Hall of Shame - Instant Karma
Ever wonder why so many smart people get
into the scamming business? It's not a lack of
intelligence that leads people into scams, it is a desire
to get more than they have earned and to enjoy it for
If we see a few
people, who don't seem to be held down we either envy them or
seek to emulate them. At some point, some of us get so
frustrated, and want to become rich and famous so bad, that we'll
take almost any path to it. The quick path to the so-called
greatness is always a fraud. Scamming us or someone else in the
numismatic field will put you on this "Hall of Shame"
board for life and your stolen acquisition may be cursed. The
items can be un-cursed only by returning them to their rightful
owner. The cursing practice works wonders on reducing theft,
scams, fraud and robberies around the world.
If you get frustrated, do not go for the quick fix, which is fraud (scam, crookery, theft, robbery etc.). If you do, you might end up on this board just like the others who are already here. Removal of the info is possible after returning the stolen goods and paying the damages caused and interest (if any).
Simple rule how to avoid getting on this list: Do not steal, scam or cheat (us). All records on this page are permanent. Even if removed, your bad record will remain on the internet unerasable for the rest of your life and beyond. The bad record will remain in search engines, credit bureaus, debt collectors databases, other websites, and especially on internet archives and is non-removable. Think before you scam us or someone else. Is it worth destroying your name, reputation and your career over something temporary like enjoying some stolen money? There is an old basic curse when something is stolen: May all my bad luck go with you. This includes UNFAIR and FRAUDULENT CHARGEBACKS, stolen goods as well as hard-bounced checks.
NUMISMATIC & PHILATELIC SCAMMERS
|Numismatic Crime Information Center - The Numismatic
Crime Information Center (NCIC) was established in 1986
to coordinate and collaborate intiatives between law
enforcement and the numismatic community in
"Targeting Numismatic Crimes Around the World".
NCIC is devoted exclusively to assist law enforcement and
victims during the investigation of numismatic crimes and
to provide the necessary tools and resources to
effectively investigate the complex challenges
encountered during these types of investigations. NCIC
provides technical assistance to law enforcement and
focuses on the identification, apprehension and
prosecution of individual suspects and Organized Crime
Groups who target and prey on the numismatic community.
(Banknotes.com is not associated with the NCIC in any way or form. We are a subscriber to NCIC's Newsletter and notifications and we provide the above "Friendly Advert" information for them as we find it uselful and so the wide public may find it uselful, informational and crime preventative as well).
The following individuals or companies are not just dishonest swappers, traders, collectors that do not send their share to their swapping partner. Many of them are hardcore criminals, such as scammers, thieves, fraudsters, crooks, who are making a "living" by cheating, scamming and defrauding collectors and dealers. I and we reserve the right to post on this page anyone who will cheat, scam or defraud, including delivered but unpaid orders, credit card & check fraud, electronic shoplifting, other activity, such as unreasonable chargebacks, and chargeback-fraud etc. Buyer and seller, beware! Your acquisition may be cursed and the items can be un-cursed only by returning them to their rightful owner.
Case # 00001. Moshe Ben-Hod also known as Mauricio Sohnen, Carlos Arenesca, Paltiel Kibrit and Claude Grandet. Cendres et Metaux Corp. Ltd. or I.O.Trading, Ta Doar 21363, Tel-Aviv 61 213, Israel. He scammed us in April 2000. Moshe Ben-Hod's current home address is: Mr. Moshe Ben-Hod / Mauricio Sohnen, Pinkas Street 54, Tel-Aviv 62261, Israel. He's from Argentina, lived in New York. Telephone: +972-3-5444932. He lives in an upmarket area of Tel Aviv. He used to own the following emails: email@example.com , firstname.lastname@example.org . Now he uses the following email address: email@example.com. He steals and forges cheques (bank drafts) of or drawn on a BARCLAYS bank in London, Great Britain and then pays with these cheques (click to view Front & Back of both cheques he forged) for his orders. Those cheques of Moshe Ben-Hod bounce and he will not stop to cheat you in all possible ways. Asked to return the scammed merchandise this Moshe Ben-Hod sends trash in a package with "proof of delivery" card for you to sign. Also he sends terribly misgraded (trash) notes to other collectors and again: his cheques bounce! He claims to be a President of some kind of numismatic society in Israel and makes up all kinds of stories to trap you in to his schemes. This is the address that the banknotes were shipped to: Moshe Ben-Hod, c/o Oasis Numismatics, 501 N. Taylor St., Fallon, NV 89406-5716, USA. Please note, that someone by name LARRY KAECK lives by that address in Nevada. The following is the list of banknotes stolen (by way of fraud): Click here to see the list. Also, the following are two letters of his: Letter #1 & Letter #2. He also currently uses names Paltiel Kibrit and Claude Grandet. His possible STREET address in Israel: Paltiel Kibrit, I.O.TRADING INC. (Moshe Ben-Hod), Dizengoff 5, Tel-Aviv, Israel. His email firstname.lastname@example.org. This is another example of Ben-Hod's bounced cheque (Charles Schwab & Bank of America) and a letter accompanying it. Here's yet another bounced cheque (Fidelity Investments) of his. Please note, this cheque was either stolen by him or he used a fake name and address in Panama. Here's another cheque (Promodes Ltd., Charles Schwab, SchwabOne) and an accompanying letter which MBH sent to Germany. It bounced, of course. Here's a post (or try this one) of MBH, his phantasy, it shows how far he's gone to intimidate his "victims". It's named "AFFIDAVIT". Scroll down to about the middle of that page to read his post. Or read it here. Update: his latest email is: email@example.com - please contact me if you have more info about this guy. Here's his latest fraud illustrated: fraud10, fraud11, fraud12, fraud13. Latest info: he's last known to use name Serg Goldman, Promodes Ltd. His last known email address: firstname.lastname@example.org . Here's his email. 12 December 2002 update: oops ... he did it again, but was unsuccessful ... Mr. Serge Goldmann as he is called now. Here is his unfortunate check and his letter and his story. 5 June 2003 update: Moshe Ben-Hod email address: email@example.com and the following pobox address and company name: GECCO HOLDING LTD., Teyvat Doar 31418, Tel-Aviv 61313, ISRAEL. Details given: COHEN SHLOMO, KIPODAN, 30/8 MODIIN ISRAEL 71700. Cheque was from "Cendres et metaux corp." Israeli Embassy and IL and US authorities did not react to our information. Consumers - protect yourselves. Police is out giving speeding tickets. August 2003 update: Moshe strikes again: here's his another fake-to-the-bone check.Thanks to this page the seller did not lose anything. His latest known pieces of correspondence. Yet another (successful this time) check (for $1900) (issued by Bank One, Columbus, Ohio) of now "Harold Gecco" and these are images of the coins he got as a result of his fraud: coin1, coin2, coin3, coin4. Update on 18th Aug. 2004: his current email address appears to be: firstname.lastname@example.org . Some of his auction IDs: Iotrad, Granadaclaugra, Matityahu, Golanisheli, Hakohen. His (Moshe Ben-Hod is his real name in Israel) latest ID is: s08234. Yet another (unsuccessful attempt of fraud) cheque. Yet another scam attempt: letter - cheque.
We reported him (Moshe Ben-Hod) on the "ebay" forum. "Ebay" then blocked our "ebay" username (for that exact reason (disturbing peace (by reporting a criminal "ebayer" and warning other members!) and also for reporting fake Chinese crystal sellers - "ebay" stated because we did not pay for one single purchase of $10 (for the fake crystals!)) and allowed him (MB-H) to keep on registering with new fake ids to scam more and more people. And so he (Moshe Ben-Hod) continued his fraudiulent activities. To our protests "ebay" responded with silence. This is why you are seeing new and new cases popping up where Moshe Ben-Hod is the "hero" of the new scams and fraudulent activities defrauding more and more sellers on "ebay" and on other venues and websites. In addition to that there are fake Paypal accounts that collect money from unsuspecting buyers on "ebay" and elsewhere and do not ship the goods. Upon complaint a refund is being issues by Paypal, but the fraudulent accounts are being kept active and defraud more users. We tested those fraudulent accounts for years by pre-sending $1 to them and the money is being accepted even after we reported them to Paypal ("ebay") as fraudulent. Allegedly Paypal Inc. does not have a voice in closing those fraudulent accounts since "ebay" is allegedly the one who calls the shots in all decisions. Happily we were never interested in selling on "ebay" (although using Paypal is the necessity), so blocking our id by "ebay" did not hurt us in any way. We are still able to purchase occasional gardening products on "ebay" but keep it to the minimum.
Eventually, apparently fed up, an Israeli lawyer indirectly contacted us (through another person) asking for full info (which is posted here, all that we've got) on MOSHE BEN-HOD, so we directed the lawyer to this page. The Israeli lawyer expressed his wish to stop MB-H. We hope that over the years that followed he (lawyer name unknown) was able to stop MB-H. Yet MB-H owes us (and many others) over US$5000 plus interest.
UPDATE: July-August 2006: Moshe Ben-Hod strikes again, as usual, on one of online auctions (that are protecting online criminals, since those kind of folks bring the online auction good profits by scamming other members). He used email@example.com and auction ID ben_zion. This time Moshe Ben-Hod has defrauded a person from Croatia. If you need more info on this case I will provide it to you upon request. This time Ben-Hod has acted as Baruch Levi and Ben Zion (fake). He used fake check in name of David Mendes and President at mutual Funds Dept., Shawmut Bank, N.A, Boston USA. He used also fake name with address; Baruch Levi, Tadoro 21363, Tel Aviv 61213, Israel. The person whom he defrauded is: Stojan Blazanovic, Varicakova 12 / 8 HR-10010 Zagreb CROATIA, Member of IBNS: 6853. This time Ben-Hod was using a German branch of the auction site to defraud the person from Croatia. Here is Ben-Hod's fake cheque.
UPDATE: August 2006: Yet another "deal" of his on one of the online auctions. We fail to mention the name of the auction since it will not protect it's users from profitable scammers like Moshe Ben-Hod is to that auction or venue as they call themselves. Again the "deal" was done with a German dealer. The check used was from David Mendes SA, Apartado 8301, Panama 7 Panama. The address to which the two coins were mailed is Ben Zion, Etzel Benhaude´, Tadowar 21363,Tel-Aviv 61213, ISRAEL. Beware. Beware. Beware.
UPDATE: December 2006: Ben-Hod has swindled a collector from Canada. This time this less than reliable gentleman Mr. Ben-Hod got Portugal P.108 10.000 Reis 30 Sept. 1910 in VG+ (BC+) condition. As the rightful owner of this banknote describes: "This Note was purchased by a miserable soul who cancelled his payment cheque from a US account that doesn't even exist. He goes by a different number of names, he used the name "Mo Grenada", from Israel."
UPDATE: March 2007: His (fake) name and address now is: Klaus Grandt, Ta Doar 21363, Estel Benod, Tel-Aviv 61213, Israel. "Estel Benod" or Estel Ben-Hod (?) must be his wife. Claude Grandet = Klaus Grandt... He unsuccessfully tried to defraud a British banknote dealer for $750. The dealer reported to me that she was saved from the scam by this swindler page of ours. Moshe Ben-Hod's current email is: firstname.lastname@example.org
UPDATE: 23rd of April 2010: Received the following email from www.timelineauctions.com: "You might like to know that your friend 'Col. Claude Granada' is still out there and active from his base in Israel. The email he gave is email@example.com and the address he provided is Ayzl Benod, Ta Doar 21363, Tel-Aviv 61213, Israel He bid at our auction on 19th March 2010, 'won' three coins totalling £2,281.93 and sent us a US$ cheque drawn on a Panama bank. Fortunately we smelt a rat and an internet search brought up your site (with other references elswehere) so this is one scam he won't be getting away with."
UPDATE: 1st September 2018: Moshe Ben-Hod as a secured party (historical public record) of property in the U.S. and also proof of his Israeli street address: https://www.realdirect.com/e/1601.AVENUE-I.11230.420/
BEN-HOD, MOSHE (click the link on the left to see a screenshot)
ISREAL, NY 62261, US (original spelling)
Which also explains his usage of surname SOHNEN in his criminal activities.
Addresses that Moshe Ben-Hod may have allegedly used in some way in his criminal activities:
1615 Avenue I, Brooklyn, NY 11230, USA
1601 Avenue I, #420, Brooklyn, NY 11230, USA
It is possible that this case is connected to case # 00004 (Zobel).
Case # 00002. Stanislaw Rutkowski. Lives in Debrzno, Poland. His current address: Stanislaw Rutkowski, P.O.BOX. 50, 77-310 DEBRZNO, POLAND. Telephone: ++48-602-765-648. Email address: firstname.lastname@example.org . He usually orders a big amount of stamps writing that he is honest and that he is going to pay the asked price and his buying plans might seem attractive to a seller. After he is being contacted to find out whether he received items (after a few weeks or months of silence) he states that he either didn't receive the items either he received empty envelopes. His story might differ every time. (1999) Has not paid for ordered phonecards that he received by Registered mail. All inquiries ignored. This man is a notorious scammer who has cheated out thousands of dollars worth of material both from collectors and dealers, philatelic items and phonecards. He is known to use another address (P.O.Box in neighbouring town): Stanislav Rutkowski, P.O.Box 6, 77420 -Lipka-K/Zlotjwa, Poland. He might also use the following version of his name: Stanislav Rutkovski. The following is one of his letters where he "explains" (lies) how he receives totally "empty" shipments with no stamps inside...The text is in Polish though. As you can see, he might be operating from Germany as well: Postlagers, D-73525 Schwäbisch-Gmünd, Deutschland (Germany).
Case # 00003. Michel
Rossignol. His address is: 19, Rue Mautrec,
33000 Bordeaux, France.
He works on appointment only. He also might be honest for some
time, especially when buying in advance and as soon as his debt
amount grows he stops paying and begins ignoring that person. His
company's name is PHIL'ACTIVE. Mr. Rossignol especially targets
stamp dealers in Eastern and Central Europe, but not only. Some
stamp collectors and dealers even have a proof on paper that Mr.
Rossignol has asked them not to send invoices or orders on to his
business address to avoid paying taxes to the French government.
Here's what Monsieur Michel Rossignol (PHIL'ACTIVE)
had to say: Click here to view one of his letters available. UPDATE: his
web site now is http://www.philactive.com. Email: email@example.com & firstname.lastname@example.org & email@example.com & firstname.lastname@example.org . Michel Rossignol appears in other Black
Lists as well, for example: http://www.vincenzo.altervista.org/black_3.html
Adresse: 19, rue Mautrec, 33000 Bordeaux, France. Ne travaille que sur rendez-vous. Peut se montrer honnête pendant un certain temps, mais aussitôt que sa dette augmente, il arrête de payer et commence à vous ignorer. Le nom de sa compagnie est PHIL'ACTIVE. M. Rossignol cible surtout les marchands de timbres en Europe Orientale et Centrale, mais pas uniquement. Certains philatélistes et marchands ont la preuve sur papier que M. Rossignol leur a demandé de ne pas envoyer de factures ou de commandes à son adresse commerciale afin déviter de payer les taxes au gouvernement Français. Voici ce que Monsieur Michel Rossignol (PHIL'ACTIVE) indiquait: Cliquez ici pour lire une de ses lettres. ACTUALITÉ: A ce jour, son site internet est : http://www.philactive.com. Adresses de courrier électronique: email@example.com & firstname.lastname@example.org & email@example.com & firstname.lastname@example.org .
Michel Rossignol: Son addresse est: 19, rue Mautrec, 33000 Bordeaux, France. http://www.philactive.com Il travaille seulement avec rendez-vous. Il se peut qu'il soit honnête pendant assez longtemps, surtout quand il achète en avance et aussitôt que sa dette croît il arrête de payer et commence à vous ignorer. Le nom de son compagnie est PHIL'ACTIVE. M. Rossignol cible surtout les marchands de timbres dans l'Europe Orientale et Centrale, mais pas éxclusivement. Quelques philatélistes et marchands ont la preuve sur papier que M Rossignol leur ont demandé de ne pas envoyer des factures ou commandes à son addresse des affaires pour eviter payer les taxes au gouvernement Français. ACTUALITÉ : Son site internet est maintenant http://www.philactive.com.Voici ce que Monsieur Michel Rossignol (PHIL'ACTIVE) a dû indiquer: Cliquetez ici pour visualiser un de ses lettres disponibles. Email: email@example.com & firstname.lastname@example.org & email@example.com & firstname.lastname@example.org .
UPDATE: 21 November 2014
Accordingly to the following link and translated text Mr. Michel ROSSIGNOL has changed his business and residential addresses:
Original text of the legal notice *:
8074 MR SARL SARL with capital of 7 622,45 Registered office: 19, rue Mautrec 33000 BORDEAUX 393 691 100 RCS Bordeaux According to a decision dated 31 August 2014 and from this day, the sole shareholder has decided to transfer the registered office of 19, rue Mautrec, 33000 Bordeaux, to 139, avenue du Docteur Maurice-Donat residence CIEL AND MER 06700 Saint-Laurent-du-Var, and to modify accordingly the statutes. The Company, registered in the Bordeaux Trade and Companies Register under number 393 691 100, will be re-registered with the Antibes Register of Commerce and Companies. Management: Mr Michel ROSSIGNOL, residing 1205, Route des Gattières, 06640 St-Jeannet. For opinion La Gérance.
UPDATE: 1 January 2018
M R SARL (PHIL ACTIVE - TAXILA) Société: 393691100
PHIL ACTIVE TAXILA
RESIDENCE CIEL ET MER
139 AV DOC MAURICE DONNAT
06700 SAINT LAURENT DU VAR
Case # 00004. Known as: Carl
Zobel, Markus Zobel, H. or F. Schimpf, Ph. Dr. Michael Chang,
Henry Wang, Ingrid Hoffman, Henry Delk, Karl
Schmidt, Heinrich Pohl, Frau Schreiner, Frau
Grosch, Heinrich Streichmeier, Steven Richardson, Carl Lee (Lee
& Ritter Numismatic) (male), (some or all of
those names are/might be his fake names), Carl Zobel,
Hauptstrasse 94, Z. Hd. Sonne, Offenburg 77652, Germany (Hotel
address). His "business" address: Carl
Zobel, Firma LR Zobel Numismatik, Mercure am Messe Platz,
Schuterwaldstrasse 1A, Offenburg 77656, GERMANY (another Hotel
address). His fake/real (?) phone and fax numbers: +49
(0)1212-5-231-85-129 (German free mail service www.web.de). Also: +49 89 2443 69609 (works
as fax, location MUNICH, Germany. Facsimile letter was delivered to this fax
number. Free mail service
located in Munich). He signs his letters as: Carl L. Zobel,
LRitter Zobel Numismatik, Offenburg, Germany. His email
address is: email@example.com which is provided to him by http://www.gmx.de (Global Mail Exchange). He also has
used/faked the following e-mail addresses: firstname.lastname@example.org, email@example.com, Henry_Wang4@Hotmail.com. A young guy (he calls himself as MARKUS)
who acts like if he was
his father (CARL) (could be two individuals as well), makes phone calls, he is well knowledgeable in numismatics and he's most likely a collector or a dealer there in Germany. He makes up all kinds of stories to convince a collector to make a trade deal, then sends an empty package and disappears. This is the lot of banknotes this troubled individual has stolen: Click here to view it.
Update: both packages (sent by Fedex, tracking numbers: 8309 7627 5177 and 8309 7627 5188) were delivered to: Hauptstrasse 94, Offenburg 77652, Germany (which appears to be a "Hotel SONNE"!!!) and were signed H. Schimpf (not by Carl or Markus Zobel !!!). The individual ("Schimpf-Zobel") who stayed at a "Hotel SONNE" in Offenburg has signed into the hotel (his signature copy was provided to me by Fedex and I will post an image of the signature on here soon) using the following addresses and phone number:
1. Bergheimer Strasse 70, 69115 Heidelberg;
2. Philipp-Reis-Strasse 36, 69115 Heidelberg;
Telephone: 49 6221 18 08 99. (+49 (6221) 18 08 99) (autoresponder and phone number tracking device); Heidelberg location. "Carl Zobel's" business address at Schuterwaldstrasse 1A, Offenburg (correctly: Schutterwälderstrasse) appears to be a HOTEL as well!!! As "Mercure" hotel's front desk manager told me that "Mr. Zobel" came to "Mercure" Hotel on 22nd of November 2001 to register for a one night's stay from 24th of November to 25th of November and he gave hotel management the following phone number in the U.S.: (702)465 8000 (fake) and then "Zobel" did not show up at "Mercure" Hotel. Surely, he gave "Sonne" Hotel's address to deliver the packages to, so he didn't need to go back to "Mercure" Hotel.
"ZOBEL-SCHIMPF" used the following fax number (with old date on it showing 20/02/1999, 05:05 A.M.) to fax his faked airway-bill and his letter to me:
+49 30 6284 1507 ("it is the bank's fax number of a good friend who works there" he writes in the fax); Most likely that is a public fax service (info will be updated soon). Facsimile letter was received from this fax number. The LOCATION of this phone number is in BERLIN, Germany;
"Zobel=Schimpf's" computer's IP addresses are as following (most frequently used to less frequently used top to bottom):
188.8.131.52 - that's an IP address of EasyInternetCafé most frequently used by him, "Carl Zobel" has most likely used one or all of the following Internet Cafes (EasyInternetCafé a.k.a. EasyEverything) to send his emails:
"Easy Everything" InternetCafe, Kurfürstendamm 224, 10719 Berlin. Not very far from Bahnhof, he definitely used this one.
"Easy Everything" InternetCafe, Damrak 33, Amsterdam. (not very far from Central Station).
"Easy Everything" InternetCafe, Bahnhofplatz 1, Munich, Germany. (next to HauptBahnhof).
Their web location: www.easyeverything.com & www.easyinternetcafe.com.
184.108.40.206 resolves to BERLIN, Germany - "Colt Telecom" service.
220.127.116.11 resolves to BERLIN, Germany. ( www.arcor-ip.net Eschborn, Germany).
18.104.22.168 resolves to STUTTGART, Baden-Württemberg, Germany. ( www.uunet.de Dortmund, Germany )
22.214.171.124 - reverse DNS - pD9547B49.dip.t-dialin.net ( www.t-online.de ). "Deutsche Telekom", Darmstadt, Germany.
"Zobel-Schimpf" has posted four messages acting as different people (disclosing a matching IP address of his) at the following forum (look up his posts under headings: "Ms. Soon See Nah", "Carl L. Zobel", "I agree" and "Scam"):
Mr. "Zobel-Schimpf's" threatening-post can be read at the following page (he admits he stayed in a hotel under a fake name):
The following is an image of how "Zobel-Schimpf" signs (signature) as "Carl Zobel":
Carl Zobel (click here to see the signature)
"Carl/Markus Zobel - H.Schimpf" claims to be dealing with well known dealers, to be a member of well known collector clubs and societies:
"....my business is registered with the Föderation Europäischer Münzhändlerverbände (Federation of European Numismatic Trade Association http://www.fenap.com) which has oversight over the Verband der deutschen Münzenhändler (Association of German Coin Dealers http://www.vddm.de ). In Offenburg, my business is locally known among financial establishments (such as banks and the Deutsche Bundesbank Aussenstelle in Stuttgart) as a result of years of ordering from them. Most banks in my town, including the Deutsche Bundesbank Aussenstelle in Stuttgart/Frankfurt, have standing agreements with me...."
He might be from Muenchen (Munich) or Appenweier(Offenburg) or Berlin or even Amsterdam, NL and his names might differ. You could be his next victim! Beware of this scam artist! All his facsimile messages, email messages and other data and materials are available to authorised subjects upon request.
Please note that the above is just a few facts and all his facsimile messages, email messages and a lot of other data and materials are available to authorised subjects upon request.
His pobox address in Switzerland: Carl Z. Schimpf, Postfach 1414, 8032 Zürich, Schweiz. - please contact me if you have more info about this guy, who claims to know the German banknote dealer Ulf Mietens. It is possible that this case is connected to case # 00001 (Moshe Ben Hod).
Case # 00005. Known as: Eduardo Lanzellotta. Jorge Gon. Susana Marquez. Fake address: Oroño 1187, 2000 Rosario, Santa Fe, Argentina. Another address where mail was received by them: Mendoza 2178, Rosario 2000, Santa Fe, Argentina. Email address used for scam: firstname.lastname@example.org. Scammer's X-Originating-IP: [126.96.36.199] and [188.8.131.52]. Submitted two chargebacks of their credit card payment though merchandise delivered. Phone # provided: 0341-4486652 and 0341-4485562.
Case # 00006. Known as: Roy
Killen, Medan Cellphonic Pte. Ltd. (Also see names in bold
below) Address where the item
was delivered to: JL NAZIR ALWI NO.19, USU COMPLEX, Medan 20154,
North Sumatra, Indonesia. Email address used for
scam: email@example.com . Submitted a chargeback of their credit card payment
though merchandise delivered. Phone # provided: 628126480971. The
merchandise was delivered to the scammer via Global
Express Mail (tracking # to be announced).
Info about the owner of the domain name BAMEGA.COM:
Registrant/Administration: STILES, ADAM (BAMEGA-DOM) 1882 Roosevelt Ave., ALTADENA, CA 91001, USA. Phone: (742)643-4353. E-mail: firstname.lastname@example.org
Indonesian scam's website: http://celebritis.8k.com/kujang.htm (Celebritis.org redirects to this website).
Info about the owner of the domain name CELEBRITIS.ORG:
Registrant/Administration: RAMPENGAN, ROBERT (CELEBRITIS2-DOM) via g lorca n 7 BASTIGLIA, BASTIGLIA 41060, ITALY. Phone: 4523423. E-mail: cyborg@BURONAN.NET .
Info about the owner of the domain name BURONAN.COM & BURONAN.NET:
Registrar: TUCOWS, INC.
Address: Jalan Buntu Gang Sempit Antah Berantah, AB 98546, Indonesia.
Admin Contact: Cityhunter Bandit
Phone: (874) 578-6523
Info about the owner of the domain name BURONAN.ORG:
Registrar: TUCOWS, INC.
Address: Main St. 25, Santa Cruz, CA 98546, USA.
Admin Contact: Bebek Bugil
Phone(same!): (874) 578-6523.
Info about the owner of the domain name BURONAN.US:
Registrar: Omnis Network, LLC.
Registrant, Administrative and Technical Contact Name: Kontol Panjang
Address: Main 15 St., Santa Cruz, CA 98562, USA.
E-mail(same even if it is a fake): email@example.com
Billing Contact Name: Bruce Lieblich
Address: 149 East kingsbridge Rd., Mount Vernon, NY 10550, USA.
E-mail(same even if it is a fake): firstname.lastname@example.org
Most of the above info is probably fake, but you can see and learn about tendencies, directions and locations of the scammers. Click HERE (BACK image) to see the image of the item stolen.
Case # 00007. John
(Jonathan) Dally. Box 40007-1131 Nairn, Winnipeg,
Manitoba R2L0Y0, Canada. Phone: (204) 563-5252
(disconnected). Email: email@example.com .
He submitted an order (Order ID # 209 at www.banknotes.us) on 4th of September 2003 for a 1954 $20 Canadian banknote (Front | Back) and submitted a chargeback on 15th of October 2003. He got away with US$13 worth of material. John, was it worth it? Caused me $70 expenses with this chargeback. The item was delivered by Registered Air Mail # RR 505 510 945 US. "Order" amount $52.00. Chargeback amount $54.99 (exchange rate differences). A clear credit card fraud case. Details: his IP Address 184.108.40.206 which is: Red River Community College, RRCC-1, Address: 2055 Notre Dame Ave., Winnipeg, Manitoba R3H 0J9, Canada.
Case # 00008. Wadim Nensberg.
He is also known as Vadim Erastovich Yastrebov.
Email: firstname.lastname@example.org. Moscow, Russia. Phone: 7 (095) 307 4344. Address: ul. Stalevarov 4 - 4 - 569, Moscow 111531, Russia. His websites: http://nensberg.narod.ru & http://members.tripod.com/~nensberg/ & http://www.exnet.narod.ru/ & http://come.to/nensberg/ . Other (older) email addresses of his: email@example.com & firstname.lastname@example.org & email@example.com & firstname.lastname@example.org & email@example.com & firstname.lastname@example.org . Age: 54-55 (2004 data). Profession:
This case was reported by a person who's identity is not disclosed here. Here is the profile in that person's own words:
"Profile: Likes to deal with westerns (not only me). He invites them to Moscow, and makes friends, then asks for help with his banknote business.
I gave this guy two years ago banknotes on consignment to sell in Moscow. As you can suspect he took the notes, and then just cut of contact with me. He approached me, befriended me, and made me think he could be the most honest person in the East. Well he is not! When I send him emails, he does not answer them. However if I send emails as someone else it does get an answer. If I call him, we always lose the line. And once when I saw him in Moscow, he ran faster than a Russian built TU-154.
All people should be warned to stay away from him, as he is not suitable to trust or do business.
In all my years of business, he is the only person who has successfully duped me. I was even able to escape being duped by the "German Ministry of Foreign Affairs" scam. In fact, there could even be a chance that this Wadim was involved in that [Carl Zobel] scam (see the Case # 2 above). They have the knowledge of the industry, and he (wadim), dropped contact with me shortly after we did not fall for the German scam. When I spoke to the guys on the phone, when we were being targeted by the scam, it sounded to me like a modified Russian accent to English. Also, by using Germany as the cover country, makes sense since, it is close to reach from Russia."
Case # 00009. Attempt to purchase
banknotes with a stolen credit card has been made by:
Sadra technical engineering office
Peyman MALEKI NAZARI
Shahid moslemi street
Khoram Abad T junction
Shahsavar, Tonekabon 00961
Date of the attempt of fraud: 3 September 2004. Amount: US$ 1600.- in Iranian Rials. Originating IP address (220.127.116.11) is in Nigeria.
Case # 00010. Multiple attempts to
purchase banknotes with various different stolen credit card
(numbers) have been made by:
Florin Andreica (also known as: Pavel Andreica; Pauel Andreca; Pawel Andreca, Michel Delmonte, Claude Delmonte, Michel Delacroix, Martinez Marco, Grosso Marcelo, Ion Maria) 19, rue Theodore de Banville, F-75017 Paris, France
46 rue Ordoner (46 rue Ordener), 75018 Paris, France
(Note: "he" "owns" a Paypal account under this name (Michel Delmonte) and this address, so this could be his real name or a hijacked Paypal account!). (Note: Goufrani Mouloud grocery store is located at this address at 46 Ordener, 75018 Paris)
60 rue Ordoner (60 rue Ordener), 75018 Paris, France
Baldi Cristiano, 10 Rue Cloys, 75018 Paris, France
Grosso Marcelo and/or Ion Maria
9 rue Roy, 75008 Paris, France
His emails used in the scam/fraud attempts: email@example.com & firstname.lastname@example.org & SMENUIT@YAHOO.COM Update: CURVAR@VOILA.FR (June 2007). SMENUIT@VOILA.FR (August 2007). email@example.com (January 2010). Mike Delmonte firstname.lastname@example.org (August 2010) email@example.com , firstname.lastname@example.org , email@example.com , firstname.lastname@example.org , Martinez Marco email@example.com (Dec. 2010). firstname.lastname@example.org (December 2012).
Telephone numbers used: 0633486115 // 0613976112 // 0033-666191330 // 699617442 // 634891333 (last two ones from year 2010). 0033-644885576 & 0033-634937115 (December 2012).
Date of the attempt of fraud: 9 May 2006; 16 June 2006; 22 June 2006; 27 December 2006; 24 January 2007, 25 Dec. 2010, 2 Dec. 2012. Amount always around US$ 500-600. Originating IP addresses: 18.104.22.168 // 22.214.171.124 // 126.96.36.199 // 188.8.131.52 // 184.108.40.206 // 220.127.116.11 are located in Paris, France. Last known scam attempt date(he placed orders with many dealers): 2nd of December 2012.
This troubled individual uses stolen and invalid credit cards and paypal accounts ( email@example.com ) to place orders online in attempt to purchase big amounts of Romanian or other currency (and other goods) to be delivered in an urgent manner:
Andreica Florin (Andrica, Andreca Florin), 22 Rue Championnet, 75018 Paris, France. He is originally from Romania. Telephone: 33643248987. Email: firstname.lastname@example.org . Computer IP address: 18.104.22.168. Also: 22.214.171.124. Also: 126.96.36.199 etc.
Reported by a stamp dealer on the 3rd of September 2010:
Order for 2 sets of sheets Scott Catalog #909-21 Overrun Countries $389.00 placed on 1 Sept 2010 by:
Florin Andreica, 22 rue championnet, Paris, 75018, France
Master Card ending in #0192
Code 10 result from my credit card processor is that the credit card is stolen and that there have been many fraudulent transactions.
On the 18th September 2010 a banknote dealer reported to us, spelling is not corrected by us: "On September 15 2010, Florin Andreica placed an order for $700 to buy banknotes from (banknote dealer name withheld for privacy concerns). However, due to his past activists using stolen credit cards , we were already aware of him and did not process the order. The transaction originated from IP 188.8.131.52|, and he listed his address 22 rue Championnet in Paris, France In July 2010, Florin Andreica purchased banknotes worth about $1200 from (dealer name withheld) using a stolen credit card that belonged to a person in Germany. Three weeks after the transaction , the credit card company reversed the charges. Florin used the address 22 rue Championnet in Paris, France. Repeated attempts to contact him were unsuccessful."
He uses a variety of addresses as ship-to address, then redirects the delivery to his home address at 22 Rue Championnet, 75018 Paris, France. This individual has multiple ebay accounts under email@example.com and his auction IDs are just to name a couple: maisonnn (with a photo) and another one opened on 22-DEC-2010 "PACHETULLL" .
UPDATE: 8th October 2012: Florin Andreica is trying his luck again. This time he is "ordering"... a quantity of identical US$20 banknotes; but of course. This time he uses firstname.lastname@example.org as his email contact, where "jocuri" in Romanian means "games". His new address is the following:
Florin Andreica, 15 rue Lecuyer, 93400 St-Ouen (Paris), FRANCE
(His new) telephone: +33-634937115
His computer IP address now is: 184.108.40.206
Case # 00011. Cornel Cosmin Stana from Romania. Places orders, pays with Paypal (or with stolen credit card details) and upon shipment confirmation of his order immediately reverses (chargeback) his payment back to his account. His (temporary) address in SPAIN: c/ Maria Teresa Gonzales 26, 4-H, Castellon 12005, Spain. http://www.todocoleccion.net/valoraciones_y_comentarios.cfm?U=2146741311 Internet Protocol (IP) addresses used in his fraudulent orders: 220.127.116.11 ; 18.104.22.168 / http://www.colectzii.ro/viewuser.php?id=167 Email addresses used in his fraudulent transactions: email@example.com ; firstname.lastname@example.org . Amount of scam: around $100 US. He scams businesses and people from his address in Spain and then flies back to Romania. Username used in registering his profile for his fraudulent "orders": heruvim31 . http://myworld.liveauctions.ebay.com/heruvim31 Telephone number provided to us in Spain: +0034622207477 . http://www.anicos.blogspot.com/
Case # 00012. Sent $100 worth of material (in 1993) to the following person and never heard from him again: Frank Timmermann, kod Parunov, Vukovarska 57 HR-58000 Split, (Hrvatska) Croatia.
Case # 00013. On January 7, 2008 a
numismatic dealer reported to us the following incident:
We just had someone place an order and pay with a Citibank Cashier's check. The check turns out to be bogus and we are stuck with a $768.63 order which was shipped. When I tracked it the order was signed by someone at FRONT DESK and the customer is not reachable by the phone number we have. The information on this customer is:
CEDAR COIN GALLERIES
433 EAST TROPICANA AVENUE
LAS VEGAS, NV 89121
Case # 00014. After shipping out the order received a chargeback (payment reversal) via Paypal from Andrew Buglass email@example.com for 28.45 GBP. Transaction ID: 0XK75475L2969863B. Transaction date: Oct. 18, 2004. Chargeback date: Nov. 25, 2004. The abovementioned person, who placed the order never responded to any inquiries of mine. Since there was no communication between us and the chargeback was placed and goods were never returned, this case (Paypal Case # PP-056-648-188) goes public.
Case # 00015. Mr. James
Faulkner, P. O. Box 8004, Mesa, AZ 85214, USA. His
(former?) street addresses are: 2345 E. Main St., # 96, Mesa, AZ
85213, USA and James R. Faulkner, 214 E. Milada Drive, Phoenix,
Arizona 85042-7672, USA (mail sent to both of his street
addresses is being returned unclaimed). He seems to have moved to
Roxboro, NC 27573 in North
Carolina where my certified letter was delivered to
(mail forwarding). His check for US$103 (issued
by SUNBANK in Arizona) has bounced (closed account). He has not
responded to my inquiries sent to him via Certified Mail. (Posted
on: August 26, 2008).
This guy got away unharmed... for now.
Case # 00016. Abdelhadi Bekhta, 35 Street Mohamed Ougrine, el Magharia, Hussein Dey, Alger 16000, Algeria has been persistently placing "orders" (from the following IP addresses: 22.214.171.124 and 126.96.36.199 and 188.8.131.52 and 184.108.40.206) using stolen credit card data stolen from Weirsdale-Florida, Glenside-Pennsylvania, Converse-Texas, Elkins-WestVirginia and Emporia-Kansas residents. Email address used in the fraud: firstname.lastname@example.org. His persistence paid off and he has earned himself this free space. The incidents (fraudulent order attempts) have occurred in August, September and October 2008.
Criminals are not welcome here.
Case # 00017a. Dinh Trung Hung, E6 X25, Phuong Mo Lao, Ha Dong, Hanoi 20000, Vietnam. Phone: 0978030388. Email: email@example.com . IP address: 220.127.116.11 (location in Hanoi, Vietnam). Used various stolen U.S. credit cards to place "orders" for Vietnamese Dong banknotes to be shipped as "gifts" to the above name and address in Vietnam. Username used by the fraudster: vodska001. Date: October 2008. Case # 00017b. Hung Dinh Manh, E6 X25, Van Mo, Ha Dong, Hanoi 20000, Vietnam (country falsely provided as "Hong Kong"). Phone provided in Boston area is not in service. Email: firstname.lastname@example.org . IP address: 18.104.22.168 which belongs to Comcast Cable Communications, Inc. in New Jersey. Used various stolen U.S. credit cards (stolen from Massachusetts and Colorado residents) to place "orders" for Vietnamese Dong banknotes to be shipped as "gifts" to the above name and address in Vietnam. Username id of the fraudster: anonymous-277. Date: December 2008. Case # 00017c. Do Thi Xuan, 09 to13 Thuanchau Sonla, Hanoi 20000 Vietnam. Phone: 0978030388. IP: 22.214.171.124. Email: email@example.com. Dec. 2008. Case # 00017d. Dinh Manh Hung, E6 X25 Pho AnHoa HaDong, Hanoi 20000 Vietnam. Phone: 0978030388. IP: 126.96.36.199 which belongs to United States Richmond Comcast Cable Communications Inc., Resolve Host: c-76-27-161-49.hsd1.va.comcast.net. Email: firstname.lastname@example.org. 27 Dec. 2008.
Case # 00018.
The following US currency collectible banknote was delivered on April 15, 2009 to the following person and
HUMBERTO PACHECO, 5607 La Mirada Ave. # 303, Los Angeles, CA 90038.
November 2009: Juan Humberto Pacheco Guzman now lives at: 4520 Santa Rosalia Drive # 11, Los Angeles, CA 90008.
It was obtained by him in a fraudulent way with a friend's or a stolen credit card. Telephone number listed in the order 323-309-3866 belongs to GUZMAN PACHECO (voicemail answers as "Humberto"), yet when I called them they denied that anyone with surname
PACHECO is known to them. JUAN HUMBERTO PACHECO (in the photo, the website is now taken off the air) seems to be from Lima, Peru and resides in USA. Apparently the recipient (Humberto Pacheco, who signed the UPS shipment as well) either used a card
of his friend, relative or a stolen card data was used by him to purchase the banknote. The owner of the credit card (who we thought was Juan Humberto Pacheco's friend Salomon Alvarez from Santa Ana, CA 92707, sending him a gift) has submitted a payment
reversal (chargeback). Juan Humberto Pacheco Guzman's email address: email@example.com .
Stolen banknote: $10 Dollars issued by Citizens National Bank of Lebanon Kentucky in 1909 in VF-XF condition. Serial # A258456H / S 3988. Other number: 10834. Please inform me if you come across this banknote or know who owns it.
Actual Photo of the Bill
"Order" was placed (user registered and checked the order's status) from the following computer IP addresses:
Proof of delivery and H. PACHECO signature image (click to see). Loss $630.
UPS representative "Jasmin" said that HUMBERTO PACHECO came to a UPS location to pick the shipment up and has provided his government issued ID and signed for it as per above image.
Update: On April 25, 2009 at 11:59 PM to 12:00 AM (midnight) someone from 323-309-3866 (Phone ID displayed "PACHECO GUZMAN") called my phone number and did not speak. After I called by voice the surname displayed on the phone ID the person hung up the line.
This crime has been reported to FBI at https://complaint.ic3.gov and to US Postal Inspectors: https://postalinspectors.uspis.gov . Also a police report will be filed with Hollywood, CA police department at Hollywood Community Police Station, 1358 N. Wilcox, Hollywood, CA 90028. Telephone: 213-972-2971 and with USCIS Homeland Security Immigration Services. We will also report this to H. Pacheco's credit history via a credit collection agency.
Case # 00019.
This individual uses multiple
stolen credit cards to place orders online:
Mr. Fouad Bisiriyu, 13, ibiyemi street, Somolu Lagos 23401, Nigeria. Phone: 818-665-8973 (if not a fake this telephone number is provided by: Time Warner Telcom of California) E-Mail: firstname.lastname@example.org . IP address: 188.8.131.52
Case # 00020. This individual uses stolen credit cards to place orders online (June 2011): Mr. Daniel Munteanu, Mihai Eminescu nr 33, RO-731199 Barlad, Romania. Telephone: +0040-747699908. Email: email@example.com . IP address: 184.108.40.206
Case # 00021. Received the following letter from a collector of french banknotes Mr. David Mills:
Between August 7 and
August 20, 2009, I was the victim of a theft, and would like
everyone to be aware and on the lookout for some stolen
The two French notes pictured here (SCWPM P.2/Fayette F.02.33 alph C.8688, #267, and SCWPM P.131c/Fayette 48.08 Alph P.130 #37204) were purchased by me from the Compagnie Générale de Bourse (CGB, Paris France) in their Papier Monnaie 14 auction of June 25, 2009 as auction lots 47 and 247.
For a variety of reasons, they were not shipped until August 7th. Upon delivery to me on August 20, 2009, I found the package empty. I will be pursuing this through the postal services, of course.
These notes are quite rare, both are in UNC condition. If you come across these notes through a dealer, auction, eBay, or other source, I would certainly appreciate contact through this site.
Editor's Remark: Complete serial numbers of the stolen banknotes are: 217177267 (5 Francs 1913) and 323937204 (5000 Francs 2.1.1953).
Case # 00022. This troubled individual uses stolen credit
cards to place orders online. His persistence paid off and he has earned
himself this free space for life. The incidents
(fraudulent order attempts and one successful) have occurred
between August 2006 and
Surya Raj (also uses the following names and usernames: Suryaraj CK; elloraexpress; ckss; CNPAGES; ELLORA; cksuryaraj). Has stolen the following item: India P-18, 5 Rupees 1937, series # F/38, serial # 999958 http://www.banknotes.com/in18.htm
Shipping addresses, emails and telephone numbers used by the criminal:
Surya Raj, S-2 Oxford Court, St. Tomas Road, Srinivas Nagar, Tirunelveli, Tamil Nadu 627011, India.
Suryaraj CK, 8/2 Bhagyanathan Street Near STC Collage Perumalpuram, Tirunelveli, Tamil Nadu 627011, India.
Suryaraj CK, Jain Trading Co, Port Road, Bunder, Mangalore 575001, India.
Surya Raj, Aishwarya Lodge, Near Parthas Theatre, Trivandrum 695001, India.
Telephone number used in all cases throughout many years (2006-2011): 91-9894483956.
Emails: firstname.lastname@example.org ; email@example.com ; firstname.lastname@example.org ; email@example.com ; firstname.lastname@example.org
IP addresses used by this criminal: 220.127.116.11 ; 18.104.22.168 ; 22.214.171.124 ; 126.96.36.199 ; 188.8.131.52 ; 184.108.40.206 ; 220.127.116.11 ; 18.104.22.168 ; 22.214.171.124 ; 126.96.36.199 ; 188.8.131.52 ; 184.108.40.206.
The telephone of the criminal or of their accomplice is traced to this address here in Puttur. The provider name is Chenna Keshava.
Case # 00023. This individual opportunist uses stolen
credit card numbers* to place orders online. His persistence paid off
and he has earned himself this free space for life. The
incidents (fraudulent order attempts; none successful) have
occurred on the 8th of October 2011.
Mr. Ehab Daher (also uses the following names and usernames: Ihaab Taher; Ehab Hassam; Ehab Hasam; Mrs. Ehab Hasam; Sara Perez).
Shipping address, email and telephone number used by the opportunist:
Alshmisani St., Amman 13000, Jordan.
Telephone number used: 0788267766.
IP address used by this opportunist: 220.127.116.11.
*None of the numerous credit cards numbers used in this fraudulent transaction attempt belong to any of the above names.
Case # 00024. Swissandluxury.com stole my name and
address and were using it at Whois. Swissandluxury.com real owners are
criminals. They have stolen my name and address and were using it
as their domain registration data at the internet domain Whois
public record system. Basically they were doing business on my
name and address, but below are their real names and bank
accounts as proof of the identity theft and the scam.
I placed an "order" (an investigative test) on www.swissandluxury.com (they do not provide any of their phone, street address, mailing address or even a telephone number on that scam website, so I asked them for their address where to send a check or a money order. Here's what they replied revealing info of the potential owner of this SCAM, that uses my name and my address as the Whois record for their fraudulent business. Here's the email I received from these scammers originating from: email@example.com and from the following IP address: 18.104.22.168 ( WHOIS: http://whois.domaintools.com/22.214.171.124 )
Dear (my name),
Thank you for your recent online purchase with Swiss&Luxury.com!
