"American Walmart Service Checker" SCAM/possible Money Mule platform

Wall of Shame Name and Shame
, , ,
1

Popup - https://martcheckerhr.com

Registered by Thomas Evans of Mac Constructions Inc. in Naperville, Illinois via OwnRegistrar, Inc. on May 7, 2023 (Updated May 9, 2023) - Whois martcheckerhr.com

image
image1247×225 21.1 KB

The scammers will use Wix to send fraudulent emails claiming Walgreens and Walmart are looking for “service observers” to complete “quick questionnaire tasks” for $740.99 upfront. Users are asked to register on their webpage, which operates under the identity of “American Walmart Service Checker” and claims to be “patnered” with CVS, GiftCards.com, Office Depot, Walgreens and Walmart.

image
image1788×1469 90.6 KB

Users are asked to register with their name, location, phone number, email address, age and employment status. I signed up with fake credentials, and was immediately tasked by “Roldan Walton” into purchasing a Walmart gift card in exchange for a “check” that can only be used at their “participating stores.”

“American Walmart Service Checker” is a subsidiary of MAC Constructions, Inc., a civil engineering company founded in Ostend, Belgium by Stephen Bennett in February, 2000. Bennett currently serves as the company’s CEO, while their project management team is led by Dilip Jaiswal in Bhopal, Madhya Pradesh, India.

image
image800×800 32.9 KB

The company has multiple locations, including:

  • 1415 W Diehl Rd, Naperville, IL 60563
    image
    image1788×864 197 KB
  • 1549 Jacob St, Pittsburgh, PA 15234
  • 1125 17th St, Denver, CO 80202
    image
    image1788×864 162 KB
  • 133 Canaveral Plaza Blvd Cocoa Beach Florida 32931
  • 1100 Raymond Blvd, Downtown Newark, Newark, NJ 07102 (US DEA Office)
  • 355 Rio Rd W Suite 202B Charlottesville, VA 22901
  • 3401 Nicholasville RD, Lexington, KY 40503 (shopping mall)

Associated LinkedIn Accounts:

Associated Phone Numbers:

  • (217) 666-0002 - Thomas’ number (Bandwidth via Talktone)
  • (209) 800-3247 - Roldan’s number (Bandwidth via Google Voice)
  • (412) 308-5961 - Pittsburgh (Bandwidth via Talktone)
  • (719) 315-4194 - Denver (Bandwidth via Talktone)
  • (321) 200-1288 - Cocoa Beach (Bandwidth via Talktone)
  • (201) 273-7451 - Newark (Bandwidth via Talktone)
  • (434) 223-4864 - Charlottesville (GoTextMe)
  • (859) 545-0054 - Lexington (Bandwidth via Talktone)

Associated Email Addresses:

Associated IP Address - 67.220.184.162 :us:

3 Likes
2

The post has been updated to include additional phone numbers and possible addresses. After an additional Google search for the company, I found the LinkedIn of one of their supervisors, Ashu Reddy from Vijayawada, Andhra Pradesh, India.

https://www.linkedin.com/in/ashu-reddy-8b52a0270/?originalSubdomain=in

2 Likes
3

(217) 666-0002
Also

Distribution of Natural Gemstones

Since Year 2000 we have offered a wide range of gemstones for both jewellers and for collectors. We personally select and purchase rough and cut stones in Bangkok as well as in Myanmar (Burma), India, South Africa and Pakistan. Our speciality is careful cutting.

Tall claims

Bridge

MAC Construction Inc., experience encompasses construction, replacement and repair of bridges and other highway structures.

4

All websites have since been taken offline. All phone numbers (save for “Roldan’s” Google Voice line) have been terminated.

Keep in mind that I did report these clowns to IC3, the FTC and the NY State Attorney General a couple days ago.

2 Likes
5

The websites are back online, “Roldan” just sent me a text message from (339) 707-7559 (Adhoc P2P number)

image

I have responded to this text by sending a series of Grabify links, but “Roldan” kept refusing to check them as they redirect to “blank pages.”

3 Likes
6

After some insider baiting with myself and @MehNamesJeff, we have found that the company behind this also operates as PostedJobs Inc., which was founded on February 2, 2022 by “Dean Vanowen” according to their Better Business Bureau page. “Roldan” did click my Grabify link, but was using a VPN.

GRABIFY STATISTICS:
IP: 102.129.234.116 (VPN)
DEVICE: Apple iPhone
BROWSER: Safari 17.1

NEW NUMBERS:

  • (209) 370-0929 (Twilo)
  • ‪(501) 800-9053‬ (TextNow)
  • (669) 222-4673 (TextNow)
  • (470) 414-0381 (TextNow)
  • (979) 232-6377 (GoTextMe)
  • (937) 541-0841 (TextNow)
  • (701) 291-2453 (TextNow)
  • (770) 626-0187 (TextNow)
  • (305) 901-8633 (TextNow)
  • (707) 409-7567 (GoTextMe)
  • (347) 518-5278 (Onvoy)
  • (919) 893-2801 (TextNow)
  • (812) 648-0662 (TextNow)
  • (510) 629-5866 (TextPlus)
  • (510) 358-8255 (J2 P2P)
  • (856) 441-6944 (Bandwidth.com)
  • (669) 241-1940 (Alloy Studios P2P)

NEW EMAIL ADDRESSES:

image

image
image1229×1594 219 KB

3 Likes
7

Greetings to whom it may concern.
I’m Roldan hr Walmart in reference to your Walmart survey assignment, how may I assist you please. ?

2 Likes
8

Static IP, VPN Server ran by Digital Energy Technologies, LTD
https://www.ipqualityscore.com/asn-details/AS61317/digital-energy-technologies-ltd

1 Like
9

Hello, If you are still interested in the walmart survey task, can you kindly re-confirm your address where your check payment will be sent to. thank you.

2 Likes
10

Okay good, you will receive your first check payment next week.
(He will send a check which will bounce)
(Check value will be “by mistake” will be higher than intended)

2 Likes
11

According to their website, they largely host IPs in South Africa. We could be looking a new form of 419 scam.

image

1 Like
12

(856) 441-6944

Scammer’s phone 856 441-6944
Scammer’s address 7900 Balboa Blvd. #D3, Lake Balboa, CA 91406, USA
Scammer’s email [email protected]
Total money lost $2,600
Type of a scam Employment

Received information to become a Mystery Shopper on behalf of Walmart. First assignment was to cash a check and purchase gift cards, looking for discontinue card to see if stores were in compliance with guideline of removing from shelves. Instructed to make purchases from two different stores, purchasing gift cards at $*** each spending the amount of $***. Was to scratch off the backs revealing the numbers to check the batch numbers. Was given a Task Manager by the name of James Thomas Walter with the cell phone as the listed scammers phone.

Also given an agent number of #9660, the amount of the check was $*** paying $*** to do the survey. Was asked to cash check upon receipt and make the purchases withing 24 hours. My bank held for a 48 hour hold, release money after and the next day check showed to be fraudulent. Check the gift cards to return to stores, they were all cashed the same day scanned to phone # 856 441-6944.

1 Like
13

Another possible email address - [email protected]

image
image1233×564 46.4 KB

2 Likes