[HELP]help me to get back my money from scammer

[eseayan]

https://ibb.co/FqtTHvK

I see that it appears minerjones really did send you the PM, however the signed message doesn't verify with the PGP key in his keybase.



Did you attempt to verify the signature against keybase before sending the funds?

Hard to know exactly what happened without input from MJ. Right now I have to assume yours is a faked screenshot.

Did you attempt to verify the signature against keybase before sending the funds?

No.

Hard to know exactly what happened without input from MJ. Right now I have to assume yours is a faked screenshot.

The screenshot is true. What is my purpose to fake it?

I’m not sure what’s going on here or why my name is mentioned - but I have nothing to do with whatever is going on here nor have I sold anything or requested or sent any money or whatever is being discussed in this chat  to or from anyone here.

Please keep me out of this drama and whatever scam your are trying to pull.

Thanks!

I found this in my messages from august 31st:

https://i.imgur.com/rGsvgtb.png

I can only assume that raj dude scammed you,  and used my name for that purpose somehow.

I AM NOT INVLVED AT ALL HERE!



https://bitcointalk.org/index.php?action=profile;u=2300231;sa=showPosts

let the detectives here go to work!

***shady - reviewing his lasts posts, changed names and emails a lot, lots of scam like history, sorry for that guys loss, but he didn't do his due diligence with a simple search , not sure what the "escrow-man" thinks?

Maybe it is true.
Let me tell you how it happened to me.

After I posted thread to buy physical coins on August 20, and buckrogers  contacted me for this on August 23.  On August 25 Rajubhusal
(first time to send me a massage) sent me a massage, and told me that Rajubhusal is buckrogers. Even this massage quoted the massage that buckrogers sent to me on August 23(At that time I did not understand how Rajubhusal got the buckrogers's massage if this is not the same man). At that time I suspected this may be scam. But I like monero physical coins and I wanna buy it. I thought that I can use escrow service , my money will be safe even if I don't receive the physical coins. So I contact MJ for escrow.

At that time I did not understand how Rajubhusal got the buckrogers's massage if this is not the same man

You said your account was hacked right? it doesnt take a genius to figure out it was this Raj guy who did it and took a DM and used it against you.

You should have checked with Escrow, me or anyone else on the forum, or posted in your thread at least that "something" was off or different. Kind of basic knowledge in life before sending a random stranger a few hundered XMR!

Instead you assumed and took his word for it, and in turn accused me of stealing your coins.

SMH

*** oh and id never say "Cheers"

You said your account was hacked right? it doesnt take a genius to figure out it was this Raj guy who did it and took a DM and used it against you.

His massage to pretend to be you is sent on August 23. It is August 29 to found out my bitcointalk account is hacked and linked email address is changed.

Instead you assumed and took his word for it, and in turn accused me of stealing your coins.

I do not accuse you. I even do not infer your name or even MJ's name before this problem becomes clear. Sorry for that.

https://ibb.co/FqtTHvK

I see that it appears minerjones really did send you the PM, however the signed message doesn't verify with the PGP key in his keybase.



Did you attempt to verify the signature against keybase before sending the funds?

Hard to know exactly what happened without input from MJ. Right now I have to assume yours is a faked screenshot.

He was scammed - most likely buy that Raj guy.

This is why escrows put in the PGP message - SO YOU CAN VERIFY IT!

OP:

Honestly I know it sucks, but you should have done your due diligence with all the tools that were freely provided to you by the escrow. Especially with that amount of coin.

Sad to see, but you aren't the first and you wont be the last to get scammed, hopefully someone besides the OP ofc can learn from this terrible mistake and scam, and triple check everything before sending out funds to anyone.

you should have done your due diligence with all the tools that were freely provided to you by the escrow. Especially with that amount of coin.

Yes, I made a big mistake. I will learn from that.
MJ is a good man. I have used MJ's escrow service many times, and it works well.  I trust him, so I always send coins to escrow address without verifying PGP. But it failed this time.
Can help me to verify how the scammer fake the massage that MJ sent to me? Is the XMR address under control of the scammer? Thanks.

[moderator's note: consecutive posts merged]

[selassiesoildier]

This is really messed up and this whole thread and recent disappointing auction prices…seems like an advertisement for scarce city or some other legit auction house for our collectibles. Adds fees, commissions and kyc but at least we will see some proper premiums and weed out the lame scammers

Stay safe peeps…VERIFY! Never trust

Sel

[buckrogers]

I’m not sure what’s going on here or why my name is mentioned - but I have nothing to do with whatever is going on here nor have I sold anything or requested or sent any money or whatever is being discussed in this chat  to or from anyone here.

Please keep me out of this drama and whatever scam your are trying to pull.

Thanks!

I found this in my messages from august 31st:

https://i.imgur.com/rGsvgtb.png

I can only assume that raj dude scammed you,  and used my name for that purpose somehow.

I AM NOT INVLVED AT ALL HERE!



https://bitcointalk.org/index.php?action=profile;u=2300231;sa=showPosts

let the detectives here go to work!

***shady - reviewing his lasts posts, changed names and emails a lot, lots of scam like history, sorry for that guys loss, but he didn't do his due diligence with a simple search , not sure what the "escrow-man" thinks?

Maybe it is true.
Let me tell you how it happened to me.

After I posted thread to buy physical coins on August 20, and buckrogers  contacted me for this on August 23.  On August 25 Rajubhusal
(first time to send me a massage) sent me a massage, and told me that Rajubhusal is buckrogers. Even this massage quoted the massage that buckrogers sent to me on August 23(At that time I did not understand how Rajubhusal got the buckrogers's massage if this is not the same man). At that time I suspected this may be scam. But I like monero physical coins and I wanna buy it. I thought that I can use escrow service , my money will be safe even if I don't receive the physical coins. So I contact MJ for escrow.

At that time I did not understand how Rajubhusal got the buckrogers's massage if this is not the same man

You said your account was hacked right? it doesnt take a genius to figure out it was this Raj guy who did it and took a DM and used it against you.

You should have checked with Escrow, me or anyone else on the forum, or posted in your thread at least that "something" was off or different. Kind of basic knowledge in life before sending a random stranger a few hundered XMR!

Instead you assumed and took his word for it, and in turn accused me of stealing your coins.

SMH

*** oh and id never say "Cheers"

You said your account was hacked right? it doesnt take a genius to figure out it was this Raj guy who did it and took a DM and used it against you.

His massage to pretend to be you is sent on August 23. It is August 29 to found out my bitcointalk account is hacked and linked email address is changed.

Instead you assumed and took his word for it, and in turn accused me of stealing your coins.

I do not accuse you. I even do not infer your name or even MJ's name before this problem becomes clear. Sorry for that.

You claim to have made a new account on August 30th, but the account shows it was created on November 23rd 2020, can you explain this and why you said this was your brand new account after being "hacked"?

https://bitcointalk.org/index.php?action=profile;u=2885681

https://bitcointalk.org/index.php?action=profile;u=2885681;sa=showPosts

I AM eseayan, and this is my new account . MY account is hacked in the weekend.  I just fonud it in Monday when I come back to work. I locked the old account.

Please stop the deal  until the admin complete unlock it.

eseayan( aseayan)


ps . here is password changed infomation in my email.

"Dear eseayan,

Your Bitcoin Forum (bitcointalk.org) email address was just changed from eseastone@yandex.com to azhdiueseoneazhj@yandex.com by IP address 216.131.109.10. If you did not do this, then you can visit the following link within 14 days in order to lock the account:"

[nutildah]

Can help me to verify how the scammer fake the massage that MJ sent to me? Is the XMR address under control of the scammer? Thanks.

You'd have to agree to let a well-trusted member of the forum have access to your Bitcointalk account to verify the contents of the PM. I could do this for you if you like, there's probably some others like LoyceV, or you could have a global mod do it, though it might take a while to get their attention.

[MoparMiningLLC]

I agree with ^^^ I would want to see the actual DM from minerjones - your screen shot of his message was chopped off so we cannot see that it actually came from him (unless I missed a screen shot where you showed it)

My guess is the guy hacked your account, saw buck's dm and then pretended to be buck - faked a minerjones account and got you to pay him (the hacker) then after all was said and done, he then prolly changed your email and such hoping to keep you off the forums so you could not oust him for his bullshit.

I do find it strange that minerjones has not responded. I hope all is well with him, just spoke with him yesterday and he was fine then.

again - I would like to see the DM from minerjones where he supposedly gave you this address to pay in its entirety.

