Scam Tip Report #86660 - Employment scam


Scam ReporterScam Tips Received
Falconsfan
Savannah, GA, United States
2017-08-01 01:20:05
Job Scam
+2 Employment scam 
 Scammer
  Information
Name:
Name Unknown
Email Address:
alex.phillip01@outlook.com
Country of Scam:
United States (US)
There will be a counterfeit check sent. The check will not be any good. They will tell you to keep $500 or $600 and send the rest to someone else by money gram,western union or by i-tunes cards or gift cards. If you email him/them the control/MTCN number,they can pick up the transfer even if they live in Africa and you are told to send the transfer to someone in New York or (doesn't matter) - all they need is the MTCN/control number. You must understand how money gram,western union works.

Dear Applicant,

Sorry for the late response.
Please apply for the job at: https://fabplc.wufoo.com/forms/office-assistant-application-form/
If you have any question, reply back my email.

Good luck,
Alex Phillip - Hiring Manager
Follow Ups/Extra Information. Most recent is listed first.
Hello Good Morning,
This is to inform you that a check payment of $3965 has been delivered to you since yesterday Via USPS here is the tracking number 9405501699320126153812. You can track the transit progress on www.usps.com.
You should have deposited the check by now which should clear in a day or two,When you are through depositing the check,you will send me a report with deposit slip image to know when the funds are available,you are to deduct your weekly salary which is $500 from the payment then the rest will be forward to my shipper account details that i will provide for you once i read back from you the funds is meant for shipping of Fabrics to my client warehouse,you are to handle that after this first trail,hope i can trust you on this and also note that this trial task is to test your efficiency and diligence also to work out your time schedule and fit it to mine.
Get back to me as soon as you see my message also let me know the status of the check.
Looking forward to hearing from you.
Sincerely, Alex Phillip. (201) 701-1367

Scam Email
Subject: PAYMENT DELIVERED... GET BACK TO ME
From: Alex Phillip delivered-to:
received: by 10.159.35.115 with HTTP; Tue, 1 Aug 2017 03:07:16 -0700 (PDT)
arc-seal: i=1; a=rsa-sha256; t=1501582036; cv=none; d=google.com; s=arc-20160816; b=u4bE/WEMNPxaWPPfbhSl2+lguvuyOc7Dnpl5UGf/rN...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:subject:message-id:date:from:mime-version:dkim-si...
arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.b=Nze9+3Ub; spf=pass (google.com: domain of alex.phillip001@g...
return-path:
received-spf: pass (google.com: domain of alex.phillip001@gmail.com designates 209.85.213.49 as permitted sender) client-ip=209.85.213.49;
authentication-results: mx.google.com; dkim=pass header.i=@gmail.com header.b=Nze9+3Ub; spf=pass (google.com: domain of alex.phillip001@gmail....
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; ...
mime-version: 1.0
date: Tue, 1 Aug 2017 03:07:16 -0700
message-id:
content-type: multipart/alternative; boundary="94eb2c07ca76e15ec60555ae4f9e"

Falconsfan   (Savannah, GA, United States) Added the following extra information on :2017-08-01 16:27:24
 Scammer
  Information
Name:
Alex Phillip
Email Address:
alex.phillip001@gmail.com
Telephone:
(201) 701-1367
Hello,How are you doing today? Information reaching me from USPS that the payment inform of check $3965 have been delivered to you today Friday. Kindly confirm the receipt of delivery,take it to your bank and have deposit it to clear bank within 1-2 days,you can as well do mobile or ATM deposit. I will be waiting for the deposit slip image so that I can give you next line of action.
Sincerely, Alex Phillip

Scam Email
Subject: PAYMENT DELIVERED... GET BACK TO ME 9405501699320126153812
From: Alex Phillip delivered-to:
received: from CY4PR18MB1606.namprd18.prod.outlook.com ([10.173.63.146]) by CY4PR18MB1606.namprd18.prod.outlook.com ([10.173.63.146]) with...
arc-seal: i=1; a=rsa-sha256; t=1501535552; cv=none; d=google.com; s=arc-20160816; b=h5m7x2PmIF/AeS0/qRGZiMbmNR4ZuUtpzWeu9rinHa...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:spamdiagnosticmetadata:spamdiagnosticou...
arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@outlook.com header.b=NEZnvx0f; spf=pass (google.com: domain of alex.phillip01@...
return-path:
received-spf: pass (google.com: domain of alex.phillip01@outlook.com designates 2a01:111:f400:fe50::80a as permitted sender) client-ip=2a01:11...
authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=outlook.com;
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=G...
thread-topic: PAYMENT DELIVERED... GET BACK TO ME 9405501699320126153812
thread-index: AQHTCkGuk+uPT6HndEG6sgXxh1AGQQ==
date: Mon, 31 Jul 2017 21:12:15 +0000
message-id:
accept-language: en-US
content-language: en-US
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
content-type: multipart/alternative; boundary="_000_CY4PR18MB16066AC3EF301014B5E6649C8BB20CY4PR18MB1606namp_"
mime-version: 1.0

Falconsfan   (Savannah, GA, United States) Added the following extra information on :2017-08-01 01:23:42
 Scammer
  Information
Name:
Alex Phillip
Email Address:
alex.phillip01@outlook.com

 Got more information on this Scam/Scammer?
 Problems with this Report? Let us know


Since you’re here …
we have a small favour to ask. More people are visting Scamdex and Scamalot than ever but advertising revenues are falling fast and we have no 'product' to sell. And unlike many informational websites, we haven’t put up a paywall or membership barrier – we want to keep our site as open as we can. So you can see why we need to ask for your help. Scamdex/Scamalot websites takes a lot of time, money and hard work to keep running. We do this because we hate to see our fellow humans getting scammed out of their hard-earned money by low-lives.
Consider switching off your AdBlocker (if you use one) or contributing directly by one of the links below. Thank you for reading!
Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING