (either to them or someone else) of any sort for anything before you can get the job. This is advance fee fraud: there is no job -- it's just a big con to extract money from you.
  • they want you to buy any kind of "membership" or "kit" in order to start. Forget it -- it's not a real job at all: they're trying to sell you something, and they're probably making a bunch of other false claims about it if they're pitching it as a "job".
  • it's a job offer, and it's spam. There are LOTS of these scams about, as you can see.

Monday, March 17, 2008

Holmes Recruitment Agency

This is just a random Nigerian scammer, and the name he's using seems to be completely made up. He's being extremely nondescript about the kind of work available, which leaves me insufficient information to determine which particular scam he's pulling. It's probably one of two Nigerian specialities: advance fee fraud, or check forgery. If it's advance fee fraud (which I think is the more likely case), the scammer will say that he's found you a job, but there are certain expenses involved in getting it. The promise of a job (there is no actual job) is the bait; the fee is the hook. If it's check forgery, then the scammer offers you a job as a money mule, accepting payments by cheque, and forwarding cash via Western Union. The chance to keep a percentage of the payment is the bait; the fact that the checks are clever forgeries and will eventually be dishonoured is the hook.

The originating IP address of the second email below was 193.220.212.156, which (by current WHOIS data) is in Nigeria. Note that the UK +4470 telephone number can be redirected internationally at no cost to the scammer -- Nigerian scammers love them.

---------- Forwarded message ----------
From: Mr. Richard Holmes <holmesrecruitment@msn.com>
Date: 16 Mar 2008 XX:XX UTC
Subject: JOB OFFER
To:

Dear
William Recruitment Agency is an outfit in England
that helps people to live and get a good work in
England.
We are a non-profit organization that is here to help
the underdeveloped countries.
Do you really need to live and work? Gibbon is the answer Apply today with your resume attached to us online via email attachment for safety.

Mr Richard
THE HUMAN RESOURCE DEPT,
HOLMES RECRUITMENT AGENCY
Phone (+44) 702 405 2582
E-mail: holmesrecruitments@yahoo.com
 

---------- Forwarded message ----------
From: HOLMES RECRUITMENT AGENCY <holmesrecruitments@yahoo.com>
Date: 17 Mar 2008 XX:XX UTC
Subject: Information on Request......
To: Deception Spotter <ideceive@gmail.com>

Dear

Thanks for your mail to us.We are happy to have heard
from you and want to let you know that we do welcome
questions like yours.

I want to let you know that we recruit all spheres of
qualifcation ranging
from,Unskilled,Skilled,Semi-Skilled Labours and
professionals.

Experince and Awards attached is an added advantage to
you because its attracts more salary to your offer.

We will be expecting to have your Resume sent to us
soon for review and possible offer to you.

With Regards,

Holmes
+44 702 405 2582

Sunday, March 16, 2008

SkySoft

Same old money mule scam; new name: SkySoft. There may or may not be an actual company of that name in the Ukraine -- it's just a random name that the scammers use as a cover story. This scam involves receiving stolen money via direct bank transfer, and forwarding it to the thieves via Western Union. There may have been further domain names registered in addition to the ones seen here.

Domain Name:                                 SKYSOFTONLINE.BIZ
Domain ID:                                   D23519727-BIZ
Sponsoring Registrar:                        EASYSPACE LTD.
Sponsoring Registrar IANA ID:                79
Registrant ID:                               TUZMFVWTSAPEMBNR
Registrant Email:                            hyang@skysoftonline.com
Name Server:                                 NS4.EASYSPACE.COM
Name Server:                                 NS5.EASYSPACE.COM
Created by Registrar:                        EASYSPACE LTD.
Last Updated by Registrar:                   EASYSPACE LTD.
Domain Registration Date:                    Fri Feb 29 03:05:30 GMT 2008
Domain Expiration Date:                      Sat Feb 28 23:59:59 GMT 2009
Domain Last Updated Date:                    Fri Feb 29 03:05:32 GMT 2008

   Domain Name: SKYSOFTONLINE.COM
   Registrar: EASYSPACE LTD.
   Whois Server: whois.easyspace.com
   Referral URL: http://www.easyspace.com
   Name Server: NS4.EASYSPACE.COM
   Name Server: NS5.EASYSPACE.COM
   Updated Date: 13-feb-2008
   Creation Date: 13-feb-2008
   Expiration Date: 13-feb-2009

---------- Forwarded message ----------
From: Victor Krainov <[redacted (random address)]>
Date: 16 Mar 2008 XX:XX UTC
Subject: Flexible job conditions
To: [redacted (privacy)]

Hello!
My name is Viktor Krainov. I am manager a of personal staff of SkySoft inc. Ukraine.
At this moment we are developing market of Australia and other countries. In connection with it we have a nessesity in regional managers in
different countries. Full-time and part-time are possible.

Available vacancies: Regional manager.*
Essential requirements:
-Computer skills(MS Word, Excel)
-Available time(2-3 hours a day part-time)
-Elder than 20
-Right to work in the country of living
-Internet access

Job descriptions:
-Days off: Saturday and Sunday
-Salary: part-time beginning from 800-2000USD per month, full-time 1000-4000 per month. For efficient work award fee would be paid.
-vacation: the vacation available from the beginning of 4th month of work. Year vacation don't suppose to exceed more than 1.5 month.
-The organization pay all taxes, that need to be paid during our work.

* SkySoft is an equal opportunity employer. This means we do not discriminate on the basis of race,
color, creed, national origin, citizenship, religion, disability, age, sex, gender identity,
veteran status, sexual orientation or marital status, or any other legally prohibited basis in hiring,
training, promotions, compensation, benefits, layoffs, terminations or any other personnel decision.

If you interested in the vacancy, please send us the resume on the following e-mail: job@skysoftonline.biz and we will contact with you.
Please, with resume send us contact telephone, so we could make phone interview.

Best regards,

Victor Krainov,
Personal staff manager,
Skysoft inc.

Thursday, March 13, 2008

Rinky Ltd (auf Deutsch)

This job scam is thin on details, and it's in German. I don't see a lot of that. Presumably it's just the usual money mule type of thing.

---------- Forwarded message ----------
From: [redacted (random, false)]
Date: 13 Mar 2008 XX:XX UTC
Subject: Haben Sie Spass an Ihrer neuen Arbeit!!
To: [redacted (not my address)]

Wir sind ein dynamisches Gewerbe im Bereich der Finanzdienstleistungen !

Unsere internationalen Geschäftsbeziehungen werden immer wichtiger. Zur Verstärkung unseres Teams suchen wir einen Profi als Treuhandagenten .

Sie
ˇ wohnen in der EU
ˇ verfügen über Engagement, denken unternehmerisch und handeln zielstrebig
ˇ haben einige Komputer Kenntnisse und sind tagsüber erreichbar
ˇ haben min. 5 Stunden pro Woche frei

Unser Unternehmen

ˇ bietet Ihnen ein leistungsorientiertes Gehalt und wunderbare Aufstiegschancen
ˇ überlässt es Ihnen selbst ,wie Sie Ihre Arbeitszeit planen

Ihr Einkommen beträgt ab 2500 Euro pro Monat. Falls Sie näheres wissen möchten oder Interesse an dieser Position haben, senden Sie bitte Ihre Bewerbung bzw. Fragen an:

rinky1@mail.ru


Mit freundlichen Grüssen

RINKY LTD

Wednesday, March 12, 2008

Benxi Steel Company (not)

There are a number of things to note about this job scam. The first is not immediately obvious: it originated in Nigeria (ip address 41.220.70.3), although it was sent via hamdard.net.pk, as per the "from" address. The second thing to note is that this scammer is getting his scams mixed up: the "from" name is "Heineken Lottery", suggesting that the same scammer has also been pushing lottery scams. Beyond that, it's safe to say that this job involves the "employee" being duped into cashing forged checks and forwarding the proceeds via Western Union before the forgery is detected by the bank.

---------- Forwarded message ----------
From: HEINEKEN LOTTERY <heinekenlottery@hamdard.net.pk>
Date: 12 Mar 2008 14:13
Subject: ONLINE JOB OFFER
To:

Benxi Steel Company
1, Kita-Aoyama 2-chome
Minato-ku, Tokyo 107-8077,
China.

I am Mr. Chon Kawasaki, the Director of Benxi Steel company based in
China. We specialize in the production of Iron and steel, which we
export to the US,CANADA and some part of Europe.

We are searching for payment officer in the USA,CANADA,ETC. The reason
we seek your assistance, is that we need you to  pressurize our
customers that are owning the company money, to enable them pay on
time. You can  receive payment via wire transfer, checks/bank draft
etc. In otherwords, you shall be receiving payment from our customers
on behalf of the company. That must be based on trust.

Should you have a present job, you can still be part of our business
as your service to us would not interfere with your working hours at
all. The job is an online business.

IF YOU ARE INTERESTED,PLEASE COMPLETE THE FORM BELOW  AND SEND IT
TO  THE COMPANY FOREIGN AFFAIRS MANAGER IN UK (ONLY).

NAME:
SEX:
AGE:
ADDRESS:
STATE:
CITY:
ZIP CODE:
COUNTRY:
TEL:
FAX:
MOBILE TEL:
HOME TEL:
COMPANY NAME:
WEBSITE:
OCCUPATION:
YOUR BANK NAME (s):

COMPLETE THE ABOVE FORM AND SEND IT TO THE COMPANY FOREIGN AFFAIRS
MANAGER IN UK (ONLY), VIA HIS PRIVATE ID BELOW:

Foreign Affairs Manager,
NAME: MR Ellis Bryan.
EMAIL: benxisteel01@yahoo.co.uk

Sincerely,
Mr. Chon Kawasaki.
Director,
Benxi Steel company.

Tuesday, March 11, 2008

Apple Enterprise Sales Company (fake)

I believe we last saw a money mule scam following this pattern in the Camac Sales and Distribution Group scam. The general layout of the spam is similar, and specifically includes three fake endorsements from real magazines, plus a Gmail reply address which requests the keyword "interested" in the subject. Anyone who thinks that The Economist magazine would actually carry a phrase like "Employment situation has gotten on a new level" isn't paying close attention.

---------- Forwarded message ----------
From: [redacted (false, misleading)]
Date: , 10 Mar 2008 16:15:52 +0100
Subject: Best Position available Brought by Google.
To: [redacted (privacy)]

Greetings Dear Recipient of This Great Offer!

You have a chance to start making 1200+ AUD a week spending 1-2 hours a day Monday-Friday, working most of the time from home.

This opportunity is brought to you by an Apple Enterprise Sales Company and now is hiring!

You received this offer via Worldwide net of advertisement brought to you via paid ads by Google.

If you are looking for an additional job or just an extra income - this position is for you.

Designed for an ease of use and the best position available nowadays, time wise and income wise.

Although some requirements need to be met:

You are 18+ years old*
You have 1-2 hours of free time a day Monday-Friday*
You are responsible and dependable*
You are located in Australia only*

    -----

Some reference:

"Best offer on The Net" - "Money" magazine, -John Keppke.
"Employment situation has gotten on a new level" - "The Economist" magazine, -Laura Star.
"Amazing solution for Extra Income" - "Newsweek" magazine, -Dennis Coleman.

    -----

If you meet all requirements - don't hesitate to get more information on this great position called "Fund Operator".

Reply to:  apple.entinfo@gmail.com

with subject "Interested" to receive full information on this great position. Limited time offer, don't wait! And Good luck.