Amfas Tech | Technology, Blogging & Internet Marketing: Scam Analytics

Facebook Work From Home Scam Debunked

These days, I have been seeing a spammy scam advertisement running on one of my browser tabs sometimes saying “Facebook Pays India Residents USD$257/day To Work From home” mocking fox news website with the published date as of today's.

 

This fake news was being propagated with the URL of website localnews247.net with a imposter look of an official news media website. This website also have a hacked image of an Indian family, fake proofs of payment checks and fake comments under the article to make the visitors fall for their filthy scam.

 

The webpage features a morphed image of Mark Zuckerberg’s team with a banner of text ‘Facebook work from home’ on their back along with the tag line in the bottom saying “As seen on: CNN, The Star Online, NewStraitsTimes, BBC”.

 

facebook-work-from-home-scam

 

Debunking the ‘Facebook Work From Home’  scam

Level 1 investigation: This webpage contains a family photo of guy and his fake statements saying “All I had to do was browse the web and post links on other online sites. I also did some data entry work…

 

When searched for the image on the internet on Google, it showed some Facebook profiles among which we actually can’t pick the genuine one from. Take look at the following screenshot:

 

image

 

Also the fake admitting of Mr.X in the photo says that he was asked to post links, share stories and review sites and some data entry work. He also says that anyone with basic computer skills can do this work and no other skill is needed.

 

Catch 1: Why would a company like Facebook releases a picture in the name of a guy who is totally fake?

 

Catch 2: Facebook has nothing to do with the posting links and sharing content on other websites and forums as there is no point of following such beginner strategy to promote themselves.

 

Catch 3: The date of publishing of the news is found to be changing daily dynamically. But why? Is it to make it look fresh?

 

dynamic-date

 

Catch 4: The fake check is found to be from ‘Amazon Services LLC’ instead of ‘Facebook’. Also all the other details can be found as morphed up on keen observation.

 

fake-check

 

Level 2 Investigation: We have tried to dig a little deeper about the details of this scam and found the following astonishing facts.

 

The title of the website localnews247.net is found to be registered as “How To Lose 18 lbs of Belly Fat in Just 1 Month With This 1 Diet Trick Celebrities Use” which was an yesterday’s scam that looted huge amounts of money all over the globe. However, when we tried to visit the website, it showed us ‘403 forbidden error’ which means that the website is no longer available for anyone(as people might have realized it a scam by then).

 

Catch 5: If the title of the website is found to be something that is related to dieting and fitness, how come the website not not load? and how come the sub-page of the website, the new Facebook scam is loading?

 

After knowing the true face of the title, we have tried to dig out the details using ‘WhoIs’ tool on the internet. This is what it showed:

 

Domain Name: LOCALNEWS247.NET
Registry Domain ID: 1641531904_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date:
Creation Date: 2011-02-22T12:27:00.00Z
Registrar Registration Expiration Date: 2015-02-22T12:27:27.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48

 

Catch 6: The expiration date of the domain is found to be 02-2015. If this program is real, how can you expect it to end within 3 upcoming months?(in reference to the catch 3). Doesn’t it conflict with the Catch 3 we have discussed earlier?

 

If we look at the details of ‘WhoIs’ information, we get some more information about the registrant of the website.

 

Domain Name: LOCALNEWS247.NET
Registry Domain ID: 1641531904_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date:
Creation Date: 2011-02-22T12:27:00.00Z
Registrar Registration Expiration Date: 2015-02-22T12:27:27.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.4252982646
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: B87F2227527C440CA4D8AFB1C2A6D763.PROTECT@WHOISGUARD.COM
Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email: B87F2227527C440CA4D8AFB1C2A6D763.PROTECT@WHOISGUARD.COM
Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: B87F2227527C440CA4D8AFB1C2A6D763.PROTECT@WHOISGUARD.COM
Name Server: NS1.DIGITALOCEAN.COM
Name Server: NS2.DIGITALOCEAN.COM
Name Server: NS3.DIGITALOCEAN.COM
Name Server: NS4.DIGITALOCEAN.COM
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

 

The registration link is total different from the this news published link. This is what it looks like: register.fbcdnindia.com

 

Catch 7: Let us consider that the news is published in a real website like fox news, but what is the need to elevate the topic for such a popular news channel in a promotional way along with how-to-register links in it?

