We all get spam texts with fake unintended wrong address messages. They try to strike of a conversation to then work toward some sort of financial extraction from the victim. Sometimes I reply to them for fun to see what they are going to try. Always oddly worded, clearly happening from other parts of the world. Part of the model is that the strangeness of the wording actually helps find people that are most vulnerable or gullible….kind of a qualification of sorts. If you bite, you are likely a good naïve target.
This week though, I got an actual email from someone that I was vaguely aware of in my local interactions……I don’t know them (Dave), but know that my email address is probably in their address book. It said:
From: xxxxxxx”at”rogers.com (a real address)
Sent: February 2, 2023 8:14 a.m.
Subject: fyi
Sorry to bother you, are you avaiIabIe on emaiI for a few minutes? Can't caII!
Regards
Dave xxxxxxxx
xxxxxxxxxxxxx Realty Inc.
It was clear this person’s email account was hacked because there is no reason possible that the person “Dave” would contact me this way. But it is his legit email account complete with his signature block for his real estate business. Sooooo, I decide for sport to just reply with a ??? (also just in case I am his last hope and he is stuck on the side of a cliff with or something and just happens to have chosen me who he does not know.)
On Thu, Feb 2, 2023 at 2:15 PM Chuck Tatham <chuck.tatham@gmail.com> wrote:
???
And I get this back within ten minutes.
From: xxxxxxx”at”gmail
Sent: February 2, 2023 9:39 a.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Thanks for the response, I am sorry for bothering you with this mail. I need to get a SEPHORA GIFT CARD for my friend's daughter who is diagnosed with Stage 3 metastasized breast cancer. She had lost both parents to the disease (COVID-19) It's her birthday, but I can't do this now because I'm currently away and the stores around here are out of stock. All my effort purchasing it online proved abortive. Can you purchase it from any store around you? I'll pay back as soon as I am back. Kindly let me know if you can handle this.
Await your soonest response.
Now, clearly there is (and I despise this expression) a lot to unpack here. I don’t know Dave, but I did see his picture in the original email (as most real estate agents are wont to do). And I’ll just say, he looks like a normal older Canadian white guy. But maybe he is so bereft with the situation he is trying to rectify, that his communication style is just off today? Ha. I like the “online proved abortive” line.
I know people that have been taken by these scams. Smart people….because they are coming from a known person and the email looks legit, its easy to get pulled in (especially if it is a boss at work or something) but they usually ask for something more mainstream like a bunch of apple gift cards etc. But this one is just so silly, I had to engage to see where it might go. (the scam is you do what they ask, they get the card code and pin, and can redeem and you never hear from them again)
Note the time stamps are off….likely because they are originating in a very different time zone like India or Russia.
Anyway, he clearly needs to cheer up his deceased friend’s daughter with the very specific gift of SEPHORA GIFT CARDS. She has stage 3 cancer and both parents taken by Covid….what more could someone in that situation want than some shitty mall store makeup??
Taking on the persona of the vulnerable, I need to be more confused than I normally am mid week.
On Thu, Feb 2, 2023 at 3:10 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
I don't understand
(Side note on how this is actually going down, the email address the first email came from was the real Dave account. Once I replied, the rest came from a gmail account that was close to his real name (a single letter in his name being changed so you don’t notice it)….so they send to his address book from the hacked account, then spoof his name a fresh gmail account for the continued discussion …….so it continues to look like it came from that person….but even if Dave realizes he has been hacked and changes his password on the original account they have a new account to continue the interaction with their mark (me) The point is to just get the address of people known to “Dave” so they can masquerade as Dave.
From: xxxxxxx”at”gmail (switched to the gmail but who would notice, Still says from Dave xxxxxx
Sent: February 2, 2023 9:16 a.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
I need your help
I must help Dave!!! but I’m confused, need more specific direction!!
On Thu, Feb 2, 2023 at 3:16 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
Give me step by step instructions. I don't know how
He is happy to oblige because he has a live one!!
From: xxxxxxx”at”gmail
Sent: February 2, 2023 9:20 a.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Thank you very much. I really appreciate your kind gestures. Sephora gift cards are available at all grocery stores.(Walmart, Drug Store or Gas station). Total amount needed is $300 ($100 denominations X3).I need you to scratch the back of the cards carefully to reveal the pin, then take a photo of the back of the card showing the pin and have it emailed to me. I promise to refund your cash.
Well this is pretty specific and descriptive! But it seems kind of a pain to find Sephora cards. Soooo
On Thu, Feb 2, 2023 at 3:24 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
Why not shoppers drug Mart gift cards instead? Easier.
Not what he wants…
From: xxxxxxx”at”gmail
Sent: February 2, 2023 9:39 a.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
It Sephora gift card that is needed
He should have to work for it…
On Thu, Feb 2, 2023 at 4:02 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
Never seen them in stores.
He is impatient
From: xxxxxxx”at”gmail
Sent: February 2, 2023 10:12 a.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Are you at the store now ??
Sephora gift card are sold at every store and filling station
Figure I’ll let him think its on…
On Thu, Feb 2, 2023 at 5:05 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
Going soon.
Then I wait…
From: xxxxxxx”at”gmail
Sent: February 2, 2023 12:07 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Hello Chuck
That’s polite….
On Thu, Feb 2, 2023 at 7:07 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
Hello
Wait.
From: xxxxxxx”at”gmail
Sent: February 2, 2023 1:08 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Any luck ?
Not really yet but I am trying for him
On Thu, Feb 2, 2023 at 7:09 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
Traffic!!
From: xxxxxxx”at”gmail
Sent: February 2, 2023 1:51 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Have you gotten to the store?
Want him to feel I’m working for him, and hook set
On Thu, Feb 2, 2023 at 8:16 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
None at that store. Will make my way to another.
Just letting time pass
Sent: February 2, 2023 1:51 p.m.
To: chuck.tatham@gmail.com
Subject: Re: fyi
Have you gotten to the store?
silence
From: xxxxxxx”at”gmail
Sent: February 2, 2023 4:00 p.m.
To: chuck.tatham@gmail.com
Subject: Re: fyi
You there??
Edge of his seat now…..
From: xxxxxxx”at”gmail
Sent: February 2, 2023 4:05 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
You there??
Little let down for him
On Thu, Feb 2, 2023 at 10:07 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
I ran out of time. Need to make my family dinner. Probably too late for your urgent requirements now.
Looking for assurance
From: xxxxxxx”at”gmail
Sent: February 2, 2023 4:08 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Okay
What other card do they have in the store cause I really need the card to make her happy
From: xxxxxxx”at”gmail
Sent: February 2, 2023 4:15 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Can you help me with this?
I can’t be running around virtually looking for cards all this time….sheesh!
On Thu, Feb 2, 2023 at 10:16 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
I am back home for now.
From: xxxxxxx”at”gmail
Sent: February 2, 2023 4:44 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
You still gonna help me out today ??
On Thu, Feb 2, 2023 at 10:55 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
It will be tomorrow before I can go out again.
Thu, Feb 2, 4:56 PM (
Okay, what time will it be tomorrow
More assurance questions
Thu, Feb 2, 5:23 PM (
Do you promise that you gonna help me out tomorrow ?
I go quiet for the night
First email in my inbox in the morning
On Fri, Feb 3, 2023 at 9:02 AM Dave Xxxxxxx<xxxxxxx”at”gmail > wrote:
Good Morning Chuck
How was your night?
Well that’s pleasant. I think we need to see if he can act like Dave more. I mean he is Dave right? Nothing about the card quest, a question about the weather (cold snap)
On Fri, Feb 3, 2023 at 3:15 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
fine, can you believe the temperature today?? incredible.
On Fri, Feb 3, 2023 at 9:16 AM Dave Xxxxxxx<xxxxxxx”at”gmail > wrote:
What is the temperature today ?
How could Dave not know about the weather in Ontario??
On Fri, Feb 3, 2023 at 3:18 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
Dave? Are you crazy? all over the news! ha ha!
I’m calling him Dave to show I am hook line and sinker
On Fri, Feb 3, 2023 at 9:16 AM
Just kidding
I thought he might leave it at that but he pulls this out! Must have known his target was in Canada…not bad!!
On Fri, Feb 3, 2023 at 9:19 AM
It is extreme cold weather warning
I left it for the morning
On Fri, Feb 3, 2023 at 11:50 AM Dave Xxxxxxx<xxxxxxx”at”gmail > wrote:
Any luck Chuck?
Damn this cold weather!!
On Fri, Feb 3, 2023 at 6:12 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
Having difficulty with starting my car in this cold weather, but they say it is going to warm up quickly today.
More disappointment but a sliver of hope
On Fri, Feb 3, 2023 at 1:08 PM Dave Xxxxxxx<xxxxxxx”at”gmail > wrote:
Any luck yet ?
Figure I will take him further….quick google image search and I have a card!
On Fri, Feb 3, 2023 at 7:14 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
I found one!
From: xxxxxxx”at”gmail
Sent: February 3, 2023 1:30 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Okay. Can you scratch the card and reveal the pin and send it to me ?
Hmmmm….. this happens to the best of us, even though the instructions said to “carefully scratch”
On Fri, Feb 3, 2023 at 7:54 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
I think the cold weather messed it up! Can this still work?
From: xxxxxxx”at”gmail
Sent: February 3, 2023 2:36 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Why aren’t you sending the card ?
Not sure why he asked again
On Fri, Feb 3, 2023 at 9:17 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
I did!
From: xxxxxxx”at”gmail
Sent: February 3, 2023 3:20 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
And much did you get ?
He had told me to get 3 cards.
On Fri, Feb 3, 2023 at 9:28 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
And much did I get?? This is starting to sound strange. Doesn't sound like David. I will text you on your phone number when I find it.
I figure I will make him feel like I think something is up….and say I am going to text “Dave” to confirm this is real….because this doesn’t sound like the David I know!
On Fri, Feb 3, 2023 at 3:30 PM Dave Xxxxxxx<xxxxxxx”at”gmail > wrote:
I’m really sorry
I want you to know that I can’t text on my phone number I can only email
Surprise
I reply that I am checking with Dave’s sister
On Fri, Feb 3, 2023 at 9:46 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
I guess thats a problem then. I will confirm with your sister.
He really wants that damn code!
Fri, Feb 3, 5:57 PM (14 hours ago)
to me
So can you send me the full picture of the card ?
I go quiet
From: xxxxxxx”at”gmail
Sent: February 3, 2023 5:49 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
You there ??
Kathi had this suggestion which was fun!
On Fri, Feb 3, 2023 at 11:55 PM Chuck Tatham <chuck.tatham”at”gmail > wrote:
I am shocked! Dave's sister says he passed away suddenly last month! Wtf????
Ya ya, don’t bother me with facts that invalidate my scam
From: xxxxxxx”at”gmail
Sent: February 3, 2023 5:56 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
So can you send me the full picture of the card ?
But you can’t skip these important details
On Sat, Feb 4, 2023 at 12:08 AM Chuck Tatham <chuck.tatham”at”gmail > wrote:
If David died, how would he be sending these emails??
From: xxxxxxx”at”gmail
Sent: February 3, 2023 6:09 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Nope I’m not and if truly I am how do I have your email address?
huh? You are Dave and you are dead!
On Sat, Feb 4, 2023 at 12:12 AM Chuck Tatham <chuck.tatham”at”gmail > wrote:
You must be a hacker
He pushes on with his mission to give Sephora gift cards to a dying girl!!
From: xxxxxxx”at”gmail
Sent: February 3, 2023 6:15 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
Let both save the life of the poor dying girl laid on her deathbed
The power of Sephora!! I need to understand!!
On Sat, Feb 4, 2023 at 12:18 AM Chuck Tatham <chuck.tatham”at”gmail > wrote:
Sephora gift cards can save a life?
From: xxxxxxx”at”gmail
Sent: February 3, 2023 6:20 p.m.
To: chuck.tatham”at”gmail
Subject: Re: fyi
It her birthday if this isn’t given to her, she will be glad and feel more better that at least someone still care about her
And this is where it all ended!!
I got one today:
Thanks for the response, I need to get an Apple gift card for my friend's daughter who is diagnosed with Stage 3 metastasized breast cancer, She had lost both parents to the disease (COVID-19. It's her birthday, but I can't do this now, the stores around here are out of stock and all my effort purchasing it online proved abortive. I was wondering if you could help me get it from any store around you ? and I'll reimburse you. kindly let me know if you can handle this so i can tell you the amount and how to get it to me.
I also toyed with this scammer!
A very different "Chuck's Stuff" but possibly the funniest yet. That poor girl. To think, all she needed was $300 of Sephora gifts cards to survive.