What happened: This user
lyso (profile;u=1205822) pm me for the escrow as the buyer of S9 hashboard from
coinmuse(profile;u=157095). And of course I agreed.
Now he sent the funds to my escrow address (1A7eegrhDp91vvPn7yrhGj4VRAcJJuJEzn) total of 0.05481 BTC (
TxID). Now after the funds were confirmed on the network, I made a signed message that I received the payment and inform the go signal that the seller can ship the item starting that time.
After several minutes he replied that the seller wants to scam him by sending email with phishing link [
see image below]
http://detallesfalleros.com/index/?u=lyso)
Please see the hover the link to see the original url and want me to refund the funds on this address
1CfJwaNkox1ChX31ig8AzjkCfkKwpajA3d at
01:14:25 PMAnd I observed that the password was changed via seclog and as I thought he might clicked the phishing link then this script kiddie got his account at
Today at 01:18:45 PM so it's just right after he send me the refund address at
01:14:25 PMAs I thought that he was hacked by changing the password but I'm wrong, he still replying me and posted the refund address
again after the account's password had changed, knowingly he's still the owner of the account
Time:
01:28:30 PM and
01:39:49 PMSo as I thought he still the original owner of the account, so I decided to refund the funds he sent to my escrow address.
TxID of the refund
https://blockchain.info/tx/87d084f6c29b3ade4991fe01517df4156e9eb589cee2407f3ea536f5ce0125c1Now after I send the refund on his refund address 1CfJwaNkox1ChX31ig8AzjkCfkKwpajA3d on
01:40:53 PM, he didn't reply me confirming that he received the refund.
After several minutes some user named
lysoss(profile;u=1245383) message me out of nowhere, saying that his account was compromised.
Time on he message me was
01:50:43 PM almost 10 minutes after lyso's(profile;u=1205822) last reply. And more than 30 minutes after the account's password has changed which you can see on seclog, and on the image attached.
lysoss(profile;u=1245383) registered on
01:35:11 PM while at that time lyso(profile;u=1205822) still replying me, lyso's last message was on
01:39:49 PMScammers Profile Link: (lyso =>
https://bitcointalk.org/index.php?action=profile;u=1205822), (lysoss =>
https://bitcointalk.org/index.php?action=profile;u=1245383) and I'm still thinking if the account
coinmuse is also him, since he used it to make a fake trade.
Reference Link: Amount Scammed: none
Payment Method: BTC
Proof of Payment: BTC I received
TxID and the refund
TxIDPM/Chat Logs: Additional Notes: Now, Why
lyso make another account saying that he's account was hacked while I refunded him already? I'm thinking that he wants me to refund
again to
lysoss account since he's saying that he is the real owner of that account. And wants to scam me by refunding him with his other account. And have a failed attempt to hack my account with his phishing link (script kiddies scattered on this forum nowadays).
If possible, and if DT members read this, please tag this 3 users.
Regards