 

We have tried to dig out details for the registration link that is specified above. These are the details we’ve got to know from ‘WhoIs’ information:

 

Domain Name: FBCDNINDIA.COM
Registry Domain ID: 1888502460_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2014-12-03T10:07:33.00Z
Creation Date: 2014-12-03T18:07:00.00Z
Registrar Registration Expiration Date: 2015-12-03T18:07:00.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48

 

The registration domain is found to be registered in the month of March, 2014 and it is going to expire in an year.

 

Catch 8: Why could company like Facebook not register a domain for 5 years at least to work along with a business plan?

 

The information from ‘WhoIs’ shows more relevant information about registration link and the details are as follows:

 

Domain Name: FBCDNINDIA.COM
Registry Domain ID: 1888502460_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2014-12-03T10:07:33.00Z
Creation Date: 2014-12-03T18:07:00.00Z
Registrar Registration Expiration Date: 2015-12-03T18:07:00.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.4252982646
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: A3278FE1D68B4F628A7FABF8C2FE4781.PROTECT@WHOISGUARD.COM
Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email: A3278FE1D68B4F628A7FABF8C2FE4781.PROTECT@WHOISGUARD.COM
Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: A3278FE1D68B4F628A7FABF8C2FE4781.PROTECT@WHOISGUARD.COM
Name Server: NS1.DIGITALOCEAN.COM
Name Server: NS2.DIGITALOCEAN.COM
Name Server: NS3.DIGITALOCEAN.COM
Name Server: NS4.DIGITALOCEAN.COM
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

 

The registrant of these domains is found to be linked up with another yesterday’s fraud business, domainspark.biz. All the P.O.Box addresses of the registrant is found to be same if you can observe from the ‘WhoIs’ information.

 

Level 3 Investigation: Later we’ve tried to investigate for the clues on the page and what we found are some naked facts. The comments below the news article are put to manipulate the judgment of the reader. In fact they are not the real comments nor even real Facebook profiles.

 

If we see the source code of the page, we can recognize them as fake profiles. Take a look at the following screenshots:

 

fake-facebook-comments

 

fake-profile

 

Also the timestamps of the comments are found to be so recent and you can observe it in the source page.

 

Catch 9: What’s the need of placing fake comments for the article for a company like Facebook?

 

Over to you

Earning online is same as earning offline. You have to put the effort and time to make the decent figures. Would you be paid just to walk-in and walk-out from your office building? Probably you’d never be. The same happens with working online too. Be careful with the scam programs and don’t waste your time and money on them.

 

Report to us if you found any such scam and we’ll debunk it and inform you the real fact and fiction!

Continue Reading

Beware of 100BestBuy Scams | Scam Analytics

This time we are analyzing the online shopping website 100besybuy.com, which is found to be performing fraudulent activities with its customers.

100BestBuy is an online #e-commerce website with huge range of product categories to buy from. This website looks like another e-commerce, online shopping site on the internet with great deals over various products.

bestbuy.com

No one have doubted the website and the business until they started offering deals like one as following.

fake-deal
Fig: A fake deal on iPhone 5c for Rs.699/-

This is a deal featuring iPhone 5C which is said to be given for the lucky draw contest winners.

Let us suppose it a lucky draw contest for a while. According to their rules, one should have to pay Rs.699/- and register in the contest. The winner chosen by lucky draw process would be awarded with the product, iPhone 5c in this context.

fake-promise

According to the information on the website, if you don’t win the contest, you will be get paid back your registration fee, Rs.699/- in this case.

Here is the Catch If the amount with which we are registering for the contest is paid back in any case, what is the need of paying it? They could even take the amount from winners after disclosing.

Investigating in Technical Perspective

We could extract some facts about this site from our technical perspective. Here the information is:

Registrant Org
Domains By Proxy, LLC was found in ~10,844,639 other domains

Registrar
GODADDY.COM, LLC
Registrar Status
clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited
Dates
Created on 2011-04-29 - Expires on 2017-04-29 - Updated on 2013-06-24

Name Server(s)
NS51.DOMAINCONTROL.COM (has 37,307,131 domains)
NS52.DOMAINCONTROL.COM (has 37,307,131 domains)

IP Address
23.59.189.98 - 670 other sites hosted on this server

IP Location
- Washington - Seattle - Akamai Technologies Inc.
ASN
AS20940 AKAMAI-ASN1 Akamai International B.V.,US (registered Jul 10, 2001)
Domain Status
Registered And Active Website
Whois History
103 records have been archived since 2007-11-26

IP History
38 changes on 23 unique IP addresses over 8 years

Registrar History
2 registrars with 2 drops

Hosting History
8 changes on 5 unique name servers over 9 years

Whois Server
whois.godaddy.com
Website
Website Title
Online Shopping in India | Get the Best Shopping Deals Online in India | 100bestbuy.com

Server Type
Apache/2.2.22 (EL) DAV/2 PHP/5.4.12 mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5
Response Code
200
SEO Score
82%
Terms
1444 (Unique: 371, Linked: 82)
Images
31 (Alt tags missing: 6)
Links
67   (Internal: 65, Outbound: 1)
Whois Record ( last updated on 2014-08-16 )
Domain Name: 100BESTBUY.COM
Registrar URL: http://www.godaddy.com
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Name Server: NS51.DOMAINCONTROL.COM
Name Server: NS52.DOMAINCONTROL.COM
DNSSEC: unsigned

This website was created back in April 2011 and modified in June 2013. That doesn’t gave us a catch but the complaints against it made it clear that the company has been flipping hats on people heads.

What’s they actually do?

Online Magic! Yes! this is only word I could invent to describe of what they are doing. They’d trick showing you an iPhone and when you subscribed for the lucky draw contest, they will send you some cheap T-shirts, those you could buy for 1/4th of the price in the market.

Complaint #1: Fake Products and Fake Site
I saw an add in 100 bestbuy.com and enrolled myself in Samsung tab contest by paying 399.00/- through online as per their T&C if we couldn't win in the contest the entire money which we have paid will be paid back as credit points in our 100 bestbuy account. When I enrolled in contest I dint get any call or any reference ID so now the only option was left is to buy something through their website using my credit points.” – a victim on consumercourt.in.

Complaint #2: Total Fraud - Don’t Even Register
I didn't even order anything from their portal just registered. next day I received a phone call stating that I have won something and they are sending it over to my place and I have to pay 1000 rupees for it. When I said, I don;t want it, you select someone else, the guy on the other end literally said the following
 
"Nahi chaiye to register kahe kiye, Hum ch*ye baithe hai jo tum jaise logo ko call kate hai”.(Translate:Why did you register if you don’t wanted it. Are we looking such an A-holes to you?)” – A victim on mouthshut.com.
 
Complaint #3: 11 months and the product not yet delivered!!!
“I had purchased a portable laptop table from 100best buy.com last year on 10th august 2013, that too just to use my 699Rs. which they took under a contest and did not refund. I even paid Rs.204 more for the product (a total sum of Rs.903/-). But even after more than 11 months I haven't recieved it. on calling they say you had cancelled the order (Wtf!!! who would waste his/her money?) On contacting their service department throughemail, thry just keep asking details of the order and payment proof again and again. but no sign of delivery yet.” – a victim on complaintboard.in.
 
We’ve seen so may complaints like this else where than the specified sites. I think these proofs are enough to say it is a scam site.
 
Next time you find a deal, make sure it is exists for real not just in your imagination. Be safe!
Continue Reading

Is Cuelinks Safe to work with? | Scam Analytics

Cuelinks is an affiliate link management service that was recently started up in India. This Mumbai based company focuses on Indian publishers who are making their earnings with affiliate marketing so far and new. Affiliate marketing is on rise compared to the past couple of years and it is already getting priority along with the famous CPC programs like Google AdSense.

 

Cuelinks was introduced on a motive to provide better affiliate link management and reporting solution to the publishers.

 

cuelinks

 

What’s the motive of Cuelinks?

Affiliate marketing is not a one time job solution. Publishers have to take efforts of communicating with the merchants and the affiliate networks for campaigns, product links, payments, reports and any support regarding the program. Sometimes it may be difficult to understand the linking scheme of those affiliate programs there by causing confusion which may lead you to leave it off at all.

 

 

Cuelinks claims to be eliminating all such problems and avail all those needs a publisher looks for in one platform.

 

Registration & Installation

The registration process is available for both publishers and merchants. Those who want to market their products can signup as merchant and those who want to earn from affiliations can signup as publisher.

