Bitcoin Forum

Economy => Scam Accusations => Topic started by: WillTat4Bitcoin on June 21, 2016, 06:50:21 PM



Title: benawesome100 attempted scammer
Post by: WillTat4Bitcoin on June 21, 2016, 06:50:21 PM
Was trying to do a deal with this user :   https://bitcointalk.org/index.php?action=profile;u=524316 (https://bitcointalk.org/index.php?action=profile;u=524316)

(benawesome100)


Said he contacted OgNasty and included this in a pm

Hi WillTat4Bitcoin and benawesome100,

No problem acting as Escrow for your exchange.

@ WillTat4Bitcoin Please send the BTC (0.7) to my Escrow address in the first post of my thread and ONLY to this address (168WXhzu3yfRqMHohAF9KH9LfDarazndUY - verify HERE), please PM the transaction ID to benawesome100 when done.

@ benawesome100 when you have verified the transaction to my address as seen on the first post of my thread (168WXhzu3yfRqMHohAF9KH9LfDarazndUY) you are safe to send the WU (seller will receive $456 EXACTLY) to user WillTat4Bitcoin.

@ WillTat4Bitcoin Please PM me when you have received the WU so i can release the BTC

Link below to my main Escrow thread in the forum:

ESCROW THREAD

Cheers,







HOWEVER, the (verify) link next to Nasty's address takes you to a fake bitcointalk page at the following link:

http://www.[phishing]org/index.php?topic=303281.0

(said bitcointlak no talk )



BEWARE




Title: Re: benawesome100 attempted scammer
Post by: Accountbr on June 21, 2016, 06:59:28 PM
Its definitely no phising site but it's most likely a website he owns and made the landing page exactly how it would look like if you went to ognastys thread and only changing a few things for his benefit. A very interesting attempt glad you managed to spot it.


Title: Re: benawesome100 attempted scammer
Post by: Lutpin on June 21, 2016, 07:02:13 PM
bitcointaIk and similar sites have been around for a long time now (bitcointlak for example was first registred sometime in 2013).
Report the PM to any global mod and the user might get banned for it. I've left a negative feedback for now.
One notable thing is how they utilized vanitygen to create an address similar enough to the one OgN uses in order to make it harder to detect.
168WXhzu3yfRqMHohAF9KH9LfDarazndUY (scam address) and 168WXhArv7Fasqvi2xm5MQMfLhG18jifMe (Address from OgNs signature).



A very interesting attempt glad you managed to spot it.
Sadly nothing new, we get reports of stuff like this almost on a daily basis...