corsasport.co.uk
 

Corsa Sport » Message Board » General Chat » I've been scammed - help finding scammer


New Topic

New Poll
  <<  1    2  >> Subscribe | Add to Favourites

You are not logged in and may not post or reply to messages. Please log in or create a new account or mail us about fixing an existing one - register@corsasport.co.uk

There are also many more features available when you are logged in such as private messages, buddy list, location services, post search and more.


Author I've been scammed - help finding scammer
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
15th Feb 17 at 21:09   View User's Profile U2U Member Reply With Quote

Not via this site, but I've been scammed buying a MTB via PinkBike. Long and short of it is my own fault for being too trusting... and not doing the checks before sending money... and bank transferring the cash! 900 so not a massive amount but enough to piss me off.

The advert - http://www.pinkbike.com/buysell/2124377/

Friday 10th Feb - After a few msgs and then emails I sent the money and he promptly fell off the face of the earth.

He gave his full name and address, but these are prob not real.

Joseph / Joe Mitchinson - joemitchinson2011@outlook.com

293 ormskirk road
Wn59dn
Greater Manchester

His bank account details

Barclays Bank

Account number 90639389
Sort code 20 25 95

I also have some headers from email but nothing pointing to aliases.


********************************************************************
I've since done a bit of digging on the bike (should have done this first eh!) and spoke to the guy who built it, and got the contact details for the owner who had not long sold it. Described the advert and low and behold it sounds like someone has just lifted the previous owners advert.

Can anyone help trace this clown? I'm going to speak to the bank to try and retract the payment but not holding out much hope of that. Can anyone trace the account holders name/details from the acc/sort code?

Involving the police - I guess i'll need to really, but any advice on who/where? I'm out in NZ just now so cant nip in past the local station LOL

pic of the add in case it disapears.






Email headers (i'm the trackscotland accout, and IP in singapore i think)

