Resolved. str4wm4n was hacked. He repaid my loss in full. Please revise feedback

[Zepher]

THIS IS RESOLVED. STR4WM4N HAS TAKEN RESPONSIBLITY FOR HIS HACKED ACCOUNT, AND REPAID MY LOSS IN FULL. PLEASE REVISE YOUR FEEDBACK IF YOU HAVE LEFT A NEGATIVE ON HIS PROFILE

So, here we are. The first time I have been scammed on this forum. str4wm4n had advertised the fact that he had a Casascius Bearer Bar for sale in the Collectibles section (see reference). I PM'd him and we agreed on 0.85 BTC for the bar, with postage by Next Day Special Delivery. He advised me he was in the UK. Some evidence now shows that he is in the USA when you check his posting history. He attempted to get me to part with more BTC by saying he had 4 of these bearer bars for sale. I advise that once I received the one I had already paid for, that I would be in touch and make a deal for the remaining 3 bars. I sent him 0.85 BTC, and then an additional 0.01 BTC for Next Day Delivery. After stalling several times when a tracking number was requested, but not given, I started to get suspicious. More info in proper format below.

What happened: Legendary user str4wm4n scammed me out of 0.86 BTC for a Casascius Bearer Bar

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=19284

Reference Link: https://bitcointalk.org/index.php?topic=1702683.msg17078389#msg17078389

Amount Scammed: 0.86 BTC

Payment Method: Bitcoin

Proof of Payment: https://blockchain.info/tx/a4950499e494b4caa7e91a4d6616162455cedac590bbacead5c0616b0b4abdfb

https://blockchain.info/tx/45642d79abb8dac0bdaf8e542deb03dc7d02df663ec227aed4089dd099f21332

PM/Chat Logs:

Hey str4wm4n,

https://bitcointalk.org/index.php?topic=1702683.msg17078389#msg17078389

Would an offer of 0.8 BTC tempt you?

Cheers

Was thinking around .9 for it.
I'm not doing holds as I told the OP.
So if you want it; it's yours :-)

If you are willing to meet in the middle at 0.85, you have a deal

Just one question before I agree, those pictures are not very clear - is the bar mint?

Thanks for the response man

Bar is definitely mint.
My phone sucks on quality.
Galaxy's lol.
Hmmmmmmmmmmm.
I'll take .85

Where do you live firstly?

Awesome. You have a deal bud.

I am in the UK. I am assuming you are in the US? I am happy to have it shipped to [redacted] if you are (I will ask, he won't mind though as he collects stuff for me and does a bulk ship). If you are anywhere else, then I would prefer a direct shipment.

Let me know, and we can take it from there

Cheers

I'll definitely ship to you because we are on the same side of country. How would you like it packaged?

Ah awesome, both of us being in the UK definitely makes life easier

Can you shoot me some better photos please? Along with a payment address.

Ummm, wrapped in a shitload of bubble wrap would be good haha

Plastic bubble wrap yes.
I'll take more photos before shipping when I get in.
12HooZ9bhW5TxH4y1RCnGKT63cy1Xs8oWA

I'll take your word for it that the bar is mint, so I will take it for 0.85. I will send my shipping details with the txid.

Can you confirm is this is still in the plastic wrap, or if it has been removed from it?

Some clearer pictures would be great thanks.

Definitely wrapped.
Which is why the pictures look bad.

Going out soon!

Great, looking forward to it. Sending by Next Day Special Delivery? I can send you a few more bits if needed.

Didn't plan on it but I can. Do you need more of these? Have a total of 4. Now three.

LOL! Send me this one today by Special Delivery please, and when received tomorrow I will likely be contacting you to buy the remaining 3 I'll send another 0.01 to the address from yesterday in a few mins to cover the excess postage, so yeah, please send by Special Delivery so I get it tomorrow. Once I have it, I will make an offer for the other 3!

Perfect.

0.01 sent

Got the info- waiting on wife then head in will post here

Cool thanks just let me know the tracking info when you have it. Cheers

Got the info- waiting on wife then head in will post here

Got a tracking number for me bud?

Got the info- waiting on wife then head in will post here

Got a tracking number for me bud?

Yes! One min. I almost lost your name because I delete messages All The time.

Haha, waiting

Yeah I'm uploading the info Lil bit. I pulled a nighter

No tracking number. No package received, and post has been and gone.

What's happening??

Yeah I'm uploading the info Lil bit. I pulled a nighter

No tracking number. No package received, and post has been and gone.

What's happening??

That's strange. Hold on. Very strange. I told the lad tuesday

Tracking number please. Last time I will ask. You seem to avoid that request, and I have asked you several times now.

I have asked for tracking information several times now, and you have failed to provide it. You have 10mins before I leave a neg rating. If you provide proof it was sent, I will remove the rating.

He did not reply after that.

Additional Notes: Looking through this posting history shows some similar instances of items not being shipped:

https://bitcointalk.org/index.php?topic=444760.msg5369106#msg5369106



That's it for now. I will add more info as and when I have some. He has been tagged by myself and a fellow DT2 member. If any other DT members wish to tag him, please do. He is glowing red now, which should prevent anyone falling for his crap.

str4wm4n... pay back the 0.86 BTC that I have paid you for this Casascius Bearer Bar. It is pretty clear I am not going to get what I paid for.

