An old friend just sent me an email along the lines of this:
If it came from anywhere else my scam alert would be doing overtime, but I know this guy and his wife very well and I can’t really imagine he’s up to no good. I’m thinking along the lines of some sort of surprise for his missus, but I can’t really work out what’s going on.
It’s not your friend. Someone hacked into his email account and is either phishing for bank account numbers or is trying to get you to send him a check.
Give him a call. I’ll bet he doesn’t know a thing about it.
This is just a twist on the “We’re in London and got mugged, could you wire us some money” scam from a few months ago.
Straight off that’s what I thought. But it came from his work email address. He included some personal information as well that wouldn’t be obvious to someone who didn’t know me. If he asked to send me a cheque and then wire him, yeah, dodgy, but it’s the other way around?
Ask him something personal. Something you couldn’t find on the internet. Last time someone tried the on me (via chat), I asked her “What floor did you live on in college and what odd thing did you do to your dorm room” that ended that real quick, and I was > < this close to going through with it. Someone hacked into her facebook account so they knew her husband and kids name and it was very easy to come up with a convincing story. At this point I hadn’t yet heard of the “I’m stuck in London” scam.
Ask something personal to make sure it’s not a co-worker. Actually, if this is something you’d be willing to do, just call him and do it over the phone. I’ll bet it’s not really him. In fact, I’d suggest calling anyways (even to decline if it really is him) just he knows what’s going on.
The scammer will deposit a bogus money order in your bank account. You write him a good check which he immediately cashes. Eventually your bank will tell you that the money order (from the 8th National Bank Of Upper Freedonia or something) is no good (and if that means you’re overdrawn they’ll try and stick you with it).
There is absolutely no reason to believe normal people would legitimately want do something like this. Moving, hiding and fooling people out of their money are all easily accomplished through normal means - even easier with strangers over the Internet.
I called my friend but there’s no answer. But ok it’s a scam. I’m going to reply and see how they play it.
To cash a cheque though surely they’d need a bank account in my friend’s name? And I’m interested to see where they ask me to send it.
As mentioned, probably they’re phishing for my bank details, but to make a transfer in the UK all I’d need to provide would be an account number and sort code (which are on every cheque written anyway) - how can they scam me with just this information?
They may have access to an electronic check processor. They’ll feed your routing/account numbers into it and siphon off whatever they think they can get away with.
That’s what I was confused about as well. When my ‘friend’ IM’d me on facebook saying she got mugged in London and asked if I could wire her some money, I asked if it was really her. Her response was “Well, we’ll need to show an ID to get the money from Western Union and you’ll send it in our name, so that should prove it”
I didn’t think to ask why they have an ID but no credit cards after being mugged, but that’s besides the point.
I wonder how they handle that part.
Like I said I didn’t initially think this was a scam. I was a bit concerned that if I called him and said “hey what are you up to?” he might say something like “just trust me on this one” and I’d be in a bit of an awkward position. I was wondering if this could have a legitimate outcome but it seems like not.
That seems like a weird thing for a friend to expect you to do, especially over email. If I were going to legitimately lend a friend money I wouldn’t do it in this bizarre manner–I’d just write them a check.
No, see, what’s going to happen is that you’ll ask him what’s going on and he’ll have no idea. Then you’ll tell him to check his email (webmail and client if he has access to both) and he’ll see the same outgoing mail to everyone in his address book. Then you’ll tell him to change his password.