Scam on different level

[RBS]

Just want to show you how scammers have changed.

I have received email today:

Dear Sir,
We received an alert from Agriaffaires that you are interested in a Claas Lexion 600.
We have a:2007 Claas Lexion 600, £49.000 GBP.
For more technical details about the machine and for more pictures, please visit the product on our website :
https://jkempltd.co.uk/listings/2007-claas-lexion-600/
Our mechanics check everything so that we are sure everything is perfect in regards to the equipment we have on stock and we offer a 6 months warranty for any equipment we sell.
In case you need the equipment delivered to you, we need your delivery address in order for us to be able to calculate the transport fees from our garage where the item is now located to your location.
Please let me know if you need further details regarding this offer.

Kind regards,
Kristian Nyberg
Sales Representative
J Kemp LTD Durham
Rose Cottage, Rose St
Trimdon Grange, Trimdon Station
Durham, TS29 6EH
United Kingdom
Tel: +44 (0) 1429 450 488
[email protected]
---

1. Email doesn`t sound like it was written by English native speaker.
2. Its way too cheap, should cost at least 70k.
3. Tried calling phone number, nobody is picking up.
4. No company number on webpage.
5. Domain registered just 2 weeks ago:
http://whois.domaintools.com/jkempltd.co.uk

6. Website is hosted in Russia.
7. Email was sent from IP located in Switzerland, IP 31.171.246.215. Probably used proxy/vpn so it doesn`t show up as Russia.
8. Lookins at email details, it was sent using gmail server:
Received: from mail-io0-f194.google.com

9. This landline number is not mentioned anywhere else on internet. I wish I could check details who owns that landline.

What worries me most - it looks like real genuine company, with employees, full contact details etc. I have checked companies house - such company does exist at address on webpage!!! They might not even be aware about "their" webpage.

https://beta.companieshouse.gov.uk/company/02645428/officers

Its scary what scammers will do to rip people off. Once you pay the invoice (including door to door delivery), they will dissapear with your money. Not sure what they will do if I offer to go and meet them face to face.

 

[The Byre]

Equipments, conditions - both mistakes that only a foreigner makes.

And now the proof that this is a scam site - http://bryanttractors.co.nz/our-team/

 

[Thermodynamic Man]

[QUOTE="RBS,

Its scary what scammers will do to rip people off. Once you pay the invoice (including door to door delivery), they will dissapear with your money. Not sure what they will do if I offer to go and meet them face to face.[/QUOTE]

Sorry. I am obviously a little thick here but I am missing something here for sure. They have asked for your address so where is the scam at present? Invoicing you for what exactly? Disappear with what money? What are you paying for up front?
I apologise in advance if this is blatantly obvious but the penny has a long way to drop it seems

 

[Thermodynamic Man]

by the way... I am not saying this is not a scam... I just don't see how at the moment

 

[The Byre]

by the way... I am not saying this is not a scam... I just don't see how at the moment

The text and pictures of staff are lifted from a NZ tractor sales company.

The mark pays a 10% deposit on a tractor, the rest to be paid on delivery and then the whole deal vanishes in a puff of smoke.

Blimey! It's no wonder these people keep trying it on, when you can't spot such a blatant and obvious scam!

 

[RBS]

Byre, how did you find original NZ website ?

 

[RBS]

Thermodynamic Man, see, this scam is SO good, you still don`t understand the actual scam, even I explained everything in detail A-Z.

Scammers are evolving

 

[Thermodynamic Man]

Sorry Byre.. but nowhere within the OP's post did it say anything about 10%. If it say's it on the website then ok but I didn't open that link. You think me easily scammed?...lol...if only

 

[Thermodynamic Man]

That goes for RBS too

 

[Thermodynamic Man]

Anyway... I think that price is pretty damned good....and when I get my £43m from the Prince in Nigeria I am helping out then I will buy half a dozen...can't wait

 

[RBS]

I have just reported that domain to registrar, lets hope they take this domain down ASAP.

 

[The Byre]

This is the next step in ID theft - company ID theft. You find a company that is trading in something that traditionally works on trust and seldom has websites (farm machinery, plant hire, builders and supplies) you build the website and populate it with content and pictures of staff, provide a contact form or email and then get a telephone number redirect for that area. That is the part that is missing here - they still need a VOIP redirect to make the scam work.

10% is the usual deposit one pays on farm machinery to hold until delivery or pick-up has been made.

In this case, you would pay 10% and then take a beaver-tail truck to Durham and go to J.Kemp Ltd. only to find that they just hire out diggers, trailers and telehandlers, have nothing to do with tractors and, more to the point, have never heard of you or your 10%.

And if you go to the registered address for J.Kemp Ltd, John and Virginia Kemp will look at you completely baffled, as it is just an ordinary terraced house.

If they had been able to get a telephone line going in time and been able to find someone to man it with a Geordie accent (possibly someone working from home in the UK, thinking that they are getting a legitimate home job!) RBS may even have fallen for it!

 

[RBS]

Its scary how good these scams are becoming

I wouldn`t fall for it as I know the combine market and I would never buy anything before I actually see it myself. But I bet there are ton of people who will fall for it.

 

[KM-Tiger]

....and when I get my £43m from the Prince in Nigeria I am helping out

Too late, he is just about to transfer it to me!

 

[The Byre]

I have just spoken to their neighbours MK Motors and the guy there told me that they have already had people turning up, wanting to see combines, balers and tractors. J.Kemp has moved his company and seems unaware of the scam.

And as soon as the weather gets warmer, I'll get the injection nozzles on my old IH tractor unblocked and do some fun, outdoor stuff!

 

[Jeff Nev]

Very interesting, thanks for bringing this to light. Crazy how they've started to change up their tactics, but always be vigilant when large amounts of money are being discussed, as well as when someone just contacts you out of the blue...very rarely does this happen for legitimate reasons.

 

[RBS]

Got their domain taken down!!!!

---
This is update to your notification regarding jKempLtd.co.uk .

The domain has been nuked (disabled) at our end.

Feel free to contact us incase further assistance is required of us.

Regards,
Abuse Mitigation Team
Public Domain Registry.

 

[The Byre]

Well done, that man!

 

[beasty]

http://jkempltd.co.uk/ is working

 

[RBS]

What on earth is going on, emailed them again. It definitely wasn`t when they said they have taken it down. Scammers somehow go it back up running.

 

[RBS]

I got email from that domain registrar:
Thank you for contacting us.

Kindly note that the domain name has been deleted from our system.

Get in touch with the on record registrar for the same.

Find the registrar's details of the domain name at http://domainwhitepages.com/

Regards,
Abuse Mitigation Team
PublicDomainRegistry
----

So its Nominet. I got in touch with them, but they seem to be useless:
We would definitely recommend that you report this issue to the appropriate legal authority:


To report illegal website content, please contact your local police force. You can find information on your local Police Force at http://www.police.uk/forces .


To report financial scams such as 'phishing' or 'fraud' you can contact Action Fraud athttp://www.actionfraud.police.uk/.
---

I insisted they should take domain down, but they responded:

Nominet are the registry for .uk domain names, we are not an authority or regulatory body. At this current time we do not have the authority to delete or shut down a .uk domain name or take action against a registrant except from the cases specified in our registration terms and conditions. This agreement does expressly prohibit any .uk domains being used for any unlawful purpose. If you believe that you have discovered a .uk domain that is being used for an unlawful purpose, we recommend that you follow one of these steps:


1. Contact the registrar that is hosting the domain. You can find the registrar for .uk domains by performing a WHOIS search.


2. Contact the police. If you believe that the activities on the domain are so serious that it is urgent to get it shut down, you should contact the police. We can suspend a domain name when alerted to its use for criminal activity by the police or other law enforcement agencies, such as National Crime Agency, Child Exploitation and Online Protection Centre (CEOP) or the Medicines and Healthcare Products Regulatory Agency (MHRA). You may at the same time consider whether to inform the domain name holder that you have contacted the police.


3. Interim court order

If it is very urgent to get the domain name shut down, it is possible to get an interim court order. This is a legal action which is used to avoid damages or inconvenience until a legally binding court decision is made, something that usually takes a long time. If the website is operating illegally, we strongly recommend that you contact the police in these cases too.


If you need anything further, please do contact us on +44 (0) 1865 332244, or by email at [email protected].

Kind regards,

 

[ExtensionsMall]

And it's no wonder that scammers are getting away with it, there is practically no one to stop them!

 

[RBS]

I`ve given up on this, its pathetic.

 

[frcolin]

hello,
They have re-opened their website with .eu extension. jkempltd (dot) eu
I've been in contact with them by email for an ad posted on agriaffaires and machineryzone
They are pretty good in making the deal seems real, there is even the serial number of the machines.
But they are scammers.
Be careful.

 

[frcolin]

But they are not that good when i've pushed them a little bit :
I wrote :
Hello,
And will you ship it from England or directly from Russia ?
Thanks.
F. COLLLLLLIIIINNNNNNNNNNS

They answered :
Dear Franck,
Yes,we can transport the machine to Russia.
The total price including transport to Russia is 11000 GBP.

I think i'm gonna play a little bit with them.
Could be hilarious.

 

[frcolin]

I've asked them their bank account number, here what they said :
"If you are interested in this machine we need the following information from you or the company that is making this purchase in order to send you a pro-forma invoice:
- Company name / Person
- VAT No
- Address
- Country
- Postal code"

So i guess as icing on the cake, they want to use my company details to make other scams. Sort of identity theft such as they did with the "real" J Kemp Ltd.

 

[Emu]

I do quite a bit of blackhat SEO hang around on several russian IRC/ICQ/encrypted chats they call this type of thing "brand usurpation" and are looking at ways to use real world businesses in their scams, usually if you get involved in this sort of thing you wont just be giving away your cash you will probably be 1 node in a chain away from money laundering.
The "latest" thing they are doing is picking up on new whois registrations, checking what company the domain was registered with and emailing out to the new owner as if they were the registration company/domain registrar with an official but badly spelled email asking you to make a one off payment for search engine submission so if you register any domains keep an eye out for follow up emails from the place you just registered with.
I know its immoral and I know its not nice when someone is scammed but I admire the creativity of some of these guys, however, they always seem to drop the ball on really simple things like email wording or something....