Rinoa Poison: Scambaiter

Stream Timestamp [00:21:34]

Tony – Spectrum

 

She was paying about $150 per month for her services. He said that he could reduce her bill to only around $75 per month for 3 years. But she had to pay the first 11 months ahead of time.

 

He seemed to be having difficulty concentrating for some reason. He claimed that she wasn’t allowing him to explain.

 

After getting some info from her, he said that he couldn’t verify her account. When she tried to find another way to verify, he booped.

 

Total Time Wasted: 15min 28sec

 

 

Stream Timestamp [00:52:40]

Eric Foreman — PayPal

Refund Amount: $399.99

AnyDesk was used.

 

Invoice #TYU8520SOND

 

The charge was for cryptocurrency. She had already invested in $2,000-worth of chocolate coins, so she didn’t want to invest in this type of currency.

 

He asked her what she used her phone for.

“Is that a trick question?”

He booped.

 

Total Time Wasted: 13min 56sec

 

 

Stream Timestamp [01:54:00]

CR vs Paul Harris & Jay, the manager — PayPal

Refund Amount: $399.99 BitCoin purchase

AnyDesk was used.

 

Invoice #TYU8520SOND

 

Paul’s phone line was terrible, but we struggled through.

 

He said that someone had accessed her account from 6 different devices. They connected the computers. He was suspicious of the email that she received and seemed to be trying to decide whether or not to continue with the scam. He said that, “Everything we are trying to do, it has block us.”

 

He said that he was trying to set a trap for the hackers to fall into. He said that it would be a
Google security or Duck security trap. She said she looked forward to it. We were put on hold while he checked with the “concern team.”

 

He transferred us to Jay, the manager, despite the fact that Rinoa seemed to know his real name (which she got from his AnyDesk account.)

 

Jay instructed her to log into her D bank and go to the Zelle page and had her add a contact. He told her to send $300 to lure the hackers in “for goofies.” She was asking for explanation when he became very impatient and loud. So, she acted like she was sending the money but didn’t want to really click on “proceed” because she was worried that the money would be sent to the hackers by accident.

 

He called her “oversmart” and told her to go back to Zelle and try again. She eventually sent the money and then asked “How do we catch them?” several times. She was very excited to learn how this all worked and wanted to “nab these guys.”

 

He said that they identified a location in Orlando, Florida. She thought he said that the hacker’s name was “Danny Avenue.” He said that they identified and were blocking that location. She was getting calls from her bank. He told her to hold on. He told her she kept saying that she was saying worthless things and told her to keep quiet.

 

After he said that she had the name of the hacker wrong, she thought he said that the hacker’s name was Shubh, but he said she was a headache. He was VERY unhappy about her using the name “Shubh.” He went silent for a while. He seemed spooked.

 

CR: Shubh, how do we catch him?

Jay: My name is not Shubh.

CR: If you say so.

 

He told her to return to her bank page. She asked the pronunciation of Shubham. He got really quiet, then booped.

 

Total Time Wasted: 30min 32sec

 

 

Stream Timestamp [03:35:05]

Robert Williams – PayPal

Refund Amount: $540.00

 

Transaction ID#P40P731GC40

 

He said that it was fraudulent activity. She asked, “What was that? Two fart author?” when he mentioned two-factor authorization. She asked for three-factor authorization. He said he would try to do that for her.

 

He said that the fraud people could see her Amazon account. She asked many questions. He told her to wait and he would tell her. He said that the fraud people were listening to her conversations on her phone.

 

She asked what she needed to do to avoid being a victim of an Amazon scam. He showed her the incognito browser window. He normalized the page before she signed out. He found that “History Fool” was trying to make her fool.

 

She told him they needed to get the three-factor authentication done first before they did anything else. She didn’t want to log into her account until that was set up. It’s too risky. He told her to log into her PayPal account, but she said she didn’t have one. She signed out of her gmail account to keep her accounts secure. He told her to login, but she didn’t think that would be safe.

 

She asked, “Why did people stop using AOL?” and he answered, “Because of all the fraud activity, ma’am.”

 

She scrolled to the bottom of the page to show him where the support options were on the Amazon homepage. He said that he was going to help her and didn’t need that page. He told her to leave her computer alone.

 

He asked her to log into her account but she said she didn’t want anything to be stolen.

She said, “You soiled trousers!”

RW: Do you go to the doctors? Do you open yourself and operate yourself?

He told her to let him do the work.

 

He told her that fraud people were stealing her money by purchasing Mastercard giftcards. He told her to set up a “dummy transaction” for almost $200 and told her to enter her credit card info. She told him that she didn’t want to pay $200. He said it was a dummy transaction and that she wouldn’t get charged. She told him to add his credit card info instead. He refused. She also refused.

 

Total Time Wasted: 43min 01sec

 

 

Stream Timestamp [04:32:04]

JR vs Christopher James & Daniel Harris – Norton

Refund Amount: $349.89 & $569.00

UltraViewer was used.

Order #27787688089765346768908

 

He said that there was fraudulent activity.

Christopher: The location is from the Texas.

 

He told her about the TinyBanker Trojan. She was very helpful and read most of the wiki page about it. He likes to drink guava juice. He told her to get a drink of water.

 

We were transferred to Daniel Harris, level 5 senior security technician. She asked him to explain the problem in laymen’s terms. He told her all about “the man in the browser.”

 

He “doxed” someone’s information to her and she called him out on it.

 

They talked about cryptocurrency.

 

We were transferred back to Chris from earlier. He was not very helpful and spent time trying to steal money through online giftcards. The call was disconnected. He opened her notepad and said that he was calling her. She feared that he might be the man in the middle that she was warned of. He called back. She asked him why he hacked her computer and why he targeted her for stealing. He was confused and had trouble understanding that she thought he was the hacker, not the Norton.

Christopher: I’m the Christopher. You were talking to me before.

 

He deleted her Photoshop icon but claimed that it was automatically deleted because they put a security on her computer and that program might have malware. He added a giftcard to her Amazon cart, saying it was a security breech. She took it out of her cart and said she didn’t want it. He bailed from the phone, but continued messing with her computer, deleting all of her desktop icons. He tried to reset her computer password but wasn’t able to do that.

 

She eventually restarted her computer.

 

Total Time Wasted: 1hr 07min 27sec