|
|
Post by Village Idiot on Jun 8, 2020 16:08:18 GMT -5
I had an email from Nick Fisher, proprietor of the Farmer's Merc this morning. It sounded just like Nick, no strange wording.
Basically, he's not feeling bad but not great, his doctor advised him to stay home and not go out into public. That's understandable these days. His niece's birthday is in a few days, and he had intended to pick up a PlayStation gift card. If I had time today, could I pick one up, it'd be much appreciated, I hate to ask you this, all in Nick language.
I know there's some sort of gaming store in Vinton, no problem. I'll pick one up, I said, and drop it off in your mailbox. Don't worry.
Keep in mind that Nick has done a lot for me, and for all of us Idiotjammers, for that matter. Of course I'll do that for him. No biggie. That's a legitimate favor people ask of their friends. Plus, I didn't have a whole lot to do, I was sure the game store would be empty except for me, I stuck a mask in the Jeep and was ready to take off, but emailed him from my phone to let him know I was going to do it now, now worries.
He responded immediately:
"Thank you very much. Total amount needed for Play Station Gift Card is $200 ($100 denomination) from any store around you and I need you to scratch the back of the card to reveal the pin, then take a snap shot of the back showing the pin and the serial number then forward it to me here online thank you.
Nick"
Well, forget that.
But I did write the scammer back and apologized for getting the card before I got his email, and that I had gotten the card and dropped it off in his mailbox. I thought that would take care of things. But the guy wrote back:
"My doctor says I'm not allowed to go outside at all. Could you please get the card and follow the instructions I asked?"
"Well" I said, "I really don't have the time to drive back to Mt. Auburn, but I will. I'll get the card from your mailbox and slip it under your door."
"I'm not home right now. You need to do what I had asked. I'm very ill, and that's the only way."
"Could you have someone get it from my mailbox, and drop it off wherever you are? Are you at the hospital in town?"
"I am very ill, and the doctor asks I don't disclose my location."
This went on, and the scammer gave up before I did.
Obviously Nick's email was hijacked, and I did call to let him know. What concerns me is that this guy sounded so much like Nick in the original email, there was no reason not to believe him. Especially since it was a simple favor. It makes me wonder.
Are these scammers getting so sophisticated that, after hacking someone's email, that they actually take the time to study the verbiage of the person they are hacking? I'm no fool, but that first email sounded so much like Nick that that I didn't bat an eye.
|
|
Dub
Administrator
I'm gettin' so the past is the only thing I can remember.
Posts: 19,914 
|
Post by Dub on Jun 8, 2020 16:23:16 GMT -5
How did you know it was from Nick? When you hit reply, did the email address exactly match what you normally use for Nick? That is “nfisher,” three more characters, the “at” sign and yahoo.com?
I’d be suspicious seeing anything like that from Nick. Actually, I’d be suspicious if got something like that from our pastor.
|
|
|
|
Post by billhammond on Jun 8, 2020 16:23:50 GMT -5
I had an email from Nick Fisher, proprietor of the Farmer's Merc this morning. It sounded just like Nick, no strange wording. Basically, he's not feeling bad but not great, his doctor advised him to stay home and not go out into public. That's understandable these days. His niece's birthday is in a few days, and he had intended to pick up a PlayStation gift card. If I had time today, could I pick one up, it'd be much appreciated, I hate to ask you this, all in Nick language. I know there's some sort of gaming store in Vinton, no problem. I'll pick one up, I said, and drop it off in your mailbox. Don't worry. Keep in mind that Nick has done a lot for me, and for all of us Idiotjammers, for that matter. Of course I'll do that for him. No biggie. That's a legitimate favor people ask of their friends. Plus, I didn't have a whole lot to do, I was sure the game store would be empty except for me, I stuck a mask in the Jeep and was ready to take off, but emailed him from my phone to let him know I was going to do it now, now worries. He responded immediately: "Thank you very much. Total amount needed for Play Station Gift Card is $200 ($100 denomination) from any store around you and I need you to scratch the back of the card to reveal the pin, then take a snap shot of the back showing the pin and the serial number then forward it to me here online thank you. Nick" Well, forget that. But I did write the scammer back and apologized for getting the card before I got his email, and that I had gotten the card and dropped it off in his mailbox. I thought that would take care of things. But the guy wrote back: "My doctor says I'm not allowed to go outside at all. Could you please get the card and follow the instructions I asked?" "Well" I said, "I really don't have the time to drive back to Mt. Auburn, but I will. I'll get the card from your mailbox and slip it under your door." "I'm not home right now. You need to do what I had asked. I'm very ill, and that's the only way." "Could you have someone get it from my mailbox, and drop it off wherever you are? Are you at the hospital in town?" "I am very ill, and the doctor asks I don't disclose my location." This went on, and the scammer gave up before I did. Obviously Nick's email was hijacked, and I did call to let him know. What concerns me is that this guy sounded so much like Nick in the original email, there was no reason not to believe him. Especially since it was a simple favor. It makes me wonder. Are these scammers getting so sophisticated that, after hacking someone's email, that they actually take the time to study the verbiage of the person they are hacking? I'm no fool, but that first email sounded so much like Nick that that I didn't bat an eye. Holy crap! There sure are some awful people in the world. Good sleuthing, Todd! |
|
|
|
Post by Village Idiot on Jun 8, 2020 16:29:14 GMT -5
If I was a good sleuther, I wouldn't have fallen for it in the first place.