Please don't give me the "You should have used escrow" stuff. I know I should. My fault. The Legendary account and dark green trust made me believe I was safe. I was wrong.

Thanks,

Zepher


Edit: Pictures of the "bearer bar"

https://postimg.org/image/i5rpaoorv/

https://postimg.org/image/btck0ulpn/

[Lutpin]

str4wm4an... pay back the 0.86 BTC that I have paid you for this Casascius Bearer Bar. It is pretty clear I am not going to get what I paid for.

Watching.

[spartak_t]

Looks like credible accusation. Painted him in red + tweeted: https://twitter.com/bulgar1an/status/806203530310721536

[Chevas Regal]

you are not new to it.

Are you doing loans? Need a 3-4 btc loan and collateral is THIS account. Repayment in 2 weeks

[Liad.Services]

He was also trying to scam me a several hours ago.
He wanted to sell me few gold bars for around spot price.

Right after we agreed about the deal he asked me to send him the funds, when I asked about using an escrow(fees on me) he refused.

After refusing he offered me a pretty weird offer, that I will send him 25% of the payment and then he will deliver the package, and after getting it I will pay him the rest, which made it pretty obvious that he is scamming, why should he agree to trust me on a 1100USD, but not agree to use an escrow.

He was trying to scam me for about 1500$.

Sorry about your lose, you should always use escrow for large amounts.

[Zepher]

Looks like credible accusation. Painted him in red + tweeted: https://twitter.com/bulgar1an/status/806203530310721536

Appreciate it, thanks.

you are not new to it.

Are you doing loans? Need a 3-4 btc loan and collateral is THIS account. Repayment in 2 weeks

Glad you didn't get stung man.

He was also trying to scam me a several hours ago.
He wanted to sell me few gold bars for around spot price.

Right after we agreed about the deal he asked me to send him the funds, when I asked about using an escrow(fees on me) he refused.

After refusing he offered me a pretty weird offer, that I will send him 25% of the payment and then he will deliver the package, and after getting it I will pay him the rest, which made it pretty obvious that he is scamming, why should he agree to trust me on a 1100USD, but not agree to use an escrow.

He was trying to scam me for about 1500$.

Sorry about your lose, you should always use escrow for large amounts.

As above, glad you didn't get stung either. I left him a neg and then noticed you did the same shortly after. If my neg helped you to NOT get scammed in any way, then that's something at least.


He won't be doing this again. That account is ruined. FU str4wm4n. Dicks like you should rot in hell.
I don't believe this is the original account owner, as the original owner back in 2013 was giving out 1 BTC bounties for doing (relatively) simple math problems. This account was sold (or hacked and managed carefully for an exit scam). You chose the wrong target buddy. Account seems to now be abandoned. Good. He wont be scamming anyone else under that account, at the very least.

Last comment from me on this anyway. I did what I set out to do - destroy this scammer and the account. Its done.

Thanks for the help everyone.

[wheelz1200]

Zeph this sucks sorry to see this happen.  One thing i dont discount though is the original owner of the account (if it was sold) is an ass.  He/she allowed for this to happen.  I wish like hell account sales could be banned here....would clean this rot right up.  Hope this shows other hero/leg members dont be offened if you get asked to use escrow, just accept the fact thats the sad reality we live in on the forum....this place needs to get cleaned up or it will soon disappear.

[The Sceptical Chymist]

Zeph this sucks sorry to see this happen.  One thing i dont discount though is the original owner of the account (if it was sold) is an ass.  He/she allowed for this to happen.  I wish like hell account sales could be banned here....would clean this rot right up.  Hope this shows other hero/leg members dont be offened if you get asked to use escrow, just accept the fact thats the sad reality we live in on the forum....this place needs to get cleaned up or it will soon disappear.

You got that right,  my man. 

And I got hosed for 0.3btc earlier this year by a light green-trusted member.  I lent without collateral and learned my lesson good.  Fuck account sales.

[QuentinA]

He contacted me for 90eth@market price, I had an issue and couldn't follow through, but we agreed on using SebastianJu's escrow service.

Keeping an eye on this, couldn't he have been hacked ?

[spartak_t]

I think this is a bought account, but it was done probably months ago (if not more). And the reason for the purchase was one and only: scam. I'm not sure if a research on that would help and that is why I haven't bothered myself.

[BTC909]

Deffo brought account from a scammer

[Avirunes]

Going to post where he posted 12HooZ9bhW5TxH4y1RCnGKT63cy1Xs8oWA . He edits half-an-hour before dealing with Zepher.



Edit Time: December 04, 2016, 01:30:26 AM (archive: http://archive.is/tbi6f#selection-7139.15-7139.49)


He quotes the same post in same thread later


 
Edit Time: December 04, 2016, 01:32:28 AM (archive: http://archive.is/BDxqU#selection-2743.16-2743.50)


Question is how I am sure that he edited the address only and not the content? Then check this :


Someone quoted his post just below with original address: 1K6VqufBesJPvdHXuZD2tyWqJrJXxyYqTt that he posted: http://archive.is/RhsBj#selection-2983.6-2983.40

I think this is a bought account, but it was done probably months ago (if not more). And the reason for the purchase was one and only: scam. I'm not sure if a research on that would help and that is why I haven't bothered myself.

No it was not IMO. I think its the same str4wm4n.

Proof: I went on checking every post and every transaction he made but none of them lead to anything. Most of altcoin/bitcoin address were either used as tipping/donation address.

Anyway searching for str4wm4n in all the saved pages of seclog.php on archive.is leads nothing. That means he didn't changed any passes if we check.

Reference(archive of seclog.php): http://archive.is/http://bitcointalk.org/seclog.php (thanks to one who maintains archiving seclog)

That means he didn't changed pass between 7 JUN 2015 - 4 DEC 2016 . (There are some gaps so there might still some chances. But if you ask me,then I think it was still on the possession of the same holder judging on the posting history)


OK so the main part comes

If the account hasn't changed its owner this year then following users might be able to give some more info:



Anduck
MnemonicInsomnia


Hope it provided some help

[Lutpin]

~snip research~

Thanks for looking into it. A few points:
- I've contacted Anduck immediately after zepher posted this thread, they are pretty sure the account changed hands based on recent posts/language.
- The original owner isn't hard to locate (we got a good idea where he is) and str4wm4n isn't the most generic nick either, especially when used several times on different sites/boards.
- If this account was indeed either hacked or bought, it was probably for a long time now and the user waited an unusual time for their "exit scam".

[Zepher]

Appreciate the help, Avirunes, really
I know exactly who the original account holder is, down to the name and DOB. I am not doxing anyone though.
This account was sold/hacked, and managed carefully for the exit scam as Lutpin has pointed out.

Appreciate everything guys. Consider this "resolved", as I ain't going to see a Satoshi from str4wm4n.

Cheers

[str4wm4n]

Hey..

This is the real str4wm4n.

I have not logged in for a while and see my account was hacked and used to scam Zepher.

I have changed my password ( It was my fault for originally using a weak password.)

I am willing to payback the 0.86 in order to restore my account trust...

[Zepher]

Hey..

This is the real str4wm4n.

I have not logged in for a while and see my account was hacked and used to scam Zepher.

I have changed my password ( It was my fault for originally using a weak password.)

I am willing to payback the 0.86 in order to restore my account trust...

Hi str4wm4n,

Okay, thanks for the PM and posting in the thread here. I need to do something, but will edit this post shortly.

Thanks

Edit: Okay, paying me back the 0.86 BTC would be appreciated, thank you.

I would like it sent to my forum profile address, which is the same address I used to pay the hacker of your account.

This address is: 1VAULTPU7XXsB5h6pb6VdZE7ZxKHCxmVb

If you can repay the 0.86 BTC to that address, and post the tx here for everyone to see, that would be great.

Secondly, to verify you are the original account holder, I would like you to sign a message from an old address.

In this thread: https://bitcointalk.org/index.php?topic=1249010.msg14022858#msg14022858 - you have an address that has been quoted. The address is: 1K6VqufBesJPvdHXuZD2tyWqJrJXxyYqTt. Do you still have access to this address so you can sign a message from it?

Thanks.

[str4wm4n]

Really upset about this. Let's get it taken care of ASAP

[Zepher]

Really upset about this. Let's get it taken care of ASAP

I haven't been feeling too great about this either. I have edited my post above, and sent you another PM.

Cheers

[str4wm4n]

Hey..

This is the real str4wm4n.

I have not logged in for a while and see my account was hacked and used to scam Zepher.

I have changed my password ( It was my fault for originally using a weak password.)

I am willing to payback the 0.86 in order to restore my account trust...

Hi str4wm4n,

Okay, thanks for the PM and posting in the thread here. I need to do something, but will edit this post shortly.

Thanks

Edit: Okay, paying me back the 0.86 BTC would be appreciated, thank you.

I would like it sent to my forum profile address, which is the same address I used to pay the hacker of your account.

This address is: 1VAULTPU7XXsB5h6pb6VdZE7ZxKHCxmVb

If you can repay the 0.86 BTC to that address, and post the tx here for everyone to see, that would be great.

Secondly, to verify you are the original account holder, I would like you to sign a message from an old address.

In this thread: https://bitcointalk.org/index.php?topic=1249010.msg14022858#msg14022858 - you have an address that has been quoted. The address is: 1K6VqufBesJPvdHXuZD2tyWqJrJXxyYqTt. Do you still have access to this address so you can sign a message from it?

Thanks.

Should be home from work within an hour and I'll check if I have that privkey.

[Zepher]

Should be home from work within an hour and I'll check if I have that privkey.

Okay, no problem. If you can repay the amount I was scammed, and also sign a message (I will look for some more addresses in the meantime, so you can sign any one of them), then I will remove the neg rating and ask other DT users to do the same.

Thanks