Delivered-To: akindness@gmail.com
Received: by 10.103.151.86 with SMTP id z83csp387284vsd;
Fri, 10 Feb 2017 01:26:58 -0800 (PST)
X-Received: by 10.55.149.6 with SMTP id x6mr7135384qkd.55.1486718817971;
Fri, 10 Feb 2017 01:26:57 -0800 (PST)
Return-Path: <joemitchinson2011@outlook.com>
Received: from leaf101.mfilter.dimenoc.com (banana.mfilter.dimenoc.com. [72.29.89.6])
by mx.google.com with ESMTPS id t48si834591qtb.81.2017.02.10.01.26.57
for <akindness@gmail.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 10 Feb 2017 01:26:57 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning joemitchinson2011@outlook.com does not designate 72.29.89.6 as permitted sender) client-ip=72.29.89.6;
Authentication-Results: mx.google.com;
dkim=pass header.i=@outlook.com;
spf=softfail (google.com: domain of transitioning joemitchinson2011@outlook.com does not designate 72.29.89.6 as permitted sender) smtp.mailfrom=joemitchinson2011@outlook.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=outlook.com
Received: from localhost (localhost [127.0.0.1]) by leaf101.mfilter.dimenoc.com (Postfix) with ESMTP id DC57F2266E0 for <akindness@gmail.com>; Fri, 10 Feb 2017 04:26:54 -0500 (EST)
X-Virus-Scanned: amavisd-new at leaf.mfilter.dimenoc.com
Received: from leaf101.mfilter.dimenoc.com ([127.0.0.1]) by localhost (leaf101.mfilter.dimenoc.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25Cb7m_SJbiI for <akindness@gmail.com>; Fri, 10 Feb 2017 04:26:54 -0500 (EST)
Received: from sh156.surpasshosting.com (sh156.surpasshosting.com [72.29.66.18]) by leaf101.mfilter.dimenoc.com (Postfix) with ESMTP for <akindness@gmail.com>; Fri, 10 Feb 2017 04:26:54 -0500 (EST)
Received: from blu004-omc3s13.hotmail.com ([65.55.116.88]:54586) by sh156.surpasshosting.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256) (Exim 4.87) (envelope-from <joemitchinson2011@outlook.com> id 1cc7Th-00085T-Mg for ak@trackscotland.co.uk; Fri, 10 Feb 2017 04:26:53 -0500
Received: from EUR02-VE1-obe.outbound.protection.outlook.com ([65.55.116.72]) by BLU004-OMC3S13.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Fri, 10 Feb 2017 01:26:53 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=Fromate:Subject:Message-ID:Content-Type:MIME-Version; bh=TW2znw2q4p55WCzhprky00N36UJOhr1NT3FsBdVvIS0=; b=Ad9RMr9MdoGq4x9YXiZe2tzE8jgIkhPiwSXcfZE00jRdnZQEwpG3tk9o3Vz3d90Sot2Fv/lfuxemttId6ydfeLm0CjOhnxm/mBcfQ8F6Sb28aqbR5TSpfmOqxbjkoVq+VaXlsWLjvgbluClk3cHtcnE8AilqXOT/W3jcnIQnxFRfGqz0Yv5XvJZM4tP3YYvqJO7SRFwQ9HiKUftSgmX2yuykQd/Wtr3Ziw2k5NTqKf+86662Dx5ra7XKnSUTUYaRh70aszh2Vh3sY2PKixTYml140yZOivio3q7ikgnjrX9daWixGcFts6C+iv+qPgnhldgR5usQZ5eVuXQb4/pL/Q==
Received: from HE1EUR02FT034.eop-EUR02.prod.protection.outlook.com (10.152.10.52) by HE1EUR02HT094.eop-EUR02.prod.protection.outlook.com (10.152.11.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.888.7; Fri, 10 Feb 2017 09:26:51 +0000
Received: from AM5PR10MB0516.EURPRD10.PROD.OUTLOOK.COM (10.152.10.58) by HE1EUR02FT034.mail.protection.outlook.com (10.152.10.67) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.904.16 via Frontend Transport; Fri, 10 Feb 2017 09:26:51 +0000
Received: from AM5PR10MB0516.EURPRD10.PROD.OUTLOOK.COM ([10.167.220.148]) by AM5PR10MB0516.EURPRD10.PROD.OUTLOOK.COM ([10.167.220.148]) with mapi id 15.01.0888.028; Fri, 10 Feb 2017 09:26:51 +0000
From: joe mitchinson <joemitchinson2011@outlook.com>
To: "ak@trackscotland.co.uk" <ak@trackscotland.co.uk>



some info from admin on pinkbike

**********************************************************
Hi Adam

I had no choice but to ban his account as he is still scamming others. I've also banned various other accounts under his IP. As you can see he's login in from various IPs. Here is the info:

Offline
Username: joemitch2011 UserId: 1274406
Email: joemitchinson2011@outlook.com
Last: 2017-02-15 05:562
Join: 2017-02-04 09:55:40
Login Count: 66
ip: 2.222.252.181
1 people from this ip
(joemitch2011,10 183421 )
Preston, H2, GB


Signed up from following IP -----

ip ipgeo count datetime log useragent
92.40.249.156 GB 1 2017-02-04 09:55:40 signup Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393

Logged in from following IPs -----

ip ipgeo count datetime log useragent
139.59.225.82 AU 1 2017-02-15 03:516 vialong Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
2.222.252.181 GB 6 2017-02-14 12:55:23 remember Mozilla/5.0 (iPad; CPU OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3
85.255.233.217 GB 1 2017-02-14 05:22:34 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.8.196.119 GB 2 2017-02-14 04:52:22 vialong Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.132.218.45 GB 1 2017-02-14 04:18:38 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
90.214.41.83 GB 10 2017-02-13 13:31:49 vialong Mozilla/5.0 (Linux; Android 6.0.1; SM-T580 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36
85.255.235.235 GB 2 2017-02-13 10:40:39 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.132.187.27 GB 1 2017-02-13 08:49:47 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.132.244.227 GB 9 2017-02-13 03:46:24 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G935F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
37.139.2.93 NL 1 2017-02-10 00:48:13 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
85.203.9.35 NL 1 2017-02-10 00:20:56 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
82.132.246.21 GB 1 2017-02-09 01:47:38 remember Mozilla/5.0 (Linux; Android 5.1.1; LG-K120 Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
208.123.223.254 CA 1 2017-02-09 00:48:23 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
92.40.249.104 GB 1 2017-02-08 13:53:24 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-T580 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36
185.89.251.35 NL 1 2017-02-08 12:30:40 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
185.89.248.35 GB 1 2017-02-08 11:128 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
82.9.173.128 GB 4 2017-02-08 07:28:52 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G935F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.132.245.20 GB 1 2017-02-08 06:35:40 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G935F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
2.218.122.82 GB 8 2017-02-07 12:20:20 vialong Mozilla/5.0 (Linux; Android 6.0.1; SM-T580 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36
90.212.193.133 GB 25 2017-02-04 163:48 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-T580 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36
92.40.249.156 GB 2 2017-02-04 09:55:40 signup Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393


