Hey everyone, just thought I'd make this quick post. Couple days ago I was scammed for 0.18 BTC by an escrow scammer, I was super busy at the time and didn't double check whether the escrow was valid or not. Long story short, the escrow wasn't valid and the guy made off with 0.18 BTC, ouch!
https://bitcointalksearch.org/topic/00018-5052757This was the initial thread that lead me to being scammed. I won't bother posting the original conversation since it was long, but it basically revolved around organizing an escrow in a Telegram chat, he then faked the escrow's username and grabbed my 0.18 BTC. Annoying, but I got hit with the oldest trick in the book, next time I'll double check!
Anyway, today I see another thread that looked strikingly similar to the one that got me the first time. Of course, I saw this as an opportunity to learn some more about my scammer, so I hatched a plot to reveal more information.
https://bitcointalksearch.org/topic/733-eth-loan-needed-xmr-collateral-5054244Following this, I reached out to the scammer on my alt account @Telegram and baited him into setting up the same scam again, I suggested an escrow (in this case Lauda, sorry Lauda!), and baited him into creating a group chat once again. Oh, and throughout this period I grabbed his IP address using a fake URL shortener. The fake escrow had used the Telegram @gumpykitty (missing an 'r').
I found that the guy is from Serbia, in the city of Belgrade, using an Android device. Further checks reveal his ISP to be Serbia Broadband. He later claims to be using a VPN, seems extremely unlikely to be a VPN from a home broadband provider. In a previous conversation (not shown) he revealed his name to be Nicolas (possibly fake) and provided the email
[email protected], Stajebilo meaning What happened in Croatian, one of the major languages of Serbia.
According to the position coordinates, the scammer is located somewhere near Skadarlija, though I am not certain how accurate this data is. No doubt he is within a reasonable distance of this place though.
What follows next is the entire conversation between me and the pathetic scammer via Telegram;
As you can see from the transaction ID:
https://www.blockchain.com/btc/tx/bbe54c20d98dd171da4f7f0bdedb309bfebc5d44a78da9a79eb47a19908fe735, the POS actually sent me my own funds back!
It is very likely that this is the same scammer that has been targeting people recently with fake escrow scams. If everybody could post all the known addresses and information you have of this guy, it may be possible to track him down via blockchain forensics.
The end!