[eseayan]

I’m not sure what’s going on here or why my name is mentioned - but I have nothing to do with whatever is going on here nor have I sold anything or requested or sent any money or whatever is being discussed in this chat  to or from anyone here.

Please keep me out of this drama and whatever scam your are trying to pull.

Thanks!

I found this in my messages from august 31st:

https://i.imgur.com/rGsvgtb.png

I can only assume that raj dude scammed you,  and used my name for that purpose somehow.

I AM NOT INVLVED AT ALL HERE!



https://bitcointalk.org/index.php?action=profile;u=2300231;sa=showPosts

let the detectives here go to work!

***shady - reviewing his lasts posts, changed names and emails a lot, lots of scam like history, sorry for that guys loss, but he didn't do his due diligence with a simple search , not sure what the "escrow-man" thinks?

Maybe it is true.
Let me tell you how it happened to me.

After I posted thread to buy physical coins on August 20, and buckrogers  contacted me for this on August 23.  On August 25 Rajubhusal
(first time to send me a massage) sent me a massage, and told me that Rajubhusal is buckrogers. Even this massage quoted the massage that buckrogers sent to me on August 23(At that time I did not understand how Rajubhusal got the buckrogers's massage if this is not the same man). At that time I suspected this may be scam. But I like monero physical coins and I wanna buy it. I thought that I can use escrow service , my money will be safe even if I don't receive the physical coins. So I contact MJ for escrow.

At that time I did not understand how Rajubhusal got the buckrogers's massage if this is not the same man

You said your account was hacked right? it doesnt take a genius to figure out it was this Raj guy who did it and took a DM and used it against you.

You should have checked with Escrow, me or anyone else on the forum, or posted in your thread at least that "something" was off or different. Kind of basic knowledge in life before sending a random stranger a few hundered XMR!

Instead you assumed and took his word for it, and in turn accused me of stealing your coins.

SMH

*** oh and id never say "Cheers"

You said your account was hacked right? it doesnt take a genius to figure out it was this Raj guy who did it and took a DM and used it against you.

His massage to pretend to be you is sent on August 23. It is August 29 to found out my bitcointalk account is hacked and linked email address is changed.

Instead you assumed and took his word for it, and in turn accused me of stealing your coins.

I do not accuse you. I even do not infer your name or even MJ's name before this problem becomes clear. Sorry for that.

You claim to have made a new account on August 30th, but the account shows it was created on November 23rd 2020, can you explain this and why you said this was your brand new account after being "hacked"?

https://bitcointalk.org/index.php?action=profile;u=2885681

https://bitcointalk.org/index.php?action=profile;u=2885681;sa=showPosts

I AM eseayan, and this is my new account . MY account is hacked in the weekend.  I just fonud it in Monday when I come back to work. I locked the old account.

Please stop the deal  until the admin complete unlock it.

eseayan( aseayan)


ps . here is password changed infomation in my email.

"Dear eseayan,

Your Bitcoin Forum ([Suspicious link removed] to azhdiueseoneazhj@yandex.com by IP address 216.131.109.10. If you did not do this, then you can visit the following link within 14 days in order to lock the account:"

You claim to have made a new account on August 30th, but the account shows it was created on November 23rd 2020, can you explain this and why you said this was your brand new account after being "hacked"?

No, I do not claim to have made a new account on August 30th. My hacked account-eseayan is my main account to buy physical coins, and  my account-aseayan is backup account. Yes, my account-aseayan  was created on November 23rd 2020, but this account did not leave any thread or PM before this hacking affact. It means new to me after my account-eseayan can't be used. 

I AM eseayan, and this is my new account

This you quoted is from the massage i sent to you and MJ on August 30 to let you stop the deal from account-aseayan. It was a big time for me to prevent big loss. If my words confuse you, I am sorry for that.

Can help me to verify how the scammer fake the massage that MJ sent to me? Is the XMR address under control of the scammer? Thanks.

You'd have to agree to let a well-trusted member of the forum have access to your Bitcointalk account to verify the contents of the PM. I could do this for you if you like, there's probably some others like LoyceV, or you could have a global mod do it, though it might take a while to get their attention.

Thanks for your help. I agree to let a well-trusted member of the forum have access to my Bitcointalk account to verify the contents of the PM. You and MoparMiningLLC are both Legendary and have good reputation. I chose to trust you. You can both access. Please tell me how do it.


