Rental Scam
![image[3]](http://i.dailymail.co.uk/i/pix/2016/04/29/22/33AAA57E00000578-3566492-image-m-97_1461964809317.jpg "image[3]")
To be clear, the HGTV guy has almost certainly nothing to do with all this, but if a silly person is about to fall for the scam and googles this (fake) name that the perpetrator give, they will surely find something (i.e., the real guy), except that who they find is not who sent the email.
With no further ado, here’s the email I got.
Absher Jonathan Scott mam*****@gmail.com
Thanks for your interest in my Property. I am a professional
piano/music theory teacher, I'm easy going and friendly. I like Music
and have deep interests in traveling. I respect every religion and
love to hang around with people and i am definitely not a trouble
maker and very helpful in nature. I am currently living in South
Carolina and I will be here for long that is why am renting out my
Property. I want you to note that I am a kind and honest person and
also I spent a lot on my property that I want to give you for rent and
I would want you to treat it as your own, I would like you to keep it
tidy all the time I also want you to let me have trust in you as I
always stand on my word. So I hope you will promise me to take very
good care of the Property always as i am away.
My job even paid very well, requires that I move a lot and without
notice. You can move in the Property in the same day that you will
receive the keys. The only problem is that I'm already in South
Carolina because we started the work, but you don't need to worry
because I've made all arrangements to rent the Property from here. i
would like to know a little about you. Don't be offended but i must
know to who i will rent my Property to. I will tell you from the
beginning that I don't have a problem if you are a student or if you
would like to keep pets there, as long as you clean up after them. The
minimum lease is available for Long and also Short Term Lease, very
important, the utilities are included in the price per month. Kindly
get back to me with the Below information..
Rent :$500 per Month
Last Month Rent: $500
*****RENTAL APPLICATION FORM****
( Private and Confidential )
PLEASE COMPLETE IN BLOCK CAPITALS
CORRECTLY ...
Please answer these questions below if you are Interested
1)Your Full Name_________________________
2)Present Address(where you reside now) & Phone ________________________
4)Are you married _ _____________________________
5)How many people will be living in the property _________________________
6)Do you have a pet__________________________ ___________
7)Do you have a car _______ _______________________ ____________
8)Occupation ____________ _________________
9)How long are you willing to stay _______ ____________________-
10)When do you intend to move in ___
11)How Many Month Rent Are You Willing To Pay ( First 1 month rent +
Last Month Rent) or If You Pay (First 2 month rent + Last Month Rent
And Get 1 Month Free)...So which one do you prefer ________________
Get back to me as soon as you
fill the application form, FILLED UP.
I can guarantee you that this is a great home so looking forward to a
future collaboration and friendship.
Thanks for taking
I was able to find the exact text above previously reported on a forum named “Scam Warners” (dm-photo).
An email address is not just the body text. What can give some info about the sender is the “headers”.
Here are the email headers.
