Escrow Partner got tricked

[xetsr]

the email appears to have come from noreply@bitcointalk.org
but that is easily faked

What email?

[1714144515]

1714144515

[mexxer-2]

the email appears to have come from noreply@bitcointalk.org
but that is easily faked

What email?

The email that comes with any PM as a notification

[amartin99]

this email  http://prntscr.com/ab40hl

[xetsr]

this email  http://prntscr.com/ab40hl

So, you're trying to say someone sent a fake email to both you and the escrower to trick him into releasing the BTC before deal was complete? Not sure I follow.

If that email is legit (check the message headers) then someone did most likely hack your account.

[twister]

this email  http://prntscr.com/ab40hl

So, you're trying to say someone sent a fake email to both you and the escrower to release escrow before deal was complete? Not sure I follow.

If that email is legit (check the message headers) then someone did indeed hack your account.

I think he's talking about the notification email, which one gets to their registered email address when they receive a PM.

[kingaltcoins]

this email  http://prntscr.com/ab40hl

I do not think the email is fake, considering it was sent from noreply@bitcointalk.org

If you still think so why not post the raw transcript of that email here?

I think you have been ratted! Check your PC ASAP!

[xetsr]

BTW, this is the shit that happens when you deal with members that sell carded cards and carding methods.

You might also want to change your password now. If your account was compromised you can expect other PMs to be deleted.

[Quickseller]

Did you actually receive this PM? If so then can you click on "quote" then copy everything and paste it here?

[Lutpin]

Did you actually receive this PM? If so then can you click on "quote" then copy everything and paste it here?

The user won't be abled to do that.

and I can't find this PM from him in my account
I don't see my last PM to "SebastianJu" in my history either

However, if his account got hacked, the invader might have cleared the PMs from in- and outbox.

[amartin99]

the headers look like this  http://prntscr.com/ab457x

the PM is not in my history  either from me approving the payment
or the one in the email

I suspect someone hacked my account and simply deleted the PMs
I had my account set to save everything I send in my history and that somehow got changed to not save
I just find it hard to beleave anyone cracked my old pass "x9^t6X$S@nu!ukHAn"
and yes I have changed my pass now so there is no harm in posting my old one

[xetsr]

the headers look like this  http://prntscr.com/ab457x

the PM is not in my history  either from me approving the payment
or the one in the email

I suspect someone hacked my account and simply deleted the PMs
I had my account set to save everything I send in my history and that somehow got changed to not save
I just find it hard to beleave anyone cracked my old pass "x9^t6X$S@nu!ukHAn"
and yes I have changed my pass now so there is no harm in posting my old one

Did the person you were trading with send you any links, could have been links to sites that appear like bitcointalk.org but are designed to steal your password?

[amartin99]

don't think so but even if he had I used a unique pass for this forum
so wouldn't have worked

[amartin99]

in the end I have made 9-10 trades on this forum
gotten feedback for only one and lost $310
it's been a discouraging first week

[james.lent]

don't think so but even if he had I used a unique pass for this forum
so wouldn't have worked

then the rdp you're on must have been compromised.

[xetsr]

don't think so but even if he had I used a unique pass for this forum
so wouldn't have worked

The page might have been designed to look like bitcointalk, fooling you into thinking you were logged out. You would then enter your bitcointalk username and password and get redirected to the real bitcointalk.org, making it look like you never left.

You should check the PMs again. I'm not sure why anybody other then the person you were dealing with would have the escrow released.

This is all assuming SebastianJu didn't fuck up. It wouldn't be the first time a escrow did something wrong.

[SebastianJu]

I did not read all messages in this thread to be able to answer fast. amartin99 first asked me about a trade some days ago. I answered a bit late and he wrote that he already dealt with another user. Well in the meanwhile I already had sent out the escrow details and after hearing that I cleared the address.

Then the other trading partner got back and wanted the deal to happen. I asked amartin99 if he still wants to deal and he said yes. After negotiating the deal I sent a new escrow address. Though he sent to the old escrow address. I said it's fine, no problem should appear from that.

After a while I received a pm from him claiming that the trading partner had sent him the goods and that I should release the coins. After that I received a pm of the trading partner telling me his bitcoin address to release to.

Well, I released the coins of course since both parties were ok with it.

Now I received a pm of amartin99 that he got a pm from me that I released the coins even though he had not received anything. Well, first scare went over when I checked my inbox and found that exactly the same user amartin99 had send me the pm telling me to release the coins. I answered on his complain pm and found that only the trading partner received this answer because the forum told me that amartin99 has blocked me for receiving pm's from  me.

This sounds like a strange situation. I will read the thread now.

Of course admins and staff can check my pm's.

[mexxer-2]

Of course admins and staff can check my pm's.

Can you report the PM to grue or Cyrus(preferred) , along with this thread link for them to confirm

[Lutpin]

Of course admins and staff can check my pm's.

You could report the PM from amartin99 confirming he received the funds and ask for the mod handling the report to confirm it in this thread.

I answered on his complain pm and found that only the trading partner received this answer because the forum told me that amartin99 has blocked me for receiving pm's from  me.

Sounds like something the potential hacker did, trying to obstruct any further contact between the two of you.

Can you report the PM to grue or Cyrus(preferred) , along with this thread link for them to confirm

mexxer beats me to it.

[amartin99]

I do not use an RDP for this
I sell RDP
I have only connected to the forum threw my home computer

what the hell  http://prntscr.com/ab4q3y
id say that confirms someone got in my account here
why the hell would I set to ignore him ?

think I saw where to undo that yesterday  but I sure didn't set it

[xetsr]

I do not use an RDP for this
I sell RDP
I have only connected to the forum threw my home computer

what the hell  http://prntscr.com/ab4q3y
id say that confirms someone got in my account here
why the hell would I set to ignore him ?

think I saw where to undo that yesterday  but I sure didn't set it

Next step for you should be finding out how your account was compromised. Go through a list of sites and pages you recently visited and check for malware on your PC. I'm still pretty certain you were phished by the member you were dealing with. Why would the hacker not take your coin themselves? Makes no sense.