Scam / Ripped Off - Some help

[Adam Kindness]

Not via this site, but I've been scammed buying a MTB via PinkBike. Long and short of it is my own fault for being too trusting... and not doing the checks before sending money... and bank transferring the cash! £900 so not a massive amount but enough to piss me off.

The advert - http://www.pinkbike.com/buysell/2124377/

Friday 10th Feb - After a few msgs and then emails I sent the money and he promptly fell off the face of the earth.

He gave his full name and address, but these are prob not real.

Joseph / Joe Mitchinson - [e-mail]

293 ormskirk road
Wn59dn
Greater Manchester

His bank account details

Barclays Bank

Account number 90639389
Sort code 20 25 95

I also have some headers from email but nothing pointing to aliases.

• ********************************************************************

I've since done a bit of digging on the bike (should have done this first eh!) and spoke to the guy who built it, and got the contact details for the owner who had not long sold it. Described the advert and low and behold it sounds like someone has just lifted the previous owners advert.

Can anyone help trace this clown? I'm going to speak to the bank to try and retract the payment but not holding out much hope of that. Can anyone trace the account holders name/details from the acc/sort code?

Involving the police - I guess i'll need to really, but any advice on who/where? I'm out in NZ just now so cant nip in past the local station LOL

pic of the add in case it disapears.

[Adam Kindness]

found this on ebay

http://www.ebay.co.uk/itm/Santa-Cruz-Heckler-650b-...

[Adam Kindness]

I'm working out in NZ just now so viewing wasnt practical. I wanted a bike for when i arrived... my last one was stolen!



Cant make this st up LOL

I buy plenty unseen. Dont always have the time to look at everything. Ad seemed legit, and price not far off what i;d have considered ok.


Email headers (i'm the trackscotland accout, and IP in singapore i think)

Delivered-To: [e-mail]
Received: by 10.103.151.86 with SMTP id z83csp387284vsd;
Fri, 10 Feb 2017 01:26:58 -0800 (PST)
X-Received: by 10.55.149.6 with SMTP id x6mr7135384qkd.55.1486718817971;
Fri, 10 Feb 2017 01:26:57 -0800 (PST)
Return-Path: <[e-mail]>
Received: from leaf101.mfilter.dimenoc.com (banana.mfilter.dimenoc.com. [72.29.89.6])
by mx.google.com with ESMTPS id t48si834591qtb.81.2017.02.10.01.26.57
for <[e-mail]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 10 Feb 2017 01:26:57 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [e-mail] does not designate 72.29.89.6 as permitted sender) client-ip=72.29.89.6;
Authentication-Results: mx.google.com;
dkim=pass header.i=@outlook.com;
spf=softfail (google.com: domain of transitioning [e-mail] does not designate 72.29.89.6 as permitted sender) smtp.mailfrom=[e-mail];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=outlook.com
Received: from localhost (localhost [127.0.0.1]) by leaf101.mfilter.dimenoc.com (Postfix) with ESMTP id DC57F2266E0 for <[e-mail]>; Fri, 10 Feb 2017 04:26:54 -0500 (EST)
X-Virus-Scanned: amavisd-new at leaf.mfilter.dimenoc.com
Received: from leaf101.mfilter.dimenoc.com ([127.0.0.1]) by localhost (leaf101.mfilter.dimenoc.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25Cb7m_SJbiI for <[e-mail]>; Fri, 10 Feb 2017 04:26:54 -0500 (EST)
Received: from sh156.surpasshosting.com (sh156.surpasshosting.com [72.29.66.18]) by leaf101.mfilter.dimenoc.com (Postfix) with ESMTP for <[e-mail]>; Fri, 10 Feb 2017 04:26:54 -0500 (EST)
Received: from blu004-omc3s13.hotmail.com ([65.55.116.88]:54586) by sh156.surpasshosting.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256) (Exim 4.87) (envelope-from <[e-mail]>) id 1cc7Th-00085T-Mg for [e-mail]; Fri, 10 Feb 2017 04:26:53 -0500
Received: from EUR02-VE1-obe.outbound.protection.outlook.com ([65.55.116.72]) by BLU004-OMC3S13.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Fri, 10 Feb 2017 01:26:53 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=TW2znw2q4p55WCzhprky00N36UJOhr1NT3FsBdVvIS0=; b=Ad9RMr9MdoGq4x9YXiZe2tzE8jgIkhPiwSXcfZE00jRdnZQEwpG3tk9o3Vz3d90Sot2Fv/lfuxemttId6ydfeLm0CjOhnxm/mBcfQ8F6Sb28aqbR5TSpfmOqxbjkoVq+VaXlsWLjvgbluClk3cHtcnE8AilqXOT/W3jcnIQnxFRfGqz0Yv5XvJZM4tP3YYvqJO7SRFwQ9HiKUftSgmX2yuykQd/Wtr3Ziw2k5NTqKf+86662Dx5ra7XKnSUTUYaRh70aszh2Vh3sY2PKixTYml140yZOivio3q7ikgnjrX9daWixGcFts6C+iv+qPgnhldgR5usQZ5eVuXQb4/pL/Q==
Received: from HE1EUR02FT034.eop-EUR02.prod.protection.outlook.com (10.152.10.52) by HE1EUR02HT094.eop-EUR02.prod.protection.outlook.com (10.152.11.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.888.7; Fri, 10 Feb 2017 09:26:51 +0000
Received: from AM5PR10MB0516.EURPRD10.PROD.OUTLOOK.COM (10.152.10.58) by HE1EUR02FT034.mail.protection.outlook.com (10.152.10.67) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.904.16 via Frontend Transport; Fri, 10 Feb 2017 09:26:51 +0000
Received: from AM5PR10MB0516.EURPRD10.PROD.OUTLOOK.COM ([10.167.220.148]) by AM5PR10MB0516.EURPRD10.PROD.OUTLOOK.COM ([10.167.220.148]) with mapi id 15.01.0888.028; Fri, 10 Feb 2017 09:26:51 +0000
From: joe mitchinson <[e-mail]>
To: "[e-mail]" <[e-mail]>

[Adam Kindness]

sadly, no.

He replied with his contact details name/address and I missed the glaring omission of a phone number before asking the wife to make the payment.

He's actually just been back in touch on pinkbike to say that the bike will be with me today. I'm calling BS after speaking with the orig builder of bike and previous owner.

I've asked again for a number.. and for tracking details for the 5th time.

[Adam Kindness]

Yup, the orig/first owner of the bike was in Rochdale, and thats his advert.

[Adam Kindness]

essIII said:

Except if this is a scam, the fella who has the bike will have no idea that all this is going on. He'll have bought the bike from a genuine advert some time ago (that eBay auction that adam shared?), and now someone else is reusing that advert.

I have the new owners name (Alex ..... )... according the the orig owner/seller. I'm still waiting to hear back if that EBAY ad that I posted was the orig seller or another scam ad. If a scam it'll give a bit more info. Looking back on the EBAY user ID for the seller though it looks to be the orig sellers add.

[Adam Kindness]

Confirmation that the EBAY advert i linked is the ORIGINAL sale advert. The real one.

[Adam Kindness]

tried barclays fraud - 20mins on hold. Hung up....

RBS fraud - .... waiting

[Adam Kindness]

some info from admin on pinkbike

• **********************************************************

Hi Adam

I had no choice but to ban his account as he is still scamming others. I've also banned various other accounts under his IP. As you can see he's login in from various IPs. Here is the info:

Offline
Username: joemitch2011 UserId: 1274406
Email: [e-mail]
Last: 2017-02-15 05:56:02
Join: 2017-02-04 09:55:40
Login Count: 66
ip: 2.222.252.181
1 people from this ip
(joemitch2011,10 183421 )
Preston, H2, GB

---

Signed up from following IP -----

ip ipgeo count datetime log useragent
92.40.249.156 GB 1 2017-02-04 09:55:40 signup Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393

---

Logged in from following IPs -----

ip ipgeo count datetime log useragent
139.59.225.82 AU 1 2017-02-15 03:51:06 vialong Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
2.222.252.181 GB 6 2017-02-14 12:55:23 remember Mozilla/5.0 (iPad; CPU OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3
85.255.233.217 GB 1 2017-02-14 05:22:34 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.8.196.119 GB 2 2017-02-14 04:52:22 vialong Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.132.218.45 GB 1 2017-02-14 04:18:38 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
90.214.41.83 GB 10 2017-02-13 13:31:49 vialong Mozilla/5.0 (Linux; Android 6.0.1; SM-T580 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36
85.255.235.235 GB 2 2017-02-13 10:40:39 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.132.187.27 GB 1 2017-02-13 08:49:47 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.132.244.227 GB 9 2017-02-13 03:46:24 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G935F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
37.139.2.93 NL 1 2017-02-10 00:48:13 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
85.203.9.35 NL 1 2017-02-10 00:20:56 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
82.132.246.21 GB 1 2017-02-09 01:47:38 remember Mozilla/5.0 (Linux; Android 5.1.1; LG-K120 Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
208.123.223.254 CA 1 2017-02-09 00:48:23 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
92.40.249.104 GB 1 2017-02-08 13:53:24 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-T580 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36
185.89.251.35 NL 1 2017-02-08 12:30:40 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
185.89.248.35 GB 1 2017-02-08 11:12:08 remember Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
82.9.173.128 GB 4 2017-02-08 07:28:52 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G935F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
82.132.245.20 GB 1 2017-02-08 06:35:40 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-G935F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36
2.218.122.82 GB 8 2017-02-07 12:20:20 vialong Mozilla/5.0 (Linux; Android 6.0.1; SM-T580 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36
90.212.193.133 GB 25 2017-02-04 16:03:48 remember Mozilla/5.0 (Linux; Android 6.0.1; SM-T580 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36
92.40.249.156 GB 2 2017-02-04 09:55:40 signup Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393

[Adam Kindness]

i dont know if thats his real name!?

[Adam Kindness]

reported with Action Fraud

[Adam Kindness]

Any other suggestions on actions to take.

Banks (on both sides) informed
Police informed...

Passed on details of the fraud to 'buster jack' to help prevent future fraud hopefully.

I'd like to break his legs, but of course I'd get arrested for that.

[Adam Kindness]

LOL I'd have to edit that post and the quotes if he were to meet with an accident.

[Adam Kindness]

Chebble said:

There is a real Joe Mitchinson in Wigan - I know of him anyway. That said, he doesn't live in that area of Wigan. There's every chance that the scammer has picked someone real on the offchance that you'll search on Facebook/Twitter/Instagram.

Yeah, i've found him but dont want to potentially blindly blame someone who could be innocent. I called him the other day and asked a few questions - seemed oblivious enough so let it go.

[Adam Kindness]

Fastpedeller said:

The Spruce goose said:

In truth the only action is the police.

Maybe...... there's another way! What you need to do is pull a scam on him - There must be some way to pull it off, and what poetic justice it would be.

Yup, the problem is tracing the guy though. I cannot get any info from Barclays.

[Adam Kindness]

aye, I'd normally pay through paypal... anyway :/

New bike on its way now. Bugger buying second hand.

[Adam Kindness]

anyone got access to electrol register info?

I've done some basic google searching to see why lives at the address, but cant find anything unless I go through a pay site. Its an option, but seeing if the info is freely available makes more sense.

293 ormskirk road
Wn59dn
Greater Manchester

Its a real address...