Sunday, January 16, 2011

Kayla b.

"Kayla b." sends messages like this:
Hi there.

Thanks for your reply, I want to tell you a little about myself now, My name is kayla, I am GENUINE european girl, half german-half czech. I am very open minded and consider myself attractive... I drink socially, I do not smoke..trying to keep fit. When it comes to "these" things I am allways up for fun and trying new things. I am not a slut and I rarely go on craigslist, I just looking for some fun, I wanna hear some more about you and pics.

Let me know if your still interested


The email addresses she uses are superjj86@gmail.com, superjj75@gmail.com, and similar ones. The picture she includes is this one, which is a closeup of one of the same pictures used by "Roxane".




If you reply to this message, she sends you another one like this:

I am interested in something thats long term, NSA. I kinda want to keep this discreet - my ex-boyfriend is kinda a psycho ever since we broke up. haha.. 3.5 year relationship. Anyways.. I don't know if I told you or not yet, I have a daughter who is 22 months old, but she will always be sleeping by the time you come over...

This is my first time doing this kinda thing online - so Im kinda iffy about it.

I dont use any messengers - only one that I use at work...

i was hoping we could stay in contact from a free site if your interested in making it long term.... my profile is at http://tracking.singlesnet.com/redirect/8400?sid= .... my profile name on there is "sexcbebe5964" I have my cell phone number on there - if you want to send me a text and we could get together tonight or tomorrow night - that would be great.... im signing off the computer now though, hope to hear from you.


When you receive messages like this, you should never click on the link. Even if the website you get taken to is safe to browse, there is the possibility that the person who sent you the message is making money from the clicks and we don't want that scammer to stay in business.

Update 1/24/11
The address michsanch@gmail.com is also being used to send these messages.

Update 1/29/11
The site greatlocalnsa.com is also being used for this scam. It's supposedly part of the "Safe Dating Network".

Update 2/1/11
We would like to clarify exactly what sort of scam this is. Some people were under the impression that there is an actual woman here who is engaged in a romance scam, that this woman wants to get close to you in order to get your money. That is not what this is at all. There is no real woman behind these messages. They are sent out by an email autoresponder. The person who has this operation set up is trying to make money by directing traffic to dating sites. He has affiliate marketing accounts with these sites and he gets paid for each person who signs up, or perhaps for each person who visits the site. These sites themselves might be legitimate, but what this affiliate is doing is fraudulent since Kayla doesn't exist.

17 comments:

  1. still using superjj86@gmail.com but has changed websites.

    "i was hoping we could stay in contact from a free site if your interested in making it long term.... my profile is at http://www.amateurmatch.com/?ainfo=MTY3NjV8Mzh8MjI0&atcc=9&skin=38 .... my profile name on there is "sexcbebe5964" I have my cell phone number on there - if you want to send me a text and we could get together tonight or tomorrow night - that would be great.... im signing off the computer now though, hope to hear from you."

    still kinda confused about why they add in the bit about the daughter. seems unnecessary.

    *update* i responded, cause i felt like it. kinda bitch them out. and the response i got was:
    "Shoot, they wont let me log into that other site, i think they got rid of my account because i wasnt on there for awhile :( ...

    find me on here so we can finally meet up http://www.adultdatelink.com/?affliateid=35713LRIAMJ&program=PPE&subcode=scoschu

    i used the same profile name on here, cant wait you hear from you!"

    ReplyDelete
  2. This guy is from San Diego and is using Cox communications as his Internet Service Provider.

    Contact these people and report his ass. Make sure to mention the email address and his IP: 72.207.8.54

    * abuse@cox.net
    * jason.weil@cox.com
    * scott.shackelford@cox.com

    ReplyDelete
  3. African, can you please provide the e-mail headers? You can leave out anything in them that identifies you. Also, I'd like to mention that sometimes these email messages are sent from trojan applications that were placed on the computers of innocent people, so that might not be the scammer's actual IP address.

    ReplyDelete
  4. Wow, you guys saved me a lot of time. Thanks much, really appreciate your hard work.