Delivered-To: [my email; removed]
Received: by 10.202.82.140 with SMTP id g134csp1016233oib;
Sat, 15 Oct 2016 14:57:55 -0700 (PDT)
X-Received: by 10.107.151.141 with SMTP id z135mr20405850iod.28.1476568675054;
Sat, 15 Oct 2016 14:57:55 -0700 (PDT)
Return-Path: <mam*****@gmail.com>
Received: from mail-it0-x241.google.com (mail-it0-x241.google.com. [2607:f8b0:4001:c0b::241])
by mx.google.com with ESMTPS id i129si2547000itg.88.2016.10.15.14.57.54
for <[my email; removed] >
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 15 Oct 2016 14:57:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of mam*****@gmail.com designates 2607:f8b0:4001:c0b::241 as permitted sender) client-ip=2607:f8b0:4001:c0b::241;
Authentication-Results: mx.google.com;
dkim=pass header.i=@gmail.com;
spf=pass (google.com: domain of mam*****@gmail.com designates 2607:f8b0:4001:c0b::241 as permitted sender) smtp.mailfrom=mam*****@gmail.com;
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-it0-x241.google.com with SMTP id o19so1476105ito.3
for <[my email; removed] >; Sat, 15 Oct 2016 14:57:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:from:date:message-id:subject:to;
bh=pgy2oierjwCn2n0eWKhPwJ9E1VwObDhkUyIgu/fIo2Y=;
b=hfpj4W1ZXW0hkpDPhJGSgWuT1y8uSvRP35USWvsuVY8oLeke78AzNFKqHP6QLF4UQ1
nXHydAxEeZw5pPaGm9Mt3VUvdqlrS/NSm2CEh9yfAtKXdap6rkob7PuzYlk10LiR+4Ou
my6FfIlYI9pZZWLgdXTdaDoM1w5zByLppBYvPZIhKU9q/ejgbp1OFWi8bP4oxWa6gRbU
quebaxn1HsqFktcyi1yWEb++3lHleFlpwTnXW9wJmj+zeE4R5PbJWbQvDlCjM/bTCcQ3
BZZtatF1nbcRPiM9PG7lPksAgnfi+lokfXAqzVoNgFrvXAMvm5iWOY3H86h8PwTj+Mv1
qfcA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=pgy2oierjwCn2n0eWKhPwJ9E1VwObDhkUyIgu/fIo2Y=;
b=P4+0ZJxUeUd/8R7/c756ottC+lXL0OUShm8TpnkMVXugTx1r1oWVxIsWhNJpoQXQO6
hAqa9SlrM3a66QoUEB/jQzV+FKDpxYWzlWMvbTHy8gBFiRzmoku8Feozdk6ZHeGQ8AyD
uYzRYpuNW/7uKDP0JRfMJ1mweO2bjTMMYguixqLpVKcfBLjWHUNI1tLibd463qEbEzfk
TiYUyMKjvg0zFsEAlUwaQiUEkd2s+cofJrqE1ZjHVNph071qJDT/0FLQqEpltueaRceD
1RmHG7ZWCUMBEgBdVVpJUhMMqg4xLv95LQbG7i4pt3+cGDYp/IrX/iFWCKlqkq5o6ERK
psEg==
X-Gm-Message-State: AA6/9RktIhPFYz5GSnGbgeYmJXled1ypoSKn+ThiHtB6FRfsTPQdlSTLGa0HzJbKkr388wTGDyda4Xh2HzMRzA==
X-Received: by 10.36.111.209 with SMTP id x200mr3084225itb.59.1476568674291; Sat, 15 Oct 2016 14:57:54 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.79.36.75 with HTTP; Sat, 15 Oct 2016 14:57:53 -0700 (PDT)
From: Absher Jonathan Scott <mam*****@gmail.com>
Date: Sat, 15 Oct 2016 22:57:53 +0100
Message-ID: <CANZaeFPt6rAp9XCh=Yuk8G=+846CETw9Q0uGXVnRrR01HsuopA@mail.gmail.com>
Subject: 15 MINUTES TO DOWNTOWN TORONTO
To: [my email; removed]
Content-Type: text/plain; charset=UTF-8
Obviously, I am replacing my own email with a placeholder for privacy purposes and extending the same courtesy to the scammer, as he or she (but probably he) may have stolen someone else’s identity. Yes, even if they are using a stolen identity, they email is most likely theirs and disposable, but that is just speculation with no proof and I’d rather err on the side of caution.
He had emailed me at this email after having specifically requested it.
Delivered-To: [my email; removed]
Received: by 10.202.82.140 with SMTP id g134csp718061oib;
Fri, 14 Oct 2016 23:43:00 -0700 (PDT)
X-Received: by 10.55.140.199 with SMTP id o190mr5603806qkd.299.1476513780540;
Fri, 14 Oct 2016 23:43:00 -0700 (PDT)
Return-Path: <bounce-anon-[my email; removed]@craigslist.org>
Received: from outbound.ashburn.craigslist.org (mxo3a.craigslist.org. [208.82.237.98])
by mx.google.com with ESMTPS id t7si11900079qte.97.2016.10.14.23.43.00
for <[my email; removed]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 14 Oct 2016 23:43:00 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounce-anon-[my email; removed]@craigslist.org designates 208.82.237.98 as permitted sender) client-ip=208.82.237.98;
Authentication-Results: mx.google.com;
dkim=pass header.i=@craigslist.org;
spf=pass (google.com: domain of bounce-anon-[my email; removed]@craigslist.org designates 208.82.237.98 as permitted sender) smtp.mailfrom=bounce-anon-***@craigslist.org;
dmarc=pass (p=NONE dis=NONE) header.from=hous.craigslist.org
Received: outbound
DKIM-Filter: OpenDKIM Filter v2.10.3 outbound.ashburn.craigslist.org 45B96175D0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=craigslist.org; s=20160601-165758-eemjccqt; t=1476513780; bh=9aQLwJulf7ZB1zuhtwKmb/BKfD9+NiO/+I6FIe3bWCY=; h=From:To:Subject:Date:In-Reply-To:References:From; b=YPsbjwbVdpDO7zQQjbT6SD0SsTF9eVgcSo0kZSAimDnINduCAfo98YKbAD26kfRm9
gd5DgQNpHErmxpueEHMMe9hF2M4ya3QLlnrFHiVzgR03ClnXycKjMvemjEgga09H6c
Lp4uMMvVkidOvJbaVDLUy70d3rINHA7E8vEXkD6A=
From: craigslist 5827857296 <*****-5827857296@hous.craigslist.org>
To: [my email; removed]@reply.craigslist.org
Subject: Re: 15 MINUTES TO DOWNTOWN TORONTO
Date: Sat, 15 Oct 2016 07:42:58 +0100
X-CL-ID: A76FC0DB-8392-4AE5-9928-7338FDDCFB3B.624
Content-Type: text/plain; charset=UTF-8
MIME-Version: 1.0
Message-Id: <mYgoRLFbzluqZyx7OpG1ffz_8ggkAmndWOz5bE8p-ElC6OS2gp2gsAk_OXL5eN94Dik71ZIkJEHyHJoD5XNtDrJ3NPff32kEhw-SHxwWKBA@v2.cl.com>
In-Reply-To: <CAN93cin9RsWwjMt4zbQUC18Pis=JWAhCwL2DaRNXWKiXrwG6rg@mail.gmail.com>
References: <CAN93cin9RsWwjMt4zbQUC18Pis=JWAhCwL2DaRNXWKiXrwG6rg@mail.gmail.com>
Thanks for the interest.Can i have your email address because it
doesn't show up?
On 10/15/16, ************
<[my email; removed]@reply.craigslist.org> wrote:
> Hi, I am interested in your place and would like to see it. I'm at
> 647-******* but my phones are mostly on
> mute - it's best to text me or email me your number and when to call and
> I'll call you back.
> Thank you.
>
> http://toronto.craigslist.ca/tor/roo/5827857296.html
>
>
------------------------------------------------------------------------
Original craigslist post:
http://toronto.craigslist.ca/tor/roo/5827857296.html
About craigslist mail:
http://craigslist.org/about/help/email-relay
Please flag unwanted messages (spam, scam, other):
http://craigslist.org/mf/6e04c49ba76fc0db83924ae599287338fddcfb3b.624
------------------------------------------------------------------------
The ad may disappear, so here’s a screenshot:
And the actual text:
$500 15 MINUTES TO DOWNTOWN ***
available now
private bath
private roomTHIS APT. IS DESIGNED AND FURNISHED BY A DESIGNER (OWNER) IT IS IN THE PRIME AREA OF THE BEACHES. LOWER LEVEL OF A LARGE HOUSE WITH SEPARATE ENTRANCE. ALL UTILITIES AND INTERNET ARE INCLUDED. ON SUITE LAUNDRY, PARKING ON PROPERTY. SUITABLE FOR ONE PROFESSIONAL. CLOSE TO PUBLIC TRANSIT. 15 MINUTES TO DOWNTOWN ***. USE OF LANDSCAPED GARDEN.
