Dear Harry,
Thank you so much for posting this warning on the Web. Yours was the first solid evidence I had as to the fact that this Scam was being used on me.
I wish to pass this favor along. Below is my email to BidPay informing them of the problem. (Containing more detials on the scam, and possibly a more recent version.)
Regards,
Karla
-----Original Message-----
From: Karla
Sent: Monday, August 15, 2005 2:07 PM
To:
'spoofemail@bidpay.com'
Cc:
'bidpayservice@bidpay.com'
Subject: Sony PSP Bidpay Scam
Dear Bidpay,
Here is a complete email trail regarding the Bidpay Scam that nearly worked on me. I followed your instructions and included email headers where appropriate.
There were in fact two different people from Nigeria trying this same scam on me, but Afolabi person was the first in line, so I was willing to do business with him. The name of the second (potential) scammer was Laurens. Fortunately, I called Western Union and finally figured out that the Bidpay email for Afolabi was no good. I never did send the product, but I nearly did.
My biggest problem was there was no phone number to call on your website to verify that the money order was real. I wasted a lot of time searching your website for some clue on how to verify the email that was sent to me. I had a hard time believing that at guy from Nigeria could craft two very believable email confirmations (in perfect English) and a webpage that looked just like your website confirming the order #.
I visited your webpage separately, but your email response from "spoofemail@bidpay.com" took 24 hours, which would have been too late. My confirmation of the problem occurred when I did an Internet search on "Bidpay Scam." Fortunately, some other responsible person was willing to share a warning at:
http://scamvictimsunited.com/phpBB2/vie ... php?t=872&
You could do several simple things to stop this scam right now. You could post a warning on your website in the form of a press release (which would generate goodwill for you). And/or you could provide a phone number for people to verify the wire transfers. Instead, you are taking a very passive approach which is likely to severely damage your brand.
The day after the scam attempt occurred I went to a party and told all my friends about the "Bidpay Scam". You could use a damage control PR expert to advise you on how to handle this.
Regards,
-Karla
=================MESSAGE #1=================================================================
Return-Path: <Accounts@BidPay.com>
To:
Sender:
Accounts@BidPay.com
From: "BidPay" <Accounts@BidPay.com>
Cc:
Subject: ORDER PENDING (33457322) - **DO NOT REPLY**
X-Mailer: Quality Web Email v3.1o,
http://netwinsite.com/refw.htm
X-Originating-IP: 212.199.137.181
Date: Thu, 11 Aug 2005 01:28:00 GMT
Message-id: <42faa9a0.176.21c.6984@another.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Server: High Performance Mail Server -
http://surgemail.com r=1357335204
X-Authenticated-User:
peace4u@another.com
X-OriginalArrivalTime: 11 Aug 2005 01:34:45.0406 (UTC) FILETIME=[DA9B1BE0:01C59E14]
Dear: Karla
BidPay® has received your email address from Afolabi Micheal to inform you of the order to have a USD$300.00 Western Union® Money OrderSM sent to you for:
Auction Item:Sony PSP Value Pack
Auction Site: Craigslist
Please verify that the following address (as entered by the buyer) is correct.
Name: Karla
Address: XXXXX
XXXX
State: XXX
Zip Code: XXXX
Country: U.S.A.
If there is a mistake in your address, please send a mail to
safepoints@sellzone.com .When registering,you must use this email address as your primary email address and you will be asked to create a password. You will receive a registration confirmation email that requires additional action to activate your account.
As a registered seller,all payments will be sent to the mailing address in your registration,avoiding delays with this order and with future payments.You will be able to view order status and history and update order information.You will also have access to payment banners for your auction listings to let your buyers know you accept payments through BidPay.
This order is PENDING approval.Most orders are approved within 24 hours of being placed; however, there may be exceptions.Some items may be considered high risk because of the item cost or description.These types of orders are subject to additional verification and may take longer to approve. You will receive an Order Approved email from us when this order is approved.You SHOULD NOT send this item to the buyer until you receive the confirmation email informing you that the order has been approved.
If your address information is correct and you do not wish to register,this will in no way affect the delivery of your payment once the order is approved.
Thank you for using BidPay. We look forward serving your online auction payment needs in the future.
Sincerely,
BidPay
----------------------------DO--NOT--REPLY-------------------------------------
=================MESSAGE #2================================================================
Microsoft Mail Internet Headers Version 2.0
Received: from mail.finali.net ([66.179.180.204]) by with Microsoft SMTPSVC(5.0.2195.6713);
Fri, 12 Aug 2005 09:40:55 -0700
Received: (qmail 10848 invoked by uid 511); 12 Aug 2005 16:50:05 -0000
Received: from
bidpayservice@bidpay.com by mail.finali.net by uid 100 with qmail-scanner-1.20rc3
(clamscan: devel-20040204. Clear:RC:1:.
Processed in 0.030403 secs); 12 Aug 2005 16:50:05 -0000
Received: from unknown (HELO 172.16.14.16) (172.16.14.16)
by mail.inflow.finali.com with SMTP; 12 Aug 2005 16:50:04 -0000
From:
bidpayservice@bidpay.com
To: karla
Subject: =?US-ASCII?Q?Re:_ORDER_APPROVED_(33457322)_-_**DO_NOT_REPLY**?=
Date: Fri, 12 Aug 2005 16:37:42 GMT
X-Mailer: eAssist NetAgent v.6.50.082
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
X-Qmail-Scanner-Message-ID: <112386540564410844@mail.finali.net>
Return-Path:
bidpayservice@bidpay.com
X-OriginalArrivalTime: 12 Aug 2005 16:40:55.0984 (UTC) FILETIME=[9C68AB00:01C59F5C]
Dear: Karla <LAST>,
A USD$300.00 money order for payment of Craigslist Online Auction item:Sony PSP Value Pack has been approved and sent to you,Afolabi Micheal has chosen to use BidPay® Auction Payments for the speed of an online payment service from a name you can trust.
You can now send the item to the buyer while your money order is on it's way to you,the buyer's shipping information is provided below.
Your money order will be sent by the close of the next business day after you receive this email.First Class mail is typically delivered Within 7-10 business days.
Shipping information:
Mr. Afolabi Micheal
No 12,Lateef Shittu St.
Joyce B Rd.
Ibadan,Oyo State,
Nigeria 23402.
e-mail:
afohenry12@nyc.com
If the buyer has requested that the item be sent to any address other than the one provided above,please do not ship the item and notify us immediately.
Please send a mail to
safepoints@sellzone.com .
Be sure to include the Western Union Auction Payments order number and the change of address the buyer has requested. Also,include "change of address"as the subject of your email.
Note that the money oredr will not get to your address until the valid tracking number has been sent to the buyer for shipment verification.Click on the below link to track your money order.
https://netsage.finali.com/netsage?cust ... country=US
Thank you for using BidPay® Auction Payments.We look forward to serving your online auction payment needs in the future.
Sincerely,
BidPay®
-----------------DO--NOT--REPLY---------------------------------------------------------------
=================MESSAGE #3================================================================
Microsoft Mail Internet Headers Version 2.0
Received: from mailweb2.nyc.com ([66.111.12.69]) by xxxxx with Microsoft SMTPSVC(5.0.2195.6713);
Wed, 10 Aug 2005 19:16:49 -0700
Received: from mailweb2.nyc.com (localhost [127.0.0.1])
by mailweb2.nyc.com (8.12.11/8.12.11) with ESMTP id j7B2BtL7025647
for <karla@xxxx.com>; Wed, 10 Aug 2005 22:11:55 -0400 (EDT)
(envelope-from
afohenry12@nyc.com)
Received: (from vpopmail@localhost)
by mailweb2.nyc.com (8.12.11/8.12.11/Submit) id j7B2BtIN025646;
Wed, 10 Aug 2005 22:11:55 -0400 (EDT)
(envelope-from
afohenry12@nyc.com)
X-Authentication-Warning: mailweb2.nyc.com: vpopmail set sender to
afohenry12@nyc.com using -f
Received: from 10.90.90.1
(NYC.com Mail authenticated user
afohenry12@nyc.com)
by mailweb.nyc.com with HTTP;
Wed, 10 Aug 2005 22:11:55 -0400 (EDT)
Message-ID: <4512.10.90.90.1.1123726315.squirrel@mailweb.nyc.com>
Date: Wed, 10 Aug 2005 22:11:55 -0400 (EDT)
Subject: I'VE MADE THE PAYMENT.
From: "\a\f\o\l\a\b\i" <afohenry12@nyc.com>
To: "Karla" <karla@xxx.xxx>
User-Agent: NYC.com Mail/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit