Bogus job offers don't get much lamer than this. Notice how it's supposedly the general manager who's contacting you. Or how he/she writes an utterly unprofessional recruiting letter (let us be the first to tell you if you don't already know that employers and recruiters abide by a general set of standards that are *completely* absent in this offer).

The sender name in the 'From' line doesn't match the name of the person who closed the message. The reply-to address is radically different than the sender's supposed email address. In their spam, they don't tell you anything except that they want you to process payments. They'll tell you they want you to do this from home by using your personal bank account to deposit the funds and withdraw a balance (less a commission for you) to be wire transferred to them. When the check bounces (AND IT WILL) you won't have the money you wired, and the transaction will be reversed. Might not seem like a big deal until you hear the horror stories we've heard, involving THOUSANDS of dollars in transactions.

Please don't take any job listed as "payment rep" or "payment processor" -- these are dead giveaways that the jobs are FAKE!

Message text:
OUR REF: PPCL/04127.

We are contacting you for the existing post of a payment representative for
our company in your country. For more information contact Ping Tao General
Manager Email: aiko.shibata @ kimo.com

Ping Power Co., Ltd
Ping Tao .General Manager.

Headers:
Return-Path: <lrobin @ pei.sympatico.ca>
Received: from simmts12-srv.bellnexxia.net
(simmts12-qfe0.srvr.bell.ca[206.47.199.141])
        by mx.google.com with ESMTP id 30si7977358yxe.8.2009.06.20.08.10.17;
        Sat, 20 Jun 2009 08:10:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of lrobin @ pei.sympatico.ca designates
206.47.199.141 as permitted sender) client-ip=206.47.199.141;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
lrobin @ pei.sympatico.ca designates 206.47.199.141 as permitted sender)
smtp.mail=lrobin @ pei.sympatico.ca
Received: from simip9-ac.srvr.bell.ca ([206.47.199.87])
          by simmts12-srv.bellnexxia.net
          (InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP
          id <20090620151017.ZHLL1599.simmts12-srv.bellnexxia.net @
simip9-ac.srvr.bell.ca>;
          Sat, 20 Jun 2009 11:10:17 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ah4FAIOPPErOL8 @ /2dsb2JhbACBUZggsyGDdAU
Received: from simfep6.srvr.bell.ca (HELO smtpacout.sympatico.ca)
([206.47.199.161])
  by simip9-ac.srvr.bell.ca with SMTP; 20 Jun 2009 11:15:53 -0400
X-Mailer: Openwave WebEngine, version 2.8.10 (webedge20-101-191-20030113)
X-Originating-IP: [200.170.221.10]
From: "Ping Power Co., Ltd" <lrobin @ pei.sympatico.ca>
Reply-To: aiko.shibata @ kimo.com
To: <info @ ping.cn>
Subject: Representative Needed
Date: Sat, 20 Jun 2009 11:10:10 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Message-Id: <20090620151017.ZHLL1599.simmts12-srv.bellnexxia.net @
simip9-ac.srvr.bell.ca>

Comments

Add New Search RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

---

Tag it: