He is Williams. We are PhishBucket. He is phishing you. We are not.

This "job" entails creating bogus (and sometimes FORGED) checks that scammers send to money mules in English-speaking countries. The scammers then tell these people to cash the checks using their own bank accounts, keep a percentage as their payment-processing commission, and wire transfer the balance to them (the employer).

The guy in this offer calls himself Williams. No first name, unless he meant to drop the 's'. He asks for discriminatory information in his so-called application form. He wants you to reply to an email unaffiliated with any company name. In fact, he doesn't even give you a company name! If you're still not convinced, we found three other offers at PhishBucket that look awfully similar.

This is part of the crime we call 'money-muling' and if the FBI or any other law enforcement organization catches you doing these sorts of activities, the scammer is banking on the fact that you'll go down first, which will give them plenty of time to get away.

Message text:
Greetings,
I just want to introduce you to a job if you don't mind, I am Williams, We
are an online recruiting company.  We recruit individuals
for PART TIME JOBS such as a CERTIFIED PAYROLL SPECIALIST.

All you need is a computer with Internet connection and the knowledge to use
it, and a color printer.

We need people who want to work on a part time basis and earn extra income.
We require people who will be honest, trustworthy and able to work
from home, to handle the printing of letters, notes and checks with the data
of the people on our payroll list of the networks of companies we work for.

Please note that we will handle the UPS, Fedex or DHL account label which
will be made for you to dispatch the letters, notes and checks to various
destinations. I need to know if you will be trustworthy enough to entrust
our company's vital information and signatory with you.

EARNINGS:

You will be paid $1,500 monthly salary for a start, if you perform very well
and we are impressed, we will increase your salary to $2,000 and to $2,500
as time goes on, please get back to me today to let me know that you're
interested.

REQUIREMENTS:

*A computer system at home with Internet connection.
*A Color Printer
*Versa Check Gold 2008 software. It will come with 150 blank checks.
*Versa Ink Nano™ 4X Life MICR Ink - 94MX Black
*Standard Voucher Check Envelope for use with business or voucher size checks.
3-9/16 H x 8-3/4 W, 250 quantities.

We will be sending you money ($350) to buy all these except for a computer and
a color printer which we are sure you will have at home. Interested? Reply by
filling this application.

EMPLOYMENT APPLICATION FORM:

First Name:
Middle Name:
Last name:
Residential Address:
PO.Box Not Accepted:
City:
State:
Country:
Zip:
Home Phone #:
Cell Phone #:
Gender:
Age:
Your current job:

You will be contacted as soon as we are through with comparing resumes. You
will be notified if you are chosen to work for the company.Email :
gwilliams01 @ sify.com . I will be expecting your response......................

Best Wishes
Williams.

Headers:
Return-Path: <gatmny2212 @ yahoo.com>
Received: from host12.oneononeinternet.com
(host12.oneononeinternet.com[65.109.239.76])
        by mx.google.com with ESMTP id
d22si24000452and.5.2009.06.29.10.02.10;
        Mon, 29 Jun 2009 10:02:10 -0700 (PDT)
Received-SPF: neutral (google.com: 65.109.239.76 is neither permitted nor
denied by domain of gatmny2212 @ yahoo.com) client-ip=65.109.239.76;
Authentication-Results: mx.google.com; spf=neutral (google.com:
65.109.239.76 is neither permitted nor denied by domain of
gatmny2212 @ yahoo.com) smtp.mail=gatmny2212 @ yahoo.com
Received: from eq3sf.com (localhost [127.0.0.1])
 by host12.oneononeinternet.com (8.12.11.20060614/8.12.10) with ESMTP id
n5TGpVmb005579;
 Mon, 29 Jun 2009 12:51:31 -0400
From: "Gary Williams" <gatmny2212 @ yahoo.com>
Reply-To: gwilliams01 @ sify.com
Subject: EMPLOYMENT APPLICATION FORM
Date: Mon, 29 Jun 2009 12:51:31 -0400
Message-Id: <20090629165131.M40692 @ yahoo.com>
X-Mailer: OpenWebMail 2.52 20060502
X-OriginatingIP: 41.219.248.178 (nelly)
MIME-Version: 1.0
Content-Type: text/plain;
 charset=iso-8859-1
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2
(host12.oneononeinternet.com [0.0.0.0]); Mon, 29 Jun 2009 12:51:50 -0400 (EDT)

WHOIS sender IP 41.219.248.178:
(Courtesy: http://whois.domaintools.com/41.219.248.178)
IP Location:       Nigeria  Nigeria Lagos Assigned To Lagos Dial-pool Customers
Resolve Host:     dial-pool87.lg.starcomms.net
IP Address:     41.219.248.178
inetnum:        41.219.248.0 - 41.219.248.255
netname:        ORG-SA57-AFRINIC-20050513
descr:          Assigned to Lagos dial-pool customers
country:        NG
admin-c:        NS4-AFRINIC
tech-c:         CM9-AFRINIC
status:         Assigned PA
mnt-by:         STARCOMMS-MNT
mnt-lower:      STARCOMMS-MNT
source:         AFRINIC # Filtered
parent:         41.219.192.0 - 41.219.255.255

person:         NAVNEET SINGH
address:        Plot 1261, Bishop Kale Close, off Saka Tinubu
address:        Victoria Island, Lagos, Nigeria
phone:          +234-1-804-1234
fax-no:         +234-1-811-0301
e-mail:         navneets @ starcomms.com
nic-hdl:        NS4-AFRINIC
source:         AFRINIC # Filtered

person:         Catalin Miclaus
address:        Plot 1261C, Bishop Kale Close, off Saka Tinubu
phone:          +234-1-8041234
fax-no:         +234-1-8110301
e-mail:         catalin @ starcomms.com
nic-hdl:        CM9-AFRINIC
source:         AFRINIC # Filtered

Comments

Add New Search RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

---

Tag it: