Scammers abusing stolen photos of Anthony Toste

[Big Al]

Submitted On: 2019-09-22 15:23:47

What name did the scammer use?: Mark Toste
What site/app did you first meet the scammer on?: instagram
What email address(es) did the scammer use?: marktoste325@gmail.com
Briefly explain what happened during the scam. : The scammer goes by marktoste77 on instagram, he is very subtle.

He used a gentlemen called Mr Abraham Cartu to send me a check. He tried to get me to open an offshore account.

Stolen image used:

[Big Al]

Information from a Screenshot:

Marktoste77

So I need your advice
As I have already spoken to him already and he gave me some advice

Just a guy who I met in italy
I was thinking of getting a house for us to live in together after getting married to you
Then invest with the money

Information from a Fedex Airway Bill:

Date: 7/22/2019 Senders account number: 774737337
Senders Name: Jack W??
Company: Global Sky
Address: 77 City Centre Dr.
Address: #1020
City: Miss
Province: ONT
Zip: L4W???

[Big Al]

Information from a fake check sent to the victim:

Check from:

Galison Publishing LLC
70 W. 36TH ST. 11TH FLOOR
NEW YORK, NY 10018

Showing it drafted from Citibank

Information from a Moneygram receipt:

Sent to: Charles Hayden
Location: United Kingdom
Reference Number: XXXXXXX

From a Screenshot:

Bill Cartu

What Banking Incident?

Abraham William Cartu, CPA
Cartu Financial Management Group
511 S 29th St. Colorado Springs, CO 80904
Tel: 720-623-4592
Cell: 718-806-9357
Email: abraham@cartufinanceservice.com

Phones;
+17206234592
Number billable as geographic number
Country or destination United States
City or exchange location Denver, CO
Original network provider* Neutral Tandem-colorado, Llc - Co

+17188069357
Number billable as geographic number
Country or destination United States
City or exchange location New York City, NY
Original network provider* Level 3 Telecom Of New York, Lp - Ny

[Big Al]

From more Screenshots:

Mark Toste

Alright honey

Name: Alaba Tolulope
Address: 16 alaba Street
City: Oworoshoki
State: Lagos
Zip Code: 23401
Country: Nigeria
Telephone Number: 08180494431
Email: alabatolulope7@gmail.com

Mark Toste

Account Name: Desmond B.
Account Number: 46600548XXXX
Routing Number: 011000138
Bank Name: Bank of America
Swift Code: BOFAUS3N
Bank Address: South Bay Boston, Massachusetts

I love you

Phone:
+2348180494431
Number billable as mobile number
Country or destination Nigeria
City or exchange location
Original network provider* Emerging Markets Telecommunication Services Ltd (Etisalat)

[Big Al]

From another screenshot:

Mark Toste

Susan J.
RT: 111000614
ACCT: 36209XXXX
Address: Dallas , Texas, 75243
Bank: Chase Bank

And send me the confirmation code as soon as you transfer the money ok

[Big Al]

How can I help you?


Abraham William Cartu, CPA
Cartu Financial Management Group
703 111 S Tejon St Suite 466 Colorado Springs, CO 80903
Tel: 720-386-7325
Email: abraham@cartufinanceservice.com

Header:

Delivered-To:
Received: by 2002:ac8:26b3:0:0:0:0:0 with SMTP id 48csp1942568qto;
Mon, 7 Oct 2019 20:41:35 -0700 (PDT)
X-Received: by 2002:a5e:8c15:: with SMTP id n21mr12303216ioj.246.1570506095277;
Mon, 07 Oct 2019 20:41:35 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1570506095; cv=none;
d=google.com; s=arc-20160816;
b=Y/jvq0/Zp+6CWjdWR6A3IUYCk0O4YhWT0+SHnh3iP0b6MqcdNOv3geV70vl+WNQRBA
OrlMG4YC8Onu9jUHBjArC3WTVm3VSLvxICIRlD2721GD5BjDZpEqZ93Uv9v6zP83ufeM
tofGVlwtLY5XPMb7wn9ALWh1dPcYbj/VcAPqeDlqp1fPQMlj/EdPPUQvrZE7aiFNuXlP
a0ob50Rjc0PufTPyDd8gxKs0bY7gEyl6n6dU+zZxf5wUIN5nnwqwX1+tSX9dkmO/H3ZG
iTn8kQNtvVaRyT9E8xpeU2fYiroZCHSWw4WoFo4SYN41ql58wANJnAHfWtWav+/f2XtY
5u+g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:dkim-signature;
bh=1akKkWclyDt7iMgCJwPAVS4diLeMzEuRKRn1D3NMejY=;
b=CC4IH9ghPSb9x+J4iv7S27UhXB8XJO8+o1/qxo04htz9AfbStg+75PHA7SxA/FO38B
3aFaIMD7ngCa141eQbzTkY+TAAmngIM5GLc6xBOP4zajjqLxM7+dz1Ci+4pUtBEirHFM
ERAJWpfybJJN0J7Mr3oa/le6fbGCs5DVorllZJi9sIavRj0c4uMU08YlHclWlr3NJLAK
fGkuCCWy8JCT22GVXjq7hOlzegoIe1vsys2jVVVyx9W84Ah6fKyOX0qfbNNgZlu6kYjs
5A5dJDduPKdc3Fuyal/mm3MGC9U+1i0CDESsg74bU5wdwtwnFBU2q5Hqw5ozPjvuHZZZ
l3dw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@cartufinanceservice.com header.s=google header.b=L9PBBUOP;
spf=pass (google.com: domain of abraham@cartufinanceservice.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=abraham@cartufinanceservice.com
Return-Path: <abraham@cartufinanceservice.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
by mx.google.com with SMTPS id i126sor9988183iof.37.2019.10.07.20.41.34
for < >
(Google Transport Security);
Mon, 07 Oct 2019 20:41:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of abraham@cartufinanceservice.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
dkim=pass header.i=@cartufinanceservice.com header.s=google header.b=L9PBBUOP;
spf=pass (google.com: domain of abraham@cartufinanceservice.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=abraham@cartufinanceservice.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=cartufinanceservice.com; s=google;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=1akKkWclyDt7iMgCJwPAVS4diLeMzEuRKRn1D3NMejY=;
b=L9PBBUOPs51F8pEWfzVzZwr7Dr8jC3+RplRJZPMpizp/deCoHAx+joGK58icEMOema
H9tuNNEP4rB/YIpZRTT/ne61F+VT0artiT/NJZCGHi3kyI4QG7a8Vk66k8iVSjmQESU7
0KgemY6hY8+sF9ggr5HKZVhHwwLK+1HLU7xggnYzrp1XXa8BUFkNwF5U2tbsrEM0a7Wj
gBkKqSONckc4uYikHh2dL4gcMurn94pe6w5Dl13pT6tv1i1BHbYo6oBZIMgkUkrOEmuT
nP88KwA5ncTz1r/JuVilSVzl8G5T8PLPG+/i1c3i2CrszIQ0CfhAhZJa9+na6E/CxevU
sTQw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=1akKkWclyDt7iMgCJwPAVS4diLeMzEuRKRn1D3NMejY=;
b=krqqjNpN0iIz/AddRyIlsqO0z51xpHLSfZv48WMKnnpsb0EG6ELY6KOWmZpxFZgH68
yh1uKgLC1KgcmNxEGTJwzL2tszZh9fGbldJ7k93cat8swHyOkZ4BqcOOcnyUuf2EEjVQ
CilkMVU3tuBXX5wyOLJ5QAcYbnlkb5xlm4k2zZ8mfYkW884i839mD4ESSojp3TWIVZSF
xfcI1qe8P74wms5Bzdy36ZlNeNrfbK3v6JvVpu4wRMm/83lOehrsjDSTiocEmu9h9N4M
lZkSoad7Y3GCB+IgTonndzrvDi7p5fvE9d8Lr3i13Ouulncxq4239T4ECtBjIxd4BMUW
Fyug==
X-Gm-Message-State: APjAAAW1e9E0gXmSP+m4vmM8FnKsD3Vl+WaJdmm+YaDyUKOc11Ly0Izy AAIYvxxwGFamq2uDAVv1ytRRULQOK+zC8ES9f2/VCdAPbLQ=
X-Google-Smtp-Source: APXvYqylku0IdkJnKdMW7n/3qp7bzpVNp1yytqbQmg/RO7OqoHE7c/YqPaeclM+Lr1GxU8xu5vqk+ejV22FchHigvMA=
X-Received: by 2002:a5d:8541:: with SMTP id b1mr28083089ios.134.1570506094483; Mon, 07 Oct 2019 20:41:34 -0700 (PDT)
MIME-Version: 1.0
References: <CA+amEB+30Yu6=_cE3-cQSP8Ez86ZysoBGjXA3xDR9u9c5XhOEg@mail.gmail.com>
In-Reply-To: <CA+amEB+30Yu6=_cE3-cQSP8Ez86ZysoBGjXA3xDR9u9c5XhOEg@mail.gmail.com>
From: Bill Cartu <abraham@cartufinanceservice.com>
Date: Mon, 7 Oct 2019
Message-ID: <CAFJgcB7Rvmw+8wmcF2J--GEn2Q0AK2sHDfLQ5N5QBoiK4cpP3Q@mail.gmail.com>
Subject: Re: Dear Sir...
To:
Content-Type: multipart/alternative; boundary="000000000000e1308f05945df150"

