.

2003

2004

Note on Corporate Name-Jacking

Contact Names Used in Scam

 

World Privacy Forum Job Scam Report Pt. 1

Timeline: The Evolution of an Online Job Scam

 

7/8/04

This timeline represents a longitudinal study of a single job scam as it evolved from July 16, 2003 to July 7, 2004. The scam is a "payment forwarding" scam. Con artists tricked jobseekers by using a fake job ad asking for "accountants," "agents," or "finance managers." The job was fake, but the scam was real -- victims were tricked into sending personal account numbers to the con artists so paychecks could be "direct deposited," then victims were fooled into transferring stolen money, which is a criminal offense.

Scam artists stay ahead of job sites by changing the company names the jobs are posted under. Researchers tied the changing company names together by applying to the jobs and comparing employment contracts, phone numbers, unique linguistic patterns in the ads, email correspondence from victims, and other items.

When the scam was discovered, researchers notified all affected companies, which then took down the fraudulent jobs. The same job ads using the known fraudulent company names were reposted in some cases even after the ads had been taken down one or more times. As of July 7, 2004 this scam was still in operation.

The timeline is set up as follows:

Legend:

Date

COMPANY NAME posted a job at (job site name) -- city job posted at: file download

The company names that the job ad was posted under are in bold. Names researchers have linked to this scam include Unk Electronics, Macrocommerce Intersales, Nanjing Panada Electronics, Omega Inc., BestElectrics, and Antares Electronics. Cities where the job were posted appear next to the name of the job site that posted the ad. Victim events are marked in red. Each posting has some form of corresponding documentation. Listings containing a "PDF" link are those listings that have screen shots of the job listings and/or the job ad. To see the job ad, click on the PDF link and the file will download. If a job was reposted after it was known to be fraudulent, "job reposting" appears next to the date.

For the complete report and findings about this scam, please see http://www.worldprivacyforum.org/jobscamreportpt1.html.

 

2003

July 16

UNK Electronics job scam makes first known appearance at PickaJob - job listing PDF

September 17

UNK Electronics, Inc. job scam posted at JobSpider- New York.

job listing PDF

October 9

MACROCOMMERCE Intersales job posted at Careerspan.com — Dallas, New York, Sacramento

Full job ad PDF, Los Angeles; PDF.

Victim of UNK scam

Victim arrested, indicted for felony theft

November 11

MACROCOMMERCE posted at Preferredjobs.com - Atlanta; PDF.

November 18

UNK CareerBuilder - Dallas, Oregon; PDF

November 18

UNK posted at Chicago Tribune (via CareerBuilder) ; Unk Chicago Trib listing PDF.

November 18 (approx.)

MACROCOMMERCE posted at PickaJob.com - Phoenix, AZ; Phoenix PDF.

November 19

MACROCOMMERCE posted at CareerBuilder- San Francisco; PDF; New York, NY; PDF.

-Victim of Nanjing Panada Electronics

Limited harm.

-Victim of Nanjing Panada Electronics

Personal information stolen. Unknown consequences.

November 24

UNK posted at JobSpider - New York PDF. Jacksonville FL; PDF actual FL job ad ; PDF 2 of list; Houston Houston Job Ad PDF ; Nov. 24 JobSpider PDF ; Houston PDF 3.

MACROCOMMERCE posted at Jobspider - Cincinnati; PDF

-Victim of UNK

 

-Victim of Nanjing Panada Electronics

November 25

MACROCOMMERCE posted at CareerBuilder - Los Angeles; PDF.

November 30

MACROCOMMERCE posted at CareerBuilder - Cincinnati.Full job ad PDF; Miami PDF. 

-Victim of MACROCOMMERCE

December 1

MACROCOMMERCE posted at Preferred Jobs - Cleveland; PDF.

December 5

MACROCOMMERCE posted at CareerBuilder - Seattle PDF

December 10

WPF first learns of scam when it is contacted by Nick Corcodilos of Asktheheadhunter.com about the scam via a jobseeker tip-off.

December 11

WPF begins research on the scam. Finds MACROCOMMERCE job active at Jobvertise - Miami; PDF. PickaJob.com - Wash. D.C., Denver, San Francisco, Phoenix; PDF.   The WPF found active postings (already detailed in the timeline) at CareerBuilder, Job Spider, Jobvertise, and PreferredJobs.

WPF Notified CareerBuilder, Pickajob, JobSpider, Jobvertise, Preferred Jobs of job scam and requested it be taken down.

December 12

Publication of WPF Consumer Alert (Jobseekers warned of jobs from Macrocommerce Intersales, Unk Electronics.) Alert was posted to site, sent to media. Consumer alert: http://www.worldprivacyforum.org/consfraudalert1.html. At the time the alert was published, the WPF only knew of job postings between November 20 and December 11, 2003.

Mid- December

NANJING posted at Monster.com, Unk ad tried as Nanjing Panada Electronics (email, Monster job #19846633)

 

WPF notified by jobseeker of new scam name, Nanjing Panada Electronics. WPF Alert updated to include Nanjing Panada Electronics.

2004

January 4; job reposting of Macrocommerce

MACROCOMMERCE reposted at CareerBuilder - Portland Maine Maine Job ad PDF; PDF listing; Atlanta, Philadelphia, Minneapolis; PDF job reposting ; Job repostings on same page as news reports of fraud PDF.

-Victim, Jan. 6 from Maine, MACROCOMMERCE Ad

Bank account numbers stolen, SSN. CareerBuilder notified by jobseeker of job scam.

-Victim, fired from job due to victimization by MACROCOMMERCE job fraud

CareerBuilder notified by jobseeker of job scam.

January 8; job reposting of Macrocommerce

MACROCOMMERCE reposted at CareerBuilder -Minneapolis, Boca Raton, Kissimmee, Pompano Beach, Coral Springs, Miami Beach, Ft. Lauderdale, Lawrence, Massachusetts, Andover Massachusetts; PDF.

January 25; job reposting of Unk

UNK reposted at CareerBuilder - Kansas City; PDF.

January 26

Jobseeker email notifying World Privacy Forum of UNK ads exactly like MACROCOMMERCE showing up in Phoenix, AZ. (email)

February 1

ANTARES Antares Electronics, Inc. job ad makes first known appearance at CareerBuilder - Florida, Miami, Hollywood FL PDF

February 6

ANTARES posted at JobSpider - Salt Lake City PDF Miami, Cincinnati, Great Falls, Seattle PDF

February 12; job reposting of Unk

UNK reposted again at CareerBuilder - Baltimore; PDF; Atlanta, Maryland; PDF.

February 19; job reposting of Unk

UNK reposted again at Jobvertise - Huntington West VA; PDF; New Orleans; PDF.

March 10

ANTARES posted at MSN Careers- Ft. Lauderdale, Washington State; ANTARES posted at AOL Careerbuilder - Ft. Lauderdale, Philadelphia, Coral Springs PDF

ANTARES posted at CareerBuilder - Miami, Hollywood FL, Brementon, Yolo PDF

May 19

ANTARES posted at CareerBuilder - Seattle, Sacramento, Chicago, Detroit, Dallas, Orlando, Hollywood FL, Miami, Merrillville IN PDF

May 20

ANTARES posted at CareerBuilder - Philadelphia PDF

May 21

ANTARES posted at Jobvertise -- Detroit, Philadelphia, Chicago, Dallas, Sacramento, Seattle PDF

May 23

OMEGA Inc. posted at CareerBuilder -- Salem, OR PDF (also email) PDF Job listed as "Beta," contract comes back as "Omega Inc."

May 24

ANTARES posted at CareerBuilder - Sacramento, Philadelphia PDF, Seattle, Chicago, Dallas, Elgin, Newark PDF   | PDF

May 30

ANTARES posted at Jobvertise - Philadelphia PDF

June 2

WPF Notified of UNK victim awaiting trial.

June 10

ANTARES Jobvertise - Detroit PDF

June 14

ANTARES CollegeRecruiter.net - Dallas PDF

BESTELECTRICS posted at CareerBuilder - Miami, San Francisco, Atlanta PDF

June 15

ANTARES posted at Withinmiles.com - Texas PDF

ANTARES posted at Lookingforwork.com - Texas PDF listing only

June 16

ANTARES posted at CareerMag.com - Texas  PDF

June 16

BESTELECTRICS posted at Jobvertise -- New York City, San Francisco, Miami PDF

July 1

ANTARES posted at Lookingforwork.com - Texas PDF

ANTARES posted at CollegeRecuiter.com - Dallas PDF

July 3; job reposting of Macrocommerce

ANTARES found actively posted at Jobvertise PDF - Detroit, Philadelphia, Seattle, Sacramento PDF

BEST ELECTRONICS actively posted at Jobvertise PDF

MACROCOMMERCE actively posted at Jobvertise-powered site 206.221.233.36 - San Francisco, Indianapolis, Orlando, Dallas, Atlanta PDF

As of July 3 this scam was still operational. ANTARES Jobs were posted on Preferredjobs.com in Washington DC, Los Angeles, San Francisco, San Diego, Chicago, and Dallas. Other known job sites posting the ANTARES job ad include: AOL.com ,aftercollege.com , australiajobsite.com ,canadajobsite.com , careerspan.com, collegegrad.com (College Grad Job Hunter, Preferredjobs.com, Retiredbrains.com. Other known sites that posted Unk Electronics jobs during this time frame: dallasjobsite.com, jobs.pearlhaven.com, baltimore.4jobs.com, tutorgig.com.

Known Contact Names used in Scam

Chan Hoi Wo:  chan.hoi.wo@npehk.com (NANJING)

Wong Po Hang:    Wong.Po.Hang@npehk.com (NANJING)

James Brownn (MACROCOMMERCE)

Thomas Becker:  managerineurope@yahoo.com (MACROCOMMERCE)

Thomas Becker   europeanmanagereu@yahoo.com MACROCOMMERCE

europeanagentseu@yahoo.com (MACROCOMMERCE)

europetraders2003@juno.com (MACROCOMMERCE)

futurebusiness200@yahoo.com  (MACROCOMMERCE)

Ral Fernando (UNK)

Andrew Stevenson partner@antaresinc.org  (ANTARES)

Business_italyeu@yahoo.com (ANTARES)

Italyagenteu@yahoo.com (ANTARES)

Helmud Luigi omegaincitaly@yahoo.com (OMEGA Inc. )

Note on Corporate Name-jacking

*Please note that Antares Electronics Ltd. is the name a legitimate company, as is Antares Technology Solutions. There may be other legitimate companies using the name "Antares." It is an unfortunate fact of scams that the scammers steal company names or names very close to legitimate companies in order to appear "safe." Additionally, Nanjing Panda is a legitimate company. Note that the scam company name was spelled very similarly to the real company name: Nanjing Panada is the scam spelling— there is an "a" added into the name to confuse job seekers. At the time this report was published, Monster.com listed jobs from the real Antares employers. As of the last date checked, July 7, 2004, these jobs are not from fraudulent companies.