 

The registration process would take up to 24 hours to activate your account. After activation, you have to go with one time installation of the code in your website.

 

Once you install the code in your website, you no need to link every product you wanted to refer from the merchants website with your affiliate ID. You may just post the link of the product on your website and Cuelinks code would take care of adding affiliate ID to it. Once the product is bought through your affiliate ID, the commissions are being updated in your dashboard.

 

How Does Cuelinks work?

Cuelinks feed on publishers as well as on merchants. It gives 65% of revenue that comes from affiliating the merchants products to publishers. Top performing publishers would even get more than 75% of revenue.

 

As a matter of fact the earnings share, Cuelinks is giving on top eCommerce websites like Flipkart, Amazon are low compared to their original rates. One can earn 100% of commissions by directly referring from the respective website’s affiliate links. If so, why come to Cuelinks?

 

Can it be used along with Google AdSense?

This is the question that strikes in every AdSense publisher mind when told about Cuelinks. Google AdSense is the best publisher program than anything. No other program in the world give such high CPCs like Google does. Who doesn’t agree the fact?

 

The reason why I am dragging AdSense into the scene is that the one-time-installation Cuelinks code’s behaviour. When the code installed in website, every outbounding link from the site is referred by Cuelinks referral system, linksdirect.com.

 

In case of AdSense, when someone clicks on the Ad, it should take them directly to the URL shown in that Ad unit. Then Google tracks our publisher ID and pay us according to the CPC of that Ad. This is how Google AdSense works. If clicking on AdSense Ad takes the visitor to somewhere before it goes the actual URL, Google considers it as spoofing and terminates the AdSense account. After all, redirecting visitors or modifying Ad unit code that takes them to false destinations is against the AdSense policies. Hope you know the cost of violating Google policies as better as I do.

 

How to use Cuelinks along with AdSense without violation

There is another way to put Cuelinks and AdSense in one sheath without violating Google policies i.e., API installation. Cuelinks allows you to search for a merchant by using the ‘merchant lookup’ and get a referral link to his products/services. Let us suppose I choose to refer products from 100bestbuy.com the referral link would look like this, http://linksredirect.com?pub_id=2506CL2391&url=http%3A//www.100bestbuy.com/

 

This method of affiliate marketing doesn’t redirect every other outbounding link to the Cuelinks referral link. So it does not violate Google AdSense policies.

 

This method of affiliation is the an official recommendation of Cuelinks team to amfastech team when raised the issue.

 

There is another way you can use Cuelinks along with the AdSense apart from the direct API installation. You can create widgets and place them on your website/blog without worrying about the AdSense again as it also doesn’t violates its policies.

 

Conclusion

Managing affiliate links in one platform is very helpful as it saves the time of sail across different affiliate program platforms at once.

 

The actual commissions from affiliate programs like Amazon and Flipart differ a lot from Cuelinks commissions. It is better to go with the actual affiliate programs directly than to go with Cuelinks.

 

If suppose Flipkart is giving 10% commission on a product and it is referred through Cuelinks, you have to loose 3.5% of your commission and you will get 6.5% on it at last. This loss is considerable.

 

The one-time code installation still seems a threat to Google AdSense. One can’t afford to loose his AdSense account for Cuelinks.

 

Cuelinks seems not sure about merchant signups. Emails like following are often flooded into inbox,

Dear Publisher,

 

Please note that the below mentioned campaigns need to be paused with immediate effect.

-Kitchens of India

-Bagskart

-Shoppystar

Kindly stop promoting the above campaigns until further update.

Warm Regards,

Aaron Coelho

Executive - Affiliate Marketing | cuelinks.com

M: +91 9920979552 |

O:   22 6565 8001

Cuelinks is a trustworthy affiliate link managing business. It is struggling hard to stand still in this competitive environment to win publishers as well as merchant’s trust. Amfas Tech wishes good luck to all Cuelinks publishers and merchants and we hope this review helped you to some extent at least.

Continue Reading

Union Bank of Nigeria (UBN) online scam analysis

A clever scammer always targets the common internet user. Unfortunately, a common internet user can’t actually suspect an fraudulent email. I don’t know why these scammers target Nigerian banks to impersonate. Any how they target innocent internet users online ultimately.

