22000 USD SCAM because of Phishing and Bank Transfer Chargeback

BTCtester.com

newbie

Activity: 26

Merit: 4

I know this is an oldie, but I'm curious if you got your BTC back, if the scammers were caught?
in 2013 the most people assumed their transactions were more or less anonymous. Obviously as well your scammer. So I see still certain chances to find the scammer (especially in case you both are in jurisdictions like Germany/Netherlands.

Someone here mentioned address 1NrrEnKJ5tsgBgSQcPjLKXXo6Q9EGrh4zM
My forensic tools tell me that the owner of this address is very likely as well the owner of 174 other addresses and that this person sent funds to his accounts at the following exchanges:

BTC-e.com
Bitstamp.net
MtGox.com
Bitpay.com

For MtGox and BTC-e it might be a bit too late but Bitstamp.net is still in business (based in Luxembourg and UK) and Bitpay.com as well (based in US).
So in case police closed this and you didn't get anything back the lost BTC amount at today rates (around $600k) would be worth giving it a new try.

If you want to direct message me I can give you more details, as well in case you need an analysis for other BTC addresses.
Good luck!

sturle

legendary

Activity: 1437

Merit: 1002

https://bitmynt.no

Quote from: DiamondCardz on July 07, 2013, 02:39:10 PM

I've determined the locations of this scammer.

My more likely thought is that the scammer lives in the Netherlands, Amsterdam. The less likely thought is that he lives on the outskirts of some major cities in Germany.

More likely he is using a VPN service located in the Netherlands. I've had a few users on the same VPN service, contacting me on IRC to buy bitcoins. (Probably just one using different nicks.) His payments to me seem to fail for some reason. Perhaps the banks do better checks for payments to foreign accounts.

jimmy2k

newbie

Activity: 22

Merit: 0

Quote from: BurtW on July 07, 2013, 02:20:39 PM

I wonder if all 1,275.67952655 BTC at the address ( https://blockchain.info/address/1NrrEnKJ5tsgBgSQcPjLKXXo6Q9EGrh4zM ) are stolen?

I think it could be indeed possible that we are uncovering a whole phishing ring!

DiamondCardz

legendary

Activity: 1134

Merit: 1118

I've determined the locations of this scammer.

My more likely thought is that the scammer lives in the Netherlands, Amsterdam. The less likely thought is that he lives on the outskirts of some major cities in Germany.

BurtW

legendary

Activity: 2646

Merit: 1137

All paid signature campaigns should be banned.

Just to be totally accurate here your total loss is:

28.527 BTC ( https://blockchain.info/tx/d707d1eb7e97a9132314d895f0f80116f70085e6c4e2b2be34d09fadb20da07c )

plus

86.7546 BTC ( https://blockchain.info/tx/b42c6075bdba2dc6f3f05e14fb9d454672e4931c5c3eff40ca6b59a6756f9735 )

= 115.2816 BTC (let's call it $70/BTC right now so at current prices a bit over $8000)

and the rest of the BTC are still in escrow, you will get them back, and you did not lose them, right?

I am sorry for your loss. You can watch the address and see if you can pick up a hint of who the scumbag scammer is by where they spend the BTC but that is about it.

I wonder if all 1,275.67952655 BTC at the address ( https://blockchain.info/address/1NrrEnKJ5tsgBgSQcPjLKXXo6Q9EGrh4zM ) are stolen?

DiamondCardz

legendary

Activity: 1134

Merit: 1118

It seems very likely, looking at network propagation (which, while it's NEVER FULLY ACCURATE, can also be used to slightly help. Note that where the transaction is propagated can also be thrown off as it can be taken up by any node. However, usually it is a close-by node), that this person who was offering you "German Clients" also lives in Europe, and probably in Germany. So that's a start. It also seems likely that this person lives away from any major cities such as Frankfurt.

jimmy2k

newbie

Activity: 22

Merit: 0

Quote from: BitcoinBarrel on July 07, 2013, 08:57:38 AM

If I read correctly, he lost cash payments for 30 btc + 80 btc + 80 btc = ~190 btc

yes, this is true! its roughly 200 BTC that were traded for a price around 82 EUR, that makes an estimate of 22k USD.

jimmy2k

newbie

Activity: 22

Merit: 0

Quote from: CurbsideProphet on July 07, 2013, 01:06:10 AM

How did you lose $22,000? The amount of Bitcoin lost doesn't come close to that figure at current rates. Did they pay you significantly higher than the current spot rate? Are you counting the rest of your cash that was frozen in the account?

the 22k USD is the total amount of money that is charged back! You cant see the rest of the BTC in the transactions I provided since they are still in escrow. Anyway to be more precise since the price dropped during the whole fraud case the damage that I will have can be estimated roughly about this amount!

DiamondCardz

legendary

Activity: 1134

Merit: 1118

Quote from: Rawted on July 07, 2013, 01:02:04 PM

Quote from: DiamondCardz on July 07, 2013, 07:57:27 AM

Quote from: Rawted on July 07, 2013, 07:20:09 AM

Transactions were relayed by IP 88.198.111.188

Omfg.

When will wanna-be scripties understand that the IP that relayed a transaction can have NO CONNECTION to the transaction at all?

Hence why i showed the route to that particular ISP, and suggested he contact them.

And what are they going to do about it? They have no connection to the transaction, they could be different countries, THEY CAN'T HELP HIM.

Rawted

hero member

Activity: 742

Merit: 500

Quote from: DiamondCardz on July 07, 2013, 07:57:27 AM

Quote from: Rawted on July 07, 2013, 07:20:09 AM

Transactions were relayed by IP 88.198.111.188

Omfg.

When will wanna-be scripties understand that the IP that relayed a transaction can have NO CONNECTION to the transaction at all?

Hence why i showed the route to that particular ISP, and suggested he contact them.

BurtW

legendary

Activity: 2646

Merit: 1137

All paid signature campaigns should be banned.

Quote from: jimmy2k on July 06, 2013, 09:30:02 AM

The employee told me that I can be safe and that no chargebacks are possible after I see the money on my bank account.

I can clear this up for you. What the employee meant was:

Quote from: jimmy2k on July 06, 2013, 09:30:02 AM

The employee told me that I can be safe and that no chargebacks are possible after I see the money on my bank account except in cases of fraud.

He just left that last part out.

BurtW

legendary

Activity: 2646

Merit: 1137

All paid signature campaigns should be banned.

Quote from: escrow.ms on July 07, 2013, 09:10:23 AM

Looks like you didn't read thread properly, He said 30, then 80 then 80.
and escrow was released. He lost 22k because his bank account got freezed.

You are right I did not read this thread carefully enough. Yes, he is out whatever BTC he released from escrow and should get back whatever BTC he has not released from escrow. Carry on.

escrow.ms

legendary

Activity: 1274

Merit: 1004

Quote from: ?? on ??

Quote from: jimmy2k on July 06, 2013, 09:30:02 AM

I agreed and received the amount for the first 30 BTC very quickly on even the same day! I released the escrow

The problem for me is now, that the bitcoins except for the first trade are already released

When you check this, you can immediately see that the two amounts of 28 BTC and 86 BTC lead both to this address: https://blockchain.info/address/1NrrEnKJ5tsgBgSQcPjLKXXo6Q9EGrh4zM

So exactly how much did you lose here? 30 BTC, 28 BTC, 86 BTC?

Since you did not release the other escrows you should get all that BTC back, right?

So it appears your total loss is less than $3,000 USD, right? A lot or money but not $22,000.

Looks like you didn't read thread properly, He said 30, then 80 then 80.
and escrow was released. He lost 22k because his bank account got freezed.

BitcoinBarrel

legendary

Activity: 2026

Merit: 1034

Fill Your Barrel with Bitcoins!

If I read correctly, he lost cash payments for 30 btc + 80 btc + 80 btc = ~190 btc

DiamondCardz

legendary

Activity: 1134

Merit: 1118

Quote from: Rawted on July 07, 2013, 07:20:09 AM

Transactions were relayed by IP 88.198.111.188

Omfg.

When will wanna-be scripties understand that the IP that relayed a transaction can have NO CONNECTION to the transaction at all?

worldinacoin

hero member

Activity: 756

Merit: 500

I think your bank should not just give false accusations against you but instead try to help you recover the money, try to talk to their senior management or at least the VP of the branch you are using.

Rawted

hero member

Activity: 742

Merit: 500

Transactions were relayed by IP 88.198.111.188

https://www.google.com/search?q=1NrrEnKJ5tsgBgSQcPjLKXXo6Q9EGrh4zM&rlz=1C1AVSI_enUS460US460&oq=1NrrEnKJ5tsgBgSQcPjLKXXo6Q9EGrh4zM&aqs=chrome.0.57.688477j0&sourceid=chrome&ie=UTF-8#q=1NrrEnKJ5tsgBgSQcPjLKXXo6Q9EGrh4zM&safe=off&rlz=1C1AVSI_enUS460US460&ei=81rZUZG9DYfy9gSS84CoDA&start=170&sa=N&filter=0&bav=on.2,or.r_cp.r_qf.&bvm=bv.48705608,d.eWU&fp=2d51c5bfc01f1cdf&biw=1920&bih=961

http://blockchain.info/ip-address/88.198.111.188

http://bgp.he.net/ip/88.198.111.188

You should try contacting the host/ISP

Quote

person: Hetzner Online AG - Virtualisierung
address: Hetzner Online AG - Virtualisierung
address: Stuttgarter Str. 1
address: 91710 Gunzenhausen
address: GERMANY
phone: +499831610061
fax-no: +499831610062

DiamondCardz

legendary

Activity: 1134

Merit: 1118

These addresses seem to have never touched PicoStocks.

https://picostocks.com/users/find/?query=1NrrEnKJ5tsgBgSQcPjLKXXo6Q9EGrh4zM

However, we know the critical address is 1NrrEnKJ5tsgBgSQcPjLKXXo6Q9EGrh4zM - we just need to find out who owns it.

DiamondCardz

legendary

Activity: 1134

Merit: 1118

Quote from: ninjaboon on July 06, 2013, 08:41:01 PM

Quote from: jimmy2k on July 06, 2013, 05:13:44 PM

thank you DiamondCardz for putting so much effort on this! As I said, If there is one specific detail telling us anything about his real identity I wont hesitate sending you 1 BTC!

Greetings,
jimmy2k

@jimmy2k - sorry about your loss. I have also lost about USD600++ this week to a scammer : https://bitcointalksearch.org/topic/m.2650185

Did the scammers email you ?
If yes, then there will be an originating IP address in those emails.

If you do have an email from the scammers, please give us access to the email or post their IP ASAP so we can look it up and attempt to dox the scammer.

DiamondCardz

legendary

Activity: 1134

Merit: 1118

Quote from: jimmy2k on July 06, 2013, 05:13:44 PM

thank you DiamondCardz for putting so much effort on this! As I said, If there is one specific detail telling us anything about his real identity I wont hesitate sending you 1 BTC!

Greetings,
jimmy2k

I'm awaiting a PM reply from the 4 people I PM'd. Will post if any info comes up, if no info comes up, then we need to go deeper. (no pun intended)

Topic: 22000 USD SCAM because of Phishing and Bank Transfer Chargeback (Read 30001 times)