Tag: nigerian

Posted on

So you think you know about Yahoo Boys and Romance Scams? Part 4

Yahoo boys or Gee boys have their hands in with many scams. New ways of making quick money are being tested all the time and once something is found as successful, it will be shared amongst scammers in their world and used by everyone-they are known as ‘updates’.

Here are some of the current, popular scams to look out for:

Sugar Daddy/Mummy(Mommy)/Baby Scams

Social media profiles will be set up for Sugar Scams.

Scammers will use anyone’s pictures for these, they don’t need lots for the long game. They will be surfing for any profile picture on any profile to fit the bill. Some groups do love the beautiful Alexandra Rodriguez who is often used as ‘Mommy Heather’.

These scams work by drawing in people who are financially strapped with the premise of being ‘spoilt’ as a sugar baby. I’ve seen these pages target students too. How do the scammers make money? They tell you there is an attorney fee to set up the agreement. Not only that, they will collect your details of Cash App, PayPal or other ‘to pay the money to’ where they will attempt hacking for other scams. ‘Formats’ (in Part 1) are available to the scammers for these scams.

Grant Scams

Grant scams are ongoing and take advantage of any situation going on in that country, or world at the time. The current pandemic has been a blessing for the scammers in many ways. Bottom line here, no organisation handing out money in grants is going to randomly contact you over social media or ask people to contact others for them.

Always do your own research, do not click the link, message the email or text the number they give you. This holds for any text, email or phone call you receive. These details are pre-planned fake websites or call centres (they will reroute home country numbers which are readily available thanks to new services). You will simply be following their scam process. Always put your own search in and get a number/email independently.

 

 

They are collecting your information for identity theft (Social Security Numbers, National Insurance Numbers, bank details, phone numbers) and in the process getting a fee to set up the grant payments.

Google Voice Scams

Scammers need phone numbers to execute their scams. They need numbers in the countries they want to scam in (or open bank accounts or other in), not phone numbers from Africa. Historically, they will ask victims to send Sim Cards and phones as part of the Romance scam. Pickers will be in place to take shipments before sending them out to Africa, unless of course the story from the scammer has put them there. How else can they get them?

Fortunately for scammers, there are now multiple ways. Electronic numbers can be got online through many apps but only local to your country-step in pickers and other victims, but also through Google Voice. Registered phone numbers are far more valuable to scammers as they will be accepted for opening bank accounts and other benefit system frauds.

One way scammers use Google Voice is to scan the likes of private sellers sites such as Craig’s List and Gumtree. They look for items for sale with a listed phone number, the scammer will text asking if the item is still available. On getting a response, the scammer will say they would like to check ‘you’ are not a scammer and say they have put your number through a checking app to check it’s a legitimate number with no bad debt etc listed against it. An OTP (one time password) will be sent and victim asked to please forward the code or screenshot, to them to verify the information.

What you are actually sending is a password to hand over your number to the scammer on Google Voice. Once in possession of that number, the scammer can use it to open online bank accounts and also access lots of other numbers.

 

This process is used in other scams too. Don’t ever send an OTP to a stranger (or any one you have never met or know in person).

Cash App Scams

Cash App along with Zelle, PayPal, Venmo and others offer immediate transfer of funds to another party.

Private seller scams

Using private sellers lists again, scammers will contact in response to an item they claim to wish to purchase. Once agreement is made, funds need to be exchanged. If cash app hasn’t been used before by the client, they have an upper hand advantage from the start.

Cash app only allows transfers in and out of the account for a limit of sending $250 per 7 days and receiving $1000 per 30 days. Increasing these limits only happens through verification of your identity.

Scammers will claim the account limit needs to be increased (expanded) for the transaction to take place due to limits. They claim this can be done through the app by ‘building’ the limit between buyer and seller. Emails are sent from a fake customer service website to confirm the instructions along with notification messages and alerts.

Emails and notifications are passed backwards and forwards to build trust with the victim.