***************************************

Can anyone get any info from the above?

I've spoken with the real owner, the builder etc... and found the orig EBAY add this was copied from (1st Feb).

M2RTY
Member

Registered: 25th May 01
User status: Offline
15th Feb 17 at 21:39   View User's Profile U2U Member Reply With Quote

See if site admin can notify you if he lists another bike, set up a new email address and contact him and try extract some more details? Bound to cock up sometime
Ben J
Member

Registered: 31st Jan 05
Location: Cheshire
User status: Offline
15th Feb 17 at 21:59   View User's Profile U2U Member Reply With Quote

Is that address likely to be his?

Ad says Rochdale but address is Wigan?

It's about 5 miles from me so I could go and knock on the door?

[Edited on 15-02-2017 by Ben J]
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
15th Feb 17 at 22:01   View User's Profile U2U Member Reply With Quote

sadly pinkbike have shut him down. I had asked they leave him active so I could probe further... understand why they need to do it though.

I've asked for any other account names/emails he's used to setup the other account they mentioned
Ben J
Member

Registered: 31st Jan 05
Location: Cheshire
User status: Offline
15th Feb 17 at 22:04   View User's Profile U2U Member Reply With Quote

This lad is based in Wigan under that name. (Well I assume he is as a lot of his friends are from Wigan)

https://www.facebook.com/joe.mitchinson.9/friends?lst=644817999%3A739768505%3A1487196191&source_ref=pb_friends_tl

Guessing it's not him but he amy want to know that someone is using his name and possibly email/address.

[Edited on 15-02-2017 by Ben J]
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
15th Feb 17 at 22:04   View User's Profile U2U Member Reply With Quote

quote:
Originally posted by Ben J
Is that address likely to be his?

Ad says Rochdale but address is Wigan?

It's about 5 miles from me so I could go and knock on the door?

[Edited on 15-02-2017 by Ben J]


at this point i doubt the address is really his.... no idea if Joe Mitchinson is his real name either
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
15th Feb 17 at 22:13   View User's Profile U2U Member Reply With Quote

quote:
Originally posted by Ben J
This lad is based in Wigan under that name. (Well I assume he is as a lot of his friends are from Wigan)

https://www.facebook.com/joe.mitchinson.9/friends?lst=644817999%3A739768505%3A1487196191&source_ref=pb_friends_tl

Guessing it's not him but he amy want to know that someone is using his name and possibly email/address.

[Edited on 15-02-2017 by Ben J]


Yup, found him, his mobile and another email addy linked to that person. Just like to make sure I have the right person before eh.... you know...
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
15th Feb 17 at 22:18   View Garage View User's Profile U2U Member Reply With Quote

That guy on Facebook has a mutual friend with me - do you have anything for/against it being him?


Corsa B lap belts required
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
15th Feb 17 at 22:20   View Garage View User's Profile U2U Member Reply With Quote

And re the account being in Leicester and the address in Wigan - Barclays call centre is in Leicester.

30 miles from me if he's just shit at posting


Corsa B lap belts required
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
15th Feb 17 at 22:21   View User's Profile U2U Member Reply With Quote

Ian - i dont have anything to prove it, but he's near the address, same name etc
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
15th Feb 17 at 22:27   View User's Profile U2U Member Reply With Quote

totally off topic but just glanced up and seen the Registered dates for CS...