After sending him the “completed form” I got the following email, requesting money.
Delivered-To: [my email (removed)]
Received: by 10.202.82.140 with SMTP id g134csp19571oib;
Sun, 16 Oct 2016 00:26:09 -0700 (PDT)
X-Received: by 10.36.185.30 with SMTP id w30mr4424526ite.97.1476602769694;
Sun, 16 Oct 2016 00:26:09 -0700 (PDT)
Return-Path: <[his email (removed)]@gmail.com>
Received: from mail-io0-x229.google.com (mail-io0-x229.google.com. [2607:f8b0:4001:c06::229])
by mx.google.com with ESMTPS id y63si10311031iof.202.2016.10.16.00.26.09
for <[my email (removed)]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 16 Oct 2016 00:26:09 -0700 (PDT)
Received-SPF: pass (google.com: domain of [his email (removed)]@gmail.com designates 2607:f8b0:4001:c06::229 as permitted sender) client-ip=2607:f8b0:4001:c06::229;
Authentication-Results: mx.google.com;
dkim=pass header.i=@gmail.com;
spf=pass (google.com: domain of [his email (removed)]@gmail.com designates 2607:f8b0:4001:c06::229 as permitted sender) smtp.mailfrom=[his email (removed)]@gmail.com;
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-io0-x229.google.com with SMTP id j37so160456406ioo.3
for <[my email (removed)]>; Sun, 16 Oct 2016 00:26:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
bh=wmcOnlXz2HUrG+t5PE1OsYwcHXmP2emR0KUoY5aleqA=;
b=e6FhmCNQzC7/rIIk6DY7O9LWt1495f65wgMgFSyeLInq7kQ24KpHO7Q/UZJGTFa3TY
6moxvH+b1b6j/pfCQtUh4QxmuCERmn8xNrC5NQg8f//amWeNrQPZ9hMOxEIdkOGqEilU
+oDG5tDkgGysTG4DYV5mPPXykCj31T3MGzG5m8eXIhhiG2cU38gxSo9QCohHh53ElAXJ
nLWM4zi7j1Irz7NzFQqQOYWXL1w8IRVkHNDYpthjpOFEqbebO142Du1srauhLDoE3rv5
dGWbCswqAIy+h8QFdqVbKbE+QG3lnEho84duajgq2qOKj8tnyI18GsVTXI1VzPzAH43l
lYPA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:in-reply-to:references:from:date
:message-id:subject:to;
bh=wmcOnlXz2HUrG+t5PE1OsYwcHXmP2emR0KUoY5aleqA=;
b=PlakPbt6jdu3gAM2bFmNe9WKIJj+g5lldKNNCijCDmZRwUQxPLVRlsbLhU2LVrI4Mh
WXY19w9ZAEVyII4IgPTqnFxoXPYJn1Nw/Za72v00ihYwKGBThUORNb3aDAisVWu4Pc2f
Fe4s2z/bPOD6HLtJB6arlG/XewR3epFznH8FytOMYh36V9pPkpVxCtH6CaOUzhxEYBs1
Wx10VkjLYGuTJTpKy0ipcH0WBL4D7Jl1idE34DgO0j6o+s1Uy3G8Wc3UqjsjvCWu7Y8w
HUsBxSGR7HyiqlgLvQ7oga4uEqTmIcagjL6VlUBxpOR/sSELiVkcg27zkGAljQyfwN2A
Yd0w==
X-Gm-Message-State: AA6/9RmIykHJXX8L31xiNzF5hbfCOroF8c6aQHLXR78gOHitJ5bkkSdpdDXDeiR6Usyy26YDp9CeYkFsTlNjyw==
X-Received: by 10.107.174.229 with SMTP id n98mr18872752ioo.177.1476602768719;
Sun, 16 Oct 2016 00:26:08 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.79.36.75 with HTTP; Sun, 16 Oct 2016 00:26:07 -0700 (PDT)
In-Reply-To: <CAN93ciksRp2QUB8tZwaHA=5h2rvY1GpXPGb+XoHuo1Q5=OT4dw@mail.gmail.com>
References: <CANZaeFPt6rAp9XCh=Yuk8G=+846CETw9Q0uGXVnRrR01HsuopA@mail.gmail.com>
<CAN93ciksRp2QUB8tZwaHA=5h2rvY1GpXPGb+XoHuo1Q5=OT4dw@mail.gmail.com>
From: Absher Jonathan Scott <[his email (removed)]@gmail.com>
Date: Sun, 16 Oct 2016 08:26:07 +0100
Message-ID: <CANZaeFN_eb6MkT1NSCamyaQj88KCnWcedhsgJhzB2ssrzxJ1Xg@mail.gmail.com>
Subject: Re: 15 MINUTES TO DOWNTOWN TORONTO
To: *** [my email (removed)]>
Content-Type: multipart/mixed; boundary=001a11445a0e824688053ef65f22--001a11445a0e824688053ef65f22
Content-Type: text/plain; charset=UTF-8Hello,
Thanks very much for your reply and also i can see your
willingness in this rent and how is work ?Hope great!!! So as i shall
