Bitcoin Forum

This thread is a compilation of all evidence against this group of people. The evidence contained will prove that they are all the same person, and they are all scammers. This list may be missing things. The goal of this is to gather enough evidence so that we can release the IP addresses these guys used to you all.

SHlFT:

• https://bitcointalk.org/index.php?topic=34656.0
  In the above thread, SHlFT takes a loan and never repays.
• https://bitcointalk.org/index.php?topic=41089.0
  Sold an iPhone, never sent it.

Evidence that SHlFT is part of this group:

• https://bitcointalk.org/index.php?topic=32636.msg417162#msg417162
  Sold HIB to Hollie.
• https://bitcointalk.org/index.php?topic=34656.msg474496#msg474496
  Hollie replied to loan request.
• https://bitcointalk.org/index.php?topic=34656.msg475131#msg475131
  Stefanie Andrea also replies.
• https://bitcointalk.org/index.php?topic=36009.msg450080#msg450080
  Hollie buys a PS3 Slim from SHlFT.
• https://bitcointalk.org/index.php?topic=32263.0
  https://bitcointalk.org/index.php?topic=32097.0
  Buys a HTC Evo 3D from Hollie.
• https://bitcointalk.org/index.php?topic=30838.msg406961#msg406961
  Posted in same thread as Hollie.
• https://bitcointalk.org/index.php?topic=26203.msg431982#msg431982
  Hollie replies saying that she sent 6.5 BTC to ex0420 for an iPhone, but it was SHlFT who offered the 6.5 BTC. He tried covering this slip-up later by saying "i was just about to buy this.."
• stick_theman received this email from SHlFT in regards to https://bitcointalk.org/index.php?topic=34734.0
  
  Quote from: stick_theman
  ---------- Forwarded message ----------
  From: z3ro hour <z3rohourx@gmail.com>
  Date: Thu, Sep 1, 2011 at 6:53 PM
  Subject: Re: IPad
  
  
  
  I'm not a young boy. I'm 29 year old woman. I didn't use my real name or even my real address. I had it set up to: I use my friends name and Address and they ship it to my friend Address and my friends ship it to my PO Box. Anyways I'm moving to go live my domestic partner whom I love. I'm leaving this life behind.
  
  Skrillex, out.
  
  --------------------------------------------------------
  This email matches the PayPal email address used by Hollie (https://bitcointalk.org/index.php?topic=39124.msg507264#msg507264).
• Finally, there is an IP match with Pearikay and Hollie

Hollie (aka Ninja):

• https://bitcointalk.org/index.php?topic=39124.0
  Hollie sold (at least) 2 HP Touchpad and never delivered

Evidence that Hollie is part of this group (in addition to the above links):

• https://bitcointalk.org/index.php?topic=39771.msg486736#msg486736
  Posted in the same thread as Stefanie Andrea.
• https://bitcointalk.org/index.php?topic=37347.msg458579#msg458579
  Sold Macbook to Stefanie Andrea.
• https://bitcointalk.org/index.php?topic=39124.msg479930#msg479930
  https://bitcointalk.org/index.php?topic=39124.msg481337#msg481337
  Stefanie Andrea replies to Hollie's thread. She also vouches for him.
• Has an IP match with SHlFT, (redacted), Stefanie Andrea, and Pearikay

Stefanie Andrea:

Evidence that Stefanie Andrea is part of this group (in addition to the above links):

• Sent me this PM:
  
  Quote from: Stefanie Andrea on September 06, 2011, 11:51:31 PM
  Hello, Maged. I bought a PayPal Account from a guy on another site. He sells $150 PlayStation Network account for only $16 and also he sells $525 PayPal accounts that I bought for only $50. It may be possible that I bought a account that was used for scamming and that I got caught in the crossfire.
  
  Here's a link that people actually sell PSN accounts:
  http://www.dhgate.com/wholesale-hot-sell-us-network-psn-psps-150/p-ff80808130e5a14a01312c0334ca26d8.html
  And here's a link that people actually sell PayPal Accounts also:
  http://www.wickedfire.com/sell-buy-trade/136200-i-want-buy-verified-paypal-account.html
  
  That correlates to:
  https://bitcointalk.org/index.php?topic=41891.msg509859#msg509859
  https://bitcointalk.org/index.php?topic=41913.msg510043#msg510043
• IP match with (redacted), Hollie, and Pearikay

Pearikay:

Evidence that Pearikay is part of this group (in addition to the above links):

• https://bitcointalk.org/index.php?topic=32263.msg485861#msg485861
  Replies for SHlFT.
• https://bitcointalk.org/index.php?topic=41692.msg510234#msg510234
  Makes Stefanie Andrea appear trustworthy.
• https://bitcointalk.org/index.php?topic=39124.msg494368#msg494368
  Tries to throw us off the scent.

