I received a Ponzi solicitation to my localbitcoins.com email

[StevenS]

I use a different email address for every service I subscribe (including BCT), so I know where they got my address. Today I got this one addressed to the address I use for my localbitcoins.com account (HTML formatting removed):

Global Advisors Bitcoin Investment fund(GABI) makes it simple
 
Our team constantly seeks and executes opportunities and manage their associated risks. With a strong understanding on what is becoming the greatest financial revolution in the 21st century, we have helped both skeptics and believers realise incredible returns in the Cryptocurrency space.

Looking to stake a portion of your assets in Bitcoin?

WE HAVE FOUND THE HIDDEN GEM - Try our exclusive product: "Bitcoin Unit Box 150"
 
Your ultimate opportunity to get 150% return for the first time in Bitcoin history

We accept deposits in Bitcoins, dividing our assets into units.
 
1 Unit = 0.1 Bitcoin
Minimum deposit - 1 Unit
Maximum deposit - 1,000 Units
 
Investments are accepted from 15th until 30th of September, 2015

In order to participate make a deposit to: [address ending in ievD]

The 150% payout will transferred to your Bitcoin address on 15th of October, 2015 (GMT).
(for example: investing today $500 will return with $750 in just 30 days)
Payouts are automated and risk free (insured by Zurich Insurance Group, AG)

This is a one time opportunity for promotion purpose only. Your e-mail is assigned to specific Bitcoin address, forwarding this offer to other person or entity is prohibited.
You will get additional information after successful deposit is made.

There are no tricks or hidden fees, becoming an investor has never been so easy

COPYRIGHT © 2015 GLOBAL ADVISORS. (JERSEY) LIMITED - REGULATED BY THE JERSEY FINANCIAL SERVICES COMMISSION.
YOU CAN UNSUBSCRIBE HERE. [link to an unsubscribe link at topspin.net]
Global Advisors
26-30 Queen Street, Jersey, Channel Islands, JE2 4WD

[unamis76]

It seems that this kind of email has been ongoing. Fortunately I did not recieve it. It's also related to BTCjam as far as I've seen.

[BayAreaCoins]

I feel like this isn't the first time similar stuff to this.

I haven't received it yet.

[newIndia]

Here is a related discussion going on: https://www.reddit.com/r/Bitcoin/comments/3l2nq7/oy_vey_global_advisors_email_scam_do_they_think/

[Q7]

Not sure if there anyone who fell for it but I'm sure there's always will be. Sometimes one or even two probably is enough for a work that only involves drafting and sending on emails.

[knowhow]

The bad thing is that email could scammed already someone,scammers getting better,using a reputation name to steal money.

[OBAViJEST]

How are they getting your email?

[btcscriptpremium]

I did too, I don't think its actually the real Global Advisors company, they seem more legit than this. I don't think anyone has sent to that address they said to send to, I thought it was legit until I saw the phishing thing, but I would not have invested just off some random email, I checked their website first and nothing of the sort was there.

[achow101]

I have also received that email. It went to my "not important stuff" email so I don't know where it actually came from

Here are the headers for anyone interested (with anything with my username replaced with <username redacted>):

Code:

