Author

Topic: **SCAM ALERT** Old accounts coming back (Read 6313 times)

legendary
Activity: 1554
Merit: 1222
brb keeping up with the Kardashians
April 19, 2013, 10:35:21 AM
#32
I just saw CanaryInTheMine request .1 BTC over in Currency Exchange. Not sure if that one was legit or not, but we'll find out later today I guess.

Edit: Nvm, he already paid back.
ccl
full member
Activity: 175
Merit: 100
April 17, 2013, 07:29:24 PM
#31
Don't worry Maged!

The unofficial lending forum guardians are here.   Grin

^ is one thing I love this community...we all work together and watch each over each other.. +1
Vod
legendary
Activity: 3668
Merit: 3010
Licking my boob since 1970
April 17, 2013, 06:50:17 PM
#30
Don't worry Maged!

The unofficial lending forum guardians are here.   Grin
legendary
Activity: 1204
Merit: 1015
April 17, 2013, 05:52:45 PM
#29
Is there any dormant account policy?
No, there isn't.

I suggest those dormant accounts receive email notification like a warning that failure to respond or atleast login will cause their accounts locked or create a tag for those account  So when they're login again they can easily be identified.
We're looking to see what we can do to stop this, but it isn't easy. Especially since we allow logins from tor.

Nice catch!

But was access gained? Were the accounts actually compromised, or are the accounts simple extra accounts from established members?
Yes, access was gained to these accounts and was used to get ripples. Some of them appear to have been made by bots, but others used to be someone's main account.
sr. member
Activity: 351
Merit: 250
April 17, 2013, 05:13:00 PM
#28
Nice catch!

But was access gained? Were the accounts actually compromised, or are the accounts simple extra accounts from established members?
full member
Activity: 215
Merit: 100
Shamantastic!
April 17, 2013, 05:06:36 PM
#27
I was wondering what ever happened to all those sockpuppet castoffs.
ccl
full member
Activity: 175
Merit: 100
April 17, 2013, 05:05:05 PM
#26
Is there any dormant account policy?  I suggest those dormant accounts receive email notification like a warning that failure to respond or atleast login will cause their accounts locked or create a tag for those account  So when they're login again they can easily be identified.
legendary
Activity: 2646
Merit: 1137
All paid signature campaigns should be banned.
April 17, 2013, 04:43:36 PM
#25
Is there a way to verify oneself against this? I was inactive for a while after a gpu blowout, I'd hate to think of being tarred with this brush though.
You only have 16 posts anyway so this really does not apply to you.
newbie
Activity: 42
Merit: 0
April 17, 2013, 04:20:50 PM
#24
Is there a way to verify oneself against this? I was inactive for a while after a gpu blowout, I'd hate to think of being tarred with this brush though.
legendary
Activity: 1632
Merit: 1010
April 17, 2013, 04:13:14 PM
#23
Thanks for the heads up. +1
legendary
Activity: 1204
Merit: 1015
April 17, 2013, 04:11:59 PM
#22
*bump*

These guys are back. I don't know if they are targeting lending, but we've verified that they're targeting the free ripple giveaway, so keep an eye out for them.
legendary
Activity: 2646
Merit: 1137
All paid signature campaigns should be banned.
Still valid today.  Check any post history for a long dormant time followed immediatly by a lot of selling and/or loan activity.  These accounts are often hacked accounts.
legendary
Activity: 1554
Merit: 1222
brb keeping up with the Kardashians
I don't think SMF is that smart without customization. But I think    Maged is right. Recently there have been a ton of gift card sellers that are either brand new users or old users who have since been dormant. But they all want to sell easily carded gift cards.
sr. member
Activity: 448
Merit: 250
Surely, if person has not logged in for a long time, then logs in from say an IP in a complete different country, cant we force them to confirm account or somthing? Cant remember if when I signed up if there was email conf., but surely, could just set flag to "requires email conf" to 1 or whatnot?

legendary
Activity: 2646
Merit: 1137
All paid signature campaigns should be banned.
Necro hmm'er
newbie
Activity: 57
Merit: 0
very interesting
sr. member
Activity: 415
Merit: 250
Money is the root of all evil.
February 16, 2012, 05:42:05 PM
#16
Why not just deactivate the account and force a password reset through email confirmation..
hero member
Activity: 588
Merit: 500
Hero VIP ultra official trusted super staff puppet
January 30, 2012, 11:40:13 AM
#15
Sorry, Sad

I get defensive alot...bad habit...

It's alright, it takes a while to get used to the hive-mind attitude around here. The sooner you get used to it, the sooner they stop being able to pick up your scent. You'd think becoming more known would make you a bigger target, but this community's one and only enemy seems to be anonymity, something they claim to embrace.

It's a double edged sword.
legendary
Activity: 1316
Merit: 1011
January 30, 2012, 11:11:09 AM
#14
Sorry, Sad

I get defensive alot...bad habit...
hero member
Activity: 588
Merit: 500
Hero VIP ultra official trusted super staff puppet
January 30, 2012, 11:10:15 AM
#13
1BYwQ9bYxatmtL5GadfA5d5Jn6mMHJU3gZ I ordered 2 magazines you have my name and address, jesus.

also:

Edit: I looked into it, and I see that isn't possible. However, he looks clean. I'll get back to you guys on the IP check.

edit2: "desperate and unoriginal" no not desperate at all. I no longer want the loan, I'm not a drug addictict I'm not jonesing for a fix I don't need 1 btc, I would have liked the loan but I certainly don't need it. I am however frustrated I'll go down in history as a scammer despite overwhelming evidence I'm not simpley because I can't gpg authenticate. I guess gpg key > has access to forum account, has acess to gpg email account, has access to forum email account, has the exact same geo location....


LOL.....

Chris, I was just answering the question, I wasn't talking about you ^_^

Quote
Riddle me this what kind of scammer makes a series of mundane posts before trying to pull off a 5 dollar scam?

Quote
A confidence man, mostly desperate and unoriginal, and more than likely a teenager unable to earn money on their own. Next question?


legendary
Activity: 1316
Merit: 1011
January 30, 2012, 10:26:11 AM
#12
Mark me as a spammer, I dare you! If you delete this account after 200+ I won't come back, isn't wierd the geo tag of my ip is the same, I have access to all my email account and I have access to my forum account. What a bunch of cry babies I am inactive for a while then shortly after I come back ask for a ~5 dollar loan and everyone is like "STANGER DANGER STRANGER DANGER!" Riddle me this what kind of scammer makes a series of mundane posts before trying to pull off a 5 dollar scam?

A confidence man, mostly desperate and unoriginal, and more than likely a teenager unable to earn money on their own. Next question?

1BYwQ9bYxatmtL5GadfA5d5Jn6mMHJU3gZ I ordered 2 magazines you have my name and address, jesus.

also:

Edit: I looked into it, and I see that isn't possible. However, he looks clean. I'll get back to you guys on the IP check.

edit2: "desperate and unoriginal" no not desperate at all. I no longer want the loan, I'm not a drug addictict I'm not jonesing for a fix I don't need 1 btc, I would have liked the loan but I certainly don't need it. I am however frustrated I'll go down in history as a scammer despite overwhelming evidence I'm not simpley because I can't gpg authenticate. I guess gpg key > has access to forum account, has acess to gpg email account, has access to forum email account, has the exact same geo location....
hero member
Activity: 588
Merit: 500
Hero VIP ultra official trusted super staff puppet
January 30, 2012, 03:21:35 AM
#11
Mark me as a spammer, I dare you! If you delete this account after 200+ I won't come back, isn't wierd the geo tag of my ip is the same, I have access to all my email account and I have access to my forum account. What a bunch of cry babies I am inactive for a while then shortly after I come back ask for a ~5 dollar loan and everyone is like "STANGER DANGER STRANGER DANGER!" Riddle me this what kind of scammer makes a series of mundane posts before trying to pull off a 5 dollar scam?

A confidence man, mostly desperate and unoriginal, and more than likely a teenager unable to earn money on their own. Next question?
sr. member
Activity: 266
Merit: 250
The king and the pawn go in the same box @ endgame
January 29, 2012, 06:11:40 PM
#10
Mark me as a spammer, I dare you! If you delete this account after 200+ I won't come back, isn't wierd the geo tag of my ip is the same, I have access to all my email account and I have access to my forum account. What a bunch of cry babies I am inactive for a while then shortly after I come back ask for a ~5 dollar loan and everyone is like "STANGER DANGER STRANGER DANGER!" Riddle me this what kind of scammer makes a series of mundane posts before trying to pull off a 5 dollar scam?
A thorough one. How many coins you looking for? I might be able to help.
legendary
Activity: 1204
Merit: 1015
January 29, 2012, 05:54:02 PM
#9
Recently chris200x9 (https://bitcointalksearch.org/user/chris200x9-3079) came onto IRC asking for a 2 day 5% loan.  He said he couldn't identify and he couldn't auth.  If you look at his lastest posts (https://bitcointalksearch.org/user/chris200x9-3079;sa=showPosts), you will notice a large 5-6 month gap between June 2011 and December 2011.  If he can auth or identify, then I would retract this post.  However, as of now, his identity is shaky and I wanted to warn anyone considering loaning to him.

is there anyway to be taken off this list once the admins recognize I'm awesome? If not, character assasination.

If you can identify on IRC and/or GPG Authenticate on #bitcoin-otc, I would be more confident in trusting you, as would everyone else.  You cannot provide any proof of identity except that you have access to this seemingly inactive forum account.

I just replied to chmod775's email to my bitcoin-otc registered email address...
GPG identify here, or we'll reset your forum password and mark you as a scammer until you do.

GPG sign the following:



I verify that the following post was made by me:
https://bitcointalksearch.org/topic/scam-alert-old-accounts-coming-back-61500


Edit: I looked into it, and I see that isn't possible. However, he looks clean. I'll get back to you guys on the IP check.
full member
Activity: 176
Merit: 100
January 29, 2012, 04:35:57 PM
#8
Recently chris200x9 (https://bitcointalksearch.org/user/chris200x9-3079) came onto IRC asking for a 2 day 5% loan.  He said he couldn't identify and he couldn't auth.  If you look at his lastest posts (https://bitcointalksearch.org/user/chris200x9-3079;sa=showPosts), you will notice a large 5-6 month gap between June 2011 and December 2011.  If he can auth or identify, then I would retract this post.  However, as of now, his identity is shaky and I wanted to warn anyone considering loaning to him.

is there anyway to be taken off this list once the admins recognize I'm awesome? If not, character assasination.

If you can identify on IRC and/or GPG Authenticate on #bitcoin-otc, I would be more confident in trusting you, as would everyone else.  You cannot provide any proof of identity except that you have access to this seemingly inactive forum account.
legendary
Activity: 2646
Merit: 1137
All paid signature campaigns should be banned.
full member
Activity: 176
Merit: 100
January 29, 2012, 01:37:49 PM
#6
Recently chris200x9 (https://bitcointalksearch.org/user/chris200x9-3079) came onto IRC asking for a 2 day 5% loan.  He said he couldn't identify and he couldn't auth.  If you look at his lastest posts (https://bitcointalksearch.org/user/chris200x9-3079;sa=showPosts), you will notice a large 5-6 month gap between June 2011 and December 2011.  If he can auth or identify, then I would retract this post.  However, as of now, his identity is shaky and I wanted to warn anyone considering loaning to him.
legendary
Activity: 1512
Merit: 1036
January 28, 2012, 05:38:27 PM
#5
An admin should run the password list against logins and see if they match (probably many more have been cracked since the original publication of passwords, they might be circulating in underworld circles). Also, inactive accounts that have email addresses on that list should be locked, with email confirmation to reopen (supposing the pwnd person didn't use the same pw on here, mtgox, AND email...)

Another trigger for investigation should be a password reset after long inactivity. Inactive, reset pw, post for loan: lock.
sr. member
Activity: 266
Merit: 250
The king and the pawn go in the same box @ endgame
January 28, 2012, 01:59:14 PM
#4
Thanks for the heads up Maged
legendary
Activity: 1204
Merit: 1015
January 28, 2012, 01:55:17 PM
#3
This is the list we have:
bitbetter
Gluskab
brunoshady
killer2021
kuba_10
Sjalq
madload
darvil
epii
Clarithium
borito4
tachi641
pharno
Iyeman

If the account is no longer marked as a scammer, that means that we believe that the original owner has taken back the account. However, you should still ask for extra identification before transacting with any of these people.
hero member
Activity: 784
Merit: 1000
bitcoin hundred-aire
January 28, 2012, 10:04:37 AM
#2
epii (or at least the hacker who is now controlling his account) is also a scammer
legendary
Activity: 1204
Merit: 1015
January 28, 2012, 01:58:36 AM
#1
Recently, people who have been inactive for a long time have been requesting loans out of the blue. These accounts have been compromised. At this time, we believe that the accounts used the same password as what was released back during the MtGox hack. We are marking these accounts as scammers as soon as we see them, but there are several that we've missed. If you see someone request a loan after being largely inactive, REPORT THE POST AND CONTACT A MODERATOR IMMEDIATELY.
Jump to: