man in the middle attack
attacker (tyler kurtz) contract with a mark to sell btc for paypal.
Attacker then contacts a btc seller
Attacker gives mark btc seller's paypal email (or asks the btc seller to send 'invoice' to mark)
Attacker give btc seller Attacker's bitcoin address.
If it works:
mark send paypal to btc seller
btc seller sends attacker bitcoin
mark can then charge back paypal
and coins remain with attacker
so if it works the btc seller is the victim
In this case I contacted the mark and actuall sold him real btc
then we fucked around a little with the attacker.
Topic: Diary of a Bitcoinary Scammer (Read 955 times)
can someone give a summary? it's really hard to keep track of all the switching.
This is yet another interaction with the notorious scammer Tyler Kurtz
URL irc://107.22.178.35:65500/lovepump,isnick Connected via rowling.freenode.net
Conversation with lovepump <43f246b6@gateway/web/freenode/ip.67.242.70.182>
cpe-67-242-70-182.nycap.res.rr.com/67.242.70.182
lovepump
lovepump what is your email to send for the coin
=== lovepump <43f246b6@gateway/web/freenode/ip.67.242.70.182> “cpe-67-242-70-182.nycap.res.rr.com/67.242.70.182”
=== lovepump: member of #bitcoin
=== lovepump: attached to rowling.freenode.net “Corvallis, OR, USA”
--- End of WHOIS information for lovepump.
BCB where are you located
lovepump US
lovepump how much is 1
lovepump 27.5?
BCB ya
BCB [email protected]
lovepump for 1
BCB ya
lovepump Ok ill try it
lovepump how much can u send me for 440?
lovepump 18 btc?
BCB one sec
BCB 495
lovepump I dont have that much
BCB how much you got
lovepump 166
lovepump forgot I had to pay an invoice
BCB 6.12 BTC
lovepump ok send invoice to me
lovepump [email protected]
lovepump send as gift right
BCB yy
lovepump sending 166
lovepump dont screw me
lovepump sent
lovepump 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
BCB thank
BCB don't see it yet
lovepump check again It takes a second sometime I do alot on ebay
BCB you do what on ebay??
lovepump buy and sell things
lovepump mostly buy electronics and games
lovepump first last
lovepump you have it now im shure
lovepump 166 sent [email protected]
lovepump correct address?
BCB let me check
lovepump sent
lovepump check it
BCB checking
BCB now
lovepump it took the funds from me so you should have it in there
BCB ok got it
lovepump kk
lovepump 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
BCB got
BCB it
BCB my client is out of sync
BCB give me a second
lovepump ok
lovepump hope it isnt like days behind
BCB no no
BCB I just shut if off for a few
BCB had to reboot
lovepump ok Ill wait let me know when to check it
lovepump still nothing
BCB I sent
lovepump why didnt you say u sent then?
lovepump what address?
lovepump 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
lovepump How long since you sent it ?
lovepump can I check it ?
BCB 1C1Lsan3wTvnnnECokBbyK8sQzaresLCb
lovepump looks the same
BCB ya
BCB you get it
lovepump no
lovepump nothing
lovepump can u proof it is sent
lovepump hello?
BCB it took about 4 hours for the first confirm that last time i sent
BCB hope it doesn't take that long
lovepump show me proof you sent it
BCB http://blockchain.info/address/1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
lovepump please
lovepump I only see the coin I bought earlier
BCB hmmm
BCB you sure
BCB let me check my client
While I was having this conversation I contacted the victim
Read this from the bottom up:
#################################
Ya I saw. Thanks a lot, man. It started sounding fishier and fishier.
On Tue, Feb 12, 2013 at 9:31 PM, BCB <> wrote:
I sent the funds back
On Tue, Feb 12, 2013 at 9:30 PM, Victim<[email protected]> wrote:
he said he's gonna send out 10 when his wallet is done syncing.. If I'm not gonna get anything, I'm gonna dispute the transactions now.
On Tue, Feb 12, 2013 at 9:29 PM, Victim<[email protected]> wrote:
btcstore
On Tue, Feb 12, 2013 at 9:27 PM, Victim<[email protected]> wrote:
What's the price?
