Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

The Anatomy of Money-Mule Scams

Posted by kdawson on Mon Jan 28, 2008 07:55 AM
from the if-it-sound-too-good-to-be-true dept.
Brian Krebs of the Washington Post's Security Fix blog has up an article on work-at-home money mule scams (backgrounder blog post here). These operations offer victims hundreds or thousands of dollars per week for moving money through their own accounts — a critical piece of the infrastructure for profiting from identity theft and phishing. The article links to the site of a UK fraud fighter named Bob Harrison, who lists hundreds of fradulent money-mule operations.
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • I have been trying (Score:5, Interesting)

    by El Lobo (994537) on Monday January 28 2008, @08:04AM (#22206984)
    I have been trying for months to be selected by one of those scammers just for fun and to investigate the whole process. I answer every single strange letter from generous companies, rich princes, ex-gobernants of obscure countries, etc. I replay, playing a stupid character, and get so long as getting a few replies. Then, without a reason, they get absolutly silent.

    I don't know if they get caught or if they just smell that something is fishy, but I guess they are smart and they are searching for a given profile: not too smart, not too dumb, just right....

    • by liquidpele (663430) on Monday January 28 2008, @08:25AM (#22207120) Homepage Journal
      You can always try to get lots of spam, and eventually you'll get a few bites...
      how to get spam [philb.com] - from my own experience, posting my email all over google groups did a fantastic job of getting me spam (was doing a spam related project and needed samples).
    • Then, without a reason, they get absolutly silent.


      Must be your sig.
    • Re: (Score:2, Informative)

      I have been trying this myself for a long time. I have responded to every email I have ever gotten. None have ever contacted me back. I would love to see what I can torture them with. If no one has seen this you have to go hear. www.419eater.com Some of the things they make them do is hilarious.
    • Re: (Score:3, Interesting)

      by Anonymous Coward
      I replay, playing a stupid character, and get so long as getting a few replies.

      I think that's your problem. They aren't looking for stupid people. They are looking for greedy people. You need to be suspicious and pretend to let your greed get the better of you. For example, say you don't trust them and want a higher cut. Read about the people caught in scams. If you read carefully, you'll see they aren't normally stupid, but greedy.
  • I'm just a pawn in a complicated scheme to surreptitiously move money from my employers to my creditors. And there are thousands of others like me.
  • by downix (84795) on Monday January 28 2008, @08:14AM (#22207032) Homepage
    That this scam can even work is a product of supplier-side economics. Where people don't have to work to get what they want. That it is all about me me me.

    Get rich quick schemes never are quick and they don't get you rich. never have, never will. Grow up and get a real job. Want to make $100k a year, go to college to earn that degree for a position that does make $100k a year.
    • by balsy2001 (941953) on Monday January 28 2008, @08:46AM (#22207284)
      The only get rich quick scheme that works is selling get rich quick schemes to idiots.
      • Re: (Score:3, Interesting)

        The only get rich quick scheme that works is selling get rich quick schemes to idiots.

        Sounds funny, but that's what some people over here actually do. They post one of those "Work from home, set your own hours, make up to $4000 a month" ads. You contact them (usually on a cell phone nr.) and they'll ask you to send them $100 for a Starter Kit. This kit basically contains instructions on setting up your own "Work from home" scheme to scam others, by selling them your Starter Kits. In a strange recursiv

        • In a strange recursive way, this scheme is not illegal here (NL) because the advice in the kit is sound and delivers exactly what was promised in the ad, namely a legal way to make money working from home.

          Interesting. In the U.S., I'm pretty sure that would be considered a "pyramid scheme" and therefore illegal. The people who start it may make a lot of money, but once there's no one left to recruit, a bunch of people just lose their starter kit money. The idea of it NOT being illegal is interesting. It raises the question of how much should a government do to protect it's citizens from their own foolishness.

    • Which degree gets you $100k?
      • A first-class law degree?
      • Possibly one in management, if you can find one.
      • Maybe not in your first day of of school, but there's a lot of degrees that will get you in the door, and on your way to making $100,000 in the first 10 years.
      • Aerospace Engineering.
        Financial Consulting.
        Plenty of other fields...
        You won't make 100k the year you walk out of college with your diploma, but you will soon thereafter (I'm an engineer; I work with guys in their 30's pulling down six figures in engineering.) if you are a good, hardworking employee. There is no turnkey solution for high pay. You have to work hard, but the rewards are proportionate.
    • I know one guy who was convinced that there was an easy way to make money. He just had to find out how. Sure, some people get lucky and end up making millions in the stock market, or on some weird investment, but it's not something you can really depend on. If you want to make money, you're probably better off just working hard, and sticking to some kind of consistent market.
    • Re: (Score:2, Insightful)

      Of course, you'll probably have to take a loan to do this, so a good chunk of the first several years of your increased income is actually going to interest payments. Then you have to actually find the job you want afterwards, and hope they won't lay you off if they happen to lose that big contract. Great plan!
  • by thehickcoder (620326) * on Monday January 28 2008, @08:21AM (#22207078) Homepage

    EBay investigated, concluding that Monroe's phantom employer had tied her PayPal account to a fraudulent auction. The auction site's verdict: She was responsible for repaying the full amount to the blameless auction winner. Monroe is now working two part-time jobs to pay the bills and to make the other victim whole.
    Since when does EBay get to decide who is responsible for fraud?
    • by BlueNoteMKVI (865618) on Monday January 28 2008, @08:37AM (#22207220) Homepage
      ....since you agreed to their Terms of Service.

      I'm too lazy to look up a citation at 7:30 in the morning, but the last time I looked over the PayPal TOS it pretty much said "we reserve the right to take money out of your account whenever we want to, and your only recourse is to ask us nicely to have it back. Say 'please' and we might consider it."

      Don't ever leave more money in your PayPal account than you can afford to lose.

      For what it's worth, I think a court of law would have agreed in this case that the woman was responsible. It's impossible to really say without details of the eBay auction in question, but she took the customer's money. What she did with it after that is not the customer's problem. If she took his money in exchange for a service/product that she could not provide, she owes the customer his money back.
      • Re: (Score:2, Informative)

        I know, replying to my own post is bad form - but I failed to mention that eBay now owns PayPal, so they are effectively one and the same.
    • Since eBay bought PayPal?
        • Does it say that a particular jurisdiction has found them guilty of fraud? Nope. Fraud can be decided by anyone - you're confusing that with a court of law charging someone with fraud. As everyone using PayPal's service are bound by their Ts&Cs, they have every right to call fraud on anything on their network should they want to.
    • by torkus (1133985) on Monday January 28 2008, @11:13AM (#22208898)
      They don't. But, as someone else mentioned the paypal TOS say they can basically take whatever money out of your PP account at will to cover whatever, whenever, at their discretion with no limits and your only recourse is binding arbitration. PP sucks. I hate them. They act like a bank with no limits, no rules, no recourse.

      That said, the solution to dealing with PP is simple. Never *ever* leave money in your PP account. Either don't link it to a bank account or use one with little to no money in it. Preferably link to your credit card - one with very friendly rules about reversing charges. PP will wipe out your account and push you negative ... but they're not going to get any money from your credit card. 'Blanket authorizations' are specifically prohibited by Visa/MC. You can not agree via PP TOS to allow them to hold your credit card as arbitrary security.

      I'm not advocating knowingly using the mule scams to actually make money - that's fraud and illegal.
  • by clonan (64380) on Monday January 28 2008, @08:24AM (#22207110)
    Last year I had someone send me a Money Gram money order to cash for something I was selling on craigslist. I was kinda suspicious when he asked to cash a check for more than I was selling the item for....

    Now I have sold stuff online for years and can usually spot a fake immediatly...This one I had to take to a bank to confirm!

    Someone had stolen a roll of blank money gram money orders and entered a valid serial number and everything. The only thing wrong was the micker ink. The numbers at the bottom of that check were standard ink, not magnetic...

    I still have that check on my fridge.
    • by liquidpele (663430) on Monday January 28 2008, @08:31AM (#22207164) Homepage Journal
      Wait, you accept things besides cash from craigslist people?
      I mean, aren't you just wasting your time with trying to accept other payment types? I've never heard of non-cash payments being anything except scams... but then again, if you have that on your fridge, you probably enjoy messing with the scammers don't you?
      • by clonan (64380) on Monday January 28 2008, @09:12AM (#22207532)
        Absolutly I accept other forms than cash. Craigslist is only really effective because it is all over the US for free...I have only done one local deal and it WAS cash. Requiering cash for non-local deals is a good way to not sell anything.

        My Experience
        I have found Paypal to be very good so long as you send to a confirmed address and get tracking. I have had several people try and argue it but once I send Paypal the tracking number the dispute goes away in my favor.

        Personal checks are riskier but I still haven't had that much of a problem. I always deposit them first and only ship once it has cleared. In over 1,000 check/money order transactions I have only had one bad check. And the check was bad for lack of funds. The person paid me immediatly with a money order plus my bank fee.

        Legit money orders are usually so easy to identify that I would ship "at risk" before depositing them. I have run across 4 people trying to pass off fake money orders and never lost anything to them.

        The grandparent is note worthy only because it was actually convincing in all but one detail.

        I have had well over 20,000 online transactions and by following the rules above I have had about 30 problems and never lost money on any of them.

        The moral of the story is:

        Online business is safe and effective for everyone involved so long as you don't do anything stupid like ship before confirming payment and always get tracking numbers.
    • The only thing wrong was the micker ink.
      I think you mean MICR ink [wikipedia.org]. Magnetic Ink Character Recognition is sort of a precursor to OCR. Instead of using an optical scanner, the MICR numbers are printed in a special font with a magnetized ink or toner at the bottom of the check. The error rate is a LOT lower for MICR than OCR, which is why banks continue to use it.
      • This is what I get for not looking up the proper spelling before I post....

        For those who are interested MICR ink is raised, has very crisp edges and will not bleed through the paper.

        If you have any concerns, look for those features. If all else fails, take it to a bank and ask them to run it through their MICR reader before depositing it.
        • by canUbeleiveIT (787307) on Monday January 28 2008, @10:57AM (#22208738)
          If all else fails, take it to a bank and ask them to run it through their MICR reader before depositing it.

          This is a good idea and will help catch most frauds, but many people have access to a MICR check encoder. I worked for a Fortune 100 retailer and they had one in every store, and they were hardly kept under lock and key. Also, if one were an enterprising criminal, one might just buy one [ebay.com].

          Obviously, the ultimate (and very elegant) coup de grâce would be to buy it with a fraudulent check.

    • So you are withhelding evidence. Thanks.
    • I had a piano advertised for sale on Craigslist. I received a 'certified' check from a UK postal service (I'm in California) for more than the amount I was asking along with instructions to 'just have FedEx pick up the piano for delivery' and please send them a check for the excess payment.

      This gave me a good laugh on several levels. They must have been really desperate...

    • I still have that check on my fridge.
      How did you manage to keep it? Banks and/or police usually confiscate counterfeit currency when they come across it, in order to prevent you from passing it on the next victim (... and it is also valuable evidence against the original scammer...)
      • Remember, a check/money order is not currency.

        Banks are requiered to confiscate counterfeit currency and are the only non-federal government organizations that can hold counterfeit money without risking prosecution.

        However a check is not subject to such restrictions. Once you try to deposite the check it becomes the property of the bank and they will deliver it to the FBI or whoever. But there is no crime in mearly HOLDING a bad check, only exercising it.

        I never tried to cash the check (since I would have
  • Typo in TFA (Score:3, Funny)

    by kryten_nl (863119) on Monday January 28 2008, @08:26AM (#22207130)

    Monroe was the victim of a "money mule" scam, in which criminals make use of third parties (often unsuspecting victims like Monroe) to launder stolen funds.

    That should of course be:
    ...(often absolute idiots who think that money grows on trees and don't know that when something seems to good to be true it usually is like Monroe)...

    Easy mistake to make, it's in Word's auto-replace list.

  • by Guppy06 (410832) on Monday January 28 2008, @08:34AM (#22207186) Journal
    Would Monster.com even still exist if it weren't for scams like these?
    • Would Monster.com even still exist if it weren't for scams like these?

      This was moded funny, and it sort of is, but it's also insightful. I've never actually used monster, but I've had numerous people tell me that literally half of the replies from Monster postings are either outright fraud or scams that are only technically legal (ie, contacting someone randomly regarding a "job" that doesn't have anything to do with their field and trying to sell them a $200 for a "starter kit," before they can begin "working".)

  • by Opportunist (166417) on Monday January 28 2008, @08:49AM (#22207306)
    2006 called. They want their news back.

    This sort of operation has been going on for at the very least 2 years now. It's hardly "news". But it's stunning that there are still people who fall for that. Let's see... easy money, little to no work involved, shoving money around...

    Hello? Does anyone here NOT smell a scam? I still can't decide whether those people are just insanely stupid or whether they know very well what they're doing and just claim to be stupid in case they get busted (and they usually do get busted), as a get-out-of-jail card. After all, stupidity appearantly keeps you safe from prosecution.
    • If it didn't work... ya know?

      Just like the penny stock scam emails seem utterly stupid to me. But pump-and-dump makes money for those doing it so they continue.

      Every time i sell something on criags list i get at least one or two emails offering a random amount MORE than my posting price. Most even offer to pay for the item to be picked up and shipped. They're all obvious scams but if some people didn't fall for them then the scammers wouldn't bother.

      I just want to know who the idio^^^^Victims are.
  • by Inexile2002 (540368) * on Monday January 28 2008, @09:06AM (#22207470) Homepage Journal
    I've lived in Madrid for four years and have heard this story from several different people including an ex girlfriend.

