Topic: Hollie/Ninja/Stefanie Andrea/SHlFT/Pearikay scammers (Read 3520 times)

Just a note that my $300 paypal transaction with Ninja/Hollie did get reversed in my favor by Paypal. If there are any users trying to get quick money via paypal, raise your red flag. This user should be put under the strictest scrutiny.

Those seem to be all Sprint IP's. He paid me via Pay pal Mobile app.  It actually should be fairly simple to find this guy. There is no much anonymity using a cell phone unless it was stolen.

Remember that the board doesn't verify email addresses.

SHlFT
Original username: Ezio
66.87.97.168, 107.29.108.104, 107.29.74.71, 107.29.92.252, 108.103.210.228, 108.116.107.92, 173.130.182.167, 173.130.62.126, 173.149.185.128, 173.96.255.163, 173.96.66.112, 184.207.25.127, 184.219.9.39, 66.87.96.215, 66.87.97.181, 66.87.97.184, 66.87.97.222, 66.87.97.230, 66.87.97.232, 66.87.97.90, 66.87.98.133, 66.87.98.151, 66.87.98.180, 66.87.98.247, 66.87.98.72, 66.87.99.20, 71.21.81.140, 72.56.215.231, 72.56.247.91
Email: [email protected]
Secret question: ooi

Pearikay
Original username: zztop
66.87.96.209, 107.42.18.207, 173.106.62.117, 173.147.200.70, 66.87.96.13, 66.87.96.23, 66.87.96.254, 66.87.96.89, 66.87.96.96, 66.87.97.138, 66.87.97.168, 66.87.97.88, 66.87.98.240, 66.87.98.92, 66.87.98.96, 66.87.99.172, 66.87.99.255
Email: [email protected]

Hollie
Original username: Darkness
184.171.168.202, 108.116.212.19, 108.116.28.128, 173.135.103.122, 173.149.144.123, 173.96.31.42, 184.209.248.98, 184.209.33.8, 184.231.206.17, 209.184.116.69, 64.134.157.255, 66.87.66.40, 66.87.96.11, 66.87.96.183, 66.87.96.195, 66.87.96.235, 66.87.96.236, 66.87.96.247, 66.87.97.136, 66.87.97.168, 66.87.97.192, 66.87.97.195, 66.87.97.212, 66.87.97.248, 66.87.98.115, 66.87.98.116, 66.87.98.151, 66.87.98.199, 66.87.98.239, 66.87.98.246, 66.87.98.47, 66.87.98.72, 70.3.226.211, 71.21.81.140, 99.200.197.89, 99.200.30.168
Email: [email protected]

Darkness
66.87.97.248
Email: [email protected]

Stefanie Andrea
107.28.115.141, 107.28.115.39, 107.28.137.251, 107.28.157.204, 107.28.189.208, 107.28.236.187, 107.28.244.20, 107.28.4.167, 107.28.98.107, 107.33.133.10, 107.33.136.196, 107.33.137.168, 107.33.139.187, 107.33.142.242, 107.33.145.229, 107.33.151.27, 107.33.168.5, 107.33.21.220, 107.33.210.140, 107.33.227.97, 107.33.251.103, 107.33.36.31, 107.33.96.37, 107.42.106.33, 107.42.155.238, 107.42.165.200, 107.42.188.172, 107.42.57.45, 107.42.92.3, 108.103.118.133, 108.125.66.189, 173.106.109.70, 173.106.119.219, 173.106.224.91, 173.106.230.69, 173.106.238.80, 173.106.40.46, 173.106.62.182, 173.115.145.46, 173.115.170.26, 173.115.212.240, 173.115.231.4, 173.115.25.75, 173.115.40.218, 173.115.55.132, 173.115.83.235, 173.147.109.202, 173.147.109.52, 173.147.112.202, 173.147.144.157, 173.147.193.37, 173.147.48.31, 173.147.72.239, 173.147.92.189, 173.147.92.235, 173.147.99.80, 173.7.104.162, 173.7.163.60, 173.7.17.165, 173.7.186.176, 173.7.205.9, 173.7.38.118, 173.7.47.95, 173.96.25.55, 209.184.116.42, 209.184.116.69, 66.87.96.113, 66.87.96.17, 66.87.96.173, 66.87.96.183, 66.87.96.209, 66.87.97.1, 66.87.97.138, 66.87.97.192, 66.87.97.248, 66.87.97.47, 66.87.97.64, 66.87.98.227, 66.87.98.228, 66.87.98.47, 66.87.99.114, 66.87.99.78, 68.241.102.227, 68.241.186.220, 72.56.144.250
Email: [email protected]

I know, but I didn't want to create a separate thread for that.  It was something that caught my eye, and I knew you were posting on this thread, so I thought I'd slip it in there.

My apologies.

Doesn't really match what we're seeing here.
Again, this thread is about this specific scammer, not scammers in general

The only post you had in this thread just said "Keep an eye on ultraimports".

If you're going to call out someone as a probable scammer in public, some actual reasons would be nice.  I even examined his past posting history before asking you here.  The only things I could see that were even potentially suspicious was that (a) he made a comment saying not all new users are scammers, and (b) that he's got a somewhat low post count and is selling video cards.  Neither is a smoking gun.

Is there additional evidence or anything concrete that I'm missing?  Or should we just make this a witch-hunt thread?

EDIT: At least now I see the previous post you're talking about.  Sorry I missed it.  I've seen plenty of people who started off strong trying to sell anything they could, so I don't know if I can cast judgement based on that behavior.  But at least I see your position now.  Leaving the original post up instead of being one of those guys who deletes the evidence.

^ read my previous post.  

Edit:  It's actually really unfortunate that I even have to point out users like ultraimports as being suspicious.  If he is innocent, I am sorry for casting an aura of doubt.

Actually, he fits the pattern of what ThyDude did before 'someone' claimed he had a seizure and was taken to the hospital.

Users with under 50 posts who decide to try to sell multiple items in a very short time frame make me very suspicious.

Maged, make this a sticky, I believe this guy wont be leaving anytime soon..

He has to understand he will eventually make a mistake if he doesn't stop what he is doing, and when that time comes, he will have to deal with the fury of several dozens of people here.. I personally hopes this happens..

NoValues possibly also hollie/ninja/shift ?

https://bitcointalksearch.org/topic/yet-another-loan-thread-33343

If anyone here has the Texas address this guy was giving out, that would help greatly.

Would you mind explaining why?

thanks for excellent work, i asked long ago to give scammer label to shift, he could have deleted his posts.

many have been scammed and have evidence/info such as emails, but you have to pm them and get it from them.

That doesn't appear likely. I've also investigated ensign_lee in that thread.
That is exactly what has been happening.He doesn't match the pattern, but he might still be a regular scammer. It's hard to tell.

That information hasn't been revealed to me yet. I'll be sure to post the IP addresses as soon as I know them.

In regards to the ip addresses. Do they resolve to common hostname or internet service provider. If the do what is the geographic location? Do you think they where using proxies or TOR?

Keep an eye on ultraimports.

i hope moderators keep in mind that users who are using the marketplace with good feedback could also be incahoots with scam accounts (make a scam account, or 2 scam accounts, or 10... etc, get a bunch of bitcoins from items you never send, then take this money and buy items from toher forum members on non scam account, continue building reputation and selling items bought with money from scamming)

repeat process until all your accounts are banned and you make new accounts with VPN/proxy service freely available like hidemyass.com

And there's the infamous cover-up method in there, too. Still not entirely convinced, but it's plausible.

User netxshare may also be one of his accounts.  Stefanie Andrea accidentally answers a price inquiry for one of the items netxshare had for sale: https://bitcointalksearch.org/topic/m.485284

Very interesting. I'll look into it.

Some things to note:
This guy called out his other accounts as scammers when it was revealed that they were scammers. So even if someone has been scammed, that doesn't mean they can be trusted.

This guy purposely tries to lead us down the wrong trail. Take any personal information he's posted/given to you with a grain of salt.

https://bitcointalksearch.org/topic/m.512251

Odd. Either another account, or as suspected, Stefanie was the account that is supposed to stay in good standing.

Great work Maged. Thanks for the detective work.

There is one other person, but I can't reveal that since there is no evidence that it belongs to this guy.

Additionally, I suspect that there are more accounts. I saw many of the same patterns in other threads these guys posted in. If someone could look for those, that'd be great.

Can we id anyone else who might be related by using the ip's that they used?

Chief Master Detective Maged!

This thread is a compilation of all evidence against this group of people. The evidence contained will prove that they are all the same person, and they are all scammers. This list may be missing things. The goal of this is to gather enough evidence so that we can release the IP addresses these guys used to you all.

SHlFT:

• https://bitcointalksearch.org/topic/closed-loan-request-34656
  In the above thread, SHlFT takes a loan and never repays.
• https://bitcointalksearch.org/topic/beware-user-shift-he-is-a-scammer-41089
  Sold an iPhone, never sent it.

Evidence that SHlFT is part of this group:

• https://bitcointalksearch.org/topic/m.417162
  Sold HIB to Hollie.
• https://bitcointalksearch.org/topic/m.474496
  Hollie replied to loan request.
• https://bitcointalksearch.org/topic/m.475131
  Stefanie Andrea also replies.
• https://bitcointalksearch.org/topic/m.450080
  Hollie buys a PS3 Slim from SHlFT.
• https://bitcointalksearch.org/topic/wts-htc-evo-3d-brand-new-takes-3d-pictures-videos-unlocked-32263
  https://bitcointalksearch.org/topic/wts-htc-evo-3d-brand-new-takes-3d-pictures-videos-unlocked-32097
  Buys a HTC Evo 3D from Hollie.
• https://bitcointalksearch.org/topic/m.406961
  Posted in same thread as Hollie.
• https://bitcointalksearch.org/topic/m.431982
  Hollie replies saying that she sent 6.5 BTC to ex0420 for an iPhone, but it was SHlFT who offered the 6.5 BTC. He tried covering this slip-up later by saying "i was just about to buy this.."
• stick_theman received this email from SHlFT in regards to https://bitcointalksearch.org/topic/apple-ipad-64gb-wifi-w-3g-also-iphone-3g-for-sale-unlocked-jailbroken-34734
  
  Quote from: haploid23 on September 05, 2011, 04:35:55 PM
  Hello, Maged. I bought a PayPal Account from a guy on another site. He sells $150 PlayStation Network account for only $16 and also he sells $525 PayPal accounts that I bought for only $50. It may be possible that I bought a account that was used for scamming and that I got caught in the crossfire.
  
  Here's a link that people actually sell PSN accounts:
  http://www.dhgate.com/wholesale-hot-sell-us-network-psn-psps-150/p-ff80808130e5a14a01312c0334ca26d8.html
  And here's a link that people actually sell PayPal Accounts also:
  http://www.wickedfire.com/sell-buy-trade/136200-i-want-buy-verified-paypal-account.html
  
  That correlates to:
  https://bitcointalksearch.org/topic/m.509859
  https://bitcointalksearch.org/topic/m.510043
• IP match with (redacted), Hollie, and Pearikay

Pearikay:

Evidence that Pearikay is part of this group (in addition to the above links):

• https://bitcointalksearch.org/topic/m.485861
  Replies for SHlFT.
• https://bitcointalksearch.org/topic/m.510234
  Makes Stefanie Andrea appear trustworthy.
• https://bitcointalksearch.org/topic/m.494368
  Tries to throw us off the scent.

Please feel free to add any evidence or information you know about these guys here.