Delivered-To: <username redacted>@gmail.com
Received: by 10.31.102.130 with SMTP id a124csp1917547vkc;
        Tue, 15 Sep 2015 11:37:26 -0700 (PDT)
X-Received: by 10.50.62.46 with SMTP id v14mr8601277igr.79.1442342246662;
        Tue, 15 Sep 2015 11:37:26 -0700 (PDT)
Return-Path: <bounces+8498-11e5-<username redacted>=gmail.com@campaignmail.topspin.net>
Received: from o4.txmail.topspin.net (o4.txmail.topspin.net. [50.31.56.76])
        by mx.google.com with ESMTPS id wf3si6428697pab.166.2015.09.15.11.37.25
        for <<username redacted>@gmail.com>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 15 Sep 2015 11:37:26 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounces+8498-11e5-<username redacted>=gmail.com@campaignmail.topspin.net designates 50.31.56.76 as permitted sender) client-ip=50.31.56.76;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of bounces+8498-11e5-<username redacted>=gmail.com@campaignmail.topspin.net designates 50.31.56.76 as permitted sender) smtp.mailfrom=bounces+8498-11e5-<username redacted>=gmail.com@campaignmail.topspin.net;
       dkim=pass header.i=@campaignmail.topspin.net;
       dkim=pass header.i=@sendgrid.info
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; 
	d=campaignmail.topspin.net; 
	h=content-type:mime-version:from:to:reply-to:subject:list-unsubscribe; 
	s=smtpapi; bh=iMmIWTUIs1QGF7glN+h/yBpWiH0=; b=uBauoNlxjLzB84mfOG
	CTnYRLkfKE9mx8ROlAS+StJFEetlvJ640GCpEsoO4meXpB3SuGJmrMTkt8AKcduq
	fD63NCn5ljP0j6MwUUwqaP5/UV77kWG2AJbKPbpYNnu0DkxuE968HT6lEXcgV+IA
	4AS6G6snpFtQbjlAqKF+yh0LI=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sendgrid.info; 
	h=content-type:mime-version:from:to:reply-to:subject:list-unsubscribe:x-feedback-id; 
	s=smtpapi; bh=iMmIWTUIs1QGF7glN+h/yBpWiH0=; b=l1maRggfm4Rau7HKmG
	JBCEjexWkjG6QBTmCHu9pYwTqNeE9tv6QOexJsMDVa6jADjDt8DiSmtwTLoHkNnG
	cOc3D/w3OIG93iTPUjQKILqvvwK6J0l4asnu6/Bmggs88g2GZK3dYa7IjIMiZZsD
	B1hKbBIaNvY6fPY+7THO6Pgc8=
Received: by filter-412.sjc1.sendgrid.net with SMTP id filter-412.18519.55F8650E3E
        2015-09-15 18:36:20.944535385 +0000 UTC
Received: from ODQ5OA (unknown [10.42.83.122])
	by ismtpd-057 (SG) with HTTP id 14fd24b1830.3f4.edba84
	for <no-reply@globaladvisorsltd.co.uk>; Tue, 15 Sep 2015 18:36:20 +0000 (UTC)
Content-Type: multipart/alternative;
	boundary="===============1785527086297371078=="
MIME-Version: 1.0
From: Global Advisors <no-reply@globaladvisorsltd.co.uk>
To: <username redacted>@gmail.com
Reply-to: no-reply@globaladvisorsltd.co.uk
Subject: <username redacted>, we have a message for you
Message-ID: <14fd24b1830.3f4.edba84@ismtpd-057>
Date: Tue, 15 Sep 2015 18:36:21 +0000 (UTC)
List-Unsubscribe: <http://campaignmail.topspin.net/wf/unsubscribe?upn=L-2FTi6ZTocIC94Ba6RHgCEXDL7Szs45NmICXergacnREy4v1x7g6s20p9-2BVBJ-2FhSTIgl8NhraIdO7RyQGRJxxSHZByUvdkezAF71aL2NE9FZQpfbIqOEWc6-2FbhnxZEWBQsrhZF5bpBTFazPgIudIpgzKd8eZCmF2oTd7SWirVNxr0UJzbPEq4E-2BZ1QBaGNQIj5qqX6nsn3rVvrl-2FgTQX69nBI1S2t5iXXUryH3B9-2FYA9EioiEzEumohiPvikUihML49-2FqLWWjygNR6qEyuS-2BKHrHoIC-2Fspb-2FsWFA4yomARCN6PWUv12lq-2FCV85V156CRfvj8GrcDMZue4rsgcujMdCEWXMojPx4zXCiGdTMmNE1ttMfAHqb7NMw8Q3LCx-2Bdlp>, <mailto:unsubscribe@campaignmail.topspin.net?subject=http://campaignmail.topspin.net/wf/unsubscribe*q*upn=L-2FTi6ZTocIC94Ba6RHgCEXDL7Szs45NmICXergacnREy4v1x7g6s20p9-2BVBJ-2FhSTIgl8NhraIdO7RyQGRJxxSHZByUvdkezAF71aL2NE9FZQpfbIqOEWc6-2FbhnxZEWBQsrhZF5bpBTFazPgIudIpgzKd8eZCmF2oTd7SWirVNxr0UJzbPEq4E-2BZ1QBaGNQIj5qqX6nsn3rVvrl-2FgTQX69nBI1S2t5iXXUryH3B9-2FYA9EioiEzEumohiPvikUihML49-2FqLWWjygNR6qEyuS-2BKHrHoIC-2Fspb-2FsWFA4yomARCN6PWUv12lq-2FCV85V156CRfvj8GrcDMZue4rsgcujMdCEWXMojPx4zXCiGdTMmNE1ttMfAHqb7NMw8Q3LCx-2Bdlp>
X-SG-EID: kQOz2DZXIkenABrUj8Y1wiflqqFSFP/LOnm7ExIyyQdtO/Y3zc3bpuUYHP7Poy1PJXNWvfPtv44RkB
 X9FLsFfUEZ0KAha5+V/N3Bc+KEsAXC9LV/4kQYVieBfAu64vTGRu3P7UaGI7KydRRmliNQFycfUwTv
 X7CcJl5+g1suSNI=
X-SG-ID: VPWZYjw6GOzHdwkwPeoX9QiEbzQXX/gF9P8njHP5+LC6GXuFcMOGOXNmcJ1GxxPGTrTznkBfEtaYRl
 19NMT9saDm3MZlUYUl0tjIpQPIjlRVwRd3I23w0urJyYuP7WPuZ80ghYXg3t7kkwy8X0zx4PPLR8se
 rNQThpaRCCjyRJdL8qzuy1VyYhGPOOnqyvm9
X-Feedback-ID: 8498:a8nQh6WN4SOd8ebBtsmfdA==:EoefmY750HgwTH88sYCWWQ==:SG

--===============1785527086297371078==

[xhoneyael]

How are they getting your email?

maybe its from some site about bitcoin that collect email..
or a site that turn to scam and sell their email..
or maybe the owner or using it there are many posibillity
so its more likely they submit there email to the site..
but right now people is not that dumb to get scam in some email like that..
so i think it not a treat anymore but it annoying because they will never stop sending you email 

[sgk]

I don't have localbitcoins account but I still received the phishing email. The deposit address is different from OP (not ending with 'ievD'), so they're sending different deposit addresses to everyone.

I've received some other phishing BTC investment scam emails in past too. Not sure how they got my email address.

[Mitchell]

There is another thread about this over here: Global Advisors Ltd. I received the e-mail as well on the an email I used only for LBC. At least, I'm really certain I never used it on BTCJam, BTC-e, etc.

[2kman]

Received this spam email also on an email address I once reserved for bitcoin-24.com.

[stepmike]

I also received this email tonight. Also have this e-mail rigistered in localbitcoin.

[kpitti]

I received it some days ago too  . It seems they got my email from Bitcointalk, but I can`t prove it. I delete mail immediately.
I hope no one will put any Satoshi to this Scam.

[Pursuer]

this is a common thing for localbitcoins.com users. maybe they leak their users Email addresses. since you say you have not used your Email anywhere else this means they might even be selling Email addresses to advertisers to spam you with Emails.

of course there is another possibility that their system is so week that it gets hacked and Emails leak!

[MaxLBC]

Those of you who received this e-mail, and have it linked with a LocalBitcoins account, could you guys PM me your account username? We're looking in to this and receiving all of your reports will help a lot.

[btccashacc]

i get it too but not come from my localbitcoin, that email come from neteller

[S4VV4S]

How are they getting your email?

My guess is from localbitcoins or someone who works there.
If the email address was only used for that website then it doesn't take much to figure out what is going on.

[notbatman]

This is clearly propaganda promoting the globalist agenda of lies. I've received this spam with an email address I'm sure I've only given out a few other times besides posts to the flat earth forums.

Don't let their subliminal message of a globe earth hit you while you're stunned by spam!