[moderator's note: consecutive posts merged]

[nutildah]

Thanks for your help. I agree to let a well-trusted member of the forum have access to my Bitcointalk account to verify the contents of the PM. You and MoparMiningLLC are both Legendary and have good reputation. I chose to trust you. You can both access. Please tell me how do it.

I just sent you a PM with instructions.

[eseayan]

Thanks for your help. I agree to let a well-trusted member of the forum have access to my Bitcointalk account to verify the contents of the PM. You and MoparMiningLLC are both Legendary and have good reputation. I chose to trust you. You can both access. Please tell me how do it.

I just sent you a PM with instructions.

sent you a PM, please check it.

EDIT:
MoparMiningLLC: I sent you a PM, too. Please check it.

[LoyceV]

You'd have to agree to let a well-trusted member of the forum have access to your Bitcointalk account to verify the contents of the PM. I could do this for you if you like, there's probably some others like LoyceV, or you could have a global mod do it, though it might take a while to get their attention.

Feel free to PM me.

[eseayan]

You'd have to agree to let a well-trusted member of the forum have access to your Bitcointalk account to verify the contents of the PM. I could do this for you if you like, there's probably some others like LoyceV, or you could have a global mod do it, though it might take a while to get their attention.

Feel free to PM me.

PMed.

[nutildah]

I looked at eseayan's PM from minerjones and it is legitimate, and from the real minerjones. It matches what eseayan posted earlier.

Here is the PM being verified:

The scammer did not controlled my XMR wallet, because I sent about 200 XMR to escrow address from my CEX account, which is secure and protected by Google Authenticator.

The escrow address is from the massage that escrow-man sent to me on August 28. Here is the massage:

Hello-

Happy to assist for the transaction.
Amount: 196 XMR
Donation: 1.96 XMR
Total to send: 197.96 XMR
Address: 45gtrfipMYeYZ9ZRRLN4XKG5q2tiT7HUdSvqn5LUs5V3WmHSnQYHpF6ReaY1U2uGJfMo6QpP5zmS1gT hEASRcHdx3KZkDK6

Once funds have been sent and confirmed, please use "reply to all" to let us know the txid of the payment.
After this, items can be shipped to the buyer.
When buyer receives items in good standing and reports back, I can release funds to the seller.

Thank you,
minerjones

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

August 28 2021 minerjones escrow between Rajubhusal and eseayan for the amount of 196 XMR using address 45gtrfipMYeYZ9ZRRLN4XKG5q2tiT7HUdSvqn5LUs5V3WmHSnQYHpF6ReaY1U2uGJfMo6QpP5zmS1gT hEASRcHdx3KZkDK6 in exchange for Lealana XMR silver coin set
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.1.13
Comment: https://keybase.io/crypto

wsBcBAABCgAGBQJhKhsKAAoJEIRUCAKscQ+OAscH/ijZxiI3i9nKXHbBRb46IgJJ
eX4NzXc90zeKEFkAc5lNf1e+yIQYQIhyR+7ZYYQVVTzoifaXeVyvIhhLyd2ROy0w
S21NpWxOPyh/FnZXnqi4cUn2ZO0wt8v1MyRRpPPXM9b/oEKAz0n8ZtOYmBfCRMYN
z5r/r62hscWizx2d7b7kE+xRRq9zp+wTdm9jtKP114PE5Y9HBZf+iUbsH92j7ST4
74BPh4FURCEBDDLybcXmwCsS58wZOlrYdktwHGWnXRPz0UihF3lJeUeqEXxDBsCw
3U7ja3IB+buDSWFhh5Qako/XUDTb5aSt2pJP5Q53IBbhnZPJsNgs7WfoTU6Iug4=
=svfC
-----END PGP SIGNATURE-----

https://ibb.co/FqtTHvK

However, since the contents are the same, the signed message still doesn't verify with minerjones' keybase.

LoyceV and MoparMining feel free to double-check.

[MoparMiningLLC]

I have checked the DM's - I ignored all the other ones that were not related to this issue, reviewing only ones from the raj account, from buckrogers(1message) and from minerjones (2 messages) and I would have to agree that the message does appear to be from minerjones - but I get a "hash mismatch" when attempting to verify the PGP

what we need is to have minerjones chime in here - it appears he sent the dm and did supply the xmr address:

45gtrfipMYeYZ9ZRRLN4XKG5q2tiT7HUdSvqn5LUs5V3WmHSnQYHpF6ReaY1U2uGJfMo6QpP5zmS1gT hEASRcHdx3KZkDK6

I know somewhere above eseayan provided some screenshot of his exchange account that showed the first/last part of the "paid to" address and it appears to match the one supplied by minerjones. However, due to the nature of xmr - we cannot easily verify this txn.

I can see that the txn id: ed435c8c5aaa30a4ab9ea0ab0475986d3de27069538ff3535e096ed6a1a885a8 is a valid txn but that is about it. I cannot see the amount or addresses involved. having the address and transaction hash is only 2 of the 3 parts needed. we also would need the view key.

if minerjones sent that dm then he can provide verification on that xmr address whether it received funds or not. if minerjones did not send that dm - then it might be possible that at some point minerjones forum account was also compromised.

what it appears to me is that this raj account must have gotten access to eseayan's account and copied/used buckrogers dm to con/scam eseayan.

and then possibly changed the email address afterwards in an attempt to lock out eseayan.

---eseayan - can you get the view key from your exchange?

It is late and I am going to bed - I await to see what others say and what minerjones will say.

[eseayan]

I have checked the DM's - I ignored all the other ones that were not related to this issue, reviewing only ones from the raj account, from buckrogers(1message) and from minerjones (2 messages) and I would have to agree that the message does appear to be from minerjones - but I get a "hash mismatch" when attempting to verify the PGP

what we need is to have minerjones chime in here - it appears he sent the dm and did supply the xmr address:

45gtrfipMYeYZ9ZRRLN4XKG5q2tiT7HUdSvqn5LUs5V3WmHSnQYHpF6ReaY1U2uGJfMo6QpP5zmS1gT hEASRcHdx3KZkDK6

I know somewhere above eseayan provided some screenshot of his exchange account that showed the first/last part of the "paid to" address and it appears to match the one supplied by minerjones. However, due to the nature of xmr - we cannot easily verify this txn.

I can see that the txn id: ed435c8c5aaa30a4ab9ea0ab0475986d3de27069538ff3535e096ed6a1a885a8 is a valid txn but that is about it. I cannot see the amount or addresses involved. having the address and transaction hash is only 2 of the 3 parts needed. we also would need the view key.

if minerjones sent that dm then he can provide verification on that xmr address whether it received funds or not. if minerjones did not send that dm - then it might be possible that at some point minerjones forum account was also compromised.

what it appears to me is that this raj account must have gotten access to eseayan's account and copied/used buckrogers dm to con/scam eseayan.

and then possibly changed the email address afterwards in an attempt to lock out eseayan.

---eseayan - can you get the view key from your exchange?

It is late and I am going to bed - I await to see what others say and what minerjones will say.

Thanks very much for your help.

---eseayan - can you get the view key from your exchange?

OK, I will contact my exchange now, and try to get the view key.

[LoyceV]

The scammer(Rajubhusal) told me buckrogers is Rajubhusal,  this is his mobile account.
https://imgur.com/a/Man0O9w

This should have been a very big red flag: never trust someone who claims to be anyone without verifying it with the original user.

Even this massage quoted the massage that buckrogers sent to me on August 23(At that time I did not understand how Rajubhusal got the buckrogers's massage if this is not the same man). At that time I suspected this may be scam.

The quote (from hacking your account I assume) was a very good trick from the scammer, but you should have followed your gut feeling.

I've seen something like this happen recently as well, to such an extent that I no longer trust ANYTHING about PM's on this forum - Not saying there is someone who may have infiltrated the server, but things are definitely getting shadier around here as time goes on, so I now prefer to use Telegram - How fuckin' sad is that, right?

I haven't seen anything that gives me a reason to believe PMs are compromised. There's also a Security bounty worth $10-50k for it.
Telegram makes it very easy for scammers to pretend to be someone else, change their nickname and delete posts from being viewed by the other party. I would not recommend it unless you know who you're dealing with.

Can help me to verify how the scammer fake the massage that MJ sent to me? Is the XMR address under control of the scammer?