Note the .ng domain address on the website/email. This is Nigeria.

Here the victim instructed the postmaster not to release the parcel until she gave conformation of the payment being credited to her account. The address the package was to be sent to was in New York. This will have been a picker, hired by the scammers knowingly or unknowingly (employment scams, romance scams, paid mules) to collect the package before passing it on to Nigeria. Unfortunately the post master sent the package before confirmation.

The scam continued:

 

The victim did not send any money or gift cards but a few days later the scammer taunted her by showing the Fedex delivery tracker and a video of the Nigerian holding her ring.  They tried again to get more money saying the ring could be returned if she paid for shipping.

She showed the scammer all the evidence I had found of the fake account and the stolen identity of the elderly lady used in the scam. It’s with the police but unfortunately she is very unlikely to see any of her money or possessions again.

Other Cash App scams 

Cash Flip and  Prize Giveaways are other common Cash App scams.

The businesses do offer this service to customers for promotional purposes on occasion and the scammers are quick to jump on these situations to extort money. More on these two Cash App scams can be found here

Please only ever contact these apps for support through the in app contact system. Too many scammers have very well thought out fake websites and call centres to look like the real thing. 

Puppy/Kitten deposit scams

Many of these scams follow a similar pattern, the subject of the scam will simply change so that they can maximise the opportunities to exploit. Puppies and Kittens create a good opportunity for money making in scams, especially when advertising as a quality breed.

I should say here that scams using Puppies and Kittens for scams are abundant in all countries, carried out by heartless criminals who are out to make fast money without thought to the welfare of the animals. You should always seek advise from a vet for a registered breeder or preferably get a pet from a rescue as there are plenty needing homes.

Here, I am concerned with the type of scam conducted over the internet, where the animals are simply virtual and do not in reality even exist.

Fake websites and social media profiles are used to set up these scams.

One is shown here.

Things might not look wrong on first look, bar a gramma mistake on paperwork’s’.

However, the fact this profile messaged first and just a simple search on the pictures, shows this for what it is.

A key phrase here raises red flags. ‘I’m a good and sincere person.’ are words used in romance scams to build trust.
Always screen shot a few images to run through a reverse search. The results can save you money and heart break.
The reverse image search showed that the image has been taken from the internet. These puppies are not for sale.

As the scam continues, the scammer may even send a video (taken from the internet), then a deposit will be asked for. Using Cash App or other, details will be passed and funds transferred to secure the puppy or kitten. The money is lost and the scammer disappears.

Landlord/Rental deposit scams

Using the same technique above,  the scammers will watch legitimate websites for properties going up for rent.

They create private listings with the pictures but with the monthly rental price at a significantly reduced rate. They will claim that they previously had the property with an agent but the fees were too high so now they are renting privately. The agent is just being slack removing the listing.

Documents can be replicated to share and build trust before asking for the deposit to be paid. The old saying goes here, if it seems too good to be true, it probably is.

The deposit and likely first month payment will be asked for in advance as is common with property rental. Scams like this have been found targeting students in particular who are looking for a good deal on limited money. This money will be lost.

Always use a verified agent or meet the person face to face with full identity when venturing into these transactions.

Employment scams

Scammers will get onto college websites or even websites for single mums and similar. Email extractor tools are used to extract the emails registered on that website. The scammers will then bomb the emails with adverts for part time virtual work and work from home opportunities.

The wage is paid by fraudulent bank transfer or cheque in excess of the agreed wage. The picker will announce the mistake and ask for the extra paid money to be returned via gift card or other.

By the time the ’employee’ realises from the bank that the original transaction was in fact a scam transaction, the picker and the scammer are gone.

This method of extracting money is used across the scamming world including call centre scams, but this type- often technical support scam will gain access to the victims computer through screen share software to make them think the bank transaction of a refund has actually gone through at a higher rate and needs to be returned.

Hacking accounts

Scammers do business, and part of that business is hacking accounts, all types of accounts.

Older Facebook accounts are really popular with scammers because of many reasons. One, they look more authentic than a freshly made account with the joining date being historic on the profile. Two, ready made friends list who may or may not be close to the real owner. Three, these older accounts are mainly created in a country not on the ‘watchlist’ and are much harder to get removed through reporting. These accounts are offered for sale in the groups.

How do they get these?

As said previously, Romance Scams are not always about instant money. Sometimes the scammer is focused on collecting facebook accounts or other information for other scams. Sometimes they will come at a victim from more than one perspective, as different identities, to collect more and different information. When money isn’t asked for the victims tend to trust more but the scammers are just as dangerous. They will be building trust and ‘phishing’ for your details for identity theft and other things to earn them money.

Hackers may create the same narrative with a victim and even send them their own bank details with login (of a fake account) to show their trust and love for a victim (or friend). They might use this as a way to get the victim to send a One Time Password (OTP) alert maybe of a ‘login from another device’ from information such as a phone number or email used to access and sign in to a facebook account or email account. The victim will be told it’s to verify their number or email with the bank. The victim sends it to the scammer and the scammer has the password to verify themselves on the social media account or email etc..

The scammer can then change passwords from inside the account settings and lock the victim out.

If an email has been hacked, the scammer will now phish for other information useful in scams. Some of these scams will be for bigger fraud such as online benefit applications where the scammer has collected the required information for submitting a claim in that persons name with their personal details. You can read more here about this kind of fraud.

Other hacked accounts include Sporty Bet accounts where pre loaded cards are available for using.

There are many more scams that are constantly evolving from ones like these. Please be very aware of any one that contacts you or deals that seem too good to be true. Never click links or give a One Time Password or verification code to anyone you don’t know personally. Never use given phone numbers or web-links to confirm what you are being told, always do a search yourself for these numbers, emails or contact details or access the contact us section within an app.

 

Posted on

So you think you know about Yahoo Boys and Romance Scams? Part 1

The last few months have been an eye opener.

As I research more on the new scams that are surfacing, I stumbled across some groups on facebook. These groups with variants of the title ‘Yahoo Boys Association’ became the hub points of my disbelief and horror, not only that Facebook are openly allowing these to even exist but the content which showed me the inside life of scammers. These scammers in particular being those from predominately West Africa, home of Yahoo Boys.

The name ‘Yahoo boy’ came from the original 419 email scams that emerged on the inception of this form of communication, Section 419 being the Nigerian cybercrime law which makes internet fraud a criminal offence. Most are not worried about this law however as the police are mainly ‘hustlers’ themselves, so a scammer revealed. Other names are ‘Gee boys’ and ‘Sakawa Boys’ as known in Ghana.

It became more obvious than ever, that whatever size you think this industry might be, you need to think bigger. Much bigger. Then you need to multiply that by 100 or more, that might start to scratch the surface.

From the posts in their groups I’ve researched their ‘offered services’ and scams where advice is sought for getting money from any snippet of information they get their hands on. Some of these will seem obvious however, many will not. I’ve done the research so you don’t have too.

The Smooth Talkers

Most of you will know these. These are the front line scammers that talk directly to the targets. They call you clients. To them, this is business. They will initiate conversation in many ways:

  • Friend requests followed by messaging on any social media (Pinterest, Facebook, Instagram, SnapChat, Tik Tok etc)
  • Direct Messaging on any social media without requests (as above)
  • Dating platforms-paid and free
  • Messaging through ANY chat facilities on ANY online platform including games such as Wordzee, Scrabble, Song pop etc
  • Replying on public posts to comments as way of connecting to something said.

As a scammer’s job it’s known as ‘bombing’. 

Many whose English is poor will use formats, another scammer’s job. These are pre-scripted conversations designed to suit any situation the front man (or group) either chooses to use for bombing (dating, military, oil rig/construction/contractor/civil engineering) or the process they have chosen to use to extort money from the client.

Screen shot taken from a You Tube video, where tutorials on scamming are abundant.

Introductions will be copy and pasted on mass to as many targets as they can keep track of. You’ll notice if ever you happen across one that asking them a question not within the predicted script can prove problematic. Construction, Engineering (marine, oil gas), Oil rig workers, UN workers and the never ending Peace keeping missions in Syria of the military, all have their own formats. There are others but all come attached to a sob story of being orphaned themselves (or far to far away from any estranged family member) widowed/ divorced with a child (or two), wife/husband killed in a car crash ( as might have their parents) or died of cancer (or covid) for example. Of course, this means you will become the only person they can trust and turn to.

The more experienced scammers with a good grasp of English are far more plausible and far more dangerous.

You will inevitably be asked to move with speed, onto Hangouts or What’s app (as the favourites) but don’t think offerings of other chat apps are safe. Many are venturing to use Viber, IMO, Signal, Line, KIK, Telegram, ICQ, Skype chat. The loud message is, if they ask you to leave the platform for another facility, there is an ulterior motive. This is mainly to avoid losing the client when their profiles are deleted but also to avoid detection through app algorithms picking up key words, the client noticing them still online after the professed amazing connection and other women making loving comments on the pictures. They will often say they have deleted the profile because they have met you but in reality they have blocked you.

Depending on the size of the group the scammers are working in (either for cartel/mafia-esque style groups, smaller groups in the village or city, as a friendship group or individuals) will depend on how the scam continues. Some will do most of the process themselves, most will work as a team, allowing whoever does each particular part of the process best to take over when needed. Some groups or individuals will have the required skills to not enlist the help of others (which can cost them or they have to trade for that skill). These services are sold or traded within these groups. When the scammer feels it’s time to test the water (which can be ridiculously quickly or surprisingly lengthy and by this I mean there have been some I know have talked for over 3 years without being asked because the experienced ones will just listen for a hint of a story where money may finally be mentioned or be using them simply for and unknowingly laundering money) the next phase kicks in.

‘Billing’ (the client) the term given to the format speech used to extort the money also comes in many forms, ranging from I Tunes and gift cards of many types-STEAM and Green Dot being the latest trend, to fees of the boarding school for their child, who they have no other choice but to send there as they are in the military etc. This is also a ploy used to launder money, asking if money can be kept safe by ‘the client’ until the fees are due, then asking it to be passed on. Investment formats for billing in a new or expanding business are also used. The scammers will go to great lengths to make this look real (more later in taking it further). For military scams this may be for requesting leave, early withdrawal from the tour, supplies.

Package/consignment scams are very popular where a bogus package is reported as being sent and the client is to pay for any import taxes due on receipt and for shipping in the first place. The package may be reported to be presents for the client or receipt of possessions of the scammer’s fake identity. Plane tickets for the longed for meeting are another way to extort money within the romance scam. You will, prior to this, have been bombarded with attention and affection, even potentially had flowers, pizza sent to you (great for getting your address and building trust).

Again here, the experience of the scammer to read the situation and adapt will be the clients downfall. New hustlers won’t always be so lucky and ask for help in these groups:

Others will offer ‘Yahoo Plus and Yahoo Plus Plus’ services to help them on their way…

Yes you are reading that right. Read more here on ‘Yahoo Plus’ and ‘Yahoo Plus Plus’

In Part 2, 3 and 4, how they strengthen the deception. How they use other information collected through the game to continue to scam and what happens when they are caught out.

 

 

 

Posted on

What is a ‘Catfish’?

What is a Catfish?

Urbandictionary.com defines a ‘Catfish’ as:

‘Someone who pretends to be someone they’re not using Facebook or other social media to create false identities, particularly to pursue deceptive online romances.’

The term was created by Nev Shulman’s experience of having a longterm online relationship with a woman he thought to be young and single. The reality was, Angela was in her 40’s and married. Now the executive producer of MTV’s show ‘CATFISH’, which came off the back of the 2010 American film documentary of the same name, at the end of the film, Vince (husband of the lady that ‘catfished’ Nev), tells a story. He says that when live cod were shipped to Asia from North America, the fish’s inactivity in their tanks resulted in only mushy flesh reaching the destination; but fishermen found that putting catfish in the tanks with the cod kept them active, and thus ensured the quality of the fish. Vince talks of how there are people in everyone’s lives who keep us active, always on our toes and always thinking. It is implied that he believes Angela (Nev’s online romance) to be such a person.

The Independant in a recent article about Nev:

‘To be clear, ‘catfishing’ refers to the act of luring someone into a relationship by adopting a fictional online persona with fake personal information. The term emerged from the 2010 American documentary Catfish which follows Schulman on his journey of falling in love with a girl he has met online and later finding out she is not the person she claimed to be. ‘

Not all ‘fake profiles’ are Catfish. Some fake profiles are created with a purpose to ‘troll’ others online (which is a criminal offence), or to hide the owners of illegal business transactions (also a criminal offence). Some are legitimate in reason where anonymity is needed from an abusive ex partner or similar. Some people are mistaking ‘Catfishing’ with identity theft. It’s not. Identity theft is where a criminal will literally collect and steal another person’s real life personal information. This is explained by Action Fraud:

‘Identity theft happens when fraudsters access enough information about someone’s identity (such as their name, date of birth, current or previous addresses) to commit identity fraud. Identity theft can take place whether the fraud victim is alive or deceased.’

When the criminal uses this information to get money or other using your details, they are committing identity fraud.  You can read more about this here.

Catfish are not into identity theft as such…

What Catfish will do it trawl the internet for a suitable picture to use on their profile. Some choose to steal an everyday person’s pictures from a public Facebook Page or similar,  some will go for ‘catalogue shots’, model’s pictures which are readily available in ‘stock image’ settings online. These often allow the catfish the option of having several pictures of the same person. Some will choose to use an actor/tress’ picture, maybe from another country where the actor/tress is not known…like mine. Some go for military personnel and keep their name too. Some (like many in the show Catfish) use photos of people they know and admire…

However, they don’t want ‘Joe Blogs’ life story. They want to create the image of a life that is going to touch the emotional aspects of their targets. They want to create someone who can get inside your head. This is the common thread between all Catfish. It’s how they manipulate you to get what they want BUT what they may want as a result of their scam can be very different. There are many misconceptions about Catfish here too.

Catfish are not all after the same thing. There are many variations to these individual’s incentives.

What do they want from you?

I will never be able to list every motive and intention of a Catfish here but if caught by one, none of them will end well for you. Without doubt, new incentives and cover stories, whether financially motivated or personally motivated will be created constantly but we are seeing some as the main culprits that have been used for many years now and are big business, financial fraud. The other type of Catfish motive is very personal. It has nothing to do with financial/personal gain as such (although they can achieve this in their game), but it’s not their primary incentive. Their incentive is to get their needs met, whatever they may be…and not get caught out while doing that. However the only outcome for the victim is hurt and humiliation on many levels.

I was aware of the kind of romance scam with financial fraud being the primary motivator. If at any point my Catfish had started asking for money, I would have been suspicious because I had been fortunate enough to have seen and read about these on top of training when I worked at a bank in my teens, when Nigerian money fraud very first started. I was alert to this kind of ‘game’. 

Not everyone is so fortunate and the ‘hooking technique or love bombing’ used by all the Catfish is the same. You can read more about love bombing Part 1 here and love bombing Part 2 here.

Of course my Catfish didn’t stay online either…he became an ‘offline Personal Catfish’. I had an ‘in person’ relationship with him for several months after our initial 3 month online introduction. Is this the new breed of Catfish?

You can read my post about Romance Scams with Financial Fraud here.

You can read my post about Personal Catfish here.