UK TRAVEL AGENCY...is this a scam ???

[Lily]

****UK TRAVEL AGENCY****
The Air flight from your location TO UK cost 850euro with both the working permit and Tax clearance , We need some more details from you to procceed with the Working permit and the tax clearance ,Here are the details needed :
FULL NAME ,
COUNTRY ,
NATIONALITY .
STATE & ZIP CODE
TIME AND DATE YOU WANT T O FLY FROM YOUR LOCATION TO UK
We will also like to know if you are eligible to work and live in the UK , You are eligible if you are okay with the following reason ,HAVE YOU EVER BEEN DEPOTED FROM THE UK BY THE UK GOVERNMENT ,HAVE YOU EVER BEEN COUGHT FOR A CRIMINAL PURPOSE .
Email us as soon as possible and let us know if you can provide us the following details ,All correspondant should cantact us for immediate paymentconcerning the Tickets .You can make payment to us by western union money transfer via the following information :

NAME........................STEPHEN JOHNSON
RECIEVERS ADDRESS........3 attwood street
manchester m12 4ns

Kindly get back to us immediately to avoid any delay in permiting you a ticket for your travling , Contactus for more enquiries and payment information .So once you have sent the payment to there company,do get back us with this receipt of payment
SENDER`S NAME:
SENDER`S ADDRESS:
AMOUNT SENT:
MTCN[MONEY TRANSFER CONTROL NUMBER
TEXT QUESTION :
UK TRAVEL AGENCY .
Looking forward in serving you better .

Charles agent

--------------
I received that email because I have contacted by my host family in UK. And the host family ask me to contact MR. CHARLES , the travel agent. And that was the email.

[joewein]

Yes, this is a scam.

For a start, if this was a UK based company it would not charge you in Euro. The UK currency is still Pound Sterling.

Western Union Money Transfer and the Internet don't mix. Any scheme that involves both is virtually guaranteed to be a scam. WU is totally untraceable. Any money you send through this mechanism to someone you only know via email may disappear without a trace. You'll never know who picked it up. The person walks into a WU agent office, picks up your cash and walks out. The postal address given to you may be totally fake as it has no meaning in a WU transfer. Western Union is the payment method of choice for online scams. You never want to use it except for sending money to people you know personally from real life and who you trust.

Also not that the English in that email is not up to business standards. This is not a native English speaker.

I would ask how you came to know your host family? If "Mr Charles" aka "Charles agent" is a scammer then so most likely is the supposed host family. I would guess that all of them use free webmail accounts such as yahoo.com / yahoo.co.uk and that if you trace the IP addresses you'll find the emails were sent from Nigeria or somewhere else in Africa.

[-Lily-]

I have registered as an au pair at www.easyaupair.com
the there's a hostfamily contacted me, called Mr. james moore

the family has agree with me and wants me to become their next au pair, and he told me..all the paperworks will be handle by Mr. Charles ( agentcharles@myway.com )

But there's something I don't agree..
To send money...why ??? if the host family want to hire me, why should I send the money ?? for the cost of airfare? no..it will cost more than 850euro ( and charles say..it will cost 850e for 2 peoples )

I have an experienced with this, I mean..I have apply for the au pair job since 2002, and my last hostfam dont ask me to send money.

Culd you please tell me, how I can trace the IP address??

Thanks for your opinion...

Lily - Indonesia

[joewein]

Hi Lily,

this fake travel agent is the same as in this other work visa scam reported to me by another scam victim:

christopher lewis
Martins Well.
Ms Florence John.
P.R.O. STANDARD TRAVEL.CO.
Mr MARTIN WELLS.
C.E.O. STANDARD TRAVEL.CO.
STANDARD TRAVEL AGENCY
Standard TRavel Company
standardtravel@sailormoon.com
3 Attwood street,manchester,m12 4ns,uk,
call us on this number +447031942725
=
RECIEVERS NAME ... BRIAN DAVID.
RECIEVERS ADDRESS: 3 ATTWOOD STREET.
MANCHESTER,M12 4NS,UK.
=
(work visa scam)



You sent me an email from your hotmail.com account. Here's how you can see mail headers in Hotmail:

Options
Mail
Mail Display Settings
Message Headers => Advanced
OK

Now when you open a message you should see the headers.

[-Lily-]

And this is what its says :
==============================

From : charles <agentcharles@myway.com>
Reply-To : agentcharles@myway.com
Sent : Thursday, June 1, 2006 2:35 PM
To : herrenssanning@hotmail.com
Subject : UK TRAVEL AGENCY..........