 

The following is another scam email I’ve found in my spam list. Most of the mail servers block these type of emails to enter your inbox but yet they get received into your spam folder. The following email is an impersonating email of Union Bank of Nigeria(UBN). I’ve already talked about Central Bank of Nigeria scam in my previous article: Fraud email impersonating Central Bank of Nigeria(CBN). Read that one also to get better idea over Nigeria bank scams.

 

Union Bank of Nigeria (UBN) online scam analysis

 

Check the originality of sender’s email address. To do this click on the top-right drop down options and choose ‘show original’. Source code of the email would be shown in the next window. Check if the ‘original source’, ‘received from’ and ‘from’ fields are original or not. Observe the highlighted areas of the following screenshot of the fraudulent email.

 

Source of fraud email

 

These emails shows you some invalid bank and identification numbers. This is to make us believe that they aren’t fraud and everything is going legal way.

 

How to not get caught in their trap?

It’s so easy! before you make any move regarding emails, ask yourself the ‘W’ questions relating to one another. If you got at least one good reason to find a favorable answer, think about it, search for it on internet and make a step ahead with a 100% chance of run back safe!

 

Feel free to share your opinion on this online scam in the comments below!

Continue Reading

Fraud Email Impersonating Barclays Bank PLC.London

“I’m as much worried as felt happy for the growing internet technologies because it grows a dark side of it too.” Some anonymous IT expert quoted in a meeting.

I talked about the spammy circulating Fraud email impersonating Governor of Central Bank of Nigeria in my previous article. This one is belonged to one of those Fraud category.

Fraud Email Impersonating Barclays Bank PLC.London

How to detect?

You no need have an big handy magnifying glass and a long coat with a hat on your head. You also no need to be a computer expert to detect. Mostly you no need to be a detective or a computer wizard to identify the fraud emails. All you needed a little common sense and observation.

What to observe?

Have you ever contacted the email address you are seeing above? If the answers is NO from you, that answer would answer your ‘fraud or genuine’ question after all.

If you are a Shakespehere in English, you would have already identified it fraud. I have already talked about the informality of the English they use in fraud emails in the ‘observation 4’ in the article that helps you detect the fraud job offers.

Why you?

You should ask this question yourself before you respond to such crap. If there are a lot people like you, who are non-related and strangers to the particular band or person offering you millions of dollars, why they had chosen you?

I know, by these questions above you would surely suspect an email if it looks spammy. But you shouldn’t conclude yourself if you really suspect it.

How to know if original?

www.barclays.co.uk is the official Barclays website I found on the internet with a single time search on Google. You can contact them from their official site and they won’t hesitate to provide you information.

Are you the victim?

Barclays pay special attention to the online fraudulent activities impersonating their bank officials. You can contact them here, if you are one of the the victims of those online frauds. If you got an suspicious email that claims to be from them forward the email to internetsecurity@barclays.co.uk and delete the email from your mailbox.

Be smart! Play safe online! Share this information to your friends and family and keep them safe too!Subscribe to our email updates and keep notified about more online scams.

See you next time with knowledge on a new scam!
Continue Reading

Fraud Email Impersonating Governor of Central Bank of Nigeria

This is the email I’ve got an hour ago asking my credentials for the transfer of such huge amount in dollars for no reason. This makes me think sometimes if I was a billionaire( I know you knew that I was kidding ). The following one is the screenshot of the email. Be smart & beware of the fraudulent e-mails you get. I’ve already spoken about them in the past. If you are lacked of awareness on online scams, you better read all the online scams I talked about.
Fraud Email Impersonating Governor of Central Bank of Nigeria
Continue Reading

Tata Motors Fake Job Scam

Internet scams actually target on computer and internet illiterates. The unfortunate thing is that even people with fair knowledge of using computers are getting into this trap. I’ve clearly written an article about how to identify a fake job offer in the past. You may read some of the key observations I have pointed out in the process of identifying a job offer, fake or real in that article.

 

I got an email this evening stating that I’ve been selected for a position in TATA MOTORS.

 

It says,

 

Your Resume has been selected by (Tata Motors). I have attached your Appointment Process letter with this email. Kindly see the attached file for more details you send a email CompanyH.R. Department email id: (account@tatamotorshr.co.in)

 

Note - you can callin official working Hours Monday to Saturday – 10 Am to 4 Pm,

 

Thanks & Regard

Tata Motors LTD (Team)

The above email is pasted as it is from my inbox without any change in a full stop or comma. Take a look at the screenshot of my email here,

 

Fake tata motors email

Look out there for the attachment they have attached to the email. The screenshot of attachment can be seen below,

 

Tata Motors Fake job Scam

 

Click on the above image to see the content clearly if you are interested in reading that fake letter.