    ReplyDelete
  5. The Archangel Conspiracy: We're glad that what we have done here has been of help to you. If you come across any websites or advertisements that you find suspicious, please mention them in the comments or report them to us by sending an email message to craigslistdatingscams (at) gmail (dot) com. Thanks!

    ReplyDelete
  6. I got an email from this scum today 2/1/2011 i also posted a warning on ths bulliten board

    http://groups.yahoo.com/group/romancescams/message/266686
    I found the message here

    http://houston.craigslist.org/cas/2175483126.html

    ReplyDelete
  7. Im not sure but I think these are the email headers

    X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==
    X-Message-Status: n
    X-SID-PRA: michsanch@gmail.com
    X-SID-Result: Neutral
    X-AUTH-Result: NONE
    X-Message-Info: 6sSXyD95QpW4uRybSbGlsO/JVy9TSLOxsFn7rjRATSMqMAzsxZ4yzw/rbZEzK1RA8ZagZdhueRo0/F+EnODoclhOG93lj8BP/j+YrRCTo+g=
    Received: from nm27-vm0.bullet.mail.ac4.yahoo.com ([98.139.52.244]) by col0-mc2-f7.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
    Tue, 1 Feb 2011 06:08:39 -0800
    Received: from [98.139.52.194] by nm27.bullet.mail.ac4.yahoo.com with NNFMP; 01 Feb 2011 14:08:39 -0000
    Received: from [98.139.52.156] by tm7.bullet.mail.ac4.yahoo.com with NNFMP; 01 Feb 2011 14:08:39 -0000
    Received: from [127.0.0.1] by omp1039.mail.ac4.yahoo.com with NNFMP; 01 Feb 2011 14:08:39 -0000
    X-Yahoo-Newman-Id: 227316.39336.bm@omp1039.mail.ac4.yahoo.com
    Received: (qmail 3636 invoked from network); 1 Feb 2011 14:08:39 -0000
    Received: from WIN-S9R489FC16G (michsanch@71.230.128.25 with login)
    by smtp113.biz.mail.re2.yahoo.com with SMTP; 01 Feb 2011 06:08:37 -0800 PST

    ReplyDelete
  8. here's a recent header.. the person is now running this "scam" from myYearbook.com :

    Delivered-To: 3razar3@gmail.com
    Received: by 10.204.14.205 with SMTP id h13cs39543bka;
    Mon, 7 Mar 2011 21:06:13 -0800 (PST)
    Received: by 10.91.199.16 with SMTP id b16mr6106332agq.3.1299560772272;
    Mon, 07 Mar 2011 21:06:12 -0800 (PST)
    Return-Path:
    Received: from nm6.bullet.mail.sp2.yahoo.com (nm6.bullet.mail.sp2.yahoo.com [98.139.91.76])
    by mx.google.com with SMTP id x16si722124anx.100.2011.03.07.21.06.11;
    Mon, 07 Mar 2011 21:06:12 -0800 (PST)
    Received-SPF: neutral (google.com: 98.139.91.76 is neither permitted nor denied by domain of michsanch@gmail.com) client-ip=98.139.91.76;
    Authentication-Results: mx.google.com; spf=neutral (google.com: 98.139.91.76 is neither permitted nor denied by domain of michsanch@gmail.com) smtp.mail=michsanch@gmail.com
    Received: from [98.139.91.70] by nm6.bullet.mail.sp2.yahoo.com with NNFMP; 08 Mar 2011 05:06:11 -0000
    Received: from [98.139.91.56] by tm10.bullet.mail.sp2.yahoo.com with NNFMP; 08 Mar 2011 05:06:10 -0000
    Received: from [127.0.0.1] by omp1056.mail.sp2.yahoo.com with NNFMP; 08 Mar 2011 05:06:10 -0000
    X-Yahoo-Newman-Id: 977301.92425.bm@omp1056.mail.sp2.yahoo.com
    Received: (qmail 79755 invoked from network); 8 Mar 2011 05:06:10 -0000
    Received: from WIN-S9R489FC16G (michsanch@67.190.109.3 with login)
    by smtp112.biz.mail.sp1.yahoo.com with SMTP; 07 Mar 2011 21:06:09 -0800 PST
    X-Yahoo-SMTP: EWmzKeyswBAKbAbCyhZc_bab0K9Trj5c
    X-YMail-OSG: 05Daa5oVM1mz2r70lk1Hw.G3NhHwj.k1EeBbic_w94sUH7A
    fvxkN3pRjVtUyDbuzZMgkKLDMHtKDlB1ALnYdsZNBvWP.3MrDE9KOYXT2dZ5
    rg6IUvjv43J4r.VDEX.uJsUdS7e2oJG.bDLwNiWkkH7rov7eyYBXuIVaZQrr
    hXiWOkLe66In3Eb9AU3po0STmjS18IkicrJiALehDqb_jdqaqjxqeqXPBlUW
    oNw--
    X-Yahoo-Newman-Property: ymail-3
    MIME-Version: 1.0
    Date: Tue, 08 Mar 2011 00:05:42 -0500
    X-Priority: 3 (Normal)
    Content-Transfer-Encoding: quoted-printable
    Subject: Re: hey there
    Content-Type: text/plain
    From: michsanch@gmail.com
    To: "3razar3" <3razar3@gmail.com>
    Message-ID: <8C5FF70F31F931E49ED27BF7E5B85271FD5576D4@WIN-S9R489FC16G>

    ReplyDelete
  9. Re: Face down, ass up…!!!!Tuesday, May 10, 2011 11:12 PM
    From: "Kayla B" Add sender to Contacts
    To:
    hey,

    thanks for emailing me about my ad.. let me know a little more about you and i'll tell you more about me..

    kayla.

    ReplyDelete
  10. Just got same exact message from KaylaB.....you sound pretty cool and i'm definitely interested in meeting up with you.. i gotta work tomorrow and will get home around 3-4 and it would be awesome to meet up after that.. we can grab a drink and see how we connect.. to get my number just go to http://www.casualmeetup.com/ and look up
    "sexcbebe6532" .. my number will be right on the first page.. they never charge you or anything, they just verify to make sure you aren't a rapist or anything, you know a girl can never be too careful

    ReplyDelete
  11. From: Kayla B Add contact
    To: XXXX
    Date: Fri, 13 May 2011 19:04:39 -0500
    This message is not encrypted, and is not digitally signed.

    Hey, thanks for emailing me.... im glad you responded.

    let me know when you would like to meet up, and maybe you could tell me a little bit more about yourself.

    kayla

    ReplyDelete
  12. I got the same one that Josh got!

    ReplyDelete
  13. Same here.

    their ad is here

    http://inlandempire.craigslist.org/cas/2390581034.html

    sucks for them that this is my craigslist email.
    specifically made to handle JUNK.
    once i've sold my items, i take down the ad and delete every email after that.
    nice try.

    ReplyDelete
  14. a run on her email id led me to this blogpost and u saved me from sending a reply to her, the following was her reply from michsanch@gmail.com

    it is either this post http://pune.craigslist.co.in/w4m/2459351521.html
    or this 1
    http://kolkata.craigslist.co.in/w4m/2415913430.html

    since I responded to both of them

    Kayla's response is =======>
    Hey, thanks for emailing me.... im glad you responded.

    let me know when you would like to meet up, and maybe you could tell me a little bit more about yourself.

    kayla

    ReplyDelete
  15. I got the same e-mail today. The e-mail address being used now is Kayla B [michsanch@gmail.com]

    Hey, thanks for emailing me.... im glad you responded.

    let me know when you would like to meet up, and maybe you could tell me a little bit more about yourself.

    kayla

    ReplyDelete
  16. Sadly I just encountered 'her' just like the guy above me...
    ...Word for word..

    *sigh*

    ReplyDelete
  17. just got this email from analisabisaillon66@hotmail.com, exact same wording.

    This blog is awesome, keep up the good work

    ReplyDelete

Comments are moderated and it may take up to a day for them to be published.