Anatomy of A Spammer / Scammer / Fraudster

Here’s a run down on my spammer/scammer would-be client in the saga that started on Saturday, June 3rd, 2006 and ended (hopefully) on Sunday, June 11, 2006. Notice how the name walter keeps on appearing in various email addresses, and luxmail.com appears as email provider in the second of the order forms , the same as email appearing in the spam emails sent from the account opened by the first order. Also the name Martin as first name for the “client” and Martins as last name for the one signing the spam email. They kind of all tie in, after all. It seems crooks who play with different identities tend to stay on familiar grounds and won’t vary too many of the lies all at the same time for fear of getting tripped.

  1. June 3, 2006.
    New order comes in from:

    Martin Carvajal ( strow_001@yahoo.com )
    Telephone: +1-201 785-1816
    Address: 40 Barr Lane, Monroe, NY,10950
    DOB: 1953-September-17
    Domain: accessuawithya.org
    Description:
    RemoteAddr : 207.67.146.191
    RemoteHost : 207.67.146.191
    Country: USA (CA) 

Payment made at 2CO and logged as:

Name: Martin Carvajal
Email: acesswalter1960@cs.com
Address: 40 Barr Lane Monroe NY, 10950 United States
Phone: 201-785-1816

IP: 207.67.146.191 ( United States )
Location: Wilmington, DE 19808
Country: United States (US)
Area Code: 302

Spam sent from newly created account.
Account closed, sent email confiscated.
2CO transaction cancelled.
 

  • June 7, 2006.
    New order comes in from: 
  • Michael Nelson ( walter1@luxmail.com )
    Telephone: 714-538-4451
    Address: 3933 e greenwood,orange, CA 92869 USA
    DOB: 1964-December-17
    Domain: adminsitess.biz
    Description: i want to use these medium to developed my site for my company in LOs angelis
    RemoteAddr : 207.67.146.32
    Country: USA (CA)

    No payment made

  • June 9, 2006
    New order comes in from:

    Kristin Carey ( acesswalter1960@cs.com )
    Telephone: +1-404-805- 5069
    Address: 360 Pharr Rd,#640 ,Atlanta ,GA,30305 USA
    DOB: 1960-November-25
    Domain:
    Description:
    RemoteAddr : 207.67.146.137
    Country: USA (CA)Payment made at 2CO and logged as: 
    Name: Lyon Security LLC
    Email: acesswalter1960@cs.com
    Address: 3838 nw 36th #100 Oklahoma OK, 73112 United States
    Phone: 405-605-8085
  • IP: 207.67.146.137 ( United States )
    Location: Wilmington, DE 19808
    Country: United States (US)
    Area Code: 302

    2CO transaction cancelled. Rejected as fraud.

  • June 11, 2006.
    New order comes in from:
    Michael Kleba ( walter012435@aol.com )
    Telephone: 262-780-6129
    Address: 5000 S. Towne Dr.,,New Berlin,WI,53151 USA
    DOB: 1950-November-25
    Domain: acessadmin2.org
    Description: i like hosting my website here.
    RemoteAddr : 195.93.60.69
    RemoteHost : cache-frr-ac05.proxy.aol.com
    Country: UNITED STATES
  • Payment made at 2CO and logged as: 

    Name: Michael Kleba
    Email: walter012435@aol.com
    Address: 5000 S. Towne Dr New Berlin WI, 53151 United States
    Phone: 262-780-6129

    IP: 81.199.62.41 ( Satellite Provider )
    Location: ???
    Country: Satellite Provider (A2)
    Area Code: ???

    2CO transaction cancelled. Rejected as fraud.

  • Below is a sample of one of the emails this individual sent to hundreds of email addresses, from his newly created hosting account, until I closed it down.Please note that I have no knowledge whether the company Uawithya is in any way involved with this, however their name and website were used by the spammer/scammer for this scheme.
  • Dear Sir/Madam, 

    I am the Chief Executive Officer of Uawithya Machinery Co.,Ltd.UMCLT is the leading supplier of high quality Quarry Equipment in Thailand . Established since 1968 we have developed a skilled and dedicated team as well as a reliable network of 10 Service and Distribution Centers .

    Uawithya is,sole Distributor for renowned World Class Manufacturers such as Furukawa, Metso Minerals,Liebherr,Sandvik, Rammer,Pewag,Terex and Wasagchemie,Due to long association with our suppliers and our thorough understanding of the working condition in Thai Quarries; we are able to offer a comprehensive service support for all of our products.Uawithya is the owner of Chai Explosives; a full range Explosives Manufacturer located in Pak Chong,Thailand.

    It is upon this note that we are writing you this mail to seek your assistance in representing our company in your locality as our RECEIVING AGENT/REPRESENTATIVE.One who will act as a medium for our clients in those locality to be reaching us with their payments and so on.

    Note that as a receiving Agent of our company,You will be entitled to a 10% commission of any amount you receive from our customers on behalf of the company as payments for outstanding debts or goods that they are wanting to buy

    We seek your honest cooperation and assistance to establish a cordial relationship with our clients.To facilitate the conclusion of this transaction if accepted,do send me by this email address:… the following mailto:officeofbenjamin1@luxmail.com

    1) Your Full name…………..and present occupation…………
    2) Telephone number…………..and Fax…………..
    3) Contact address…………….
    4) Age…………….
    5) Marital status…………….
     

    Thanks in anticipation.

    Regards,

    Mr.Benjamin Martins chief executive
    Uawithya Machinery Co. ,Ltd
    www.uawithya.com

    This entry was posted in Stuff. Bookmark the permalink.