be giving you my property and you can move in when you are ready,pls
again take care of the property also the rent is $500 which include
all the utilities such as heat,electricity,cable,
TV,phone,internet,hydro, washing and drying machine.I have attached
the interior pics.Below is the address..102 Dixon Ave
Toronto, ON M4L 1N7
CanadaHowever, if you are ready to rent the property now, then that will not
be a problem but i will advice you due to a responsible like you, to
be able to afford the monthly rent .Also i would like to send the
following document to you via the Dhl to the address you send to me
and the tracking number will be sent to you so that you can possible
occupy my property,Pls once again,i am giving you this on trust and do
not disappoint me and i promise you that,you will love the
property.Also, you are going to send the rent payment through Check or
Money Gram.So i am with the below document here with me and i will like to
know whether you are ready to make the payment now so that i can
arrange on how the document will get to you in the next 48 hrs after
the payment confirmation.Here are the contents of the document..
1) Entrance and the rooms Keys
2)Paper/Permanent apartment form(Containing your reference details)
3)The property documentary file.
4)Payment Receipt.
So pls get back to me as soon as you can.. I await your reply ASAP
I responded with a few innocuous questions.
Then came this reply, with a photo of a driver's license.
First i must say that i am highly disappointed with this message i
just read from you, after letting you know how much i appreciate your
effort in renting my place even with my predicaments. I have attached
my driver's license for more prove.This process has been fair enough
for you to know because either you or myself has been through a
situation like this but man propose they say but God dispose but its
okay as i have everything under control.My family has also relocated
to California,i want you to know that this is legit..i want you to
know i have to be carefully this days cause i send the keys to someone
and they stole all my belongings so that is why i don't want to do
that anymore and i swear to almighty God that if you send the payment
you will surely get the keys and the documents so that you can be able
to move in,You sound skeptical from your last email, and that is very
wrong, if you are thinking that I just wanted to take your money for
nothing. When I known how people worked and earn their money, I will
never think of taking some advantages over you and your money, please
take that out of your mind, that is really awful thing on the earth
that I will never think about doing. Please understand me better, I
was not trying to lure you into this, everything about me is 100% real
ok, i will like you to know one thing i am a Man of God and i so much
believe in his words and i can never tarnish my name and image all
because of money and i wouldn't do such a thing when i have blood
running through my vein,So I shall be shipping out the keys and the
document to you as soon as you make the payment.
If you are thinking of replying to a similar ad, in another city, don’t! The scammer is providing fake data in order to take your money.
Sources / More info: dm-photo, scamwarners-scott
Comments