17years LOL

[Edited on 15-02-2017 by AK]
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
15th Feb 17 at 23:31   View Garage View User's Profile U2U Member Reply With Quote



Messaged my mutual friend, nothing back yet.

Although that guy 4000 friends, perhaps friends is an approximation.


Corsa B lap belts required
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
16th Feb 17 at 04:54   View User's Profile U2U Member Reply With Quote

ta.

Spoke with RBS - they say I need to speak to Barclays
Spoke with Barclays - they say I need to speak to RBS

Lodged report with Action Fraud

At this point i'm not that bothered about the money, i just want his name (real or confirmation) and some form of contact (number/address)
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
16th Feb 17 at 05:42   View User's Profile U2U Member Reply With Quote

His orig login/register IP is Sky broadband - 2.222.252.181

Sky - 90.212.193.133

Vodaphone - 85.255.235.235 / 85.255.233.217


Hutchinson 3G - 92.40.249.156 - Whats Hutchison?!


AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
16th Feb 17 at 06:10   View User's Profile U2U Member Reply With Quote

Can anyone do some tracing on his email address?

Not sure what sites like spokeo do, but I cant currently use their services.

joemitchinson2011@outlook.com


[Edited on 16-02-2017 by AK]
Tiger
Member

Registered: 12th Jun 01
Location: Nuneaton Drives:Clio 182 Cup
User status: Offline
16th Feb 17 at 07:28   View User's Profile U2U Member Reply With Quote

Orange used to be Hutchinson Telecom, maybe be a subsidiary of that?
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
16th Feb 17 at 08:42   View User's Profile U2U Member Reply With Quote

aye, 3G prob. There was mention of that somewhere in the ip lookup.
Chris x
Member

Registered: 11th Sep 08
Location: Bexhill
User status: Offline
16th Feb 17 at 08:48   View User's Profile U2U Member Reply With Quote

Hutchinson is Three IIRC.
DaveyLC
Member

Registered: 8th Oct 08
Location: Berkshire
User status: Offline
16th Feb 17 at 10:08   View User's Profile U2U Member Reply With Quote

http://busterjack.blogspot.co.uk/

https://www.facebook.com/oneeyed.jack.1291/

http://www.telegraph.co.uk/money/consumer-affairs/i-scam-the-scammers-confessions-of-an-ebay-vigilante/
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
16th Feb 17 at 10:59   View User's Profile U2U Member Reply With Quote

ta,

Sent them a quick email with link to details. Hopefully they can help prevent others getting fucked over
Ben G
Member

Registered: 12th Jan 07
Location: Essex
User status: Offline
16th Feb 17 at 17:55   View User's Profile U2U Member Reply With Quote

Not too bothered about 900 ok.
oJNAo
Premium Member

Avatar

Registered: 30th Sep 14
Location: Gloucestershire
User status: Offline
16th Feb 17 at 20:13   View Garage View User's Profile U2U Member Reply With Quote

I bloody would
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
16th Feb 17 at 20:52   View User's Profile U2U Member Reply With Quote

i am 'bothered' but its not like its the end of the world :/

It makes me sound a bit of a cunt saying 900 doesnt bother me... but when you read other folks stories 900 isnt terrible.

Folk get taken for 5-6000 regularly it would seem Or all of their savings etc



[Edited on 16-02-2017 by AK]
AK
Member

Registered: 5th Jul 00
Location: Aberdeen City
User status: Offline
16th Feb 17 at 21:37   View User's Profile U2U Member Reply With Quote

whats annoying me more is the total lack of anything that can seemingly be done.

Banks wont do anything....

Police wont care as its going to involve time/resources....

min
DaveyLC
Member

Registered: 8th Oct 08
Location: Berkshire
User status: Offline
17th Feb 17 at 09:05   View User's Profile U2U Member Reply With Quote

Expensive lesson..

  <<  1    2  >>
New Topic

New Poll

Corsa Sport » Message Board » General Chat » I've been scammed - help finding scammer 23 database queries in 0.0278480 seconds