Category: Origin: Brazil

Posted on

Fraudster: Randy Cooper

Virtual Office Space Fraud

“Randy Cooper” of New South Wales, AU

Summary of the Fraud Research

Despite going through the CC processor without a warning, there was reason to believe this transaction was fraudulent. This is another shipping & billing address located at a “Virtual Office” space, this time in Australia. The email address checked out & the “buyer” even responded to a backorder notification, saying that the delay is okay. A number of calls were made to the office building, requesting to speak to “Randy Cooper”. Each time a message was left with reception, no reply was made. This is the SAME issuing bank as the 

The email address ” mbrudulakeh@gmail.com ” belongs to Mbrudul Akeh, which actually matches the email address itself. It does not seem to belong to anyone named “Randy Cooper”, the buyer and recipient of the order.

Details of Card Used:

Billing address: 246 Pacific Highway Crows Nest, NSW, 2065, AU
Origin: Brazil
CVC Check: Passed
Street Check: Failed
Zip Check: Failed
Mastercard with last four 0513

Transaction Details:

mbrudulakeh@gmail.com
Billing & Shipping:
Randy Cooper
Outdoor Stuff NSW
246 Pacific Highway
Crows Nest New South Wales 2065
Australia
Phone: 0292503183
Posted on

Fraudster: Juragan Mbako

Juragan Mbako fraud

Summary of the Fraud Research

An order was received on March 17, 2015. Order was for a large number of Petzl Carabiners. These are not something that sells in this quantity so the order was flagged for research. Just a couple weeks later the order was marked as fraudulent by processor. The Email address “Juragan@SafetyBOS.com” was pinged  & didn’t bounce. Our email was never replied to. The domain “SafetyBOS” was slurped from SafetyBOSS.com. A call was placed to Safety Boss, alerting them to the cloned site. A followup email was sent to SafetyBoss.com letting them know of the details. An ICANN fraud complaint was launched & the site was removed.

The WHOIS information revealed that the SafetyBOS site was hosted from somewhere outside Jakarta, Indonesia. This matches the name “Juragan Mbako” from a brief Facebook search for the name… most of the owners of that name are from indonesia.

A search was done on the order’s billing & shipping information. These were actually the same with this one. Turns out the address belongs to a company that does virtual office space. Someone is renting an office, “FI 25” at this location & committing internet fraud.

Processor Details:

Origin: Brazil
CVC check: Passed
Street check: Unavailable: 
Zip check: Unavailable
Last 4: 1999
Bank: Banco Itaú (Latin American Bank)

Order Information:

Email: juragan@safetybos.com

Tel: 2125201660

Billing Address: 125 Park Ave Fl 25 New York, NY, 10017, US

Shipping Address: SAME

Time from order to dispute: Just a couple weeks indicating that whoever owned the actual card was paying attention & caught the fraudulent transaction quickly.