CyberInsecure.com

Daily cyber threats and internet security news: network security, online safety and latest security alerts
November 28th, 2008

Paypal Is Being Used In Popular Nigerian 419 Scam

A new variant of popular Nigerian 419 scam is possible via Paypal, according to report by Inquirer. The 419 scam is named after the relevant section of the Nigerian Criminal Code and the premise is always the same. Somebody offers to pay money into your account and give you a cut when you send it back. In truth the whole thing is money laundering but this latest twist – using Paypal – is significant because, on the surface, it looks like there’s no catch.

Instead of receiving the offer via email (as is normally the case), this person was approached over a Skype chat session. The perpetuator wants to transfer funds out a Paypal account and convert them back into US dollars. All the victim needed to do was check his Paypal account and when the money arrived, send a significantly lower amount back via Western Union.

Due to Paypal’s payment reversal policy, there is a loophole which enables the scam to work. As the payment would be classified as ’services’ rather than goods, there would be no proof that the the victim – who becomes the ‘vendor’ – provided any goods. So the ‘buyer’ – in this case the scammer – gets the money back. In the meantime, the vendor has sent the dollars via Western Union and then finds himself stuck with no means of recourse.

Both Western Union and Paypal can be blamed for making this scam work. Western Union makes it too easy to send and receive money anonymously while Paypal’s dispute resolution procedure system is a crude automated system.

Email, Bookmark or Share:
  • E-mail this story to a friend!
  • Digg
  • del.icio.us
  • StumbleUpon
  • Reddit
  • Technorati
  • Slashdot
  • Propeller
  • Google
  • Live
  • YahooMyWeb
  • TwitThis
  • Facebook
  • LinkedIn

More on CyberInsecure:
  • Nigerian Spammers - Now In Google Calendar
  • Cross-Site Scripting Vulnerability On Paypal Could Be Used In Phishing Attacks
  • UK Justice Minister’s Email Account Used For 419 Scam
  • New Cross-Site Scripting Vulnerability Found On Facebook
  • Phishers Celebrate PayPal’s 10th Year Anniversary

  • If you found this information useful, consider linking to it from your own website.
    Just copy and paste the code below into your website (Ctrl+C to copy)
    It will look like this: Paypal Is Being Used In Popular Nigerian 419 Scam

    2 Responses to “Paypal Is Being Used In Popular Nigerian 419 Scam”

    1. Wood Miller Says:
      March 9th, 2009 at 10:10 am

      We decided to post an old ring we had and didn’t want to Craig’s list - out first online sales attempt and we got several very quick responses (yellow flag). They all wanted to buy “the item” (yellow flag) sight unseen (yellow flag) using PayPal or AlertPay and would include $100 for shipping and handling. All they needed was my name and the e-mail address I used to set up the account. I checked out PayPal and set up the account and then sent my information to the first buyer. I very quickly received a very official looking message addressed from service@paypal.com telling me the money had been deposited and to ship the item to an address in Nigeria (Red Flag). I did a quick Google search and found many people reporting a similar scam. Then I checked my PayPal account and found the balance to be $0. I’m glad I checked before just shipping the item and I’m sure others wish they had.


    2. I had my canon DSLR camera posted on marketplace at facebook for sale. A lady sends me an e-mail saying she will buy it. She told me if I could end the auction and she would pay me through paypal. So, I closed the auction and gave him my paypal e-mail. She said that she was living in U.S. and the camera is for her grandson’s bithday present in Nigeria. Here is the e-mail:

      hi
      i am really interested in buying this item for my Grandson in west Africa as a Birthday gift and i will be offering you $3,250 including the shipping cost to west Africa kindly get back to me with your pay pal email address, so that i can send out the payment as soon as possible.
      Thanks and Stay Bless

      my reply :
      my pay pal email address is the same as my gmail address :
      xxxxxxxxxx@gmail.com

      After that, I receive email from paypal :
      PayPal Mar 08, 2010 : PDT
      Transaction ID:Jan/16/2010 3D228926MW045920S

      Hello xxxxxxxxxx xxx xxxxxx,

      You have an instant payment of $3,250.00 USD from JENNIFER COLE (jennifercole_0@yahoo.com,)

      Thanks for using PayPal. To see all the transaction details, log in to your PayPal account.

      It may take a few hours for this transaction to appear in your account.
      —————————————————–
      Seller
      xxxxxxxxxxxxxxxxxx
      xxxxxxxxxxxxxx@gmail.com

      Note to seller xxxxxxxxxxxxxxxxxxx
      You have to provide to us the shipment tracking number so that your funds can reflect in your account as soon as possible.
      .
      Shipping address - confirmed
      Name;………Abraham Ekpo
      Address:…..N0,33 Olayinka Street Ijeshatedo
      City:…………Surulere
      State:………..Lagos
      Country:……..Nigeria
      Zipcode:……..23401

      Shipping details
      USPS Global Express Mail United States Postal Service
      Description Unit price Qty Amount

      *Canon EOS 500D/Kiss X3 for MYR*
      Item# Not Applicable $3,250.00 USD
      $3,250.00 USD

      Shipping and handling $00.00 USD
      Insurance - required $00.00 USD
      Total

      $3,250.00 USD
      Payment
      $3,250.00 USD

      But something fishy about this is the seller is a white lady buying for her grandson, Abraham Ekpo ? Try to add her as friend in facebook, but no reply and when checking the trx ID, it was on 16 Jan 2010.
      On top of that, I only sell the camera for MYR2900, but she paid USD3250. It was nearly RM10,888. I was shocked and excited, but to be safe I checked first at google and find out that it was a Nigerian scammer.Thank God I did’nt proceed shipping after read all the stories.


    Leave a Reply

    Comments with unsolicited links to other resources will be marked as spam. DO NOT leave links in comments. Please leave your real email, it wont be published.

    *
    To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
    Click to hear an audio file of the anti-spam word