Hello there, reader.
So, it looks like you want to participate in the scambaiting community, but how? That’s why I made this post, to tell you how.
There’s a few things you are going to need, or might want.
Being able to call the scammers:
One of the most important parts of wasting a scammer’s time is actually calling them. There’s a few platforms for this. I would recommend BobRTC (https://bobrtc.tel/) and TextNow (https://textnow.com/). These are completely free to use, and don’t reveal any person information. One thing you should NEVER DO is use a real phone number. Scammers could spoof from it to commit fraud, spam call you, commit identity theft and more.
Getting numbers:
You can’t call scammers without numbers! This is where there are many different options.
You could simply look for one of the numbers found on the site here, or one listed on BobRTC. If you want to find them yourself, you could try using https://asat-tool.cf/urls to find tech support pop-ups, or use typosquatted domains, like gmil.com. Even a Google search can find scams. Simply search for something like “printer/email/antivirus support phone number” and you may see quite a few results.
Wasting the scammers’ time:
This is, again, where you have several options. You could just call them using the platforms mentioned, or your own. Or, you could use a virtual machine for the tech support scams. This allows the scammers to connect to a virtual computer and it doesn’t allow them to access your real pc or files. If they run malware or more, it’ll only damage the virtual computer, not your own. How do you set this up? Well, we are going to need the virtual machine software. I recommend VMware. Contrary to many people’s beliefs, VMware does have a free download. You can get that here: https://my.vmware.com/en/web/vmware/free#desktop_end_user_computing/vmware_workstation_player/15_0
You will need an ISO for the operating system you use.
But how do you make it look like a real computer?
You can mass install common software using https://ninite.com/
You can also fake the hardware by following Jim Browning’s tutorial:
https://youtu.be/6TM45vNI4Qc
You may or may not want a VPN too.
Using a virtual machine is not needed if you only want to call IRS/CRA/Free giveaway (cruises/vacations/gift cards) scammers.
Another idea is to keep backups of these VMs in case they get deleted, damaged or ruined by the scammers.
Keeping them on the line:
To keep scammers on the call for as long as possible, don’t insult them, be rude, act immature etc. Do play along, ask questions, act concerned etc. Scammers may ask for information about you. All of which can be made up using https://www.fakeaddressgenerator.com/ From personal experience, I know this website does help.
Gather information:
Try and gather as many phone numbers as you can, support codes that they give you when they want you to connect using things like LogMeIn (these keys can be reported), also, websites, names, emails etc. This can be done quite efficiently using a free keylogger, here: https://bestxsoftware.com/ (This is 100% legal as it is installed on your own computer). You can research these company names they give you, and potentially find addresses using website whois, social media etc.
Reporting the scams:
Now we want the scams to get taken down.
For reporting domains:
http://whois.domaintools.com/
Use this to find the registrar and you can email them with an abuse complaint. Email usually begins with abuse@.....
https://safebrowsing.google.com/safebrowsing/report_general/?hl=en
Use Google Safe Browsing to report the website too. This can get the page marked as deceptive and this will prevent people from going to the site.
Reporting the domain doesn’t result in immediate action. However action may be taken shortly after the report. Some companies, such as GoDaddy don’t often listen to abuse reports, so if they don’t listen, Google Safe Browsing should help.
Some other reporting links:
http://url.fortinet.net/rate/submit.php
https://global.sitesafety.trendmicro.com/index.php
https://www.trustedsource.org/
https://sitereview.bluecoat.com/
https://www.microsoft.com/en-us/concern/scam
For reporting phone numbers:
https://numverify.com/ can be used to pull the carrier. With this you can contact them. Make sure you have evidence that the person using the phone number is a scammer. It’ll reduce the research and investigation time the carrier has to take.
Also some things to piss off Indian idiots
MadarChod = Motherfucker
Chutiya = Idiot
Kutiya = Bitch
Mere-Mummele = Suck my dick
Marroongaa = I'll Kill You
So. Now you should be able to scambait, and help prevent crime.
Thanks for reading!