I confirm this PM was sent by minerjones to eseayan:

The escrow address is from the massage that escrow-man sent to me on August 28. Here is the massage:

Hello-

Happy to assist for the transaction.
Amount: 196 XMR
Donation: 1.96 XMR
Total to send: 197.96 XMR
Address: 45gtrfipMYeYZ9ZRRLN4XKG5q2tiT7HUdSvqn5LUs5V3WmHSnQYHpF6ReaY1U2uGJfMo6QpP5zmS1gT hEASRcHdx3KZkDK6

Once funds have been sent and confirmed, please use "reply to all" to let us know the txid of the payment.
After this, items can be shipped to the buyer.
When buyer receives items in good standing and reports back, I can release funds to the seller.

Thank you,
minerjones

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

August 28 2021 minerjones escrow between Rajubhusal and eseayan for the amount of 196 XMR using address 45gtrfipMYeYZ9ZRRLN4XKG5q2tiT7HUdSvqn5LUs5V3WmHSnQYHpF6ReaY1U2uGJfMo6QpP5zmS1gT hEASRcHdx3KZkDK6 in exchange for Lealana XMR silver coin set
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.1.13
Comment: https://keybase.io/crypto

wsBcBAABCgAGBQJhKhsKAAoJEIRUCAKscQ+OAscH/ijZxiI3i9nKXHbBRb46IgJJ
eX4NzXc90zeKEFkAc5lNf1e+yIQYQIhyR+7ZYYQVVTzoifaXeVyvIhhLyd2ROy0w
S21NpWxOPyh/FnZXnqi4cUn2ZO0wt8v1MyRRpPPXM9b/oEKAz0n8ZtOYmBfCRMYN
z5r/r62hscWizx2d7b7kE+xRRq9zp+wTdm9jtKP114PE5Y9HBZf+iUbsH92j7ST4
74BPh4FURCEBDDLybcXmwCsS58wZOlrYdktwHGWnXRPz0UihF3lJeUeqEXxDBsCw
3U7ja3IB+buDSWFhh5Qako/XUDTb5aSt2pJP5Q53IBbhnZPJsNgs7WfoTU6Iug4=
=svfC
-----END PGP SIGNATURE-----

I made a checksum to compare the exact quote: it matches.
Message details:

Re: escrow for 3 xmr physical coin
« Sent to: Rajubhusal, eseayan on: August 28, 2021, 11:17:01 AM »

if minerjones sent that dm then he can provide verification on that xmr address whether it received funds or not. if minerjones did not send that dm - then it might be possible that at some point minerjones forum account was also compromised.

Another possibility would be clipboard malware.
In case someone doesn't know yet: https://bitcointalk.org/myips.php shows all IP-addresses that used your account in the last 30 days. Admin will probably have access to older IP-data too.

When buyer receives items in good standing and reports back, I can release funds to the seller.

Is this "normal" when escrowing Collectibles? I would expect the escrow to receive and verify the goods personally before reshipping it to the buyer. Now the escrow can't possibly verify it if the buyer says he received something else, and the seller still has no evidence. What's the point in paying someone $500 to escrow only the payment but not the goods?

[MoparMiningLLC]

I have checked the DM's - I ignored all the other ones that were not related to this issue, reviewing only ones from the raj account, from buckrogers(1message) and from minerjones (2 messages) and I would have to agree that the message does appear to be from minerjones - but I get a "hash mismatch" when attempting to verify the PGP

what we need is to have minerjones chime in here - it appears he sent the dm and did supply the xmr address:

45gtrfipMYeYZ9ZRRLN4XKG5q2tiT7HUdSvqn5LUs5V3WmHSnQYHpF6ReaY1U2uGJfMo6QpP5zmS1gT hEASRcHdx3KZkDK6

I know somewhere above eseayan provided some screenshot of his exchange account that showed the first/last part of the "paid to" address and it appears to match the one supplied by minerjones. However, due to the nature of xmr - we cannot easily verify this txn.

I can see that the txn id: ed435c8c5aaa30a4ab9ea0ab0475986d3de27069538ff3535e096ed6a1a885a8 is a valid txn but that is about it. I cannot see the amount or addresses involved. having the address and transaction hash is only 2 of the 3 parts needed. we also would need the view key.

if minerjones sent that dm then he can provide verification on that xmr address whether it received funds or not. if minerjones did not send that dm - then it might be possible that at some point minerjones forum account was also compromised.

what it appears to me is that this raj account must have gotten access to eseayan's account and copied/used buckrogers dm to con/scam eseayan.

and then possibly changed the email address afterwards in an attempt to lock out eseayan.

---eseayan - can you get the view key from your exchange?

It is late and I am going to bed - I await to see what others say and what minerjones will say.

I am going to update this comment with an update - the pgp message does verify. Due to a 80 character limit there is a space in the address between the two red characters below - if you remove that space, the pgp will verify.

45gtrfipMYeYZ9ZRRLN4XKG5q2tiT7HUdSvqn5LUs5V3WmHSnQYHpF6ReaY1U2uGJfMo6QpP5zmS1gT hEASRcHdx3KZkDK6




so the challenge here is to prove where the funds went to.

my further guess would be that eseayan sent the funds to minerjones who in fact did receive them - but then that the "hacker" sent a message to minerjones from eseayan's account stating they had received the coins and to release the funds and that minerjones then paid the address provided.


Buyer: eseayan
Seller: Rajubhusal
Total amount: 196 XMR + your escrow fee (Paid by the buyer).
Seller's release address (xmr):
43Xf5BWzcdbdhDeHnj6cF1dG4fGnasQEUHyn2F92LK9VbyvP96nbhkdGZuEJKHd2X9eYhhbKQn4C6E1 V2h8EHSSvVjGs1rZ


I also reviewed the outbox from eseayan account - there are no messages between when eseayan provided the transaction id minerjones and raj - the next outbound message is the one saying eseayan got their account back.

but any outbound dm's could have been deleted by the "hacker"

if mj can provide verification he received the funds, show proof of a dm to release the funds and proof he did so - I think that leaves minerjones right where we all expect he would be - in the clear.

the problems here are:

1. eseayan not verifying raj was buckrogers and just accepting that raj was honest - for the amount of money involved - that is an crazy assumption to have made.
2. having coins sent direct to buyer - I would suggest always sending to the escrow - especially with this type of value.

no one deserves to be conned but it is everyone's responsibility to verify. I trust minerjones but I also verify every pgp he sends me when I do pay him - either that or I talk to him directly to confirm.  I have met him personally and I still verify.

DO NOT TRUST - VERIFY.

[owlcatz]

Good catch, I totally forgot about that - Bitcointalk has always done that with XMR addresses at that very same position, and I'm not sure why.

That's why I always used to use the [code /] tags when sending anyone XMR addresses in PM.

So where is the escrow guy? Seems like someone with a rep that big would be all over this...

[LoyceV]

my further guess would be that eseayan sent the funds to minerjones who in fact did receive them - but then that the "hacker" sent a message to minerjones from eseayan's account stating they had received the coins and to release the funds and that minerjones then paid the address provided.
~
if mj can provide verification he received the funds

Minerjones said he doesn't have the coins:

https://ibb.co/9hXqfr7

I've verified this PM through OP's account. It's real:

« Sent to: eseayan on: September 17, 2021, 11:08:01 AM »

[MoparMiningLLC]

my further guess would be that eseayan sent the funds to minerjones who in fact did receive them - but then that the "hacker" sent a message to minerjones from eseayan's account stating they had received the coins and to release the funds and that minerjones then paid the address provided.
~
if mj can provide verification he received the funds

Minerjones said he doesn't have the coins:

https://ibb.co/9hXqfr7

agreed he did say that in the second pm

as I stated I believe he received them and then received some communication that the coins had been received by buyer and then released the funds to seller.

[El duderino_]

I would not easily believe MJ scamming….

Did a lot of buying from him, left stuff for weeks with him … worth a lot more as this particular issue and always got my stuff just how I want it….

MJ is very thrustworty imo and I think he’s not gonna be the issue…

Would still buy from him with no doubts or fear.

[LoyceV]

as I stated I believe he received them and then received

Would the owner of this address (minerjones) be able to provide a view key?

Code:

45gtrfipMYeYZ9ZRRLN4XKG5q2tiT7HUdSvqn5LUs5V3WmHSnQYHpF6ReaY1U2uGJfMo6QpP5zmS1gThEASRcHdx3KZkDK6

I don't really know how Monero works on block explorers, but I assume the owner would be able to view the balance on external sites. OP (eseayan) paid from an exchange so this could be the final piece of the puzzle.