 

Caution: Do not believe in such scams. Be conscious and be smart while replying for job offers you get on internet. Hope you a safe journey through internet.

 

If you want to get alerted on such scams in future, just drop your email in the subscription box above. We’ll try our best to keep you safe by letting you know about them earlier.

Continue Reading

How to Identify the Fake Job Offering Emails Resembling Top Companies

Everyone has taken the power of internet and emails into their hands to search jobs for their careers. Fortunately it has become so easy to find a job through internet but unfortunately it has become so easy for the hackers to cash the ignorance of people using internet. Some of my friends were also been fallen to the hacker’s pranks twice and more. They asked me to advice them to indentify such fake job offering mails resembling the rightful companies. So I tend to write this article for those who are finding a way to recognize those fake job offering emails resembling legitimate and genuine companies.

Even I have got and been getting such spam mails in hundreds to my mailbox everyday. With very good experience of internet security and hacking methodologies I have observed some impersonations and concluded some points to be analyzed before judging an email. Let’s go through them briefly one by one in no order.

Observation 1: No Much Detail

My first observation is that the fraudulent email never look furnished with detailed information. The specifications in the email would be vague and not clear at all. Take a look at the following email from my friend’s inbox. it came with an attachment with no body.image

Conclusions:

# No legitimate company would send an email with no body or subject attaching a neatly formatted letter conveying the prank details.

# No legitimate company would risk its reputation sending you an non-detailed email that makes the readers upset.

Observation 2: Non-specific & Unrelated Descriptions

Secondly, I went to the detection of the letter. When I opened the letter from the attachments I’ve shown above, it says,
   Fake call letter from L&T

The email is impersonating L&T engineering company offering my friend to join as ‘executive/manager’. Look at the quote I mentioned here. My friend is an IT graduate, how could he be taken as manager. Sounds funny right!!
Zooming at the phrase will illustrate you, here it is,
non specific descriptions
#1 Another non-specific observation you should notice is the word ‘respective department’. How could a guy can be called for an interview or notified about shortlist until and unless he is aware of the designation of the job and department. As per them they have selected my friend by considering the academic project. Here is the catch again. Note this one, because it sometimes can be ignored while assessing a mail. I told you that my friend is an IT guy, even the guy who is pretending to hiring him should know that by the ‘academic records’ consideration. So word ‘respective’ doesn’t suits the criteria here. He might have specified it clearly ‘IT Department’.

Non specific descriptions
#2 Look at the second line. ‘Selected online’ wow that sounds great! my friend is a Bill Gates and this hiring guy found him online just by googling and shortlisted his name. Is this possible? for god sake even? NEVER!!. How could he select a guy living online for such a prestigious ‘executive/manager’ job? did he found my friend on facebook? or twitter? bull crap. He should specify the job portal or consultancy at least!

#3 Observe the last lines. ‘Selected candidate can choose desired location’. Does that company is completely lack of employees or what? Let us suppose so, then why would it offer the min salary of Rs.45,000/-PM.? Beside all this what is this last statement ‘you are going to get employment……….’ what does that mean? Jut think!

Conclusions:
# No legitimate company sends such an non-detailed email to their shortlisted candidates using phrases like demonstrated above.

#  No company just shortlists you by seeing you online by googling. The HRM have some procedures to go with during recruitment. If they specify that they shortlisted you watching your resume, they would specify the job portal or consultancy they referred you from.

Observation 3: Security Deposit

Security Deposit #1 Look at the above screenshot. According to it, the selected candidate should security deposit Rs.10,200/- into so and so banks specified. But how? just by filling up the deposit form? I don’t think so. After that what’s with this Air ticket? for what? flying to Pune, Mumbai, Banglore, Chandigarh and New Delhi?  That too they are going to send you air ticket only after security deposit. Is the guy(my friend) selected or just shortlisted? Can’t he go himself for the interview?LOL

#2 Look at the line ‘this is compulsory because this is company process’ which company? fraudulent and co.? That made me rolled on floor laughing.