Go to previous message | Go to next message | Delete | Inbox
MIME-Version: 1.0
X-Sender: agentcharles@myway.com
Received: from myway.com ([207.159.120.58]) by bay0-mc10-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 1 Jun 2006 07:46:33 -0700
Received: by mprdmxin.myway.com (Postfix, from userid 110)id 5F495676DD; Thu, 1 Jun 2006 10:35:31 -0400 (EDT)
Received: from [195.166.237.42] by mprdmailfe10.nwk.myway.com via HTTP; Thu, 01 Jun 2006 10:35:31 EST
X-Message-Info: LsUYwwHHNt2+dmJjRNpz7yE+c0FyE0ZnDvxBtApZjWY=
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: ID = a2fef0b59ee4b4080cb94b8fa0d85861
X-Mailer: PHP
Return-Path: agentcharles@myway.com
X-OriginalArrivalTime: 01 Jun 2006 14:46:33.0705 (UTC) FILETIME=[2D34BD90:01C6858A]

Content-Type: multipart/alternative; boundary="MYWAYBOUNDARY_000__129d8058e5d094eca976c894ecae9232";
Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: 7bit

***********UK TRAVEL AGENCY***********


UK TRAVEL AGENCY
3 ATTWOOD STREET
MANCHESTER M12 4NS

UNITED KINGDOM

The website is till under construction.ok
Thanks
charles agent

[-Lily-]

And this is the email from JAMES MOORE :
It is a scam too ??

From : james moore <james_moore1147@yahoo.com>
Sent : Monday, May 29, 2006 5:48 PM
To : [mod edit - personal email address removed - Nyla]
Subject : Response !!!


Go to previous message | Go to next message | Delete | Inbox
MIME-Version: 1.0
Received: from web38602.mail.mud.yahoo.com ([209.191.125.63]) by bay0-mc1-f18.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 29 May 2006 10:48:16 -0700
Received: (qmail 19342 invoked by uid 60001); 29 May 2006 17:48:15 -0000
Received: from [68.208.24.194] by web38602.mail.mud.yahoo.com via HTTP; Mon, 29 May 2006 10:48:15 PDT
X-Message-Info: LsUYwwHHNt3660MmjhEvYg2f34OAemlKtU9j2Z7TuGo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; Return-Path: james_moore1147@yahoo.com
X-OriginalArrivalTime: 29 May 2006 17:48:16.0155 (UTC) FILETIME=[105556B0:01C68348]
View E-mail Message Source

Content-Type: multipart/alternative; boundary="0-1445814463-1148924895=:18359"
Content-Transfer-Encoding: 8bit

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

[-Lily-]

And how to trace by yahoo mail ???

[FW Admin]

The first one from the myway.com email address is:

IP: 195.166.237.42
Country: Nigeria
City: Lagos, Lagos

Country Code: NG
Merchant Note: Country may have high rate of fraud [12]
The second from yahoo shows as a Bellsouth allocated number, but the location is centred in Lagos:
Record Type: IP Address
Cached Whois: 2006-06-03
IP Location: Nigeria - Lagos - Lagos - Bellsouth.net Inc

[-Lily-]

Thanks everybody for the informations!

But now, I'd like to know how to trace the email using yahoo mail.

Thanks!

[Miyuki]

Do you know how to find the Yahoo mail headers? That will tell you.

[-Lily-]

Do you know how to find the Yahoo mail headers? That will tell you.

I don't know. Thats why I ask you :)
Please tell me how?

[Miyuki]

If you have Yahoo open in English, at the bottom right of the message, there should be a link that says "Full headers".

[FW Admin]

To clarify, at the bottom right hand side there should be a link saying "Full Headers" (if you already have full headers showing, this link would say "Brief Headers").

Once you click on that, the top of your email message should look something like the attachment below.

What you check for are the IP numbers given where the black arrows point - usually the last "Received from:" number is the originator (in this case, there is already a field called "X-Originating-IP" which gives the IP number of the computer on which the email was sent).

[Unregistered]

Lily.
I have just recieved an email stating the same information from James Moore, wanting to hire me as his Au Pair.
Thinking i live in Australia he has asked me to contact his travel agency, Mr Ken at uktravels@myway.com.
After i said i already live in the Uk he has not contacted me again.

Would like to talk to you more about this... I think he is totally a scam.

[Frazzle]

I replied to a similar "Is this a scam" thread just a couple of days ago.

Try a Google search for "Attwood Street Manchester" and you'll find that this is a common scam.

[karen1981]

Hello Everybody,



I had the same with mr Michael Smith he also wanted to hire me as an aupair,i was regestrated by www.aupairs.co.uk but the only thing he was interested in was the money to send, When i asked him it was allright to pay mr Ken when i arrived in the u.k. it wasn't possible, because i needed an work permit, but because i'm from the u.k. i didn't needed one and still i had to pay the money, when i asked hin about a picture of the kids, he says he didn't had one, when i contacted mr ken this were his emails:

****UK TRAVEL AGENCY****
The Air flight from your location TO UK cost 250pounds , We need some more details from you to procceed with the flight ticket and other document,Here are the details needed :
FULL NAME ,
COUNTRY ,
NATIONALITY .
STATE & ZIP CODE
TIME AND DATE YOU WANT T O FLY FROM YOUR LOCATION TO UK
We will also like to know if you are eligible to work and live in the UK , You are eligible if you are okay with the following reason ,HAVE YOU EVER BEEN DEPOTED FROM THE UK BY THE UK GOVERNMENT ,HAVEYOU EVER BEEN COUGHT FOR A CRIMINAL PURPOSE .
Email us as soon as possible and let us know if you can provide us the following details ,All correspondant should cantact us for
immediate paymentconcerning the Tickets .You can make payment to us by western union money transfer via the following information :

NAME.............................STEPHEN JOHNSON
ADDRESS......................3 ATTWOOD STREET
MANCHESTER M12 4NS
UNITED KINGDOM

Kindly get back to us immediately to avoid any delay in permiting you a ticket for your travling , Contactus for more enquiries and payment information .So once you have sent the payment to there company,do get back us with this receipt of payment
SENDER`S NAME:
SENDER`S ADDRESS:
AMOUNT SENT:
MTCN[MONEY TRANSFER CONTROL NUMBER
UK TRAVEL AGENCY .
Looking forward in serving you better .
Ken agent

The email that i sended that i was from the e.u. so i didn't needed an working permit:

*************UK TRAVEL AGENCY*************
Yes you don't need working permit, the 100pounds cover airflight ticket and some necessary things.
Thanks
Ken agent
so don't fall for it!!

Kissis Karen

[kat_rivas]

From : olalekan daniels <dan_travelagency@yahoo.co.uk>
Sent : Saturday, June 2, 2007 7:05 PM
To : xxxxx
Subject : THANKS FOR PATRONISING OUR AGENCY.

MIME-Version: 1.0
Received: from web27708.mail.ukl.yahoo.com ([217.146.177.242]) by bay0-mc12-f12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Sat, 2 Jun 2007 12:05:16 -0700
Received: (qmail 72445 invoked by uid 60001); 2 Jun 2007 19:05:15 -0000
Received: from [216.139.164.86] by web27708.mail.ukl.yahoo.com via HTTP; Sat, 02 Jun 2007 20:05:15 BST
X-Message-Info: LsUYwwHHNt3660MmjhEvYg2f34OAemlK+ZzoV09lDsZmbz8QigGIQtU5Yvr3 lK0P
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=Message-ID:X-YMail-OSG:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=4ieunTc4CbL8Tx52T2suTB026i8LB72mmJNZZshfnGaqVi7vP5XRZj0MoN wvLt+l4vs5HcKMqOw8kP+dxeNC71oJ9gTCwIuv Wwtv/nYrg/uaFr+bMdSGwPyQp4JZEemPVlEGgQOYZaD6yZ3FJKot5yGwihAZ8ZQdYFAikj D/Wlw= ;
X-YMail-OSG: BSKaHUoVM1k.7oL2sOiET4U2IG7IATyzgA_k0FHJe7FmaTSLvQDqZKmsWlwq CgVIRvdsUFDonI2Wyid083hF5asVNV6706Ryw aU2CCmgnRs.MwJmT9cYCicoG0I-
Return-Path: dan_travelagency@yahoo.co.uk
X-OriginalArrivalTime: 02 Jun 2007 19:05:16.0813 (UTC) FILETIME=[F4E38BD0:01C7A548]

--------------------------------------------------------------------------------

View E-mail Message Source
Content-Type: multipart/alternative; boundary="0-1430153133-1180811115=:71936"
Content-Transfer-Encoding: 8bit


Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit




Dear Customer

THANKS FOR PATRONISING OUR AGENCY.

Compliments from our Agency.

I acknowledge the receipt of the response sent to us by your HOST and it is been well noted and studied that you wants to come to UK and work.

Your HOST have informed us about this your coming to U.K. that he have directed you to our agency and we should be faster concerning your documents processing,flight ticket and other necessary things needed by you for your staying permanent and legally resident because he said that he will apply for the visa from here on your behalf here to make it faster as he needs your service soonest,do comply with our agency to make your dream comes true so that react quick and all the necessary things needed for your coming here legally can be ready.

Now,we have make the Findings/verifications of what will be your needs for you to come here and thats why we put consideration on this your coming here in UK.

1-The One Way Air flight from your country TO PHILLIPINES U.K with discount on it =$1050
2-The Registration Form Fee=$150
3-Working permit=$325
4-Tax Clearance=$275
5-BNIC(British National Identification Card)=$200
6-Social Security Number=$225
The Total cost is 1157.5pounds=$2,225
because without working permit and tax clearance and SSN you will not be eligible/entitle to work here.

We have put discounts in the service we wants to render to you.