--000000000000e1308f05945df150
Content-Type: text/plain; charset="UTF-8

Tel: +17203867325
Number billable as geographic number
Country or destination United States
City or exchange location Georgetown, CO
Original network provider* Bandwidth.com Clec, Llc - Co

[Big Al]

tell mark to reach me
Abraham William Cartu, CPA
Cartu Financial Management Group
703 111 S Tejon St Suite 466 Colorado Springs, CO 80903
Tel: 720-386-7325
Email: abraham@cartufinanceservice.com

[robo]

I was contacted by Bill Cartu and he had a check sent to me. How does the scam work? Should i report to someone? He is waiting for me to deposit.

[Big Al]

The check will be fake. Do not try to deposit it. Write in Bold lettering "FAKE" on the check. Then take it and the envelope it came in to the police and file a report.

The scammer is asking you to deposit the check. Then forward money from the check to him or to someone else. If you send the money it will be gone when the check bounces in a week, or Month, Etc...

The bank will come back to you to pay any of the money you spent from the check or forwarded to the scammer.

[Big Al]

A new found addition from a Survivor:

From: Bill Cartu <abraham@cartufinanceservice.com>
Date: Fri, Jul 5, 2019
Subject: Re: Regarding Mr. Mark Toste
To:


Dear ,

How are you doing today?

I was told by Mark Toste to contact you regarding our outstanding balance. We are making modalities to issue out the payment in the next couple of days, however in other for us to do that we will need the following information so we can issue out the payment correctly.

Please fill out the information below.

Name to be on the Cheque (If it is through your company, please advise also)........
Your postal address as we will send the financial instrument through to you..........
Cell (Let me know when best to reach you on phone).......

I might not be able to make all the payment at once so let me know how much was your highest check deposit amount $........ (I will be sending the first installment within this range) And the name of the bank you intend to deposit the check so that I can pre-instruct my bank in other not to have any hold placed on it.

As soon as I receive these information, I will forward it to the account department to issue out the payment.

Regards,
Abraham William Cartu, CPA
Cartu Financial Management Group
511 S 29th St. Colorado Springs, CO 80904
Tel: 720-623-4592
Cell: 718-806-9357
Email: abraham@cartufinanceservice.com

Phones:
+17206234592
Number billable as geographic number
Country or destination United States
City or exchange location Denver, CO
Original network provider* Neutral Tandem-colorado, Llc - Co

+17188069357
Number billable as geographic number
Country or destination United States
City or exchange location New York City, NY
Original network provider* Level 3 Telecom Of New York, Lp - Ny