The only payment method accepted for international orders is bank wire transfer. International check clearing can take from 4 - 6 weeks. Even though it's easy to issue a check, it may not be easy for the recipient to cash the check. That's why we don't accept the checks from international orders.
I hope for your understanding!
The following is the wire transfer information for payment of your invoice.
Lloyds TSB Bank
1 Legg St, Essex CM1 1JS, United Kingdom
Company address: 6 Valiant Way, London E6 5XN, United Kingdom
Account number: 22861068
Sort code: 30-99-64
Account name: Robert Pyc
Total amount in USD currency: 2,425.00
Once the payment has been arranged, please send us a confirmation e-mail.
You may fax or e-mail a bank transaction receipt so we may better identify receipt of the funds, our fax number is 800-930-6527.
Looking forward to your reply!
+44 20 8816 8955
Re: Email sent to: firstname.lastname@example.org with the following inquiry:
> What address should I send the cashier's check to?
> Re: order# 5078-9277-0838
FULL HEADERS OF THEIR EMAIL:
Received: by 10.112.8.36 with SMTP id o4csp24998lba;
Thu, 21 Jun 2012 08:43:40 -0700 (PDT)
Received: by 10.224.105.79 with SMTP id s15mr30718qao.28.1340293420151;
Thu, 21 Jun 2012 08:43:40 -0700 (PDT)
Received: from smtp108.prem.mail.ac4.yahoo.com (smtp108.prem.mail.ac4.yahoo.com. [126.96.36.199])
by mx.google.com with SMTP id o20si1199052qct.186.2012.06.21.08.43.39;
Thu, 21 Jun 2012 08:43:39 -0700 (PDT)
Received-SPF: neutral (google.com: 188.8.131.52 is neither permitted nor denied by best guess record for domain of email@example.com) client-ip=184.108.40.206;
Authentication-Results: mx.google.com; spf=neutral (google.com: 220.127.116.11 is neither permitted nor denied by best guess record for domain of firstname.lastname@example.org) email@example.com; dkim=pass (test mode) firstname.lastname@example.org
Received: (qmail 19580 invoked from network); 21 Jun 2012 15:43:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1340293419; bh=vUIeAxzeEbNLbmCA5H/C95KkPkcHtmFYoZGH+rTOTtg=; h=X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Date:From:X-Mailer:Reply-To:X-Priority:Message-ID:To:Subject:In-Reply-To:References:MIME-Version:Content-Type:Content-Transfer-Encoding; b=wR0MScI6EcZGvOfzySksqn3sWt1O5dXkRYkE8YmWKk85r6OFtFUl/A0Yh6e6IN4fVjxLIVcaD07gXkyNiv/13u2uUSh9OCZrGksZ4gqJq2lL30U3crJ+FdGoI+PsuUtXey9Hsi4jj8rc5CttsbZSTAnkxvmoiH2WduBmeihR3vs=
Received: from localhost (email@example.com with plain)
by smtp108.prem.mail.ac4.yahoo.com with SMTP; 21 Jun 2012 08:43:38 -0700 PDT
Date: Thu, 21 Jun 2012 10:43:21 -0500
From: Swiss & Luxury <firstname.lastname@example.org>
X-Mailer: The Bat! (v18.104.22.168 Eng.) Professional
Reply-To: Swiss & Luxury <email@example.com>
X-Priority: 3 (Normal)
To: "Audrius" <audxxxxxxxx@xxxxxxxxxxxxxxxx>
Subject: Re: order# 5078-9277-0838
Content-Type: text/plain; charset=us-ascii
Case # 00025. (dated 2011-2012). Someone in New Jersey (around New York City), while drowning in misery, keeps on sending me $1 payments to my Paypal account and immediately submits chargebacks (payment reversals, claiming that unauthorized transactions have occurred) with their credit card provider even that I refund the $1 back to their Paypal accounts within minutes or hours or even within the same day or two. All $1 chargeback fraud has originated from @keptprivate.com email provider and the "shipping address" is always around NYC, located in the state of New Jersey.
# 00026. (dated April 2013). Received two checks (see photo) allegedly from Annasiete Kuuipo Manwill,
4186 E. Ashlan Ave., Fresno, CA 93726 for an "order"
that is clearly fraudulent (check fraud). The payment (two checks) and a letter (see photo) were sent by UPS Next Day Air Early AM (!!) (see photo of UPS address label) they were so sure they will
be able to con me. The phone number printed on the checks and
also handwritten on the UPS shipment label (559) 981-5764
(559-981-5764) belongs to someone else (or they may be lying).
Bank of America confirmed to me that the checks are not
counterfeit, but the account has been closed for some time. Can't
be stolen checks if the person who placed the "order"
was asking to ship their order by UPS Next Day Air Early AM to
the address listed on the checks, unless they would re-route the
shipment later or the criminals may be waiting at the doorstep of
that address when UPS delivers the shipment claiming it's their
home and they just came out for a smoke or something like that.
confirmed that the UPS account # 631625 exists and that the address above is listed with the UPS. Perhaps a case of stolen checks that resulted in a closed bank account and the thieves used the following phone number 239-349-4983 to call me back to correct the spelling of the shipping address (which I intentionally misspeled to get them call me from wherever they were lurking at). Female called me from that number (239-349-4983) and spelled the name "Annasiete Manwill" (she pronounced it "annasyete") and when I called that number days later (April 16, 2013) a hispanic male voice answered in Spanish and he said "you got the wrong number, gracias". The email address used in the con is the following: "lillym88 MANWILL" <firstname.lastname@example.org>. Another dealer in the US has reported to me receiving a check from Bank of America with the same name etc. At the recipient counter in Bank of America the cashier asked me whether I wanted to deposit the checks. They did not offer to verify whether checks are fraudulent or whether the account is closed. Only after I expressed my concern they then investigated and told me that the account is closed and asked whether I shipped the goods yet. The fact is, the banks will gladly accept any check from you without verifying it first whether the account is open unless you ask them to! How much money have the banks made from bounced check fees that way! And if the check is counterfeit, I was advised, one can get arrested and jailed for depositing a counterfeit check even if they are unaware of the fact that check could be counterfeit! Beware of all of the above.
Case # 00027. (dated 2011-2012)
My identity has been stolen by BIZCN domain registrar (or their customer(s)), who is accredited by ICANN. Someone at BIZCN has registered over 50 to 70 domain names (or more) using my name (A. Tomonis) and my now old address (P.O. Box 331, North, SC 29112), but they used their own email address and my old (not working) phone/fax number and everyone knows why they do it (so I dont get contacted too soon). If you take a look at for instance at the following domain and website: http://www.swissandluxury.com, its not only registered in my name, but it is a live website selling watches and I am sure it is as fraudulent as hell. My numerous attempts to call, email and fax ICANN ended up in a wall of silence and complete ignorance by ICANN. Moreover, ICANNs forms online to report bad registrars and fraudulent domain registrations did no work properly and sent me refusals for all domains I tried to report repeatedly many times. My numerous attempts to reach BIZCN ended up in Jimmy from BIZCN responding (after numerous no-responses) and promising changes, yet he did very little and I noticed only a handful of domains at the Whois replaced my address with, I suspect, another stolen address/identity. BIZCN is a Chinese shady domain registrar accredited by ICANN.
Heres a by far incomplete list of domain names that bear or used to bear my name and my mailing address and my old outdated fax number that was sent to Jimmy at BIZCN as a request to remove my name, address and telephone from those domain records many months ago:
These criminals at BIZCN are using the following email address for their shady agenda: email@example.com which actually should work as firstname.lastname@example.org also sometimes listed as email@example.com. The criminals are also using my OLD (long gone) phone number as "their" phone/fax: 8032472699. Their above "jhnvns.92" email address is actually included in the following Google subpoena.
All or most of these domains and scam websites are hosted at www.jino.ru IP address 22.214.171.124. I have notified JINO.RU that www.swissandluxury.com which they host stole my identity, yet Jino.ru did nothing to suspend that website which clearly is a scam.
I also tried to
submit a similar post to Facebook and heres what Facebook
Sorry, this post contains a blocked URL The content youre trying to share includes a link thats been blocked for being spammy or unsafe:
F e a c a e b o o k . com
Now wait! Thats one of the domain names whichs true owner (hidden behind my stolen identity) is a criminal customer of the criminally neglect (or criminally involved) BIZCN registrar (accredited by ICANN).
So, I CANN or I
CANNT? Regarding me, I definitely CAN and WILL!
UPDATE: 14 August 2015: Most of the above criminal domains by now were deleted or had the details updated to someone else's (possibly stolen identity as well), yet as of today the following domain still bears my name and (now former) address: http://whois.domaintools.com/virgull.com . The allegedly criminal registrar BIZCN has been notified once more. Thus this case is back and this time it will remain posted here indefinitely, so Google, Archive etc. picks it up.
Case # 00028. (Updated:
4-NOV-2017. Dated: 18-FEB-2015). Anonymous (allegedly known to
me) individual and company representative retaliatory fake LIBEL
and fake defamatory post on the known extortionist R.O.R. website
(run by data terrorist with initials E.M.), to which I do not
want to link to, so not to give them any credit. If you search on
Google for my name and my site, you will find it and please don't
jump to the quick conclusions, cause that anonymous post is as
fake as it gets and is an absolutely anonymous criminal
defamatory libel or unfound allegations (softly speaking).
