So you think you know about Yahoo Boys and Romance Scams? Part 4

Yahoo boys or Gee boys have their hands in with many scams. New ways of making quick money are being tested all the time and once something is found as successful, it will be shared amongst scammers in their world and used by everyone-they are known as ‘updates’.

Here are some of the current, popular scams to look out for:

Sugar Daddy/Mummy(Mommy)/Baby Scams

Social media profiles will be set up for Sugar Scams.

Scammers will use anyone’s pictures for these, they don’t need lots for the long game. They will be surfing for any profile picture on any profile to fit the bill. Some groups do love the beautiful Alexandra Rodriguez who is often used as ‘Mommy Heather’.

These scams work by drawing in people who are financially strapped with the premise of being ‘spoilt’ as a sugar baby. I’ve seen these pages target students too. How do the scammers make money? They tell you there is an attorney fee to set up the agreement. Not only that, they will collect your details of Cash App, PayPal or other ‘to pay the money to’ where they will attempt hacking for other scams. ‘Formats’ (in Part 1) are available to the scammers for these scams.


Grant Scams

Grant scams are ongoing and take advantage of any situation going on in that country, or world at the time. The current pandemic has been a blessing for the scammers in many ways. Bottom line here, no organisation handing out money in grants is going to randomly contact you over social media or ask people to contact others for them.

Always do your own research, do not click the link, message the email or text the number they give you. This holds for any text, email or phone call you receive. These details are pre-planned fake websites or call centres (they will reroute home country numbers which are readily available thanks to new services). You will simply be following their scam process. Always put your own search in and get a number/email independently.

 

 

They are collecting your information for identity theft (Social Security Numbers, National Insurance Numbers, bank details, phone numbers) and in the process getting a fee to set up the grant payments.


Google Voice Scams

Scammers need phone numbers to execute their scams. They need numbers in the countries they want to scam in (or open bank accounts or other in), not phone numbers from Africa. Historically, they will ask victims to send Sim Cards and phones as part of the Romance scam. Pickers will be in place to take shipments before sending them out to Africa, unless of course the story from the scammer has put them there. How else can they get them?

Fortunately for scammers, there are now multiple ways. Electronic numbers can be got online through many apps but only local to your country-step in pickers and other victims, but also through Google Voice. Registered phone numbers are far more valuable to scammers as they will be accepted for opening bank accounts and other benefit system frauds.

One way scammers use Google Voice is to scan the likes of private sellers sites such as Craig’s List and Gumtree. They look for items for sale with a listed phone number, the scammer will text asking if the item is still available. On getting a response, the scammer will say they would like to check ‘you’ are not a scammer and say they have put your number through a checking app to check it’s a legitimate number with no bad debt etc listed against it. An OTP (one time password) will be sent and victim asked to please forward the code or screenshot, to them to verify the information.

What you are actually sending is a password to hand over your number to the scammer on Google Voice. Once in possession of that number, the scammer can use it to open online bank accounts and also access lots of other numbers.

 

This process is used in other scams too. Don’t ever send an OTP to a stranger (or any one you have never met or know in person).


Cash App Scams

Cash App along with Zelle, PayPal, Venmo and others offer immediate transfer of funds to another party.

Private seller scams

Using private sellers lists again, scammers will contact in response to an item they claim to wish to purchase. Once agreement is made, funds need to be exchanged. If cash app hasn’t been used before by the client, they have an upper hand advantage from the start.

Cash app only allows transfers in and out of the account for a limit of sending $250 per 7 days and receiving $1000 per 30 days. Increasing these limits only happens through verification of your identity.

Scammers will claim the account limit needs to be increased (expanded) for the transaction to take place due to limits. They claim this can be done through the app by ‘building’ the limit between buyer and seller. Emails are sent from a fake customer service website to confirm the instructions along with notification messages and alerts.

Emails and notifications are passed backwards and forwards to build trust with the victim.

Note the .ng domain address on the website/email. This is Nigeria.

Here the victim instructed the postmaster not to release the parcel until she gave conformation of the payment being credited to her account. The address the package was to be sent to was in New York. This will have been a picker, hired by the scammers knowingly or unknowingly (employment scams, romance scams, paid mules) to collect the package before passing it on to Nigeria. Unfortunately the post master sent the package before confirmation.

The scam continued:

 

The victim did not send any money or gift cards but a few days later the scammer taunted her by showing the Fedex delivery tracker and a video of the Nigerian holding her ring.  They tried again to get more money saying the ring could be returned if she paid for shipping.

She showed the scammer all the evidence I had found of the fake account and the stolen identity of the elderly lady used in the scam. It’s with the police but unfortunately she is very unlikely to see any of her money or possessions again.

Other Cash App scams 

Cash Flip and  Prize Giveaways are other common Cash App scams.

The businesses do offer this service to customers for promotional purposes on occasion and the scammers are quick to jump on these situations to extort money. More on these two Cash App scams can be found here

Please only ever contact these apps for support through the in app contact system. Too many scammers have very well thought out fake websites and call centres to look like the real thing. 


Puppy/Kitten deposit scams

Many of these scams follow a similar pattern, the subject of the scam will simply change so that they can maximise the opportunities to exploit. Puppies and Kittens create a good opportunity for money making in scams, especially when advertising as a quality breed.

I should say here that scams using Puppies and Kittens for scams are abundant in all countries, carried out by heartless criminals who are out to make fast money without thought to the welfare of the animals. You should always seek advise from a vet for a registered breeder or preferably get a pet from a rescue as there are plenty needing homes.

Here, I am concerned with the type of scam conducted over the internet, where the animals are simply virtual and do not in reality even exist.

Fake websites and social media profiles are used to set up these scams.

One is shown here.

Things might not look wrong on first look, bar a gramma mistake on paperwork’s’.

However, the fact this profile messaged first and just a simple search on the pictures, shows this for what it is.

A key phrase here raises red flags. ‘I’m a good and sincere person.’ are words used in romance scams to build trust.
Always screen shot a few images to run through a reverse search. The results can save you money and heart break.
The reverse image search showed that the image has been taken from the internet. These puppies are not for sale.

As the scam continues, the scammer may even send a video (taken from the internet), then a deposit will be asked for. Using Cash App or other, details will be passed and funds transferred to secure the puppy or kitten. The money is lost and the scammer disappears.


Landlord/Rental deposit scams

Using the same technique above,  the scammers will watch legitimate websites for properties going up for rent.

They create private listings with the pictures but with the monthly rental price at a significantly reduced rate. They will claim that they previously had the property with an agent but the fees were too high so now they are renting privately. The agent is just being slack removing the listing.

Documents can be replicated to share and build trust before asking for the deposit to be paid. The old saying goes here, if it seems too good to be true, it probably is.

The deposit and likely first month payment will be asked for in advance as is common with property rental. Scams like this have been found targeting students in particular who are looking for a good deal on limited money. This money will be lost.

Always use a verified agent or meet the person face to face with full identity when venturing into these transactions.


Employment scams

Scammers will get onto college websites or even websites for single mums and similar. Email extractor tools are used to extract the emails registered on that website. The scammers will then bomb the emails with adverts for part time virtual work and work from home opportunities.

The wage is paid by fraudulent bank transfer or cheque in excess of the agreed wage. The picker will announce the mistake and ask for the extra paid money to be returned via gift card or other.

By the time the ’employee’ realises from the bank that the original transaction was in fact a scam transaction, the picker and the scammer are gone.

This method of extracting money is used across the scamming world including call centre scams, but this type- often technical support scam will gain access to the victims computer through screen share software to make them think the bank transaction of a refund has actually gone through at a higher rate and needs to be returned.


Hacking accounts

Scammers do business, and part of that business is hacking accounts, all types of accounts.

Older Facebook accounts are really popular with scammers because of many reasons. One, they look more authentic than a freshly made account with the joining date being historic on the profile. Two, ready made friends list who may or may not be close to the real owner. Three, these older accounts are mainly created in a country not on the ‘watchlist’ and are much harder to get removed through reporting. These accounts are offered for sale in the groups.

How do they get these?

As said previously, Romance Scams are not always about instant money. Sometimes the scammer is focused on collecting facebook accounts or other information for other scams. Sometimes they will come at a victim from more than one perspective, as different identities, to collect more and different information. When money isn’t asked for the victims tend to trust more but the scammers are just as dangerous. They will be building trust and ‘phishing’ for your details for identity theft and other things to earn them money.

Hackers may create the same narrative with a victim and even send them their own bank details with login (of a fake account) to show their trust and love for a victim (or friend). They might use this as a way to get the victim to send a One Time Password (OTP) alert maybe of a ‘login from another device’ from information such as a phone number or email used to access and sign in to a facebook account or email account. The victim will be told it’s to verify their number or email with the bank. The victim sends it to the scammer and the scammer has the password to verify themselves on the social media account or email etc..

The scammer can then change passwords from inside the account settings and lock the victim out.

If an email has been hacked, the scammer will now phish for other information useful in scams. Some of these scams will be for bigger fraud such as online benefit applications where the scammer has collected the required information for submitting a claim in that persons name with their personal details. You can read more here about this kind of fraud.

Other hacked accounts include Sporty Bet accounts where pre loaded cards are available for using.


There are many more scams that are constantly evolving from ones like these. Please be very aware of any one that contacts you or deals that seem too good to be true. Never click links or give a One Time Password or verification code to anyone you don’t know personally. Never use given phone numbers or web-links to confirm what you are being told, always do a search yourself for these numbers, emails or contact details or access the contact us section within an app.