Topic: Hollie/Ninja/Stefanie Andrea/SHlFT/Pearikay scammers (Read 3520 times)

Just a note that my $300 paypal transaction with Ninja/Hollie did get reversed in my favor by Paypal. If there are any users trying to get quick money via paypal, raise your red flag. This user should be put under the strictest scrutiny.

Those seem to be all Sprint IP's. He paid me via Pay pal Mobile app.  It actually should be fairly simple to find this guy. There is no much anonymity using a cell phone unless it was stolen.

Remember that the board doesn't verify email addresses.

SHlFT
Original username: Ezio
66.87.97.168, 107.29.108.104, 107.29.74.71, 107.29.92.252, 108.103.210.228, 108.116.107.92, 173.130.182.167, 173.130.62.126, 173.149.185.128, 173.96.255.163, 173.96.66.112, 184.207.25.127, 184.219.9.39, 66.87.96.215, 66.87.97.181, 66.87.97.184, 66.87.97.222, 66.87.97.230, 66.87.97.232, 66.87.97.90, 66.87.98.133, 66.87.98.151, 66.87.98.180, 66.87.98.247, 66.87.98.72, 66.87.99.20, 71.21.81.140, 72.56.215.231, 72.56.247.91
Email: [email protected]
Secret question: ooi

Pearikay
Original username: zztop
66.87.96.209, 107.42.18.207, 173.106.62.117, 173.147.200.70, 66.87.96.13, 66.87.96.23, 66.87.96.254, 66.87.96.89, 66.87.96.96, 66.87.97.138, 66.87.97.168, 66.87.97.88, 66.87.98.240, 66.87.98.92, 66.87.98.96, 66.87.99.172, 66.87.99.255
Email: [email protected]

Hollie
Original username: Darkness
184.171.168.202, 108.116.212.19, 108.116.28.128, 173.135.103.122, 173.149.144.123, 173.96.31.42, 184.209.248.98, 184.209.33.8, 184.231.206.17, 209.184.116.69, 64.134.157.255, 66.87.66.40, 66.87.96.11, 66.87.96.183, 66.87.96.195, 66.87.96.235, 66.87.96.236, 66.87.96.247, 66.87.97.136, 66.87.97.168, 66.87.97.192, 66.87.97.195, 66.87.97.212, 66.87.97.248, 66.87.98.115, 66.87.98.116, 66.87.98.151, 66.87.98.199, 66.87.98.239, 66.87.98.246, 66.87.98.47, 66.87.98.72, 70.3.226.211, 71.21.81.140, 99.200.197.89, 99.200.30.168
Email: [email protected]

Darkness
66.87.97.248
Email: [email protected]

Stefanie Andrea
107.28.115.141, 107.28.115.39, 107.28.137.251, 107.28.157.204, 107.28.189.208, 107.28.236.187, 107.28.244.20, 107.28.4.167, 107.28.98.107, 107.33.133.10, 107.33.136.196, 107.33.137.168, 107.33.139.187, 107.33.142.242, 107.33.145.229, 107.33.151.27, 107.33.168.5, 107.33.21.220, 107.33.210.140, 107.33.227.97, 107.33.251.103, 107.33.36.31, 107.33.96.37, 107.42.106.33, 107.42.155.238, 107.42.165.200, 107.42.188.172, 107.42.57.45, 107.42.92.3, 108.103.118.133, 108.125.66.189, 173.106.109.70, 173.106.119.219, 173.106.224.91, 173.106.230.69, 173.106.238.80, 173.106.40.46, 173.106.62.182, 173.115.145.46, 173.115.170.26, 173.115.212.240, 173.115.231.4, 173.115.25.75, 173.115.40.218, 173.115.55.132, 173.115.83.235, 173.147.109.202, 173.147.109.52, 173.147.112.202, 173.147.144.157, 173.147.193.37, 173.147.48.31, 173.147.72.239, 173.147.92.189, 173.147.92.235, 173.147.99.80, 173.7.104.162, 173.7.163.60, 173.7.17.165, 173.7.186.176, 173.7.205.9, 173.7.38.118, 173.7.47.95, 173.96.25.55, 209.184.116.42, 209.184.116.69, 66.87.96.113, 66.87.96.17, 66.87.96.173, 66.87.96.183, 66.87.96.209, 66.87.97.1, 66.87.97.138, 66.87.97.192, 66.87.97.248, 66.87.97.47, 66.87.97.64, 66.87.98.227, 66.87.98.228, 66.87.98.47, 66.87.99.114, 66.87.99.78, 68.241.102.227, 68.241.186.220, 72.56.144.250
Email: [email protected]