|
|
|
|
Post by TKennedy on Jun 8, 2020 16:29:20 GMT -5
Amazing how hard folks will work and how resourceful they can be as scammers but get a real job? Forget it!
|
|
|
|
Post by Village Idiot on Jun 8, 2020 16:31:13 GMT -5
How did you know it was from Nick? When you hit reply, did the email address exactly match what you normally use for Nick? That is “nfisher,” three more characters, the “at” sign and yahoo.com? I’d be suspicious seeing anything like that from Nick. Actually, I’d be suspicious if got something like that from our pastor. Well, Dub, I'm a gullible fool. |
|
|
|
Post by fauxmaha on Jun 8, 2020 16:33:47 GMT -5
Really had you going, didn't I.
For a while there, I was sure you'd go through with it.
|
|
Dub
Administrator
I'm gettin' so the past is the only thing I can remember.
Posts: 19,914
|
Post by Dub on Jun 8, 2020 16:38:20 GMT -5
How did you know it was from Nick? When you hit reply, did the email address exactly match what you normally use for Nick? That is “nfisher,” three more characters, the “at” sign and yahoo.com? I’d be suspicious seeing anything like that from Nick. Actually, I’d be suspicious if got something like that from our pastor. Well, Dub, I'm a gullible fool. You aren’t anyone’s fool. You’re a big hearted guy that will do anything for friend. Scammers depend on that. |
|
|
|
Post by Russell Letson on Jun 8, 2020 16:55:33 GMT -5
There are scams that depend on a thoroughly compromised account--that is, the scammer gets control of the account and redirects traffic to himself, and with access to not only the contacts list but all the stored e-mails, there's plenty of information with which to craft convincing tales. I recall this kind of thing was going on a decade ago, when I set up a Yahoo account to use while we were in Italy. People were getting apparently genuine e-mails from relatives or friends who said that they were stranded somewhere and needed funds sent via Western Union. A friend of ours got one--Google "stranded traveler scam." The twist on this one seems to be that it's more local--the classic version reports that the distressed person is somewhere halfway around the world.
|
|
|
|
Post by Chesapeake on Jun 8, 2020 16:58:48 GMT -5
Thanks for posting this, Todd. Given the circumstances, I might have fallen for it too, and I'm no idiot, so to speak.
|
|
|
|
Post by Village Idiot on Jun 8, 2020 16:59:01 GMT -5
Really had you going, didn't I. For a while there, I was sure you'd go through with it. The reality, Jeff, is that I know nothing about PlayStation or I would have gotten this done earlier. I apologize. Is there a specific game your niece wants, or does the card cover anything? |
|
|
|
Post by millring on Jun 8, 2020 17:00:57 GMT -5
If I was a good sleuther, A sluethier is the guy who diagnoses what's wrong with a guitar. He then hands it off to a luthier to fix it. |
|
|
|
Post by sidheguitarmichael on Jun 8, 2020 17:23:36 GMT -5
Todd, you are nobody's fool idiot.
Well done.
As a byproduct of the whole COVID online teaching thing, both the complexity and frequency of scamming has risen considerably. The result being: I have had to take 3 different "cyber security trainings" by 3 different cybersecurity companies for 3 different schools. They all say the same thing: Don't click on anything, don't give out private info or passwords, don't download any attachments; do two-factor security (password and code sent to a phone) and do verify any emails with any links or attachments by calling the sender.
You're welcome, from a school near me.
Not a week after I finish the GU course, I get an email, from the dept chair, with the subject "adjunct evaluation" and cc'd to a bunch of folks that I know as my fellow adjuncts. There was a link to click for eval instructions. The "chair email" was not a GU account, so I forwarded the suspect email back to him: total scam.
It hit me as a scam the minute I saw it, so that's great, but it is sobering to think that some scammer knows the chair, who the adjuncts are, and that it was the end of the term and evals are due.
