Email scammer how to bust...??

[zachary]

SO a colleague of mine had a VERY convincing email about doing a wire transfer from another colleague.. long story short. It was a scam. A very good one, when you hit reply even reads as the right persons email address.

Well he responded to one so now he gets one a day asking for a transfer. Well we looked into the originating IP and they are all the same from all the emails. Sometimes emails looks legit others you can tell you are replying to a bogus email. What else can we do with the originating IP? We see it comes from Scottsdale Az...is there a way to get closer than the city level?


We are wanting to send in the drones.....

[Jewrrick]

It's probably being run through multiple VPN and proxies. My suggestion is to just let it go.

[zachary]

I just do not think this guy is this alert. All the bogus emails originate from the same IP address....

[cool cat]

Have you sent dick pics yet?

[Ratt]

I just do not think this guy is this alert. All the bogus emails originate from the same IP address....

That doesn't mean jack shit. It could be coming in through an anonymous proxy or VPN service set to use that same IP address for all traffic. It could also be a fake IP injected into the headers at some point. It could be an email relay service that sends all IP out of one IP address. The list goes on and on. If they were easy to catch, they would have already been caught.

[4king]

Yeah there was a Gmail fishing scam last week, I'm sure one of his contacts lists was hacked and now is under control of the hacker.

[yellowstang]

That doesn't mean jack shit. It could be coming in through an anonymous proxy or VPN service set to use that same IP address for all traffic. It could also be a fake IP injected into the headers at some point. It could be an email relay service that sends all IP out of one IP address. The list goes on and on. If they were easy to catch, they would have already been caught.

We need Talisman to figure it out, he can track any IP address back to the computer/user it came from.

[Rick Modena]

We need Talisman to figure it out, he can track any IP address back to the computer/user it came from.

At Bcoops party, he said he was never coming back.

Welp, at least he took Trublu with him when he left...

[yellowstang]

At Bcoops party, he said he was never coming back.

Welp, at least he took Trublu with him when he left...

They have internet now in Corpus, so he can still help.