Criminally anonymous defamation in exchange for truth. Also the
anonymous cowardly criminal poster did not address the
"issue" with the IBNS, life member of which I am, nor
did not post on any numismatic related forums as I would and
should. He would have been identified there,
that's why. And he prefers to remain anonymous, to avoid legal
trouble. I would no longer be a member of the International Bank
Note Society, that's for sure, if I would have done what
"he" wrote I "have done". Also he, the
anonymous criminal probably knows that R.O.R. owner is an alleged
extortion racqueteer himself and will not remove
any fake libel from his website, even that the fantasy libel is unverified,
as it should and must be verified by any legal and
self-respecting webmaster, and anonymous absolute nonsense, and
so Mr. E.M. owner of R.O.R. makes money from .... that's why
criminally anonymous defamators such as D.O. backed by their
workplace F.D. love R.O.R. and similar extortionist
"websites" where any hearsay and manufactured fake
retaliatory in exchange for truth contents is published without
any even slightest verification of the poster, investigation and
confirmation. I keep on getting absolutely anonymous offers to
clean up the listing on R.O.R. Guess who could be behind them?
Please read my REBUTTALS on R.O.R. to get the idea. Ed Magedson, Ripoffreport.com
And what is even worse that Google Inc. is allegedly earning huge amounts of money cooperating with the R.O.R. extortionist website (without any chance of removal its contents, as decided by a whim of its owner E.M.), by aggressive use of Google's "Humiliation Algorithm", basing their "legality" on aggressive use of the following Section 230 Communications Decency Act (USA) made by US Congress or Senate, whoever was involved in such a terrible oversight and wonder why it is not being corrected?
Anyone in the EU, US, India, China, Australia, UK, Canada, or the entire world can have their career and reputation ruined within minutes (thousands or millions already are affected) by one insane anonymous individual posting a fake anonymous "report" (fake allegation, libel, defamation) at Ripoffreport.com which does not remove the contents accordingly to:
Section 230 of the Communications Decency Act (USA)
203(c) needs to be changed, updated, corrected, edited. Now it allows anonymous false allegations libel to be posted by criminals (who can't be found anywhere to serve them with legal papers) "legally" against anyone, including against POTUS:
Directive 2000/31/EC establishes a safe haven regime for hosting providers:
Article 14 establishes that hosting providers are not
responsible for the content they host as long as (1) the acts in
question are neutral intermediary acts of a mere technical,
automatic and passive capacity; (2) they are not informed of its
illegal character, and (3) they act promptly to remove or
disable access to the material when informed of it.
That's why E.M. owner of R.O.R. has blocked entire European countries from being able to acces his allegedly extortionist website, which some online forums state that can still be viewed from the E.U. by using some kind of "TOR browser".
Yet in contradiction with the abovementioned Directive the R.O.R. website owner E.M. refuses to remove the anonymous fake libel from his website.
That is just wrong and unfair! Yet the alleged criminal data terrorist E.M. is in hiding somewhere, while the hosting provider for his R.O.R. website, which allegedly hosts many other illegal and criminal websites, is ignoring all mail sent to them.
In November 2017 visiting R.O.R. website (to check whether the anonymous criminal has not posted more lies) I found out that R.O.R. has now blocked my IP address (for unknown reasons) thus preventing me from exercising my contitutional right to transparency and to rebuttals by periodically accessing their website. That only demonstrates the shady nature of R.O.R. website and of its owner E.M. The R.O.R. website unblocked my access upon sending them an email.
Contact your Senator or Government Representative in your state or country. This could affect you any day now for any reason in any country around the globe. Demand the right to have anonymous unverified fake "reviews" removed from any website on the internet. Keeping in mind that this oversight in US law affects the entire world and most individuals and businesses affected can not afford a $100,000 lawyer and travel to the U.S. A lot of them can't even get a visa let alone afford to travel that far.
Do not post on RipoffReport.com. Post on your own website or blog instead, so you can be in charge of the entire contents without relying on websites of such extortionists.
STOP INTERNET DATA TERRORISM BY RIPOFFREPORT, ED MAGEDSON AND WEBSITES ALIKE.
Case # 00029. (dated
16-MAR-2017). Jimmy Sebba
(could be a fake passport or a fake name etc.) placed an online order for
$2000 for a quantity of 50 Euro banknotes and submitted a
fraudulent Paypal payment using the following data: Address: JIMMY SEBBA,
HERMANN EHLERS STR 6, 40595 DUSSELDORF GARATH, GERMANY.
Telephone: +4915216007873. Email: firstname.lastname@example.org. Account username: paymentstudio.
was placed from thew folowing IP: 126.96.36.199. Paypal account
(with "Verified" status!) that the "payment"
(that never cleared) was sent from is registered to: Jimmy Sebba,
email: email@example.com. As soon as this transaction was placed I
have contacted Paypal and asked them to cancel this
"payment" stating it is a known scammer and to consider
closing their Paypal account. It was cancelled after 10 or 11
days. The way of payment was
very strange and Paypal would not disclose what it was, it just
says, after the "payment" cancellation: "Payment
Type: Non-Instant". It was
"pending" and it was some kind of "web accept"
payment. On the surface it looked as if I was paid as it stated
that "Payment Received" and it had a plus sign in front
of $2000 like so: +$2000, but after clicking on it, there was a
small inscription that the payment has not cleared or has not
posted yet and to not ship the goods yet. Very strange indeed.
And even more strange that a VERIFIED Paypal member would send
such a payment, with clear intent to defraud. The
"customer" has his passport
on the internet and he was emailing me every so often asking me
when his "order"
will be shipped. Here are texts of his emails:
After I wrote that only one (1) 50 banknote is available, he writes: "ship that one piece and ship me the other euro banknotes that you have i dont care if is 5,10 ,20 100, 200 just to cavar my payment."
Then I wrote: "Do you care if the other 100, 200 notes are circulated? Are you a collector?" He responds: "Is ok". More of his email responses: "Is a home and will be waiting for the item thanks and am from germany" and later: "am italian but i stay in germany".
And then: "YES IS MY PASSPORT AND IS VALID THANK GOD THAT IS ON INTERNET"
After I marked his "order" as FRAUD and deleted his account (even that I knew from the very first minutes it was fraud after it was placed) he writes again:
"hello i want to know if you shipped my items on monday as you said reply soon". Then we respond to him:
"Yes, we did, but you have to pick them up at the following address: Börchemstraße 23, 40597 Düsseldorf, Germany" (Note: That is an address of a local Polizei station)
He then writes: "When will they arrive which date", "when will the items arrive?", "Ok i will wait you will let me know the date as i dont have the tracking number " and so on, etc.
Paypal states the following: "This payment was automatically returned by PayPal on Mar 15, 2017 because the funds were unclaimed for 30 days." - Yet there was NO way for me to claim the funds, neither I wanted to claim the fraudulent "funds", which I was sure were not available in any way and there was NO functionality in Paypal to "claim the funds". Paypal also states the funds were returned to the sender ONE DAY BEFORE the "order" was placed!? Today is the 26th of March 2017 and I've just received a message from Paypal support that the payment was finally removed from "pending" only today... Very shady "order" indeed. More:
Notification of Cancellation of Pending PayPal Payment by Bank Transfer
We have just cancelled a pending PayPal payment by bank transfer to you.
Sender: JIMMY SEBBA
Payment Initiated: Mar 15, 2017
Amount: 1,946.05 EUR
UPDATE 7-APR-2017: Paypal seems to have ignored my request to block "Jimmy Sebba" from ever sending any fake payments (most likely by hacking into people' s Paypal accounts) to me again or closing Paypal account of this scammer and fraudster and so there comes another "order" from this immigrant fraud and the way Paypal interface was changed that before one could cancel or block unwanted transactions and block unwanted senders, but now that option has been removed. So now all we are left with is to wait and to make sure not to ship the goods to such criminals and deal with their ever pending payment record in your Paypal's statement. Our givernments seemed to have encoyraged massive unchecked immigration to Eiurope and North America and even encoraged them to commit fraud, so now these criminals are confident and are not feariing the corrupt as ever "authorities". Yet I as a Merchant keep my integrity and honesty no matter what and I despise such governments and corporations who make sole proprietor's survival a living hell.
# 00030. In a credit card fraud
and theft of goods case, dated 5-APR-2017, Mr. Robert
Skrzeczkoski, 801 Main St., Junction City, Wisconsin 54443,
United States. Telephone: 7144866338.
Email: firstname.lastname@example.org has placed a fraudulent chargeback, 6 days
AFTER receiving his ordered goods (delivered to him on
30-MAR-2017, which took 11 days to arrive, as per official
document from a postal authority, after a lengthy international
postal investigation). Mr. Robert Skrzeczkoski has lied that he
has never received the goods, worth over US$200. Total loss
including fees, charges and penalties resulting from his
fraudulent payment withdrawal are almost $250. His other email
address is: email@example.com .
UPDATE (16-JUN-2017): While I have won this chargeback case as per $208.75 payment (not refund) from Paypal that I received today, I believe Paypal may have just paid me from their own funds. I may be wrong, but I think since Mr. Robert Skrzeczkowski lost the chargeback or decided to pay me back for the goods I delivered to him, then he would at least be contacting me once the funds were refunded to me. That did not happen. The transaction seemed like Paypal payment to me and not a refund. And Mr. Skrzeczkoski still owes me $41, since Paypal allegedly paid only $208.75 from its own funds (I suspect that very much), because Paypal is kind of nice to its long time customers like myself, and I appreciate that very much. That does not mean that Paypal will not go after the fraudster legally and place the fraudulent transaction on Mr. Robert Skrzeczkoski's credit report or even a lien on his owned properties and cars that he owns. The chargeback penalty of US$20, the handling costs and expenses involved, the interest and the Paypal double charge for its fees of about $9, plus my shipment and reshipment costs of about $12 all add up to ~$41 that Mr. Robert Skrzeczkoski still owes me ($249.10 less $208.75 = $40.35). So this post will still remain here until Mr. Robert Skrzeczkowski pays me the $41. Interest for the unpaid settlement still applies at reasonable 2% per month or 24% per year. If Mr. Robert Skrzeczkoski did not reimburse Paypal, Inc. for the $208.75 then this amount is still due from Mr. Robert Skrzeczkowski to Paypal, Incorporated, which I, as a Paypal customer must make sure that Paypal must be reimbursed with as well. Only then, this record will be removed. After this record is removed from this page, the record may still show up on search engines on the internet, unless Robert Skrzeczkoski employs a special search engine record removal team or pays Banknotes.com to do the removal work for him, which involves another, separate charge. Therefore anyone considering placing an unfair and fraudulent chargeback, please reconsider again.
# 00031. Owner of Numismatic.biz website Mr. Michael
Westbrook from United Kingdom, email: firstname.lastname@example.org,resident at 30 Liscard Road, Liverpool L15
0HH, United Kingdom, Phone: +44.8456341809 seems to love
shortcuts while working on his website. Why create his own
contents if he can plagiate from someone else? Copy and paste
seems to be his favourite method preferred to creating his own.
Take for instance the following page of ours:
One small example of stolen contents:
- Topic (birds, nudes, sailing ships, famous people, views, militaria etc.)
- Time period (WWII, 20th century, only notes dated 1999 etc.)
- Country (your native or favourite country)
- City (city that issued the note, that applies to local issues)
- Continent (Africa, Europe, Antarctica etc.)
- Features on a note (holograms, security insertion strips, paper kind)
- Material used (paper, plastic, mylar, cloth etc.)
- Signatures (there are so many varieties)
- Serial numbers (111111 or 000001 or 123321 or specimens 000000 etc.)
- Name of Printer (company or government who printed the note)
- Influence zone (for example: France and (former) colonies)
- Size (collect only large size notes or notes that don't exceed certain size etc.)
- Condition/grade (collect only Uncirculated or only circulated notes etc.)
- Science (collect notes that feature biologists, astronomy, engineering etc.)
- Watermark (type of watermark or a picture on it)
- Type (Counterfeit/Bogus/Forgery notes; Specimen notes; Error or Trial notes....)
The above contents has been "deposited and kept" at the following URL:
The earliest internet Archive.org records for the above text of ours:
February 2002: https://web.archive.org/web/20020206214934/https://www.banknotes.com/intro.htm
July 2008: Our text plagiated by Numismatic.biz earliest record: https://web.archive.org/web/20080708222818/http://www.numismatic.biz/info/banknotecollecting.htm
Texts from other parts of our website have also been plagiated, for example on the following page:
There is the following "FAQ" text as well as look and feel of Banknotes.com:
I have a banknote/ coin or collection that I can not identify, because it's printed/issued in a language that I don't understand and the letters on the note(s) / coins seem to be different from latin or some kind of strange characters.How can I find out their value and possibly to sell them?
You need to describe the banknote(s) or coin(s) in DETAIL, every detail is important and you have to scan it's/their image in JPEG (.jpg) format in order to show the banknote(s) / coin(s) to us (or send a xerox copy or an original by mail to us).DO NOT email pictures to us you must load on to some web space and send us the url.
The above text was more or less 90% plagiated from the following page of ours. See the Fourth (4th) Question/Answer from the top:
Archived since 2002 (or before): https://web.archive.org/web/20020802223829/http://www.banknotes.com:80/faq.htm
Here's another example of plagiarism by Michael Westbrook:
Archive.org record from November 1999: https://web.archive.org/web/19991111175256/https://www.banknotes.com/pricelst.htm
Archive.org record from May 2008: https://web.archive.org/web/20080512040100/http://www.numismatic.biz/suppliesforcoinsandbanknotes.htm
We have changed, updated, dislocated (up or down) some of our texts ever since they were plagiated, but kept the others. Yet Numismatic.biz still has some of our old texts, which you can see and compare on the Archive.org website.
Mr. Michael Westbrook has copied texts from our website and even after being asked to remove our texts, to cease and desist, he felt comfortable to just ignore the request. As it seems, our contents is so valuable that contents plagiators such as Mister Michael Westbrook value it more than his own self respect and reputation. Therefore this little free advertising space is his to keep.
The amazing fact is that we are not native English speakers and the abovementioned Englishman really loves our broken English so much that he can't create his own contents and prefers ours. Mostly unredacted. Unauthorized. Without credit provided to us.
Case # 00032. (dated 15-MAR-2018). WORLDBANKNOTESCOINS.COM - owner email: Ales Aleksin: email@example.com
To: Mr. Aleksey
Geroev Stalingrada 30/32
This plagiator copies texts from our website and posts on his own website and ignores requests to remove and to cease and desist. Legal action is pending.
# 00033. (dated 5-APR-2018). Waleed Pervaiz, Islamabad, Pakistan.
Placed an order with a purpose to allegedly defraud and disturb peace. Order was placed for mostly current large denomination Pakistani currency banknotes for an amount under $300. "Payment" was sent for an amount of $0.05 via Paypal and the name and the address listed in Paypal account is the following (exactly as it is listed in the Paypal account):
Buyer: (the below address is spelled exactly as provided by them and as was listed in their Paypal account):
Confirmed shipping address
39 White Bitch Cir
Miller Place, NY 11764
Paypal message for me: "You received a payment of $0.05 USD from Waleed Pervaiz (firstname.lastname@example.org). Seller Protection - Eligible. Transaction ID: 7E8254032T437343G"
Order was placed with the following Billing and Shipping (ship-to) data:
Phone: +92-301-8440589 (email as per above)
Name and address: Waleed Pervaiz, DHQ2, 1-A Kohistan Road, F8 Markaz, Islamabad 46000 Pakistan
IP address: 188.8.131.52
# 00034. (dated 18-JUL-2018). Lala Rukh, NY, USA. Computer IP address
184.108.40.206 in Lahore, Pakistan. Email: email@example.com . See also the above case # 00031.
Paypal confirmed shipping address (with the 2nd word of their street address now corrected after a complaint was launched with the Paypal Inc.):
39 White Birch Cir
Miller Place, NY 11764
The following transaction was an order for US$615 (six hundred fifteen dollars), yet they managed to pay only $0.15 (15 cents) which we refunded right away and incurred a $0.15 fee from Paypal. To protect ourselves from such behaviour we make these cases public.
Case # 00035. (dated 18-DEC-2018). US Postal Service corruption, alleged criminal activity suspected. Some facts below.
Shipment lost within the US Postal
Service system somewhere in the NYC area or ISC NY. The shipment
was never delivered to an address in Yonkers, NY, while USPS has
prematurely (after only 2+ months past it's acceptance to mail in
Portugal) deleted its tracking record. The tracking #
LL001511875PT not anymore on USPS.COM but still visible on the
CTT.PT tracking records.":
LOST: Monaco 500 Francs 2016 UNC Artist's Essay (Serial # M 000435A) SAMPLE PHOTO
"Label Created" follows after the premature removal of the actual USPS tracking record, which had numerous forwarding records wandering around within the NYC area, missing the delivery area by a short distance and wandering around it, then disappearing, all recorded in the USPS's tracking record and seen by me and by some witnesses, which later very soon were removed by someone at the USPS. Just adds to suspicions (and proof) of corruption at the USPS and accessibility to the USPS and tracking records by some dishonest individuals, quite likely a local Postmaster or the ISC NY. Suddenly all erased from tracking record upon my complaint to the USPS.
Absolute silence from the USPS ever since, and our USPS account of many years either erased or password recovery function disabled (no, it's not a spam folder case). It's aleged corruption at USPS, with facts.
After the below correspondence, USPS has become silent and deleted my USPS account or disabled the password recovery function for me, so I can not log into my acount and access all the current and past records there.
Remark: There were more notes in the shipment (Priority Azul International), but without serial Nos. recorded.
orders paid with credit or debit cards go through numerous
security and anti-fraud checks such as AVS, identity
verification, signature verification, shipping and billing
address verification, email address and phone verification, and
if necessary (many overseas orders) - manual authorization,
verification of your references and other data. All that is done
in order to protect your credit and debit card account from fraud
as well as to protect ourselves from fraudulent orders and
payments and against fraudulent chargebacks.
We will protect our customers and we will fight fraud.
Old Numi-Scam forum - "The Emotional Side" - post and look up information about
dishonest coin and currency collectors and dealers, thieves, scammers, crooks, shill bidders
on numismatic related auctions as well as lost or stolen items.
Go to Numi-Scam Forum (Archive)
Disclaimer: We are not responsible for the contents of "Numi-Scam Forum" since it is outside
of this web site and opinions and posts of individual posters are their own responsibility.
Fraud - Scam -
Thief - Voleur - Fraude - Charlatan - Dieb - Betrug - Ladro -
Vagis - Frode - Ladrón - Vor - Engaño - Scammer
Crook - Bunko - Con - Flim flam - Gaffle - Grift - Hustle - Scheme - Swindle - Bamboozle - Apgavyste - Crime - Theft - Obman
Copyright © Banknotes.comTM All Fights Deserved