We will work out your papers and legitimate documents under 10 working days once you comply with our agency instructions.

We need some more details from you to proceed with the Working permit,the tax clearance and the social security number before booking your flight ticket to U.K.Our Office have to make the working permit and tax clearance first so that we can book for your ticket because without this documents the Government will not permit you to work which might jeopardise your job opportunity here.All documents will be ready together including flight ticket.

Here are the details needed :
---FULL NAME .
---COUNTRY .
---NATIONALITY.
---OCCUPATION.
---HOME ADDRESS,STATE & ZIP CODE .
---TIME AND DATE YOU WANT FLY FROM YOUR COUNTRY PHILLIPINES TO U.K
---COPY OF Y OUR PASSPORT PHOTOGRAPHS.
---COPY OF YOUR INTERNATIONAL PASSPORT.
---WHEN DO YOU WANT TO ARRIVE UNITED KINGDOM
---BIRTH CERTIFICATE.
---YOUR RESUMES.

We will also like to know if you are eligible or not to work and live in the United Kingdom.

If you are eligible,we will like to know about this following reasons.

1-HAVE YOU EVER BEEN DEPORTED FROM THE UK BY THE UK GOVERNMENT?
2-HAVE YOU EVER BEEN CAUGHT FOR A CRIMINAL OFFENCE?
3-HAVE YOU BEEN TO UK BEFORE,WHEN AND HOW LONG?


Reply to this our E-mail.

It depends on you if you want our agency to start working on your documents to come here.

Let us know if you can provide us the following details.

All correspondent should contact us for immediate payment concerning the Tickets,working permit,tax clearance and SSN e.t.c

The mode of payment in our agency is WESTERN UNION MONEY TRANSFER.

Kindly make payment to our CASHIER/ACCOUNTANT through western union money transfer via the following information :

RECEIVERS NAME: MR.SMITH JOE
LONDON,UNITED KINGDOM.

I will advice you that if the payment can be made soon so that our office can start working on your DOCUMENTS/ELIGIBLE PAPERS so that our office can start working on things for your arrival and stay here.

Kindly get back to us immediately to avoid any delay in permitting you a ticket for your traveling , Contact us for more inquiries and payment information .

Do get back us with this receipt of payment of the WESTERN UNION MONEY TRANSFER after making the payment through western union money transfer with the information below:

SENDER`S FULL NAME AND ADDRESS:???????????????
RECEIVER'S FULL NAME AND ADDRESS: MR.SMITH JOE
LONDON,UNITED KINGDOM
ACTUAL AMOUNT SENT:???????????????
MTCN[MONEY TRANSFER CONTROL NUMBER)10digits**********
TEXT QUESTION AND ANSWER :????????????????
.
Do not hesitate to get back to us if you have any questions to ask.

Our Office opens
Monday-------Friday From 9am---6pm
Saturday From 10am---4pm
Sunday From 12noon---4pm

Thanks for the co-operation.

We Are here to serve you more Better.

Looking forward in serving you better .

Regards,

Your's Truly,

Mr Olalekan Daniels
London,United Kingdom
+44(0)7024093842

[Nyla]

Please see my answer in this thread.

http://www.fraudwatchers.org/forums/showthread.php?t=9399

[Unregistered0009]

quick question, how do you work out the location of where the mail came from via there ip address..

Received: from [80.78.20.140] by web62115.mail.re1.yahoo.com via HTTP; Tue, 12 Jun 2007 01:54:28 PDT

as I got people trying to scam me

[Daneel]

You put the IP, in this case "80.78.20.140", into a WHOIS tool somewhere. For example www.dnstools.com, and check the box for "IP owner".

inetnum: 80.78.20.136 - 80.78.20.143
netname: CSS-SAT-NET
descr: CSS-Sat Network
country: IQ
admin-c: EP1558-RIPE
tech-c: TJM7-RIPE
status: ASSIGNED PA
mnt-by: OXIEPARABOLEN-MNT
mnt-lower: OXIEPARABOLEN-MNT
mnt-routes: SWIPNET-LIR-MNT
source: RIPE # Filtered

person: Erica Plesha
address: Constellation Networks Corperation
250 E. Front Street
Suite 420
Traverse City, Michigan 49684
USA
e-mail: eplesha@constellationnetcorp.com
phone: +1 231 933 7054
nic-hdl: EP1558-RIPE
source: RIPE # Filtered

person: Timothy Mahoney
address: Oxieparabolen AB
Virkesvдgen 13
23837, Oxie
Sweden
e-mail: noc@constellationnetcorp.com
phone: +46 40 52 94 41
nic-hdl: TJM7-RIPE
mnt-by: oxieparabolen-mnt
source: RIPE # Filtered

In this case it looks like a satellite provider, which usually means it could have originated from anywhere in the world. Many people in West Africa, for example, use satellite internet connections.