Please feel free to add any evidence or information you know about these guys here.

Chief Master Detective Maged!

Can we id anyone else who might be related by using the ip's that they used?

There is one other person, but I can't reveal that since there is no evidence that it belongs to this guy.

Additionally, I suspect that there are more accounts. I saw many of the same patterns in other threads these guys posted in. If someone could look for those, that'd be great.

Great work Maged. Thanks for the detective work.

https://bitcointalk.org/index.php?topic=484.msg512251#msg512251

Odd. Either another account, or as suspected, Stefanie was the account that is supposed to stay in good standing.

Some things to note:
This guy called out his other accounts as scammers when it was revealed that they were scammers. So even if someone has been scammed, that doesn't mean they can be trusted.

This guy purposely tries to lead us down the wrong trail. Take any personal information he's posted/given to you with a grain of salt.

Very interesting. I'll look into it.

User netxshare may also be one of his accounts.  Stefanie Andrea accidentally answers a price inquiry for one of the items netxshare had for sale: https://bitcointalk.org/index.php?topic=38417.msg485284#msg485284

And there's the infamous cover-up method in there, too. Still not entirely convinced, but it's plausible.

i hope moderators keep in mind that users who are using the marketplace with good feedback could also be incahoots with scam accounts (make a scam account, or 2 scam accounts, or 10... etc, get a bunch of bitcoins from items you never send, then take this money and buy items from toher forum members on non scam account, continue building reputation and selling items bought with money from scamming)

repeat process until all your accounts are banned and you make new accounts with VPN/proxy service freely available like hidemyass.com

Keep an eye on ultraimports.

In regards to the ip addresses. Do they resolve to common hostname or internet service provider. If the do what is the geographic location? Do you think they where using proxies or TOR?

That doesn't appear likely. I've also investigated ensign_lee in that thread.
That is exactly what has been happening.He doesn't match the pattern, but he might still be a regular scammer. It's hard to tell.

That information hasn't been revealed to me yet. I'll be sure to post the IP addresses as soon as I know them.

thanks for excellent work, i asked long ago to give scammer label to shift, he could have deleted his posts.

many have been scammed and have evidence/info such as emails, but you have to pm them and get it from them.

Would you mind explaining why?

If anyone here has the Texas address this guy was giving out, that would help greatly.

NoValues possibly also hollie/ninja/shift ?

https://bitcointalk.org/index.php?topic=33343

Maged, make this a sticky, I believe this guy wont be leaving anytime soon..

He has to understand he will eventually make a mistake if he doesn't stop what he is doing, and when that time comes, he will have to deal with the fury of several dozens of people here.. I personally hopes this happens..

Actually, he fits the pattern of what ThyDude did before 'someone' claimed he had a seizure and was taken to the hospital.

Users with under 50 posts who decide to try to sell multiple items in a very short time frame make me very suspicious.

^ read my previous post.  

Edit:  It's actually really unfortunate that I even have to point out users like ultraimports as being suspicious.  If he is innocent, I am sorry for casting an aura of doubt.

The only post you had in this thread just said "Keep an eye on ultraimports".

If you're going to call out someone as a probable scammer in public, some actual reasons would be nice.  I even examined his past posting history before asking you here.  The only things I could see that were even potentially suspicious was that (a) he made a comment saying not all new users are scammers, and (b) that he's got a somewhat low post count and is selling video cards.  Neither is a smoking gun.

Is there additional evidence or anything concrete that I'm missing?  Or should we just make this a witch-hunt thread?

EDIT: At least now I see the previous post you're talking about.  Sorry I missed it.  I've seen plenty of people who started off strong trying to sell anything they could, so I don't know if I can cast judgement based on that behavior.  But at least I see your position now.  Leaving the original post up instead of being one of those guys who deletes the evidence.

Doesn't really match what we're seeing here.
Again, this thread is about this specific scammer, not scammers in general

I know, but I didn't want to create a separate thread for that.  It was something that caught my eye, and I knew you were posting on this thread, so I thought I'd slip it in there.

My apologies.

Remember that the board doesn't verify email addresses.

SHlFT
Original username: Ezio
66.87.97.168, 107.29.108.104, 107.29.74.71, 107.29.92.252, 108.103.210.228, 108.116.107.92, 173.130.182.167, 173.130.62.126, 173.149.185.128, 173.96.255.163, 173.96.66.112, 184.207.25.127, 184.219.9.39, 66.87.96.215, 66.87.97.181, 66.87.97.184, 66.87.97.222, 66.87.97.230, 66.87.97.232, 66.87.97.90, 66.87.98.133, 66.87.98.151, 66.87.98.180, 66.87.98.247, 66.87.98.72, 66.87.99.20, 71.21.81.140, 72.56.215.231, 72.56.247.91
Email: auditore.sales@gmail.com
Secret question: ooi

Pearikay
Original username: zztop
66.87.96.209, 107.42.18.207, 173.106.62.117, 173.147.200.70, 66.87.96.13, 66.87.96.23, 66.87.96.254, 66.87.96.89, 66.87.96.96, 66.87.97.138, 66.87.97.168, 66.87.97.88, 66.87.98.240, 66.87.98.92, 66.87.98.96, 66.87.99.172, 66.87.99.255
Email: Alex@teleworm.com

Hollie
Original username: Darkness
184.171.168.202, 108.116.212.19, 108.116.28.128, 173.135.103.122, 173.149.144.123, 173.96.31.42, 184.209.248.98, 184.209.33.8, 184.231.206.17, 209.184.116.69, 64.134.157.255, 66.87.66.40, 66.87.96.11, 66.87.96.183, 66.87.96.195, 66.87.96.235, 66.87.96.236, 66.87.96.247, 66.87.97.136, 66.87.97.168, 66.87.97.192, 66.87.97.195, 66.87.97.212, 66.87.97.248, 66.87.98.115, 66.87.98.116, 66.87.98.151, 66.87.98.199, 66.87.98.239, 66.87.98.246, 66.87.98.47, 66.87.98.72, 70.3.226.211, 71.21.81.140, 99.200.197.89, 99.200.30.168
Email: jameslovecock@live.com

Darkness
66.87.97.248
Email: xninja.llc@gmail.com

Stefanie Andrea
107.28.115.141, 107.28.115.39, 107.28.137.251, 107.28.157.204, 107.28.189.208, 107.28.236.187, 107.28.244.20, 107.28.4.167, 107.28.98.107, 107.33.133.10, 107.33.136.196, 107.33.137.168, 107.33.139.187, 107.33.142.242, 107.33.145.229, 107.33.151.27, 107.33.168.5, 107.33.21.220, 107.33.210.140, 107.33.227.97, 107.33.251.103, 107.33.36.31, 107.33.96.37, 107.42.106.33, 107.42.155.238, 107.42.165.200, 107.42.188.172, 107.42.57.45, 107.42.92.3, 108.103.118.133, 108.125.66.189, 173.106.109.70, 173.106.119.219, 173.106.224.91, 173.106.230.69, 173.106.238.80, 173.106.40.46, 173.106.62.182, 173.115.145.46, 173.115.170.26, 173.115.212.240, 173.115.231.4, 173.115.25.75, 173.115.40.218, 173.115.55.132, 173.115.83.235, 173.147.109.202, 173.147.109.52, 173.147.112.202, 173.147.144.157, 173.147.193.37, 173.147.48.31, 173.147.72.239, 173.147.92.189, 173.147.92.235, 173.147.99.80, 173.7.104.162, 173.7.163.60, 173.7.17.165, 173.7.186.176, 173.7.205.9, 173.7.38.118, 173.7.47.95, 173.96.25.55, 209.184.116.42, 209.184.116.69, 66.87.96.113, 66.87.96.17, 66.87.96.173, 66.87.96.183, 66.87.96.209, 66.87.97.1, 66.87.97.138, 66.87.97.192, 66.87.97.248, 66.87.97.47, 66.87.97.64, 66.87.98.227, 66.87.98.228, 66.87.98.47, 66.87.99.114, 66.87.99.78, 68.241.102.227, 68.241.186.220, 72.56.144.250
Email: InfamousKraken@gmail.com

Those seem to be all Sprint IP's. He paid me via Pay pal Mobile app.  It actually should be fairly simple to find this guy. There is no much anonymity using a cell phone unless it was stolen.

Just a note that my $300 paypal transaction with Ninja/Hollie did get reversed in my favor by Paypal. If there are any users trying to get quick money via paypal, raise your red flag. This user should be put under the strictest scrutiny.