Conclusions:

# No legitimate company asks for security deposits before get hired. Recruited people might be asked to security deposit some amount of money according to their company norms but that amount won’t be in some Rs.10,200/- or Rs.16,232 like that. I strongly believe that amount would be in lacks along with the particular time period of agreement.  

Observation 4: Look at the Grammar

Zoom in the offer letter above and read the whole once. You will find blunder of grammar mistakes and spelling mistakes.

Conclusions:
# Everyone of us might not be a proficient in grammar. Don’t worry you may leave this observation and go on with the other ones.

Observation 5: Fraudulent Always Take Precautions

Fraudulent Taking Precautions
# Observe the highlighted text. The selected candidates are not allowed to visit the office in advance. Why so? are they afraid of being revealed if the candidate visits the office just before one day of the interview?

# Group code number is not transferrable. What does that mean? Are they worried that their non-existed identity could be enquired?

# Date of security deposit is right after the day my friend got this mail and interestingly the date of interview is on next month almost a month later. What do the cheater think? Can we forget about the guy in just a month who made us deposit foolishly into his account?

Conclusions:
# There is nothing to do with the pre-advanced visits for the company. No company restricts so.

# Fraudulent will take care not to be caught at anytime. The above statements in the above letter illustrates so.

Observation 6: They Don’t Care About Format of the Letter


Non professional designation specification 
The official letter will be in a professional format with neat justification and font styles. The formatting of the letter or email mostly aims at conveying the information. Genuine companies or impersonating companies like our demo would always tries to catch the reader’s interest. Take a look at the signature and attribution pane. Do you think it is professional?

I believe the professional attribution pane includes the

Name of the HR or signature or relevant,
His position or designation in the company,
Company name,
Address,
Contact details
Website

These attribution parameters may change according to the companies but would the format would be the same as specified above.

Companies take this seriously

Many companies are aware of this impersonating emails in the name of them. So they warn people on their sites to be careful and checkout the norms that the company follows.

TCS is one such company warns people on their website regarding  this fraudulent activity.
TCS
TVS is another company warning with a caution notice on their website, here it is,
TVS

Not only these two there are many companies that warn about the scam going on with their name. Some of them like Maruthi Suzuki, another TATA company, even Google and Gmail are also under attack.

Getting a genuine job online isn’t a difficult task, but we should be careful in responding to these spam emails. BEWARE!! BE SAFE ON INTERNET!!

Comment below if you think you got an suspected email like this and you can’t assess it. We will assess it for you!
Continue Reading

Beware of this F.B.I. Spam mail || Don’t Make Yourself a Prey to this scam


I got an email this afternoon trying to snatch my information via a reply. Before you respond to this email remember,

1. FBI never try to get down to earth for a guy like your or me
2. FBI doesn’t need any funds from individual people.

Thanks to Gmail for recognizing this before I could open this. So I WARN YOU DON’T RESPOND to this one if you got it.

This is the mail I got. Let’s take a look!

ANTI-TERRORIST AND MONETARY CRIMES DIVISION
FBI HEADQUARTERS WASHINGTON DC
FEDERAL BUREAU OF INVESTIGATIONS J.EDGAR HOOVER BUILDING
935 PENNSYLVANIA AVENUE, NW WASHINGTON, D.C. 20535-0001
Ref: FBI/DC/25/113/13/2012
Your attention is needed immediately
  We have been informed through our global intelligence monitoring network that the sum of $10.500, 000.00, has been released from a bank in Africa bearing your name as the beneficiary without dist certificate to clear your name and fund from every terrorist or drug or money laundering activities
We sincerely apologize for sending you this sensitive information via e-mail instead of a certified mail, phone call or a  face-to-face conversation,We will also send you a certified email later it is due to the urgency and importance of the security information needed. To checkmate financial recklessness, illegal gambling, racketeering and considering the effect of the global financial crisis rocking the United States, our government with the help of the Federal Bureau of Investigation (F.B.I) Washington, DC and the internet crime complaint center (ic3),alongside the CIA  signed an agreement with U.K  police for an immediate release of all overdue funds presently logged in their treasury and to ensure it is disbursed to the rightful beneficiaries in all parts of the world. If you the beneficiary would adhere to our instruction it will help you receive your payment  immediately
Continue Reading