There are several reasons why this is a scam:

    * They call the position assistant/secretary and it would really be an accounting job (if it was real).
    * They want you to process payments. That means using your own bank account, and real employers don't allow company transactions to go through personal accounts.
    * They want you to respond to a (free) Gmail account. A real company isn't too cheap to spring for a domain that matches their company name and use a matching email address.
    * The letter, overall, is very unprofessional. A real recruitment letter would address you individually, tell you where your information was found, refer to a corporate Web site, and would have been sent from a corporate email account. There are typos and punctuation issues. Legitimate recruiters and employers must abide by certain standards, and this offer comes nowhere close to those standards.
    * Our favorite pick-up line of all: they reassure you at the end of the offer that it's 100% legit and won't cost you a cent. Does Microsoft or Pepsi or Ford say that? (Well no, because they rarely spam thousands of people to fill their job openings.)

If you like losing money and your identity on top of losing your job, and if you want to lose your freedom and go to jail for being part of a money mule ring, then this is the scam for you!

Message text:
WHITEFIELD FABRIC COMPANY

We have Job Offer Available for you. This will not affect your present Job.
We need a company assistant/secretary to help process payments and get 10%
on each Payment Processed till we can have a location in your Area. If you
are interested email me back with information below then i can send you the
procedures on what you will be doing:

Full Name:
Address in full ( No Po Box ):
City: ,
State:
Zip code:
Phone Number:
Cell Number:
Occupation:
Please be mindful that the job you are doing is 100% legit and you don't
have to pay for any charges to start the Job.

Yours sincerely,
JOE WHITEFIELD

Headers:
Return-Path: <nobody @ server.tecnomall.com>
Received: from server.tecnomall.com (server.tecnomall.com [205.234.215.66])
        by mx.google.com with ESMTP id
28si6443272qyk.83.2009.06.20.09.03.41;
        Sat, 20 Jun 2009 09:03:41 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of
nobody @ server.tecnomall.com designates 205.234.215.66 as permitted sender)
client-ip=205.234.215.66;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess
record for domain of nobody @ server.tecnomall.com designates 205.234.215.66
as permitted sender) smtp.mail=nobody @ server.tecnomall.com
Received: from nobody by server.tecnomall.com with local (Exim 4.69)
 (envelope-from <nobody @ server.tecnomall.com>)
 id 1MI32W-0002Re-HL
 for [removed]; Sat, 20 Jun 2009 12:03:36 -0400
To: [removed]
Subject: *******WORK ONLINE WITH EASE*******
From: Joe Whitefield <whitefieldpaymentofficer1 @ gmail.com>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <E1MI32W-0002Re-HL @ server.tecnomall.com>
Date: Sat, 20 Jun 2009 12:03:36 -0400
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - server.tecnomall.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [99 32002] / [47 12]
X-AntiAbuse: Sender Address Domain - server.tecnomall.com
X-Source-Args: /usr/local/apache/bin/httpd -k start -DSSL
X-Source-Dir: volarenvenezuela.com:/public_html/images/qshoutblock

Comments

Add New Search RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

---

Tag it: