Sunday, June 24, 2012

SMS scammers now onto Paypal users


Hello All,Please watch out for the following M.O.:
This crowd sign up for SMS service and tells you they do managed sends.
Then they buy small volumes between 20-50 Euro at a time using different
email addresses.
When you ask about the different email addresses they claim it is to
refer to the client that they are sending for.
No later than a week or so, they disappear and the chargebacks from
Paypal starts. When you present your case to Paypal they refund no
matter what you submit. Two people contacted us and stated that they
did not do the transactions. In the mean time you loose the money they
paid, and they sent SMS which means you paid your supplier. Paypal
refunds every time and you sit at a loss. They seem to do this for a
week or two and then disappear. We advised the people that contacted us
that they should immediately ask their credit card company to change
their card and contact details as these people obviously sit with their
credit card details which they use to do these transactions.
The so-called "clients" appear to give false addresses from destinations
like Malaysia. They used the following usernames to register:
abolasso
bobbydean1
walkingdal
jbless4
We can give IP addresses but chances are that they send from different
locations all the time.

Joerg Lamber active again


Please note that Joerg Lamber tends to activate his scam when SS7 fix id
routes are down. At the moment there are only modem routes available so
he is active again offering unbelievable offers to users.Please be vigilant and only offer to buy a small volume even if the
price is higher. He will be taking you for a ride.

Fraud towards Agreegators Beware of Some Of German and Greece Companies

Be careful from the companies contacting you, asking you to terminate SMS to the following networks:
Antarctica, Sweden Tigo, Greece , San Marino, Angola prefix 6914 and to MVNO in Mexico(I do not remember the name)

*Sweden Tigo has no subscribers
*Greece prefix 6914 has no subscribers

Miraculous, the SMS sent to this destinations, end up to Germany E+, Movistar Spain, Tim Italy.


The Fraudester are companies from Germany and Greece.






They Manuplate the IMSI in messages and re-route actual sms to AA19 destinations.
They will Send sms to Non AA19 destinations like Antarctica and San Marino one of the Agregator has ss7 from San Marino and Antarctica.

I can provide more details with name and complete flow diagram contact at rajdip@routesms.com for more details

The Senders are mostly German.
The scam is that they change the Destination, so the aggregator is selling something like 0.01 EUR to the 'client', but he ends up paying 0.07 EUR.