    A tourist looking guy with an American accent will approach people on the street with a sob story about how was robbed or otherwise lost his trekking backpack and included in the loss was his passport and wallet. His mother is sending him a Western Union Money transfer, but he can't collect it without ID. He then asks if he can call the USA with your name and passport number, have the money wired to you (his mom is always "at the Western Union right now!"). You accept and collect the money transfer at zero cost to you - fees are paid on the other end, and then turn the cash over to this guy. I've heard the sum of 275 euros up to over 800. He even offers 50 euros to reluctant people.

    My ex-girlfriend fell for it, and then by coincidence bumped into the same guy two years later, so he's being doing this for a while. I didn't know her the first time she fell for it, but the second time she bumped into the guy, we both assumed it was something to do with drugs but now I'm guessing it probably had something to do with Money Mules.

    Interesting that they actually use intermediates on the other end at least some of the time.

    Also, The Money Mules would be a great name for an 90's cover band.
    • Next time (Score:3, Informative)

      Give him the number to the US embassy. If he has really been robbed and lost his passport they'll help him out.
  • by Jason Levine (196982) on Monday January 28 2008, @09:38AM (#22207764) Homepage
    In addition to money mules, there are also "goods" mules who help transfer fraudulently obtained goods overseas. The typical situation is: ID thief uses stolen card information to buy electronics from a "cardable" website (one which doesn't do a lot of checks on whether the person using the card is the real cardholder). The thief is based overseas, but knows that having goods shipped there might (at best) raise red flags and (at worst) lead the police right to them. So they convince some poor, greedy saps that they are helping out a small overseas company. The goods mules gets paid small sums to receive goods and then reship them.

    The particulars might differ based on situation, of course. I've heard of the scammers using images taken from Google Images to convince the mules that they (the scammers) are really a highly attractive woman who just so happened to have fallen in love with them and needs their help with her struggling business. Yes, people fall for this. Partly because the scammers are good at what they do and partly because some people are just greedy idiots. They mentally block out any red flags because of the promise of money.

    On one hand, the mules are really sad and pathetic. On the other hand, they get me mad because without them much of the identity theft/eBay fraud/stolen credit card purchases, wouldn't be possible (or at least would be much easier to track).
  • by EmagGeek (574360) <eric.hidle@gmail . c om> on Monday January 28 2008, @09:49AM (#22207870) Homepage Journal
    What is really appalling to me is how Paypal and eBay are seemingly exempt from the rule of law.

    If someone breaks into my house, steals my stuff, and puts it in their house, I am not allowed to just go into the thief's house and steal it back. I am required to give them the due process of law, file criminal charges, provide evidence to the prosecution, and let the jury decide.

    If criminal A breaks into the house of victim B, stashes the stuff in victim C's house before moving it to their own house, victim C's landlord can't just decree that victim C has to pay back victim B for the loss.

    This is exactly what paypal is doing.
    • If someone breaks into my house, steals my stuff, and puts it in their house, I am not allowed to just go into the thief's house and steal it back. I am required to give them the due process of law, file criminal charges, provide evidence to the prosecution, and let the jury decide.

      Ah, but if the money is deposited into a bank, the laws governing ECH transactions (Electronic Clearing House) absolutely state that fraudulent transactions can be reversed. PayPal is sort of Bank-like, so I imagine that their t
    • Ebay doesn't have any legal recourse if you refuse this. Paypal is not a bank, they're a corporate (private) entity that handles money much like a 'bank' in SecondLife or WoW (I don't play any of these games so I don't know if there are banks in WoW). If you get suckered into providing your bank information for them so they can withdraw anything from your bank account, then that's on you. I just entrust them with their standard $300 limit and a credit card number which flags my expenses over $100.

      My example
    • Re: (Score:3, Interesting)

      Analogies...are painful and overused (and yes i'm using one below). I question the accuracy of the one used but the underlying point is dead on.

      If *I* break into someone's house, steal their jewlry and rape their cat I'm still afforded due process and the ability to plead my case before a judge. Paypal/ebay OTOH are the arbitrary investigators, judge, jury, and prison warden. You're then left chasing them down begging and pleading to overturn your sentence if you feel that it's wrong or unfair.

      To make it
  • I seem to remember reading about a similar scam where items are bought with stolen credit, shipped to a "mule" who then repackages them and sends them off, generally outside the U.S. These mules have no physical contact with their handlers.

    I always wondered why these mules didn't either selectively ship stuff off (hey, international shipping is dodgy..) or just wait until there was enough "good" stuff on hand that they wanted and then sever ties. The same thing holds true with cash transfers -- just wait