Scam Number: (810) 689-9512
Scammer’s Website or Email:
Additional information about this scam: Active, answering as microsoft…too dumb to relize which scam their running
810-689-9512 Friday 3-22-24 3:46PM EST
Bandwidth.com via Skype, baiting with virtual machine.
They ask for invoice as usual
Sounded like someone was telling him what to say, lol. New Chode Trainee maybe?
I didn’t hear that on the initial post. But when you mentioned that I went back and listened, I’m not sure.
HIGHLIGHTS FROM VIRTUAL MACHINE BAIT:
- The first bhenchod I talked to answered as “Microsoft” before proceeding with their “PayPal” script and swiftly hanging up on me. I called back, and the second bhenchod simply answered as “suppoat” and refused to provide the name of a company.
- The scammer will claim there was a “fraudulent transaction under your name,” prompting you to “cancel” by “opening the Google Chrome” and download AnyDesk. They wanted me to completely follow their script line by line, so they hung up as I told them I was downloading AnyDesk on my virtual machine and refused to answer calls from my Google Voice number.
- I then attempted to call them from my TextNow line, and “John Eric” wanted me to go to glcare.info (Code: 76337, IP: 159.253.120.215
), an iFrame of dita1.top (IP: 193.233.203.66 ). - Once “John Eric” remotely connected to my virtual machine, he blanked my screen with a fake system update while attempting to log into my nonextant PayPal account and asking me to fill out a “cancellation form” and writing down the reference number (18110)
- Once I completed the form, I was asked to log into my nonexistent bank account. Since I don’t do online banking, I was asked to log into my nonexistent PayPal account.
- Since I don’t have a PayPal account either, the bhenchod wanted me to register an account anyways or log into my email account, so I played him the bhenchod song.
Simply answering as the cancellation department for me as well.
Don’t people notice the date is not even in American format?
Yea, just realized it’s 22nd March not March 22nd lol
not answering 18:03 EST