On Tue, Feb 12, 2013 at 9:24 PM, BCB <> wrote:
tell him yes
On Tue, Feb 12, 2013 at 9:24 PM, BCB <> wrote:
that's him
if you want btc send to [email protected] as gift or you pay any fee
email you btc address here.
On Tue, Feb 12, 2013 at 9:23 PM, Victim<[email protected]> wrote:
Wonder who's that is.
Yeah.. They're such a pain in the ass to get.
On Tue, Feb 12, 2013 at 9:22 PM, BCB <> wrote:
buy the way this is the address he gave me
1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
On Tue, Feb 12, 2013 at 9:21 PM, BCB <> wrote:
what a scummy fuck
you want btc??
On Tue, Feb 12, 2013 at 9:21 PM, Victim<[email protected]> wrote:
luckily I sent everything as goods.
On Tue, Feb 12, 2013 at 9:20 PM, Victim<[email protected]> wrote:
bitcoinary.com
On Tue, Feb 12, 2013 at 9:20 PM, BCB <> wrote:
where'd you meet this guy
On Tue, Feb 12, 2013 at 9:19 PM, BCB <> wrote:
that's my address
I'll send it back
Let's fuck with this scammer
On Tue, Feb 12, 2013 at 9:18 PM, Victim<[email protected]> wrote:
Shit. I sent it already
On Tue, Feb 12, 2013 at 9:17 PM, BCB <> wrote:
They guy you are trying to buy bitcoin from right now is trying to scam you.
he's using the nick "lovepump" on #bitcoin-otc trying to get me to send you and invoice for 166.00
then he gives me his bitcoin address and you don't get any btc.
You probably met him on seal or another poker site.
Big fucking scammer this guy.
his name is Tyler Kurz
and he lives in Schenectady NY.
############################################################
Then we picked up on G-Chat.
me
9:32 PM
you get your money back
This chat is no longer off the record
________________________________________
Victim
9:32 PM
Yeah thanks
________________________________________
me
9:32 PM
kk
how many do you want
or how much do you have
________________________________________
Victim
9:33 PM
I need xxx
________________________________________
me
9:35 PM
25 is xxxx
mt gox last plus % for paypal
________________________________________
Victim
9:35 PM
for xx?
________________________________________
me
9:35 PM
xxx.xx
________________________________________
Victim
9:36 PM
okay.. now I gotta ask how I'm supposed to trust you.
________________________________________
me
9:36 PM
are you on bitcointalk.org
or #bitcoin-otc
________________________________________
Victim
9:36 PM
I lurk
________________________________________
me
9:36 PM
where
________________________________________
Victim
9:37 PM
the forum
________________________________________
me
9:37 PM
I'm BCB
you can search my nick
I'll post something there
where are you located
________________________________________
Victim
9:39 PM
what do you mean?
________________________________________
me
9:40 PM
are you in US or elsewhwere
________________________________________
________________________________________
Victim
9:43 PM
that message you?
________________________________________
me
9:43 PM
kk
________________________________________
Victim
9:43 PM
235878?
________________________________________
me
9:43 PM
so how many you want
________________________________________
Victim
9:44 PM
xx will do
________________________________________
me
9:45 PM
send to xxxx@xxxxx
send as gift or fee will be deducted from bitcoin
no paypal message
pm btc address here
________________________________________
Victim
9:46 PM
Alright. This makes me nervous as balls though. Whats the amount?
________________________________________
me
9:46 PM
xxx.xx
welcome to bitcoin
________________________________________
Victim
9:48 PM
Hahahaha. Good point.
sent
________________________________________
me
9:48 PM
kk
checking
btc address?
________________________________________
Victim
9:48 PM
18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
________________________________________
me
9:51 PM
received
sending now
I got the paypal email
I want to wait till his my account so I can check if there was a fee
takes a second
________________________________________
Victim
9:51 PM
what?
________________________________________
me
9:51 PM
sent
http://blockchain.info/address/18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
is this the same address you gave to the scammer
________________________________________
Victim
9:51 PM
yes
________________________________________
me
9:52 PM
ok I'm going to tell him I send the coins to this address
and you tell him "thank you"
that will really fuck with his head
________________________________________
Victim
9:53 PM
Haha. Thanks a lot man. You're a life saver.
________________________________________
me
9:54 PM
np
what out for scammers
*watch
________________________________________
Victim
9:54 PM
I definitely will.. Sneaky fucks.
########################################
Now back to Tyler Kurz patiently waiting on otc for his precious bitcoinz
URL irc://107.22.178.35:65500/wizardofwow,isnick Connected via rowling.freenode.net
Conversation with wizardofwow <43f246b6@gateway/web/freenode/ip.67.242.70.182>
cpe-67-242-70-182.nycap.res.rr.com/67.242.70.182
wizardofwow
wizardofwow did u scam me
=== wizardofwow <43f246b6@gateway/web/freenode/ip.67.242.70.182> “cpe-67-242-70-182.nycap.res.rr.com/67.242.70.182”
=== wizardofwow: member of #bitcoin
=== wizardofwow: attached to rowling.freenode.net “Corvallis, OR, USA”
--- End of WHOIS information for wizardofwow.
wizardofwow 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq has only the one btc from earlier
BCB who is this
wizardofwow I got disconnected
BCB who are you??
wizardofwow It isnt showing me that you sent anything
wizardofwow antonio
BCB what is your lst name
wizardofwow henderson
wizardofwow 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
wizardofwow I just send u money
wizardofwow nothing is showing up
BCB ok
BCB didn't go through
BCB let me resend
wizardofwow thought you were screwing me
wizardofwow thanks
wizardofwow you didnt send it
BCB ok
BCB sent
BCB 18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
wizardofwow 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
BCB sent
BCB http://blockchain.info/address/18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
wizardofwow 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq is my address
BCB I sent to this address
BCB http://blockchain.info/address/18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
wizardofwow says u sent 21
BCB ya
BCB isn't that way you said
wizardofwow I sent you 166
BCB no I got 547
wizardofwow not good
wizardofwow going to chargeback on that
wizardofwow sorry about this
wizardofwow but you shouldnt have done that
BCB what??
BCB you crazy
wizardofwow he owes me 6btc of that I sent him 166 of that 547 he sent you
wizardofwow and he didnt have all the money
wizardofwow sorry
wizardofwow he screwed me and is going to screw you most likely too
wizardofwow why did you lie the first time when you said you sent it
wizardofwow I talking to him now he is going to chargeback
BCB Ok you do that. I'm signing off
BCB nite nite
URL irc://107.22.178.35:65500/lovepump,isnick Connected via rowling.freenode.net
Conversation with lovepump <43f246b6@gateway/web/freenode/ip.67.242.70.182>
cpe-67-242-70-182.nycap.res.rr.com/67.242.70.182
lovepump
lovepump what is your email to send for the coin
=== lovepump <43f246b6@gateway/web/freenode/ip.67.242.70.182> “cpe-67-242-70-182.nycap.res.rr.com/67.242.70.182”
=== lovepump: member of #bitcoin
=== lovepump: attached to rowling.freenode.net “Corvallis, OR, USA”
--- End of WHOIS information for lovepump.
BCB where are you located
lovepump US
lovepump how much is 1
lovepump 27.5?
BCB ya
BCB [email protected]
lovepump for 1
BCB ya
lovepump Ok ill try it
lovepump how much can u send me for 440?
lovepump 18 btc?
BCB one sec
BCB 495
lovepump I dont have that much
BCB how much you got
lovepump 166
lovepump forgot I had to pay an invoice
BCB 6.12 BTC
lovepump ok send invoice to me
lovepump [email protected]
lovepump send as gift right
BCB yy
lovepump sending 166
lovepump dont screw me
lovepump sent
lovepump 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
BCB thank
BCB don't see it yet
lovepump check again It takes a second sometime I do alot on ebay
BCB you do what on ebay??
lovepump buy and sell things
lovepump mostly buy electronics and games
lovepump first last
lovepump you have it now im shure
lovepump 166 sent [email protected]
lovepump correct address?
