eCommerce Fraud Stories

Posted on

Fraudster: Febry Erwanto & Damien Law

fraud address scam 70 McCullough Dr #Z4830 new castle, DE

Where Is My Tracking Number?

Two for the price of one! This was a pretty obvious fraud, even the processor said so! If you receive an order for a large quantity of items & the street check, the Zip check both fail, might as well refund / mark as fraud right away. What’s funny about this fraudster is “Febry” actually replied to the order confirmation email, requesting a tracking code for the shipment! Most don’t even bother.

While the billing & shipping are the same, they’re not legit & don’t match whatever the actual address is on file with the CC company. Search for the address and, WOW! 40 reviews of this address being a SCAM! This is impressive! https://goo.gl/maps/qhrptm8Hiet

This victim asks a very good question…scam victim new castle DE

A “Crime Tip” was reported to the New Castle County police department: https://mypolicedepartment.org/new-castle-county-police/tipform

new castle county PD

To top it all off, just a few days later an order was received by Damien Law using the SAME ADDRESS!

Transaction Details 1

Name: Febry Erwanto
Card: Visa Debit, 8211
Billing: 70 McCullough Drive #Z4830 New Castle DE, 19720 USA
Shipping: Same
Origin: USA
CVC: Passed
Street Check: Failed
Zip Check: Failed
Email Used: kerdusan_sempak@yahoo.com
Phone Used: 3463010457

Transaction Details 2

Name: Damien Law
Card: Visa Credit 8480
Billing: 70 McCullough Drive #Z4830 New Castle DE, 19720 USA
Shipping: Same
Origin: USA
CVC: Passed
Street Check: Failed
Zip Check: Failed
Email Used: damienlaw75@gmail.com
Phone Used: 3024819868

 

 

Posted on

Fraudster: Christina Rinella

Cristina Rinella fraud

“Christina Rinella” of Burr Ridge, IL

Christina was reported to us as Chargeback Fraud. Chargeback fraud, also known as friendly fraud, occurs when a consumer makes an online shopping purchase with their own credit card, and then requests a chargeback from the issuing bank after receiving the purchased goods or services. This happened to a merchant on 2/15/2016. The order was received & shipped a day later with tracking. on 3/16/2016 the customer disputed the charge.

An attempt was made by the merchant to resolve but the customer did not reply. A quick Facebook profile search found the customer USING THE PRODUCT. This information, along with tracking details were forwarded to the CC company (Chase Bank) in an attempt to defeat the chargeback. Unfortunately, the merchant was not successful, eating the cost of the products + the cost of shipping & the chargeback fee.

Card Details:

Billing address: 6451 s. Elm st. Burr Ridge, IL, 60527, US
Origin: United States
CVC check: Passed
Street check: Passed
Zip check: Passed

Transaction Details:

Billing address

Cristina Rinella
6451 s. Elm st
Burr Ridge, IL 60527

Shipping address

Cristina Rinella
6451 s. Elm st
Burr Ridge, IL 60527
Posted on

Fraudster: Marvin Wedell

Marvin Wedell fraud at 472 Amherst

Fool Us 8 Times, Shame On Enforcement

“Marvin” used the classic, unsophisticated stealing of credit card information either gleaned himself or purchased from someone else. The fraudster then purchases something “marketable” (easy to sell) online, using the real billing info, swapping out the shipping address for an anonymous location he has access to. The fraudster then picks up the item and is away to the pawn shop or ebay.

This transaction came in as fishy to the merchant only because it was for a large number of items that don’t usually sell in large quantities. That was red flag 1, followed quickly by red flag 2: a shipping address at a pack and ship that seems to be used by other fraudsters!

A quick Google search found that this shipping address has been used for fraud at least 8 times before: https://badbuyerlist.org/search?utf8=%E2%9C%93&q=472+Amherst+St&button=

The Nashua Police Department has been made aware of this individual instance along with the 8 other reported instances at this location.

financial fraud nashua police

 

Transaction Details

Name: Marvin Wedell
Card: Mastercard CC 3248
Billing: 1133 Ravine Ridge Drive, Worthington OH 43085
Shipping: 472 Amherst St #76789 Nashua, NH 03063
Origin: United States
CVC: Passed
Street Check: Passed
Zip Check: Passed
Email: wedell@dr.com
Tel: 8019005912

Posted on

Fraudster: Jhon Lee

singapore ecommerce fraud

“Jhon Lee” of Singapore

This was an order for multiple items (thousands of dollars) with express shipping. The destination is a freight forwarding business within the Singapore airport. An inbound email was received regarding this order. The emailed used to contact us was the same email addressed used at checkout.

A quick Google Search of that email address yielded an eCommerce Scam Story on another website! The email address was flagged by them & all the details were spelled out.

We forwarded the information we had to authorities in Singapore & canceled the order.

What’s weird is this fraud origin was the USA (per the CC processor).

Conversations:

Apr 20, 2015

Dear Sir/Madame,
    I would like to know about my order status.
    Please confirm me soon.
    Thanks,

Apr 21, 2015

Comments: Hello,
I would like to know about my ORDER STATUS?
When you ready to ship my ORDER?
I’m waiting for your reply confirmation as soon as possible.
Thanks,

Details of Card Used:

Name: Jhon Lee
Number•••• 8435
Fingerprint: nFKBGvbLqmc2J3ve
Type: MasterCard credit card
Billing Address: Simply IEL 115 Airport Road Building C #05-16
Singapore, 819466, SG
Origin: United States
CVC check: Passed
Street check: Failed

Zip check: Failed

Transaction Details:

Email: sorjan@keptprivate.com
Tel: 65 65423441
Billing & Shipping are the same

Posted on

Fraudster: Randy Cooper

Virtual Office Space Fraud

“Randy Cooper” of New South Wales, AU

Summary of the Fraud Research

Despite going through the CC processor without a warning, there was reason to believe this transaction was fraudulent. This is another shipping & billing address located at a “Virtual Office” space, this time in Australia. The email address checked out & the “buyer” even responded to a backorder notification, saying that the delay is okay. A number of calls were made to the office building, requesting to speak to “Randy Cooper”. Each time a message was left with reception, no reply was made. This is the SAME issuing bank as the 

The email address ” mbrudulakeh@gmail.com ” belongs to Mbrudul Akeh, which actually matches the email address itself. It does not seem to belong to anyone named “Randy Cooper”, the buyer and recipient of the order.

Details of Card Used:

Billing address: 246 Pacific Highway Crows Nest, NSW, 2065, AU
Origin: Brazil
CVC Check: Passed
Street Check: Failed
Zip Check: Failed
Mastercard with last four 0513

Transaction Details:

mbrudulakeh@gmail.com
Billing & Shipping:
Randy Cooper
Outdoor Stuff NSW
246 Pacific Highway
Crows Nest New South Wales 2065
Australia
Phone: 0292503183
Posted on

Fraudster: Juragan Mbako

Juragan Mbako fraud

Summary of the Fraud Research

An order was received on March 17, 2015. Order was for a large number of Petzl Carabiners. These are not something that sells in this quantity so the order was flagged for research. Just a couple weeks later the order was marked as fraudulent by processor. The Email address “Juragan@SafetyBOS.com” was pinged  & didn’t bounce. Our email was never replied to. The domain “SafetyBOS” was slurped from SafetyBOSS.com. A call was placed to Safety Boss, alerting them to the cloned site. A followup email was sent to SafetyBoss.com letting them know of the details. An ICANN fraud complaint was launched & the site was removed.

The WHOIS information revealed that the SafetyBOS site was hosted from somewhere outside Jakarta, Indonesia. This matches the name “Juragan Mbako” from a brief Facebook search for the name… most of the owners of that name are from indonesia.

A search was done on the order’s billing & shipping information. These were actually the same with this one. Turns out the address belongs to a company that does virtual office space. Someone is renting an office, “FI 25” at this location & committing internet fraud.

Processor Details:

Origin: Brazil
CVC check: Passed
Street check: Unavailable: 
Zip check: Unavailable
Last 4: 1999
Bank: Banco Itaú (Latin American Bank)

Order Information:

Email: juragan@safetybos.com

Tel: 2125201660

Billing Address: 125 Park Ave Fl 25 New York, NY, 10017, US

Shipping Address: SAME

Time from order to dispute: Just a couple weeks indicating that whoever owned the actual card was paying attention & caught the fraudulent transaction quickly.
Posted on

Fraudster: Angela Lim

Angela Lim singapore fraud

Angela Lim” of Singapore

The street check failed on this one but that’s not totally uncommon. An order going to Singapore is also not uncommon. The “Customer” emailed us, requesting to pay via a manual CC run. We refused and sent her an invoice she could use a CC to pay online via PayPal. She refused to pay via PayPal, claiming she lost $ using PayPal. She then went through the website to place the order. She even “negotiated” the shipping method, claiming that USPS charges too much in duties (not true but whatever). The card was reported stolen to the CC company just a few days after the transaction went through.

Card Details:

ID: card_5skRP0hO4CdcnD
Name: Angela Lim
Number: •••• 4450
Fingerprint: pgwa2JbEubHExKnN
Expires: 2016
Type: MasterCard credit card
Issuing Bank: BMO (Bank of Montreal)
Billing address: 759 Jurong West Street Singapore, 59230, SG
Origin: United States
CVC check Passed
Street check: Failed
Zip check: Passed

Transaction Details:

Amount: $6,878.47

Email: gear@geartech.biz

Tel: 6564721184

Billing address

Angela Lim
759 Jurong West Street
Singapore
59230
Singapore

Shipping address

Angela Lim
Co Gear Tech
Aero (PITU8) No.7 Airline Road Changi Crg Building E 03-05
Singapore
819834
Singapore