Hollie/Ninja/Stefanie Andrea/SHlFT/Pearikay scammers

[Maged]

This thread is a compilation of all evidence against this group of people. The evidence contained will prove that they are all the same person, and they are all scammers. This list may be missing things. The goal of this is to gather enough evidence so that we can release the IP addresses these guys used to you all.

SHlFT:

• https://bitcointalk.org/index.php?topic=34656.0
  In the above thread, SHlFT takes a loan and never repays.
• https://bitcointalk.org/index.php?topic=41089.0
  Sold an iPhone, never sent it.

Evidence that SHlFT is part of this group:

• https://bitcointalk.org/index.php?topic=32636.msg417162#msg417162
  Sold HIB to Hollie.
• https://bitcointalk.org/index.php?topic=34656.msg474496#msg474496
  Hollie replied to loan request.
• https://bitcointalk.org/index.php?topic=34656.msg475131#msg475131
  Stefanie Andrea also replies.
• https://bitcointalk.org/index.php?topic=36009.msg450080#msg450080
  Hollie buys a PS3 Slim from SHlFT.
• https://bitcointalk.org/index.php?topic=32263.0
  https://bitcointalk.org/index.php?topic=32097.0
  Buys a HTC Evo 3D from Hollie.
• https://bitcointalk.org/index.php?topic=30838.msg406961#msg406961
  Posted in same thread as Hollie.
• https://bitcointalk.org/index.php?topic=26203.msg431982#msg431982
  Hollie replies saying that she sent 6.5 BTC to ex0420 for an iPhone, but it was SHlFT who offered the 6.5 BTC. He tried covering this slip-up later by saying "i was just about to buy this.."
• stick_theman received this email from SHlFT in regards to https://bitcointalk.org/index.php?topic=34734.0
  

  ---------- Forwarded message ----------
  From: z3ro hour <z3rohourx@gmail.com>
  Date: Thu, Sep 1, 2011 at 6:53 PM
  Subject: Re: IPad
  
  
  
  I'm not a young boy. I'm 29 year old woman. I didn't use my real name or even my real address. I had it set up to: I use my friends name and Address and they ship it to my friend Address and my friends ship it to my PO Box. Anyways I'm moving to go live my domestic partner whom I love. I'm leaving this life behind.
  
  Skrillex, out.
  
  --------------------------------------------------------

  This email matches the PayPal email address used by Hollie.
• Finally, there is an IP match with Pearikay and Hollie

Hollie (aka Ninja):

• https://bitcointalk.org/index.php?topic=39124.0
  Hollie sold (at least) 2 HP Touchpad and never delivered

Evidence that Hollie is part of this group (in addition to the above links):

• https://bitcointalk.org/index.php?topic=39771.msg486736#msg486736
  Posted in the same thread as Stefanie Andrea.
• https://bitcointalk.org/index.php?topic=37347.msg458579#msg458579
  Sold Macbook to Stefanie Andrea.
• https://bitcointalk.org/index.php?topic=39124.msg479930#msg479930
  https://bitcointalk.org/index.php?topic=39124.msg481337#msg481337
  Stefanie Andrea replies to Hollie's thread. She also vouches for him.
• Has an IP match with SHlFT, (redacted), Stefanie Andrea, and Pearikay

Stefanie Andrea:

Evidence that Stefanie Andrea is part of this group (in addition to the above links):

• Sent me this PM:
  

  Hello, Maged. I bought a PayPal Account from a guy on another site. He sells $150 PlayStation Network account for only $16 and also he sells $525 PayPal accounts that I bought for only $50. It may be possible that I bought a account that was used for scamming and that I got caught in the crossfire.
  
  Here's a link that people actually sell PSN accounts:
  http://www.dhgate.com/wholesale-hot-sell-us-network-psn-psps-150/p-ff80808130e5a14a01312c0334ca26d8.html
  And here's a link that people actually sell PayPal Accounts also:
  http://www.wickedfire.com/sell-buy-trade/136200-i-want-buy-verified-paypal-account.html
  

  That correlates to:
  https://bitcointalk.org/index.php?topic=41891.msg509859#msg509859
  https://bitcointalk.org/index.php?topic=41913.msg510043#msg510043
• IP match with (redacted), Hollie, and Pearikay

Pearikay:

Evidence that Pearikay is part of this group (in addition to the above links):

• https://bitcointalk.org/index.php?topic=32263.msg485861#msg485861
  Replies for SHlFT.
• https://bitcointalk.org/index.php?topic=41692.msg510234#msg510234
  Makes Stefanie Andrea appear trustworthy.
• https://bitcointalk.org/index.php?topic=39124.msg494368#msg494368
  Tries to throw us off the scent.

Please feel free to add any evidence or information you know about these guys here.

[terrytibbs]

Chief Master Detective Maged!

[deslok]

Can we id anyone else who might be related by using the ip's that they used?

[Maged]

Can we id anyone else who might be related by using the ip's that they used?

There is one other person, but I can't reveal that since there is no evidence that it belongs to this guy.

Additionally, I suspect that there are more accounts. I saw many of the same patterns in other threads these guys posted in. If someone could look for those, that'd be great.

[hmblm1245]

Great work Maged. Thanks for the detective work.

[Chemicalbro]

https://bitcointalk.org/index.php?topic=484.msg512251#msg512251

Odd. Either another account, or as suspected, Stefanie was the account that is supposed to stay in good standing.

[Maged]

Some things to note:
This guy called out his other accounts as scammers when it was revealed that they were scammers. So even if someone has been scammed, that doesn't mean they can be trusted.

This guy purposely tries to lead us down the wrong trail. Take any personal information he's posted/given to you with a grain of salt.

[Maged]

https://bitcointalk.org/index.php?topic=484.msg512251#msg512251

Odd. Either another account, or as suspected, Stefanie was the account that is supposed to stay in good standing.

Very interesting. I'll look into it.

[Mousepotato]

User netxshare may also be one of his accounts.  Stefanie Andrea accidentally answers a price inquiry for one of the items netxshare had for sale: https://bitcointalk.org/index.php?topic=38417.msg485284#msg485284

[terrytibbs]

User netxshare may also be one of his accounts.  Stefanie Andrea accidentally answers a price inquiry for one of the items netxshare had for sale: https://bitcointalk.org/index.php?topic=38417.msg485284#msg485284

And there's the infamous cover-up method in there, too. Still not entirely convinced, but it's plausible.

[ampirebus]

i hope moderators keep in mind that users who are using the marketplace with good feedback could also be incahoots with scam accounts (make a scam account, or 2 scam accounts, or 10... etc, get a bunch of bitcoins from items you never send, then take this money and buy items from toher forum members on non scam account, continue building reputation and selling items bought with money from scamming)

repeat process until all your accounts are banned and you make new accounts with VPN/proxy service freely available like hidemyass.com

[the joint]

Can we id anyone else who might be related by using the ip's that they used?

There is one other person, but I can't reveal that since there is no evidence that it belongs to this guy.

Additionally, I suspect that there are more accounts. I saw many of the same patterns in other threads these guys posted in. If someone could look for those, that'd be great.

Keep an eye on ultraimports.

[indio007]

In regards to the ip addresses. Do they resolve to common hostname or internet service provider. If the do what is the geographic location? Do you think they where using proxies or TOR?

[Maged]

User netxshare may also be one of his accounts.  Stefanie Andrea accidentally answers a price inquiry for one of the items netxshare had for sale: https://bitcointalk.org/index.php?topic=38417.msg485284#msg485284

That doesn't appear likely. I've also investigated ensign_lee in that thread.

i hope moderators keep in mind that users who are using the marketplace with good feedback could also be incahoots with scam accounts (make a scam account, or 2 scam accounts, or 10... etc, get a bunch of bitcoins from items you never send, then take this money and buy items from toher forum members on non scam account, continue building reputation and selling items bought with money from scamming)

repeat process until all your accounts are banned and you make new accounts with VPN/proxy service freely available like hidemyass.com

That is exactly what has been happening.

Can we id anyone else who might be related by using the ip's that they used?

There is one other person, but I can't reveal that since there is no evidence that it belongs to this guy.

Additionally, I suspect that there are more accounts. I saw many of the same patterns in other threads these guys posted in. If someone could look for those, that'd be great.

Keep an eye on ultraimports.

He doesn't match the pattern, but he might still be a regular scammer. It's hard to tell.

In regards to the ip addresses. Do they resolve to common hostname or internet service provider. If the do what is the geographic location? Do you think they where using proxies or TOR?

That information hasn't been revealed to me yet. I'll be sure to post the IP addresses as soon as I know them.

[senbonzakura]

thanks for excellent work, i asked long ago to give scammer label to shift, he could have deleted his posts.

many have been scammed and have evidence/info such as emails, but you have to pm them and get it from them.

[kgo]

Keep an eye on ultraimports.

Would you mind explaining why?

[Maged]

If anyone here has the Texas address this guy was giving out, that would help greatly.

[senbonzakura]

NoValues possibly also hollie/ninja/shift ?

https://bitcointalk.org/index.php?topic=33343

[kpriess]

Maged, make this a sticky, I believe this guy wont be leaving anytime soon..

He has to understand he will eventually make a mistake if he doesn't stop what he is doing, and when that time comes, he will have to deal with the fury of several dozens of people here.. I personally hopes this happens..

[the joint]

Can we id anyone else who might be related by using the ip's that they used?

There is one other person, but I can't reveal that since there is no evidence that it belongs to this guy.

Additionally, I suspect that there are more accounts. I saw many of the same patterns in other threads these guys posted in. If someone could look for those, that'd be great.

Keep an eye on ultraimports.

He doesn't match the pattern, but he might still be a regular scammer. It's hard to tell.

Actually, he fits the pattern of what ThyDude did before 'someone' claimed he had a seizure and was taken to the hospital.

Users with under 50 posts who decide to try to sell multiple items in a very short time frame make me very suspicious.