Funny scammers

[escrow.ms]

A guy called me and told me that he's from localbitcoins.com and they are giving 1 bitcoin for free as promotion. If i want to redeem them, they will forward a mail to me and i need to open  it to get that free BTC.


I lol'ed hard and told them to send mail.

Oh btw his mobile number: 9198832244 /Naveen (Probably a fake name)
Name on truecaller: Yash

edit: got their mail.



 

[1713915796]

1713915796

[1713915796]

1713915796

[nefron]

would like know more about the modus operandi of the scam, share if u get to know more

[troy112]

Wow " put your antivirus off"  LOL

[nefron]

just noticed! did he manage to spoof email id from localbitcoins.com domain? didnt gmail raise flags?

[escrow.ms]

just noticed! did he manage to spoof email id from localbitcoins.com domain? didnt gmail raise flags?

That's easy bro.. and in this case they used http://emkei.cz/ mailer.
I am going to reverse their rat in free time and will post more details here.

Ps: I told him that i clicked on it and nothing happened, and then i kept disconnecting his call in between of that convo. He is going to guide me "How to run that file" in half hour because he is busy with his localbitcoins work now.

[buysellbitcoin]

just noticed! did he manage to spoof email id from localbitcoins.com domain? didnt gmail raise flags?

That's easy bro.. and in this case they used http://emkei.cz/ mailer.
I am going to reverse their rat in free time and will post more details here.

Ps: I told him that i clicked on it and nothing happened, and then i kept disconnecting his call in between of that convo. He is going to guide me "How to run that file" in half hour because he is busy with his localbitcoins work now.

lol... Felt like reading BTC-E troll box

[bitcoin9096]

Lol i got the same call,the second he said he is giving free btcs i diconnected the call.

[escrow.ms]

He just called me again, he's now going to assist me via teamviewer at 8 PM. wow
He's such a hard working guy.

[nefron]

just noticed! did he manage to spoof email id from localbitcoins.com domain? didnt gmail raise flags?

That's easy bro.. and in this case they used http://emkei.cz/ mailer.
I am going to reverse their rat in free time and will post more details here.

Ps: I told him that i clicked on it and nothing happened, and then i kept disconnecting his call in between of that convo. He is going to guide me "How to run that file" in half hour because he is busy with his localbitcoins work now.

m aware, but usually gmail hints if its spoofed. keep us posted its getting intresting

[escrow.ms]

just noticed! did he manage to spoof email id from localbitcoins.com domain? didnt gmail raise flags?

That's easy bro.. and in this case they used http://emkei.cz/ mailer.
I am going to reverse their rat in free time and will post more details here.

Ps: I told him that i clicked on it and nothing happened, and then i kept disconnecting his call in between of that convo. He is going to guide me "How to run that file" in half hour because he is busy with his localbitcoins work now.

m aware, but usually gmail hints if its spoofed. keep us posted its getting intresting

I am possibly going to boot up ubuntu and ask him to install that exe file via teamviewer at night

[PuneBTC]

I got a text. He introduced himself as Yash. Whatsapp'd me from the same number and asked for my email ID. Which I gave. Then they asked for last 3 BTC transactions and balance in my localbitcoin wallet. So I realised that something was fishy and transferred most of my balance out of localbitcoins.com. And guess what? My localbitcoin.com balance is now 0!! He took whatever little bit was left. I'm shocked cause all I gave him was my email ID. (I didn't get any email / click on any link, turn off my anti-virus etc) And I  have 2 factor authentication on for any transactions!

Luckily I was quick to move my BTC to other wallets, so I hardly lost 50-100 INR. I suggest you don't keep too much in localbitcoins.

Any knows how this was possible?

-Rohan

[escrow.ms]

I got a text. He introduced himself as Yash. Whatsapp'd me from the same number and asked for my email ID. Which I gave. Then they asked for last 3 BTC transactions and balance in my localbitcoin wallet. So I realised that something was fishy and transferred most of my balance out of localbitcoins.com. And guess what? My localbitcoin.com balance is now 0!! He took whatever little bit was left. I'm shocked cause all I gave him was my email ID. (I didn't get any email / click on any link, turn off my anti-virus etc) And I  have 2 factor authentication on for any transactions!

Luckily I was quick to move my BTC to other wallets, so I hardly lost 50-100 INR. I suggest you don't keep too much in localbitcoins.

Any knows how this was possible?

-Rohan

Can you post on which address he did withdrawal from your localbitcoins wallet.

[escrow.ms]

Ok now,I can't see people getting scammed. I called him and told him to stop otherwise i'll fuck him for sure.
He's from lucknow, which is like my hometown.

His phone is now switched off.

[PuneBTC]

I can identify my wallets in the blockchain. Rest were all bulk transactions / fees etc so its confusing. Also, this was a negligible amount so I'm getting confused with the fees, etc.  Maybe my balance randomly went to zero (fees etc), while I was fighting with him on Whatsapp. He was getting pissed off with my abusive language and threatened to delete my account. I was asking him to meet me in person if he has the ba**s! Sounds funny, but it wouldn't have been funny if I had REAL money in my account, not just pocket chillar.

[escrow.ms]

I can identify my wallets in the blockchain. Rest were all bulk transactions / fees etc so its confusing. Also, this was a negligible amount so I'm getting confused with the fees, etc.  Maybe my balance randomly went to zero (fees etc), while I was fighting with him on Whatsapp. He was getting pissed off with my abusive language and threatened to delete my account. I was asking him to meet me in person if he has the ba**s! Sounds funny, but it wouldn't have been funny if I had REAL money in my account, not just pocket chillar.

Click on wallet and check all the transactions details and yes it's not funny if someone is loosing his hard earned money.

I thought to play with him little bit, but after your post, I couldn't stop myself from doing call.
I hope no one gets scammed, but if someone does, I wouldn't mind going to lucknow.

[PuneBTC]

@Escrow.ms:

So initially I was playing along with him (till I moved my BTC out of localbitcoin). I asked him that I am also from Lucknow, etc. Let's meet up, blah blah:

He told me his address was:
12/56 hajratganj
Lucknow
Near kawabi biryani
(which I'm sure is fake)

He has also posted shady ads on quikr: (same phone number)
http://varanasi.quikr.com/Earn-7-per-month-on-your-investment-W0QQAdIdZ136296511

It is a Reliance Uttar Pradesh number. This guy is such a newbie scammer! Who uses whatsapp man?

[escrow.ms]

@Escrow.ms:

So initially I was playing along with him (till I moved my BTC out of localbitcoin). I asked him that I am also from Lucknow, etc. Let's meet up, blah blah:

He told me his address was:
12/56 hajratganj
Lucknow
Near kawabi biryani
(which I'm sure is fake)

He has also posted shady ads on quikr: (same phone number)
http://varanasi.quikr.com/Earn-7-per-month-on-your-investment-W0QQAdIdZ136296511

It is a Reliance Uttar Pradesh number. This guy is such a newbie scammer! Who uses whatsapp man?

XD

BTW it's Airtel U.P so he's from lucknow or some nearby city for sure and yeah i have seen those ad's.

[PuneBTC]

Since I won't be using this wallet again:
Here is the blockchain. Its all greek to me man.

https://blockchain.info/address/1GH3cecc4RMDr45du2wxTQBkj1parhvjX5?filter=2

[escrow.ms]

Since I won't be using this wallet again:
Here is the blockchain. Its all greek to me man.

https://blockchain.info/address/1GH3cecc4RMDr45du2wxTQBkj1parhvjX5?filter=2

Is that your localbitcoins, receiving address?
You just need to check transactions which is below "Send/Receive bitcoins box"

[PuneBTC]

It was the fee. #FeelingStupidNow