I know, but I didn't want to create a separate thread for that.  It was something that caught my eye, and I knew you were posting on this thread, so I thought I'd slip it in there.

My apologies.

Doesn't really match what we're seeing here.
Again, this thread is about this specific scammer, not scammers in general

The only post you had in this thread just said "Keep an eye on ultraimports".

If you're going to call out someone as a probable scammer in public, some actual reasons would be nice.  I even examined his past posting history before asking you here.  The only things I could see that were even potentially suspicious was that (a) he made a comment saying not all new users are scammers, and (b) that he's got a somewhat low post count and is selling video cards.  Neither is a smoking gun.

Is there additional evidence or anything concrete that I'm missing?  Or should we just make this a witch-hunt thread?

EDIT: At least now I see the previous post you're talking about.  Sorry I missed it.  I've seen plenty of people who started off strong trying to sell anything they could, so I don't know if I can cast judgement based on that behavior.  But at least I see your position now.  Leaving the original post up instead of being one of those guys who deletes the evidence.

^ read my previous post.  

Edit:  It's actually really unfortunate that I even have to point out users like ultraimports as being suspicious.  If he is innocent, I am sorry for casting an aura of doubt.

Actually, he fits the pattern of what ThyDude did before 'someone' claimed he had a seizure and was taken to the hospital.

Users with under 50 posts who decide to try to sell multiple items in a very short time frame make me very suspicious.

Maged, make this a sticky, I believe this guy wont be leaving anytime soon..

He has to understand he will eventually make a mistake if he doesn't stop what he is doing, and when that time comes, he will have to deal with the fury of several dozens of people here.. I personally hopes this happens..

NoValues possibly also hollie/ninja/shift ?

https://bitcointalksearch.org/topic/yet-another-loan-thread-33343

If anyone here has the Texas address this guy was giving out, that would help greatly.

Would you mind explaining why?

thanks for excellent work, i asked long ago to give scammer label to shift, he could have deleted his posts.

many have been scammed and have evidence/info such as emails, but you have to pm them and get it from them.

That doesn't appear likely. I've also investigated ensign_lee in that thread.
That is exactly what has been happening.He doesn't match the pattern, but he might still be a regular scammer. It's hard to tell.

That information hasn't been revealed to me yet. I'll be sure to post the IP addresses as soon as I know them.

In regards to the ip addresses. Do they resolve to common hostname or internet service provider. If the do what is the geographic location? Do you think they where using proxies or TOR?

Keep an eye on ultraimports.

i hope moderators keep in mind that users who are using the marketplace with good feedback could also be incahoots with scam accounts (make a scam account, or 2 scam accounts, or 10... etc, get a bunch of bitcoins from items you never send, then take this money and buy items from toher forum members on non scam account, continue building reputation and selling items bought with money from scamming)

repeat process until all your accounts are banned and you make new accounts with VPN/proxy service freely available like hidemyass.com

And there's the infamous cover-up method in there, too. Still not entirely convinced, but it's plausible.

User netxshare may also be one of his accounts.  Stefanie Andrea accidentally answers a price inquiry for one of the items netxshare had for sale: https://bitcointalksearch.org/topic/m.485284

Very interesting. I'll look into it.