The Shaving Cadre

Welcome to The Shaving Cadre, a forum dedicated to gentlemanly discourse about wet shaving and other topics of common interests. Membership is always free so register today and join in the fun

Robocalls, scams, phishing and fraud

CBLindsay

I Blame Dave
Owner
Legacy
The use of robocalls and emails to perpetrate scams, phishing and fraud seems to have gone wild. Despite having every phone number I own or use registered with the government do not call list, my phones ring of the hook with robocalls and texts. The most common "reason" for the call is to offer some sort of credit or loan product, the second most common are texts from Real Estate agents. Blocking these numbers makes you feel like you've done something productive but the reality is blocking does nothing because the robo-system does not rely on actual numbers (thank you Google), they just grab a temporary phone number for the call being placed. It used to be fun to spend hours messing with the person(s) making the unwanted calls but there aren't people attached to these calls/texts/emails. Perhaps the ultimate irony is that WE own all this wonderful tech so we can be connected at all times and never stop conducting the business of life...yet we are so plagued by unwanted calls we ignore any call whose number isn't in our personal phonebook. This means we are destined to play a game of cat and mouse whenever a "wanted" call comes in.

The flood of unwanted calls is a nuisance for sure but when the calls/texts and emails are being received for nefarious purposes it becomes a real problem. My aging clients are the ones most apt to fall for what I would think are obvious scams and phishing exercises aimed at stealing identities and emptying bank accounts. Several years ago it was a call to the old lady from a young sounding person "Grandma, I am stuck in mexico and they are going to put me in jail forever unless I pay them $10k TODAY. Can you send me money?" Fearing the grandson they didn't know they had was going to jail they would do whatever it took to send funds. I personally saw this affect more than one of my clients, fortunately I hated their unknown grandspawn enough to kill the transfer. Now, its a computer voice from the social security department warning you that your number has been compromised and you need to call back and give me all of your information to get it unlocked.

I thought I would start this thread as a place where we can share the various calls, scams and fraud we encounter. Perhaps by sharing our own experiences we can keep the rest of the cadre from falling prey. I wish we could list the names, numbers, email addresses, mug shots etc of the perps but doing so would be gong too far. We wouldn't want to "expose" innocent people or inadvertently slander upstanding folk. So DO NOT share identifying information, just the context of the scam and how it can be recognized or avoided.
***DO NOT list specific names, emails, numbers or identifying information***
 
I'll start by listing two unique scams that i was exposed to as a result of having a public comercial website for CBLsoap.com and/or the website for my wealth management business. Because I have/own these websites my personal information has to be stored for reference. The emails i create for these website are also a matter of public knowledge (or at least available for purchase for those looking for a mailing list).

The "I caught you being naughty, you need to pay me to be quite" scam-
The email is supposedly from an employee of the CIA who works with the child pornography division. The body of the email contains plenty of clean images and might look like what you might expect an official CIA email to look like. The senders address is not quite as official looking but you have to really look to see that information. The email goes on to say this person has obtained proof that my computer was used to produce or exchange illegal child pornography. The email is to inform me that arrests will begin soon BUT if I pay $$ (I think it was $2000 or $20000) to this person via bitcoin to the listed bitcoin account they will remove my information from the file before it is acted upon. Wow, what a deal. The email addressed me using the name I used when purchasing my professional website, not my actual name. If my regular name were used to purchase the website I imagine it would have been used in the email. Another "tell-tale" of the fraudulent nature (aside from the obvious...I don't traffic in such content) is that an entirely different "CIA" agent sent the same email to the other email addresses associated with that website. Each one had a different bitcoin acct number so I assume this is the work of multiple people OR bitcoin provides pre-assigned single transaction acct details.

Bitcoin being entirely anonymous there is no way to connect the acct number provide with any person so there is no risk the scammer might be found. I imagine someone who might fear being swept up in a CIA pornography raid would quickly pay up. Is the CIA even the agency that would be conducting the raid?

The "I canceled the transaction but you still charged me" scam-
This one was a surprise ...until it happened more than once. Having a retail website it is reasonable to expect customers to email with various concerns or issues so this scam might be easy to fall for. The email was simple. "I was shopping on your website last month, when I went to checkout my credit card was rejected so I cancelled my order. When I got my statement it showed a charge from your website, please provide a refund for $124.37." To help sell the scam they attach a "statement" for the bank account in question. Being a small (micro) business I know every detail about every order that is placed or pended, further more, my website provides certain protections for the buy and myself. I knew without a doubt this person had not attempted an order but the thought that this might have happened had me worried enough I responded to the email with a message asking for more detail about the order that had failed and offered to provide a refund if such information was provided...i did not mention what kind of product I sell or the sales price. Needless to say I never got a response. I don't make it a practice to open attachments to unsolicited emails so the attached "statement" was never opened and the email was deleted. Wouldn't you know it, several days later I got a nearly identical email from an entirely different email address. The concept was the same but the dollars and names had changed. This was proof positive this was a scam being used to get money from unsuspecting small businesses. I was dying to know what the "statement" showed so I took protective measures and set out to examine the document. As it turned out the attachment wasn't a document but a link to a website used to sell some sort of crap. I guess this scam was two fold, if they didn't get a refund based on the content of the email alone they would get me on their website.
 
...and this week's roboscam is a call from Jamie Dimon from chase bank. The computer reading the message mispronounces the name "Dimon".
 
This weekend I got a notice via email from "postmaster" that my email box has exceeded the quota established by my administrator and i would need to re-validate my email or my ability to send and receive email would cease. A link was provided which when clicked took me to an official looking page with my email prefilled, just need to enter my password and submit and everything would be fixed. This one had me going for a minute, keeping my email up and running is imperative for my businesses so I was not eager to ignore the email. When the link led to a page requesting my password I knew it was a scam ...when I got the same email sent to an email that is never used (only used to send email and it has never even sent email) my suspicion was confirmed. This was clearly a phishing scam looking to access my account information and/or passwords
 
First, this is a great thread.

Second, to my understanding the CIA is not allowed to Act within the US. Anything they do happen across is supposed to be sent to the FBI if it was found through legal means. Otherwise they don't have the authority to act. I could be wrong though.

and now for a call i have recieved a few times.

It is always a recording of an actual person reading a script but it is basically asking for "Donations" to one thing or another and trying to make you think it's a real person. One of them even started of with something like "oh hey i didn't actually think you would answer my call, even my wife doesn't pick up when i call anymore." to which i didn't respond out of mild surprise, then "he" carried on as if i had made a response. That was when i hung up. I think some of them are even trying to use AI to make you think you have an actual person talking to you.
 
First, this is a great thread.

Second, to my understanding the CIA is not allowed to Act within the US. Anything they do happen across is supposed to be sent to the FBI if it was found through legal means. Otherwise they don't have the authority to act. I could be wrong though.

and now for a call i have recieved a few times.

It is always a recording of an actual person reading a script but it is basically asking for "Donations" to one thing or another and trying to make you think it's a real person. One of them even started of with something like "oh hey i didn't actually think you would answer my call, even my wife doesn't pick up when i call anymore." to which i didn't respond out of mild surprise, then "he" carried on as if i had made a response. That was when i hung up. I think some of them are even trying to use AI to make you think you have an actual person talking to you.
I understand there are anti-robo apps that do use AI to trick live callers into wasting time. It might be fun to mess with an AI sales call, who knows, maybe I could get the AI tripped up enough to result in a very entertaining call. It has been a long time but i think I've received one of those "Oh hey, I didn't expect you to answer" calls. Probably because I DONT answer. I don't answer vendor calls either, If I want to talk to a vendor or sales rep I will give them my cell phone number and enter their number into my phonebook.
 
Great thread indeed, here I've heard of a 'scam' where you get a robo call, or actual human and they try to get you to say 'yes' to any question while secretly recording it.
They then take that yes and paste it into a sales call making it seem like you've agreed to buy some sort of subscription based product.
 
I know I come across a jerk on the site but I'm actually a big softie. My nature is to help people but they make it so hard.

Not only do I get the regular email and calls (out provider has some software that allows scammers to just ring once and then hangs up) but try being a church.

Not sure if this fits in the spirit of this thread but.....

Our church is small enough that I have my office out of the house and we just have one phone for both the house and the church. I'm constantly bombarded with calls asking for money. We have a policy that we don't give cash. If you need help with the electric heat bill I ask that you bring it to me and if we approve it we pay the bill directly to the company. You would be amazed at how many people get mad that they can't get cash.

Similar to the grand kid scam, we will get calls from from a "Young person from our town" who is stranded. They went out of state to a funeral and have broken down. They need around $2000 to pay the mechanic. They say that they live by the church and that they even visited one time and talked to me. They are very good at weaving a story. One started off with how he was carrying his grandmother's sweater and that he could smell her on it. I asked him if he lived near the Irving or the Gulf station in town and he claimed just down the road from the Gulf station. I pointed out there isn't any gas stations in town and he hung up. A year later he called again with the same story of being broken down (he apparently forgot he called a year ago). As he spun his story I interrupted and ask if he still had his grandmother's sweater and if it still smelled after a year....He hung up!!

We have done coat drives. Many people will give new jackets to help out. We found out that people were getting the jackets and then returning them to the stores for cash. We have since learned that if you remove the tag from the coat that they are unreturnable. I have been screamed at by ladies who really didn't want to have a coat for their kids but wanted a way to get some quick cash.

I could go on and on. It is sad but I have become very cynical over the years.
 
I get a lot of calls despite being registered on the do not call list. Most for student loan debt which is funny since I've never had a student loan in my life. It gets hard to screen the calls as they are stealing local cell phone numbers and calling from them. I've also gotten a couple calls from people wondering what I wanted when I never called them or even know who they are, so I know mine has been used a few times.

Worst part is that I only use my cell (no house phone), it's not listed anywhere, and only a few select people or work contacts have it. So somewhere in the upper part of the providers, it's being sold. Yet the FCC won't do anything because that would be too much like work for them.
 
Our country is run by private collectivist tyrannies with more rights than individuals. They are called corporations and they own the legislature.
 
Last edited:
I'll start by listing two unique scams that i was exposed to as a result of having a public comercial website for CBLsoap.com and/or the website for my wealth management business. Because I have/own these websites my personal information has to be stored for reference. The emails i create for these website are also a matter of public knowledge (or at least available for purchase for those looking for a mailing list).

The "I caught you being naughty, you need to pay me to be quite" scam-
The email is supposedly from an employee of the CIA who works with the child pornography division. The body of the email contains plenty of clean images and might look like what you might expect an official CIA email to look like. The senders address is not quite as official looking but you have to really look to see that information. The email goes on to say this person has obtained proof that my computer was used to produce or exchange illegal child pornography. The email is to inform me that arrests will begin soon BUT if I pay $$ (I think it was $2000 or $20000) to this person via bitcoin to the listed bitcoin account they will remove my information from the file before it is acted upon. Wow, what a deal. The email addressed me using the name I used when purchasing my professional website, not my actual name. If my regular name were used to purchase the website I imagine it would have been used in the email. Another "tell-tale" of the fraudulent nature (aside from the obvious...I don't traffic in such content) is that an entirely different "CIA" agent sent the same email to the other email addresses associated with that website. Each one had a different bitcoin acct number so I assume this is the work of multiple people OR bitcoin provides pre-assigned single transaction acct details.

Bitcoin being entirely anonymous there is no way to connect the acct number provide with any person so there is no risk the scammer might be found. I imagine someone who might fear being swept up in a CIA pornography raid would quickly pay up. Is the CIA even the agency that would be conducting the raid?

The "I canceled the transaction but you still charged me" scam-
This one was a surprise ...until it happened more than once. Having a retail website it is reasonable to expect customers to email with various concerns or issues so this scam might be easy to fall for. The email was simple. "I was shopping on your website last month, when I went to checkout my credit card was rejected so I cancelled my order. When I got my statement it showed a charge from your website, please provide a refund for $124.37." To help sell the scam they attach a "statement" for the bank account in question. Being a small (micro) business I know every detail about every order that is placed or pended, further more, my website provides certain protections for the buy and myself. I knew without a doubt this person had not attempted an order but the thought that this might have happened had me worried enough I responded to the email with a message asking for more detail about the order that had failed and offered to provide a refund if such information was provided...i did not mention what kind of product I sell or the sales price. Needless to say I never got a response. I don't make it a practice to open attachments to unsolicited emails so the attached "statement" was never opened and the email was deleted. Wouldn't you know it, several days later I got a nearly identical email from an entirely different email address. The concept was the same but the dollars and names had changed. This was proof positive this was a scam being used to get money from unsuspecting small businesses. I was dying to know what the "statement" showed so I took protective measures and set out to examine the document. As it turned out the attachment wasn't a document but a link to a website used to sell some sort of crap. I guess this scam was two fold, if they didn't get a refund based on the content of the email alone they would get me on their website.
These scams seem to have become popular once again, same exact copy coming from different senders. I am also getting a new one that frightens me little bit more because its the kind that i think my kids (or unwitting business partners) would fall for pretty easily. The email is rather simple in content and looks legitimate enough when viewed on a phone or ipad. The email presents itself as being from your mail server (in my case from MY business mail server which I administer) saying I am nearing my mail box quota and must re-verify my acct to increase my quota or I won't be able to send or receive any more emails once I am over quota. There is an easy link to click through to get the job done so falling prey is really easy. knowing the settings on my email accounts I knew the quota thing was total BS so I left the email for further review when I had the time to look into it rather than clicking through while I was out and about. Once I was able to isolate the email and view the hidden links I saw the links appeared to lead to an Herbalife site BUT I am sure there were additional hidden files hidden things that might load when the sites in the links where loaded. OR herbalife has upped their ambush marketing game.
 
It drives me crazy that there isn't a setting on my phone to automatically reject any number not programmed into my contact list.
 
Back
Top