Post by james on Jan 28, 2022 21:48:54 GMT
Hit Man
This baiting session is comparatively shorter than most, maybe lasting a week at most. But, what sets this scammer aside from most is the complete and utter verbal violence with which he erupts towards the end. Things get pretty heated here. This is how it went down.
Part 1: Stolen Money
Scammer:
Jun 20, 2019, 4:47 AM
My name is Mrs.Rebecca a British citizen and I work with the World bank In Geneva,Switzerland.I was posted to Africa due to the outcome of the meeting held with the World bank in-conjunction with African union late last year about scammed victims from the western world by mostly Africans.
A conjunction was reached by both parties and the resolution to pay a compensation fee of $1 million each to 25 scam .victims
You happen to be among these chosen scam victims,please do not communicate or duplicate this message to any one because we cannot afford to pay more than 25 scam victims for now
The payments are to be paid through Federal Reserve Account Unit.
I was actually posted here to see that all the selected scam victims get this compensation fee without any itch and I have been given just I month to complete this assignment before we go for another set of scam victims.
However, due to the the inefficient and corrupt banking system here we have resolved to a cash delivery option for you to receive this fund.But however,if you feel you want the wire transfer method let me know as we will device a way of monitoring and supervising the transfer.
To this regard,you are to state where and the address you would want this delivery to be made to you.
I look forward to your quick response for me to expedite action.
Regards,
Rebecca.
This scam is also a little different than the others we've looked at so far in the way the scam itself is built. While it's still advance-fee fraud at a basic level, this particularly malicious format, known as the "recovery" scam, targets people who have previously been victimized by scams. The scammer offers services to get the victim's money back. All they have to do is send a fee.
The only way to combat these scammers is to feign desperation, so I sent a message to the scammer, claiming to have lost a substantial amount of money; money that hadn't belonged to me in the first place. I was just shy of one month late in responding, but I figured it was worth a shot.
Me (as James):
Aug 10, 2019, 12:36 PM
Hello, I recently fell for a scam. I'm in so much trouble at work as the financial officer for the video game developer. was tasked with acquiring a loan for the company to build a new studio, and it turned out the loan I signed up for was a scam. I lost thousands of dollars out of this company's checking account! Please can you help me?
After taking a couple days to finally respond, the entire chain of events that followed went down in under a week.
Scammer:
Aug 12, 2019, 4:43 PM
Dear Beneficiary,
I am so sorry to hear your ordeal,we have heard similar cases and we did our best in our own small way to help out through this beneficial scheme,anyway below is how the fund can get to you.
This fund will be delivered to you in cash by a diplomat in your country's designated address you want it to be delivered.Therefore,you are to send your full names,delivery address where you want the fund to be delivered to you and any form of Identification just to make sure the fund is not delivered to a wrong person as you will definitely be identified by the diplomat be handling the consignment to you.
As soon as I get these information and clear your consignment(fund) up in the Strong Room, it will be sent to the delivery company and you will receive it in your doorstep within 3 days of shipment.
I will expect to hear from you asap so that I can expedite action.
Regards,
Rebecca.
I responded with:
Me (as James):
Aug 12, 2019, 4:52 PM
Okay thank you so much.
As we've seen previously, it is ill-advised to send even fake licenses, social security cards, or other documents because these scammers will often take the documents you send them, then use them in attempts to scam other people later on. It's best to ignore or excuse away any requests for licenses or identification. I usually send a blank image and act as if the scammer's device is at fault, not I. In this case, I just ignored the request for identification,
Scammer:
Aug 13, 2019, 2:27 AM
Dear James,
This is to acknowledge the receipt of your information and arrangements are being made to package your fund,you will be updated.
Regards,
Rebecca.
Me (as James):
Aug 13, 2019, 3:03 AM
Ok good! My wallet eagerly awaits these supple funds!
Here I decided to inject a mild sexual innuendo into my response since this rude jerk decided to email me in the middle of the night. There is an art to doing such things. If you go in too hot, the scammer will know you're joking around. I once heard in a movie that if you throw a frog into hot water, it'll immediately hop out, but if you put it into cool water, then slowly turn up the heat, it'll sit there and boil to death. The point is, you can't be too suggestive when taunting these scammers too early on. It must be done with finesse.
Scammer:
Aug 13, 2019, 12:32 PM
Dear James,
This is to inform you that your fund is ready and to be delivered to you.In the pictures below shows in the first one where your fund is being packaged into your consignment in the strong room and the second one shows your consignment loaded with your fund sealed and ready for delivery to you.
The cost of shipment of your consignment to you is $1,300, but as part of the benefit you are getting from this scheme we take care of 75% of this cost so you are just to pay $325 for your consignment to be delivered to you.
When you are ready to make this payment let me know so that I will instruct you on how you will do that.
Like I told you before as soon as the diplomat takes custody of your consignment,it shall be delivered to you in your doorstep in 3 days time.
I will expect to hear from you as soon as possible.
Regards,
Rebecca.
Me (as James):
Aug 13, 2019, 12:34 PM
I can make the payment now!
Scammer:
Aug 13, 2019, 1:23 PM
Dear James,
You can make the payment by (transfer outlet name removed) with the details below.
Rebecca
DUBLIN,REPUBLIC OF IRELAND
When you make the payment,send the details to pick it up which is the MTCN and the sender's name so we can proceed.
Regards,
Rebecca.
Me (as James):
Aug 13, 2019, 1:36 PM
Okay I am heading there now!
Now I decided to test the scammer's patience. I went about my day, all the while waiting to see how long it would take the fraudulent "(name removed)" to respond to me. The response came the day, early in the morning.
Scammer:
Aug 14, 2019, 6:38 AM
I have not heard from you.Please update me.
Me (as James):
Aug 14, 2019, 8: 50 AM
Hey I made the payment but there's a small issue we work it out at lunch
Here I planned on using my typical information gathering tactic of convincing the scammer attempt logging into my email to get his money transfer receipt. When she failed to message me back, I sent the scammer this.
Me (as James):
Aug 14, 2019, 4:08 PM
Are you there?
Scammer:
Aug 14, 2019, 4:10 PM
Yes what seem to be the issue
Me (as James):
Aug 8, 2019, 4:23 PM
Well I sent the 1300 dollars, but the outlet I sent the money with no longer users paper receipts. Instead they sent me a digital receipt to my email. The problem is that whenever I try and forward this receipt it gives a warning that says the message cannot be sent "due to sensitive material." Can you help me? I'm not so good with computers myself
Here I decided to convince the scammer that I had either misread part of his request, or just not read the entire thing. She had mentioned the fee was $1,300, but they would cover 75% of the fee, so my fee would only be $325, so I told the scammer I had sent the full $1,300 dollars. Maybe the scammer was trying to make me think I was actually getting a really good deal by only having to send $325, but I didn't care. Now it was time to allow the scammer to attempt to log into my email account as she wished. Unfortunately I didn't get any useful information out of this as the scammer had used a VPN, but in the end it was of no consequence. We would now continue with the trouble shooting, as "Rebecca" obviously wanted her money.
Scammer:
Aug 14, 2019, 5:01 PM
Did you send it by (transfer outlet name removed)?if you did,then just write out the MTCN number and the sender's name and send it to me,maybe I could be of help then
Ahh, the elusive money control transfer number. It should be a simple task to send "Rebecca" her MTCN, right? Unfortunately, to the woe of the scammer, I had never really done this before, and thus didn't really know what he was doing.
Me (as James):
Aug 14, 2019, 5:04 PM
There's tons of these numbers I don't even know which number is which
Scammer:
Aug 14, 2019, 5:23 PM
The MTCN number should be 10 digits look out for it and write it out is is usually written at the right top of the receipt,
Me (as James):
Aug 14, 2019, 5:28 PM
(Here I listed the phone number for the transfer outlet I claimed to have used, followed by a question mark.)
Being the procrastinator that I am, I sent the scammer the phone number that is typically on the top of a (transfer outlet name removed) receipt. I figured the scammer would most likely waste more of their time by trying to track the transfer, and I could always explain how silly I am by accidentally thinking that phone number was the MTCN to maintain validity.
Scammer:
Aug 14, 2019, 5:55 PM
Sender;s name?
Me (as James):
Aug 14, 2019, 5:57 PM
I just used my name James
Scammer:
Aug 14, 2019, 6:13 PM
That MTCN number is saying invalid check properly and see where is written MTCN number otherwise you will have to tell them to email it to you.
On this last message, and on each subsequent message the scammer sent me, there was a phrase at the bottom stating "Virus-free." That was followed by the website for a popular anti-virus program. I don't know if he thought that I believed she had been sending viruses or something, but I definitely didn't think anything of it.
Me (as James):
Aug 14, 2019, 6:14 PM
It may not be the number i have no clue what I'm looking for
Scammer:
Aug 14, 2019, 6:20 PM
You can go to where you did the transaction and tell them you need them to write out the MTCN number for you
Me (as James):
Aug 14, 2019, 6:25 PM
I do not have a vehicle until Friday. My ride already went home
Me (as James):
Aug 14, 2019, 6:38 PM
You know what, why don't I just let you get on my email and view the receipt? I trust you
Scammer:
Aug 14, 2019, 6:44 PM
ok if you say so otherwise I would said you take your time to go and sort it out as I will be out of office from Friday till maybe Monday but I can still check my emails on Sunday.My husband's brother is having his daughter's wedding on Saturday so I have to be there.
Me (as James):
Aug 14, 2019, 6:47
Aww congratulations! Alright my password is (password removed) but it might make you ask for a code. Let me know if it does
Me (as James):
Aug 14, 2019, 7:01 PM
Hey I found the MTCN it is
7175419093
Me (as James):
Aug 14, 2019, 7:01 PM
Don't bother trying to log in that is definitely the MTCN
Scammer:
Aug 14, 2019, 7:11 PM
Definitely not.It is saying invalid.Enough,just take your time and do this to get it right once and for all, when you are cleared the delivery of your consignment will proceed.
Me (as James):
Aug 14, 2019, 7:11 PM
What? No the money is transferred it is showing as such. Was this not you to take my money?
Somewhere around this time, the scammer attempted to log into my email account as planned, revealing his originating IP. I quickly learned who his internet service provider was, and put that information to good use. Soon the ever elusive hacker would be in contact with the scammer. The IP was that of a cellular connection, so even though the login stamp said Switzerland for the location, I knew it was most likely inaccurate.
Me (as James):
Aug 14, 2019, 7:14 PM
What are you talking about???
Me (as James):
Aug 14, 2019, 7:41 PM
Hello? Where did you go
Scammer:
Aug 14, 2019, 7:45 PM
I just told you I cannot do anything for you until you sort yourself out and get me the correct MTCN number
Me (as James):
Aug 14, 2019, 7:52 PM
That's the right f****n number I just called
Here I used some profane language to give off the vibe that I was angry or annoyed at the scammer suggesting the number was wrong. I'm not some kind of liar after all. How dare he act so self-righteous.
Scammer:
Aug 14, 2019, 7: 57 PM
If I may ask how old are you?
Me (as James):
Aug 14, 2019, 8: 57 PM
Im 34 why do you ask?
Me (as James):
Aug 15, 2019, 5:37 PM
I know you are not in Switzerland. I trace you IP and you are in Washington State. So why are you ignoring me after taking my money
Getting annoyed now, I told the scammer that I had tried to trace her IP, so I knew "she" was in Washington State. I knew she wasn't of course, but the intention was to give this thief a false sense of security.
Scammer:
Aug 18, 2019, 4:25 PM
I have not received any money from you check properly maybe your email account is being hacked by someone if I have received your payment I would have sent your consignment for onward delivery to you.Maybe some hacker are going through emails and probably got information and collected your money but with that MTCN number you sent to me said INVALID number so your your payment could not be traced.
If you can fix things right and I receive your payment your consignment will be delivered to you as I said and withing the stipulated time frame.
Me (as James):
Aug 18, 2019, 4:30 PM
What do you mean a hacker. How would they get in
Scammer:
Aug 18, 2019, 4:35
I am not sure just thinking maybe that was what happened,anyway try sort your self out am always here to do my job by making sure you receive your consignment when you do the needful
Me (as James):
Aug 18, 2019, 4:44
I'm if I can trust you I will send more tonight
Scammer:
Aug 18, 2019, 4:49
I am here to make sure you
Having emailed the scammer as the hacker, the scammer now mentions a hacker, and I expressed his ignorance of the situation.
Me (as James):
Aug 18, 2019, 4:51
Ok I am going now to send. How can I send worth regular receipt when my outlet does email
Scammer:
Aug 18, 2019, 4:52
I am here to make sure you get your consignment as I do to every other beneficiaries,but if you send the money are we not going have the same problem?or you really did not send the money the first time
Me (as James):
Aug 18, 2019, 4:54 PM
What would I not send money for? That is greedy. Can I try money gram this time?
Scammer:
Aug 18, 2019, 4:57 PM
Wait till tomorrow I will tell you what to do
Me (as James):
Aug 18, 2019, 5:01 PM
Okay I just wish to do this quickly
After having wasted tons of my time, I decided to tell the scammer I wanted this done quickly. He would desperately send a few more messages over the next couple days, trying to get me to send more money, but to no avail.
Scammer:
Aug 19, 2019, 9:36 AM
You will have to do bank to bank transfer.Send the $1,300 by wire transfer to the below bank details which will be more secure.
BANK NAME:(name removed)
ACCOUNT NAME:(name removed)
ACCOUNT NUMBER:(removed)
ROUTINE NUMBER:(removed)
ADDRESS:(removed)
ATLANTA,GA 30349
When you have made the payment send the evidence of the payment which is the wire transfer slip so I can send it to the agent that has the account to get the money out so we can continue and conclude the delivery of your consignment.
N:B:If we don't show the wire transfer slip to the agent as a proof of payment we cannot get the money so make sure you send it to me.
Scammer:
Aug 19, 2019, 5:24 PM
I thought you said you wanted things to be done quickly and I have sent you how it will go quickly but am yet to hear from you.
Scammer:
Aug 20, 2019, 4:50 PM
Am still waiting to hear from you.
I ceased communicating back as my victim persona at this point, but at about the time of the login attempt, I had also reached out to the scammer using my hacker identity and had been in steady contact from there on in, and oh boy did the scammer erupt into explosive anger. Now it's time to look at his communications with this mysterious computer hacker and his subsequent meltdown.
Part 2: Eruption
Me (as hacker):
Aug 14, 2019, 7:12 PM
Hello there my friend,
I wish to thank you for getting this incompetent mugu to send money. I have of course collected the funds. Now here is what I want you to do my broda.
You are to go to Sharknado Steak House at 6 P.M. Nigeria time. You are to order your meal, then I will meet you when I see your food brought to you. We will eat, I will pay for the means, and I will give you half of the 1,300 dollars. In return for this service, I expect you to tell this foolish mugu that you collected the funds without hindrance. If you do not play along, I will see to it that you get the blame for this thievery.
So do we have a deal "Mrs. Owens?"
Your friend, Ravena.
P.S. I much look forward to doing business together.
Having been unsuccessful in geo-locating the scammer, I took a blind shot in the dark, and guessed that he was in Lagos, Nigeria, since the overwhelming majority of these crooks reside there. Apparently I hit the nail right on the head, as we'll see shortly.
I told the scammer, as the hacker, that I had his funds, and gave him more than enough reason to agree to meet. I set up a meeting place, and waited for a reply. It didn't happen of course, but I figured it would be pretty funny to get the scammer to order an expensive dish while waiting for me to meet them, then be put on the spot to pay for the meal on his own dime when I didn't show up. Maybe some other time...
Scammer:
Aug 14, 2019, 7:24 PM
O boy if you collected the money already it will show Collected and not invalid so what are you saying?
Me (as hacker):
Aug 14, 2019, 7:33 PM
Do you need further proof?
Scammer:
Aug 14, 2019, 7:34 PM
yes
Me (as hacker):
Aug 14, 2019, 7:37 PM
Alright let's play a game. Where is your favorite restaurant on Victoria Island? Perhaps a beach front? Perhaps we can discuss whether or not to inform my close friend who is employed your provider of internet of your pathetic amateur attempt to scam helpless Americans.
Here you can see that the scammer didn't quite believe that this hacker was legitimate, showcased by his sarcasm-laced response. I'll admit, I'd never had a scammer bring the point up that the transfer would say "complete" and not "invalid," but I was easily able to explain this away. My response needed to show confidence, but I decided to also inject a bit of a threat. I'm sure he didn't want to have his internet service shut off.
Scammer:
Aug 14, 2019, 7:40 PM
Give me your number I will give you a shout
Me (as hacker):
Aug 14, 2019, 7:41 PM
Oh no broda. I do not talk on the phone with other scammers. We meet in person. That is it. You shouldn't either.
After the scammer requested a phone call, I quickly shot down the idea, for a couple of reasons. First of all, it is illegal to record phone calls where I live, but I want a clear record of everything said to show the world. And secondly, I'm not Nigerian, or even African. I definitely didn't want the scammer to hear my accent, and put two and two together. This whole tactic only works if the scammer believes I'm another scammer operating out of the same region. This is why geo-location is so important to my method.
Me (as hacker):
Aug 14, 2019, 7:45 PM
Now, is the steak house good for a meet up, or do you have a another preference? I suppose I owe you at least whatever good you desire.
Scammer:
Aug 14, 2019, 7:47 PM
Before I can trust you send me what ever good you feel i deserve before we meet in person
Me (as hacker):
Aug 14, 2019, 7:51 PM
We cannot do an online transfer. No digital trail my friend. Trust me, you will eventually draw the short stick that way. We don't want to be arrested.
Scammer:
Aug 14, 2019, 7:53 PM
You can do a local (transfer outlet name removed) transfer if you want to be honest and truthful
Me (as hacker):
Aug 14, 2019, 7:59 PM
My friend, it is not going to happen. We will meet in person. The alternative is I eat all of the money, and I pursue my career as a bounty hunter and turn you into the Nigeria Police Force and subpoena your personal details from you ISP.
In a last ditch effort to avoid a face to face confrontation, but still get some of the money, the scammer tried to suggest if I'm truthful, then I will transfer some of the money to him with the standard advance-fee methods. Of course I refused, which was the lighting of the fuse. Now the scammer exploded into an apoplectic fit of seething rage, as you can see in the following exchanges.
Scammer:
Aug 14, 2019, 8:03 PM
Eat all the money and do what pleases you fuck I will get you to where are very soon.This is a mafia game.I will hit you n***** as a hit man,my network is all over lagos and you will know very soon.
The word I censored here is the N word, with a hard "r" on the end. The fact that this "woman" got racial with me just goes to show that I must've struck a nerve.
Me (as hacker):
Aug 14, 2019, 8:04 PM
My bruddah I will still give you half the money all it requires is cooperation.
After being threatened, I decided to throw a bit of mockery into my response, spelling the word "brother" in pidgin English.
Scammer:
Aug 14, 2019, 8:13 PM
I told you the only way I can cooperate is make a local (transfer outlet name removed) transfer and then I can trust you and forget about my evil intentions
Me (as hacker):
Aug 14, 2019, 8:15 PM
What are your evil intentions my friend? I simply wish to work together and treat you to dinner. I will even give you 3/4 of the money for a ONE TIME deal. Any other time we split 50/50. If you want to kill me anyways why not meet up?
Scammer:
Aug 14, 2019, 8:19 PM
It seems you don't know the cartel I belong we don't kill we make you disappear go and ask in Unilag about Cobra,inquire and you will know who you are dealing with
Scammer:
Aug 14, 2019, 8:21 PM
Nobody fucks with me and gets away free with it,I sting,no matter where in Lagos I will get you.
Me (as hacker):
Aug 14, 2019, 8:21 PM
And yet you expect me to believe you're a member of this group, yet you are afraid to meet me. Maybe we should inform your affiliates of your cowardice.
Obviously furious, the scammer begins to hint at being involved in a Nigerian mafia of sorts, in a not so subtle manner. He tells me to ask for an individual called Cobra. This was my signal. To goad the scammer into meeting up, I threatened to inform his fellow mafia members that he was afraid to meet up with someone. This seemed to have done the trick.
Scammer:
Aug 14, 2019, 8:25 PM
Ok let see how it goes
Me (as hacker):
Aug 14, 2019, 8:26 PM
So where would you like to eat my bruddah?
Scammer:
Aug 14, 2019, 8:30 PM
In the campus,come to University of Lagod
At first, my goading to get the scammer to agree to a meet-up seemed to have worked, but the scammer never messaged me back. I finally insulted the scammer, suggesting he was the lowest of the low in his supposed gang. These grunts are known as "local boys." These thugs are known for digging ditches in the roads to impede traffic, then proceeding to try and hustle drivers and pedestrians for their money. It's not exactly the most effective way.
Me (as hacker):
Aug 14, 2019, 8:32 PM
Alright my friend. When is convenient?
Scammer:
Aug 14, 2019, 8:35 PM
11 pm Friday food will be ready at the arena
Me (as hacker):
Aug 14, 2019, 8:38 PM
Alright my dear friend, I will be there. I look forward to doing business with you.
Me (as hacker):
Aug 15, 2019, 8:10 PM
So my bruddah what is on the menu for tomorrow morning?
Me (as hacker):
Aug 16, 2019, 5:40 PM
Are you in position yet my friend?
Me (as hacker):
Aug 16, 2019, 6:05 PM
Where are you? Do you not want your money? This is your final chance.
Me (as hacker):
Aug 16, 2019, 6:20 PM
You are nothing more than a local boy. You dig trenches in the streets while I rake in financial prosperity.
While this baiting lasted a relatively short amount of time, the reaction was by far one of the angriest I've ever seen. His reaction shows the extreme depravity of some of these cyber-thieves. It's pretty ironic how they steal on a day to day basis, yet have a meltdown when they think someone has done the same to them.
x6 
x68 
x7 
x14 
x13 
x3 
x4 
... a lot of 
and many 
& 
x9, 
x2, 
, 
, 
, many 