Scammers abusing stolen photos of Lorena R.

[Big Al]

Dear CLIPPED,

How are you doing today, good to hear you will be picking me up at the airport tomorrow here is the flight number Delta CLIPPED, I will be in CLIPPED airport CLIPPED PM.

Below is the information to get the flight ticket fee send to my uncle desk via Western Union or Money Gram so he can get the ticket for me.

Name: Larry N.
Address: CLIPPED Lodi, CA 95242
Amount: $768

I will be waiting for the payment reference or the scan copy of the payment confirmation receipt so i can get my flight ticket booked and fly to meet you in CLIPPED airport CLIPPED pm tomorrow, Please CLIPPED leave a phone number i can reach you at the airport tomorrow, I love you i will be waiting to hear from you soon.

xoxoxoxo
Sharon.

HEADER:

X-Received: from mr.google.com ([10.170.143.213])
by 10.170.143.213 with SMTP id k204mr1836531ykc.53.1422582280743 (num_hops = 1);
Thu, 29 Jan 2015 17:44:40 -0800 (PST)
DKIM-Signature: CLIPPED==
MIME-Version: 1.0
X-Received: by 10.170.143.213 with SMTP id k204mr1836531ykc.53.1422582280737;
Thu, 29 Jan 2015 17:44:40 -0800 (PST)
Received: by 10.170.134.151 with HTTP; Thu, 29 Jan 2015 17:44:40 -0800 (PST)
In-Reply-To: <CAAbCh5sRedA-=Hzs18WS+t1k6_mj-sRRkWP9+ou9g5keFdSRaA@mail.gmail.com>
References: <CLIPPED>
Date: Fri, 30 Jan 2015 01:44:40 +0000
Message-ID: <CAGYPVyDOgU5yAPt6TCXbr=0ATOh9dwRWxSJ+HzMnyksMPbvxKA@mail.gmail.com>
Subject: Re: Hi Babe..
From: Sharon Davis <sharondavis736@gmail.com>

Dear CLIPPED,

Good morning i try to talk to my uncle about re-imburse him tomorrow when i get to you he told me he don't have the money at hand right now to buy the ticket for me as his check comes in every 6th of the month still couple of days from now.

I understand you been at work Justin but you can send the flight ticket without leaving your work via Western Union or Money Gram online using your debit or credit card all you need to do is to go on their website and get that done, Let me know if you can be able to do that or you go to the nearest Western Union Or Money Gram outlet your break.

Let me know the outcome i will be waiting on you.

xoxoxox

HEADER:

X-Received: from mr.google.com ([10.236.32.37])
by 10.236.32.37 with SMTP id n25mr3372636yha.102.1422631614261 (num_hops = 1);
Fri, 30 Jan 2015 07:26:54 -0800 (PST)
DKIM-Signature: CLIPPED==
MIME-Version: 1.0
X-Received: by 10.236.32.37 with SMTP id n25mr3372636yha.102.1422631614255;
Fri, 30 Jan 2015 07:26:54 -0800 (PST)
Received: by 10.170.134.151 with HTTP; Fri, 30 Jan 2015 07:26:54 -0800 (PST)
In-Reply-To: <CAAbCh5v9sDHLBsrVUNfcJ0JZOXVk7Y4Yb_atCsAEtC78SsJmfw@mail.gmail.com>
References: <CLIPPED>
Date: Fri, 30 Jan 2015 15:26:54 +0000
Message-ID: <CAGYPVyBLdUxkhkc6pxG-WpzF7oM4--Uiz9-TxP-N0UbS0OHhag@mail.gmail.com>
Subject: Re: Hi Babe..
From: Sharon Davis <sharondavis736@gmail.com>

[Big Al]

Dear CLIPPED,

Yes next week Friday will be fine dear, you can contact your Supervisor on Monday and have him cancel your vacation and re-schedule it for next week Friday. I will be using the same flight next week Friday, Below is my Uncle bank account information where you will be sending the $768.00 for my flight ticket.

-ACCOUNT HOLDER NAME : LARRY M. N.
-ACCOUNT NUMBER: XXXXX39
-BANK ROUTING NUMBER: 321173085
-SWIFT CODE: BWSTUS66
-ACCOUNT TYPE: CHECKING ACCOUNT
-NAME OF BANK: MOKELUMNE FEDERAL CREDIT UNION
-BANK FULL ADDRESS: 1977 SATURN ST. MONTEREY PARK , CA. 91755
-BANK (BRANCH) TELEPHONE NUMBER: 209-333-5424
-ACCOUNT OWNER ADDRESS: CLIPPED Lodi, CA 95242

Let me know as soon as the money is send you can send me the wire transfer slip for confirmation, How is work looking like today?

xoxoxoxox

HEADER:

X-Received: from mr.google.com ([10.236.209.37])
by 10.236.209.37 with SMTP id r25mr3986764yho.59.1422655791597 (num_hops = 1);
Fri, 30 Jan 2015 14:09:51 -0800 (PST)
DKIM-Signature: CLIPPED=
MIME-Version: 1.0
X-Received: by 10.236.209.37 with SMTP id r25mr3986764yho.59.1422655791588;
Fri, 30 Jan 2015 14:09:51 -0800 (PST)
Received: by 10.170.134.151 with HTTP; Fri, 30 Jan 2015 14:09:51 -0800 (PST)
In-Reply-To: <CAAbCh5tVfCgDwYL3vs7Ex6g5K_H5PAHZ2WcwYyCQdQ==FX=yQw@mail.gmail.com>
References: CLIPPED>
Date: Fri, 30 Jan 2015 22:09:51 +0000
Message-ID: <CAGYPVyDg_qwyYGoGO-kFaqL0_TPcTGFf6PGtGZ7vhe8pTMSwOA@mail.gmail.com>
Subject: Re: Hi Babe..
From: Sharon Davis <sharondavis736@gmail.com>

[Big Al]

Second Account Used by the Scammer:

-ACCOUNT HOLDER NAMES: Sheryl P.
-ACCOUNT NUMBER: XXXXXXX88
-NAME OF BANK : Community Credit Union
-BANK FULL ADDRESS: 1030 US Highway 1 Rockledge, Fl 32955
-BANK (BRANCH) TELEPHONE NUMBER: 3216902328
-BANK ROUTING NUMBER: 263 182 037
-BANK (ABA) OR SWIFT CODE Number: 263 189 069
-Account onwer Address: CLIPPED
Palm Bay Fl 32909

[Big Al]

Hello Dear,

How are you today and how is your weekend going, long time and how have you been ? Letting you know that you are still in my memory and I still really looking forward to hear from you someday. Write me back if you are still interested in chatting with me

xoxoxoxox,

Sharon.

HEADER:

Return-Path: <sharondavis736@gmail.com>
Received: from mail-ig0-x244.google.com (mail-ig0-x244.google.com. [2607:f8b0:4001:c05::244])
by mx.google.com with ESMTPS id ej7si9474389igc.51.2015.11.01.11.04.06
Date: Sun, 1 Nov 2015
Message-ID: <CAGYPVyAtPntWWuwTG9pfYHTp_E+10K5eR_1ESfzyj-MYSK4xaw@mail.gmail.com>
Subject: It Me Sharon Davis, How are you doing today?
From: Sharon Davis <sharondavis736@gmail.com>