BCB let me check
lovepump sent
lovepump check it
BCB checking
BCB now
lovepump it took the funds from me so you should have it in there
BCB ok got it
lovepump kk
lovepump 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
BCB got
BCB it
BCB my client is out of sync
BCB give me a second
lovepump ok
lovepump hope it isnt like days behind
BCB no no
BCB I just shut if off for a few
BCB had to reboot
lovepump ok Ill wait let me know when to check it
lovepump still nothing
BCB I sent
lovepump why didnt you say u sent then?
lovepump what address?
lovepump 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
lovepump How long since you sent it ?
lovepump can I check it ?
BCB 1C1Lsan3wTvnnnECokBbyK8sQzaresLCb
lovepump looks the same
BCB ya
BCB you get it
lovepump no
lovepump nothing
lovepump can u proof it is sent
lovepump hello?
BCB it took about 4 hours for the first confirm that last time i sent
BCB hope it doesn't take that long
lovepump show me proof you sent it
BCB http://blockchain.info/address/1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
lovepump please
lovepump I only see the coin I bought earlier
BCB hmmm
BCB you sure
BCB let me check my client
While I was having this conversation I contacted the victim
Read this from the bottom up:
#################################
Ya I saw. Thanks a lot, man. It started sounding fishier and fishier.
On Tue, Feb 12, 2013 at 9:31 PM, BCB <> wrote:
I sent the funds back
On Tue, Feb 12, 2013 at 9:30 PM, Victim<[email protected]> wrote:
he said he's gonna send out 10 when his wallet is done syncing.. If I'm not gonna get anything, I'm gonna dispute the transactions now.
On Tue, Feb 12, 2013 at 9:29 PM, Victim<[email protected]> wrote:
btcstore
On Tue, Feb 12, 2013 at 9:27 PM, Victim<[email protected]> wrote:
What's the price?
On Tue, Feb 12, 2013 at 9:24 PM, BCB <> wrote:
tell him yes
On Tue, Feb 12, 2013 at 9:24 PM, BCB <> wrote:
that's him
if you want btc send to [email protected] as gift or you pay any fee
email you btc address here.
On Tue, Feb 12, 2013 at 9:23 PM, Victim<[email protected]> wrote:
Wonder who's that is.
Yeah.. They're such a pain in the ass to get.
On Tue, Feb 12, 2013 at 9:22 PM, BCB <> wrote:
buy the way this is the address he gave me
1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
On Tue, Feb 12, 2013 at 9:21 PM, BCB <> wrote:
what a scummy fuck
you want btc??
On Tue, Feb 12, 2013 at 9:21 PM, Victim<[email protected]> wrote:
luckily I sent everything as goods.
On Tue, Feb 12, 2013 at 9:20 PM, Victim<[email protected]> wrote:
bitcoinary.com
On Tue, Feb 12, 2013 at 9:20 PM, BCB <> wrote:
where'd you meet this guy
On Tue, Feb 12, 2013 at 9:19 PM, BCB <> wrote:
that's my address
I'll send it back
Let's fuck with this scammer
On Tue, Feb 12, 2013 at 9:18 PM, Victim<[email protected]> wrote:
Shit. I sent it already
On Tue, Feb 12, 2013 at 9:17 PM, BCB <> wrote:
They guy you are trying to buy bitcoin from right now is trying to scam you.
he's using the nick "lovepump" on #bitcoin-otc trying to get me to send you and invoice for 166.00
then he gives me his bitcoin address and you don't get any btc.
You probably met him on seal or another poker site.
Big fucking scammer this guy.
his name is Tyler Kurz
and he lives in Schenectady NY.
############################################################
Then we picked up on G-Chat.
me
9:32 PM
you get your money back
This chat is no longer off the record
________________________________________
Victim
9:32 PM
Yeah thanks
________________________________________
me
9:32 PM
kk
how many do you want
or how much do you have
________________________________________
Victim
9:33 PM
I need xxx
________________________________________
me
9:35 PM
25 is xxxx
mt gox last plus % for paypal
________________________________________
Victim
9:35 PM
for xx?
________________________________________
me
9:35 PM
xxx.xx
________________________________________
Victim
9:36 PM
okay.. now I gotta ask how I'm supposed to trust you.
________________________________________
me
9:36 PM
are you on bitcointalk.org
or #bitcoin-otc
________________________________________
Victim
9:36 PM
I lurk
________________________________________
me
9:36 PM
where
________________________________________
Victim
9:37 PM
the forum
________________________________________
me
9:37 PM
I'm BCB
you can search my nick
I'll post something there
where are you located
________________________________________
Victim
9:39 PM
what do you mean?
________________________________________
me
9:40 PM
are you in US or elsewhwere
________________________________________
________________________________________
Victim
9:43 PM
that message you?
________________________________________
me
9:43 PM
kk
________________________________________
Victim
9:43 PM
235878?
________________________________________
me
9:43 PM
so how many you want
________________________________________
Victim
9:44 PM
xx will do
________________________________________
me
9:45 PM
send to xxxx@xxxxx
send as gift or fee will be deducted from bitcoin
no paypal message
pm btc address here
________________________________________
Victim
9:46 PM
Alright. This makes me nervous as balls though. Whats the amount?
________________________________________
me
9:46 PM
xxx.xx
welcome to bitcoin
________________________________________
Victim
9:48 PM
Hahahaha. Good point.
sent
________________________________________
me
9:48 PM
kk
checking
btc address?
________________________________________
Victim
9:48 PM
18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
________________________________________
me
9:51 PM
received
sending now
I got the paypal email
I want to wait till his my account so I can check if there was a fee
takes a second
________________________________________
Victim
9:51 PM
what?
________________________________________
me
9:51 PM
sent
http://blockchain.info/address/18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
is this the same address you gave to the scammer
________________________________________
Victim
9:51 PM
yes
________________________________________
me
9:52 PM
ok I'm going to tell him I send the coins to this address
and you tell him "thank you"
that will really fuck with his head
________________________________________
Victim
9:53 PM
Haha. Thanks a lot man. You're a life saver.
________________________________________
me
9:54 PM
np
what out for scammers
*watch
________________________________________
Victim
9:54 PM
I definitely will.. Sneaky fucks.
########################################
Now back to Tyler Kurz patiently waiting on otc for his precious bitcoinz
URL irc://107.22.178.35:65500/wizardofwow,isnick Connected via rowling.freenode.net
Conversation with wizardofwow <43f246b6@gateway/web/freenode/ip.67.242.70.182>
cpe-67-242-70-182.nycap.res.rr.com/67.242.70.182
wizardofwow
wizardofwow did u scam me
=== wizardofwow <43f246b6@gateway/web/freenode/ip.67.242.70.182> “cpe-67-242-70-182.nycap.res.rr.com/67.242.70.182”
=== wizardofwow: member of #bitcoin
=== wizardofwow: attached to rowling.freenode.net “Corvallis, OR, USA”
--- End of WHOIS information for wizardofwow.
wizardofwow 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq has only the one btc from earlier
BCB who is this
wizardofwow I got disconnected
BCB who are you??
wizardofwow It isnt showing me that you sent anything
wizardofwow antonio
BCB what is your lst name
wizardofwow henderson
wizardofwow 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
wizardofwow I just send u money
wizardofwow nothing is showing up
BCB ok
BCB didn't go through
BCB let me resend
wizardofwow thought you were screwing me
wizardofwow thanks
wizardofwow you didnt send it
BCB ok
BCB sent
BCB 18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
wizardofwow 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq
BCB sent
BCB http://blockchain.info/address/18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
wizardofwow 1C1Lsan3wTvnnnECokBbyK8sQzaresLCbq is my address
BCB I sent to this address
BCB http://blockchain.info/address/18F5muPU91Qg2VVhzJjeZ1SJjMGyK6VP
wizardofwow says u sent 21
BCB ya
BCB isn't that way you said
wizardofwow I sent you 166
BCB no I got 547
wizardofwow not good
wizardofwow going to chargeback on that
wizardofwow sorry about this
wizardofwow but you shouldnt have done that
BCB what??
BCB you crazy
wizardofwow he owes me 6btc of that I sent him 166 of that 547 he sent you
wizardofwow and he didnt have all the money
wizardofwow sorry
wizardofwow he screwed me and is going to screw you most likely too
wizardofwow why did you lie the first time when you said you sent it
wizardofwow I talking to him now he is going to chargeback
BCB Ok you do that. I'm signing off
BCB nite nite
Jump to: