The Rolex Forums   The Rolex Watch

ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX


Go Back   Rolex Forums - Rolex Watch Forum > Classifieds > WatchOut!!!

Reply
 
Thread Tools Display Modes
Old 14 February 2019, 09:51 PM   #1
Jones.nl
"TRF" Member
 
Join Date: Jan 2018
Location: Rolex planet
Watch: Sub
Posts: 106
Almost got scammed by an AD (hacker)

Hi Guys,

Someone with the same experience? Short story

In the summer of 2018 I got an offer for a Rolex Pepsi (brand new) from an AD in East-Europe, after inquiry to this watch. The offer was a brand new Pepsi for 8.550 – just the list price. It was a strange e-mail without the details from the AD below in the e-mail, but the sender used the original e-mail adress from the Boutique. Strange… that were my thoughts.

The sender of the e-mail told me I can reserve the watch by paying the whole deposit ad 8.550 euro. I asked for an inovice and received it immediately, but the invoice was in GBP not in EURO , my thoughs were WHY??? I had a bad feeling on the situation, and there was just one solution. I called the AD and asked for the guy who’s sending me all the e-mails. Got the guy on the phone and I explained him the situation of the Pepsi and he told me I never sent you an e-mail regarding the Pepsi, the watch is not in stock. Huh, was my respons and told the guy I got several e-mails from the AD e-mail. I have forwarded the mails to the AD guy and he told me that the e-mail is correct but never sent by the AD. When he was looking in the inbox there were no e-mails from me.

To make a long story short. The AD has been hacked by a hacker and he was sending all the e-mails to me and deleted all the e-mails from the inbox. So guys, please watch out with paying a deposit to a strange AD. Lucky for me, I paid nothing. Just a warning for you guys

See below for the mails and the fake invoice
Attached Images
File Type: jpg eerste mail.JPG (17.1 KB, 657 views)
File Type: jpg mail 2.JPG (22.0 KB, 656 views)
File Type: jpg mail 3.JPG (23.3 KB, 650 views)
File Type: jpg mail 4.JPG (22.4 KB, 651 views)
File Type: jpg mail dealer 3.JPG (22.5 KB, 652 views)
File Type: jpg factuur 2.JPG (50.4 KB, 644 views)
Jones.nl is offline   Reply With Quote
Old 14 February 2019, 09:56 PM   #2
r6tanz
"TRF" Member
 
Join Date: Jan 2013
Location: NYC
Posts: 40
Another red flag is the AD naming it a Pepsi on the invoice. Good thing you called to confirm
r6tanz is offline   Reply With Quote
Old 14 February 2019, 10:13 PM   #3
Chiboy
"TRF" Member
 
Chiboy's Avatar
 
Join Date: Aug 2016
Location: Chicago
Watch: Daytona
Posts: 5,380
There are misspellings almost everywhere, but that's still more deceptive than most. Good for you for calling to confirm.

I imagine this will get moved to Watch Out section.
__________________
Datejust w/black Tapestry dial (1985) / Daytona (2016)
Chiboy is offline   Reply With Quote
Old 14 February 2019, 10:44 PM   #4
jrs146
"TRF" Member
 
jrs146's Avatar
 
Join Date: Aug 2011
Real Name: Josh
Location: Lost in time
Watch: Me Nae Nae
Posts: 9,821
Man these scammers are sneaky. Good catch. I agree no AD would put Pepsi on the invoice.


Sent from my iPhone using Tapatalk
__________________
"Sometimes the songs that we hear are just songs of our own."
-Jerome J. Garcia, Robert C. Hunter
jrs146 is offline   Reply With Quote
Old 15 February 2019, 05:39 AM   #5
htbilgic
"TRF" Member
 
htbilgic's Avatar
 
Join Date: May 2014
Location: Chicago
Watch: Doxa Pro 300 NoT
Posts: 535
Jeez. This is a scary one.
htbilgic is offline   Reply With Quote
Old 15 February 2019, 06:15 AM   #6
visualplane
"TRF" Member
 
visualplane's Avatar
 
Join Date: Jun 2015
Location: New York, NY
Watch: 5513
Posts: 1,169
At this point i'm going to ask for a phone call, and an email from a work email address if possible.
visualplane is offline   Reply With Quote
Old 15 February 2019, 12:06 PM   #7
TurboWatch
"TRF" Member
 
Join Date: Jun 2009
Location: NorCal
Posts: 1,641
The scammer doesn't really hack the AD's email box.

Any "hacker' who's worth a damn can write a quick utility to send the email using smtp. He can then enter any FROM email address ... this is called email spoofing.

Got to inspect the email header ...
TurboWatch is offline   Reply With Quote
Old 15 February 2019, 12:32 PM   #8
crowncollection
"TRF" Member
 
crowncollection's Avatar
 
Join Date: Jan 2011
Real Name: David
Location: australia
Posts: 20,157
Got to be careful theses days I have received emails from friends they never sent offering all sorts of opportunities


Sent from my iPhone using Tapatalk
__________________
watches many
crowncollection is offline   Reply With Quote
Old 16 February 2019, 05:53 AM   #9
Fredrik
2024 Pledge Member
 
Fredrik's Avatar
 
Join Date: Oct 2011
Location: Sweden
Watch: 1680
Posts: 1,825
The "From" text field is as customizable in an email as in a paper mail. You can write whatever you want there.

The actual email address is conveniently hidden by a lot of email clients unless you turn on settings like "show all headers".

The AD was most likely never hacked.
Fredrik is offline   Reply With Quote
Old 16 February 2019, 06:40 AM   #10
77T
2024 ROLEX DATEJUST41 Pledge Member
 
77T's Avatar
 
Join Date: Dec 2010
Real Name: PaulG
Location: Georgia
Posts: 40,691
Since you have the emails, will you display the headers please? You can redact your email addy but the header helps us help you.


Sent from my iPhone using Tapatalk Pro
__________________


Does anyone really know what time it is?
77T is offline   Reply With Quote
Old 16 February 2019, 07:54 PM   #11
tyler1980
"TRF" Member
 
tyler1980's Avatar
 
Join Date: Apr 2015
Location: Houston
Posts: 17,622
Quote:
Originally Posted by Fredrik View Post
The "From" text field is as customizable in an email as in a paper mail. You can write whatever you want there.

The actual email address is conveniently hidden by a lot of email clients unless you turn on settings like "show all headers".

The AD was most likely never hacked.
indeed... like this
Attached Images
File Type: jpg Screen Shot 2019-02-16 at 9.52.43 AM.jpg (28.9 KB, 212 views)
__________________
Instagram: tyler.watches
current collection: Patek 5164A, Patek 5524G, Rolex Platinum Daytona 116506, Rolex Sea Dweller 43 126600, Rolex GMT II 116710LN, AP 15400ST (silver), Panerai 913, Omega Speedmaster moonwatch, Tudor Black Bay (Harrods Edition)
tyler1980 is offline   Reply With Quote
Old 16 February 2019, 11:15 PM   #12
Gtecko
"TRF" Member
 
Join Date: Apr 2017
Location: Halifax
Posts: 518
the fact the email is so poorly written, full of punctuation mistake ... I mean who writes from an AD "i" instead of I ...
Gtecko is offline   Reply With Quote
Old 16 February 2019, 11:37 PM   #13
DaytonaSubmariner
"TRF" Member
 
DaytonaSubmariner's Avatar
 
Join Date: Oct 2013
Real Name: Rob
Location: US
Watch: Rolex Daytona
Posts: 233
Yikes! Glad my AD has my cell number and we always talk prior to anything being done.
DaytonaSubmariner is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Coronet

Takuya Watches

Bobs Watches

Asset Appeal

My Watch LLC

OCWatches

DavidSW Watches


*Banners Of The Month*
This space is provided to horological resources.





Copyright ©2004-2024, The Rolex Forums. All Rights Reserved.

ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

Rolex is a registered trademark of ROLEX USA. The Rolex Forums is not affiliated with ROLEX USA in any way.