IRC IMPERSONATION SCAMS

So our coin #coinshield, and my bot 'coinshield' has been being impersonated by "CoinShieId" and that led me to this channel..

There is a thread about a similar thing happening to digitalcoin. Here is the OP quoted.

Quote from: kenel on March 19, 2015, 02:55:45 PM

Happened to Digitalcoin, Bittrex, and a few other coins from what I can follow so far.

Someone, or some group, is making the rounds on IRC with variations of trusted coin community members nicks and contacting people asking for coins (to pump, for some project, etc.) as a loan for a few hours.

In our specific case, someone used kenei (with capital i instead of L) to fraudulently obtain crypto property under false pretenses from our channel members (in arial font they look identical).

This is a Class H felony in the United States.

The funds are deposited directly to a Bittrex account, sold immediately for BTC and withdrawn before anyone realizes this is a scam. Bittrex seems unable to help us but is aware of the situation.

As a warning, I'd like to make sure everyone is (a) aware that this scam is going on, and (b) that members of our Digitalcoin Foundation will NEVER ask for any coins from any person as a loan

Be careful out there....it's easy to get caught up in this if you aren't paying attention. Verify before sending or doing anything. These people seem to know exactly who to impersonate and exactly who to contact that would be trustful of whom they are impersonating. They are even likely idling in your channel right now.

Not sure what else I can do other than warn people of this. Let me know if anyone has any ideas -- I take this personally as it was my name used in this fraudulent scheme.

`MonkeyTooth in your pic is someone pretending to be me

I am only in #MMXIV, MonkeyTooth

MonkeyTooth and MoonkeyTooth are their most common for me

I will never ask for help, funding, or off-market trades from anyone. They already got many thousand MMXIV, please do not fall for it

Quote from: iGotSpots on March 30, 2015, 07:11:13 PM

yeswepump seems to be the infiltrator as he is sitting in all the channels that get scammed. ive already removed him and one of his alts from coinshield

I've done the same check through my logs. I suggest the following bans:

coinictus*!*@*
coinictu_*!*@*
yeswepump*!*@*
yeswepum_*!*@*
*!*@37.180.85.91
*!*@ip-244-225.sn1.eutelia.it
*!*@5.90.1.146

I would assume these are the same, then, based on nicks

https://twitter.com/PurePoS/status/582637479020355584

why he is letting me stay in his channel is beyond me... can you say IDIOT?

Quote from: ThePeePs on March 31, 2015, 12:27:45 AM

You may want to add these to your ban list, as they were used by the same scammers (prob vps)

Code:

*!*@*94.242.239.*
*!*@*.192.240.99.*

thank you ThePeePs

I'm not involved at all in this SCAM.

At 20:23 GMT I read on #coinshield

Razerglass - stoner19 you should check out #pumpcoin looks like everyone in there is behind all the irc scams

So I was curious and logged in #pumpcoin

At 20:32 GMT I read on #cryptos.news

Cristine - [14:30:23] CI-BtcT: [New thread] IRC IMPERSONATION SCAMS https://bitcointalk.org/index.php?topic=1007340.0

I read it and went back to #coinshield, typing at 20:32 GMT

yeswepump - Razerglass: I see https://bitcointalk.org/index.php?topic=1007340.0
yeswepump - which scam did you find?

The result is I was kicked out of the channel and considered like those others which I don't even know who they are. Of course it's a mistake, as you see from the image posted by Razerglass I have no privileges like all the others do have.

Would appreciate if Razerglass could confirm to the community that I logged in that channel for not more than 10 minutes, right after he wrote on his channel, and than I'm not involved at all in what he suspects to be a SCAM.

Quote from: yeswepump on March 31, 2015, 09:34:53 AM

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.76 Safari/537.36 from yeswepump
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.76 Safari/537.36 from urgenta
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.104 Safari/537.36 from `MonkeyTooth
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.78.2 (KHTML, like Gecko) Version/7.0.6 Safari/537.78.2 from alty_

With irc impersonation going on, it is highly advisable not to trade using irc.
If you must trade, it would be better to exchange email address with each other and verify the identify in the email instead.

Razerglass, would you be so kind to check at what time I logged in that room?

I'm sorry that you are not responding.

I hope you will understand you made a mistake considering me like the others, which are most probably laughing. I have nothing to do with those scammers, except using the same MACOS... rather strong accusation.

I use my home/work IP since a year, any VPS or what you suppose (I have no clue of how to use it...) and I have nothing to do with scammers. I use the two nicks that you know. Nothing else.

I am just looking around to make some money with tips and trades. I have twitted so far almost 3000 tweets: if I were a scammer, I would not have done such a stupid thing to connect to that channel with my regular nickname/twitter account.

All the best looking for the real scammers.