I gotta tip my hat to the diligence of today's crooks, if nothing else.
|
|
|
|
Post by Marty on Jun 8, 2020 18:51:21 GMT -5
I had an email from Nick Fisher, proprietor of the Farmer's Merc this morning. It sounded just like Nick, no strange wording. Basically, he's not feeling bad but not great, his doctor advised him to stay home and not go out into public. That's understandable these days. His niece's birthday is in a few days, and he had intended to pick up a PlayStation gift card. If I had time today, could I pick one up, it'd be much appreciated, I hate to ask you this, all in Nick language. I know there's some sort of gaming store in Vinton, no problem. I'll pick one up, I said, and drop it off in your mailbox. Don't worry. Keep in mind that Nick has done a lot for me, and for all of us Idiotjammers, for that matter. Of course I'll do that for him. No biggie. That's a legitimate favor people ask of their friends. Plus, I didn't have a whole lot to do, I was sure the game store would be empty except for me, I stuck a mask in the Jeep and was ready to take off, but emailed him from my phone to let him know I was going to do it now, now worries. He responded immediately: "Thank you very much. Total amount needed for Play Station Gift Card is $200 ($100 denomination) from any store around you and I need you to scratch the back of the card to reveal the pin, then take a snap shot of the back showing the pin and the serial number then forward it to me here online thank you. Nick" Well, forget that. But I did write the scammer back and apologized for getting the card before I got his email, and that I had gotten the card and dropped it off in his mailbox. I thought that would take care of things. But the guy wrote back: "My doctor says I'm not allowed to go outside at all. Could you please get the card and follow the instructions I asked?" "Well" I said, "I really don't have the time to drive back to Mt. Auburn, but I will. I'll get the card from your mailbox and slip it under your door." "I'm not home right now. You need to do what I had asked. I'm very ill, and that's the only way." "Could you have someone get it from my mailbox, and drop it off wherever you are? Are you at the hospital in town?" "I am very ill, and the doctor asks I don't disclose my location." This went on, and the scammer gave up before I did. Obviously Nick's email was hijacked, and I did call to let him know. What concerns me is that this guy sounded so much like Nick in the original email, there was no reason not to believe him. Especially since it was a simple favor. It makes me wonder. Are these scammers getting so sophisticated that, after hacking someone's email, that they actually take the time to study the verbiage of the person they are hacking? I'm no fool, but that first email sounded so much like Nick that that I didn't bat an eye.
Yes, they do study the emails to make sure that you are taken in. I am so glad that you realized that this is a scam. One thing you should do is report it to the FBI at IC3.gov. Since the scam amount is so low, they won't do anything.
But it's good to add it to their database.Dealing with fraud is what DaWife does for US Bank and since she now works from home I hear of amounts well over $100,000 that scammers get by hacking emails. If ANYTHING is suspicious about a email you should call that person on a known number and NEVER a number they give you. |
|
|
|
Post by drlj on Jun 8, 2020 19:23:22 GMT -5
So, now I have to find another way to pick up a few bucks. Gee, thanks, Todd.
|
|
|
|
Post by Village Idiot on Jun 8, 2020 19:41:04 GMT -5
Cheri, thanks! I will report this. I wondered who to go to.
drlj, I already bought you that new fancy lawn chair. That wasn't good enough?
|
|
|
|
Post by robjh22 on Jun 8, 2020 20:07:31 GMT -5
I am a prince in the anti scammer game. The king is this other guy who has a whole website devoted to scamming the scammers. I'm not in his league. But ...
Two things I like to do: when someone poses as a friend and asks for $100, I like to offer "at least $250 ... if that's okay" (and it always is).
The more delicious move to make is when they ask for a donation for their niece's birthday because they are "out of town and can't get the gift in time for the party. I'll pay you back when I get back to town."
That's when I like to ask whether it's for "your niece Susan or your neice Maria? ... I am so fond of both!"
There is NO POSSIBLE WAY to hedge on that. It's one or the other.
Then follows a long pause, and they finally place the bet: "Maria."
You can go in several directions from there, like "I thought Maria moved to Australia. Give me her address and I will send her a check directly."
I have two different naive friends who have been scammed. They are nicer than I am.
|
|
|
|
Post by Village Idiot on Jun 8, 2020 20:16:53 GMT -5
I wish I would have talked to you earlier Rob!
|
|
|
|
Post by RickW on Jun 8, 2020 22:06:01 GMT -5
Todd, if you’re sure that it’s exactly your friend’s email account, you need to get hold of him. Anyone can send from an email account, nothing is checked that ay. So anyone could send out an email showing that it came from my personal email account. But if you replied to it, and he then replied back to you, then your friend’s password has been compromised, and he needs to change it immediately.
But, look very carefully at the email address, and make sure it’s exactly the same. Sometimes it’s just one letter. Sometimes they subsitute a 1 for an l, for instance.
|
|
|
|
Post by dradtke on Jun 9, 2020 9:00:23 GMT -5
But, look very carefully at the email address, and make sure it’s exactly the same. Sometimes it’s just one letter. Sometimes they subsitute a 1 for an l, for instance. My nephew used to work for an anti-scam company. One of his favorites was a notice of a refund from "arnazon.com" |
|
