Scammer alert

[starfire]

Hello to everyone on IIS forum, l have just been scam by another IIS user dikman Richard from Adelaide. l bought his Astro Physics 900GTO mount on the IIS classifieds recently, sent him my money into his bank account, but he hasn't replyed back to me at all since , with countless PM's sent to him. Another IIS member also purchased a camera from dikman also and hasn't heard from this person either. l had a pm from Unipol today saying he was scammed by dikman for the same AP900GTO Mount. l have been to the local police and will have a full report on this person, and the bank account of dikman has been locked by the bank. Please be careful of these scammers.

[ronson]

I bought his ASI2600MM Pro just before Easter. He claimed he never received the money. Then, he claimed there was an issue with his bank account and the money have been returned. Unfortunately no money have been returned to my bank account so far. So there is no camera and no money.

This is a shame as he seems to have been on the forum for a while and has been somewhat active.

I am trying to get this resolved via my bank, but if this doesn’t help, police report will be the next step.

[MortonH]

Have you reported this to the IIS moderators?

[sheeny]

I'd like to remind everyone of the terms of service for IceTrade:



If you are confident you have been scammed, then by all means pursue the matter through your financial institution AND through the Police.


At this stage I am consulting with the other moderators to determine what if anything we can do to protect others from being scammed (if this is the case) without interfering with any potential financial or legal investigation.


Al.

Al.

[RB]

No, no one has.
Guys, please also report these matters to us directly.
Dont just post an open thread.
We dont always see every thread or read every sale.

If others were also scammed previously then why has no one reported anything so that this could have be avoided?

Al, David and I will take the only action we can.

RB

[blindman]

Shouldn't harm to have thread with positive / negative feedback of buyers / sellers - if not possible to have that as a feature / function as separate section, right?
NM

[alpal]

I'm sorry to hear that.
Wow - the advert is here:
https://www.iceinspace.com.au/forum/showthread.php?p=1607958

He has made 292 posts so you'd think he'd be OK.

[RB]

It was the first time he’s posted items for sale and the first time he created new threads in two years.

He’s account could’ve been (most likely) hacked.

Caveat emptor can not be stressed enough.




No, that’s not going to happen on IIS.

RB

[alpal]

So - was dikman's (Richard's) account hacked?

[RB]

Don’t know but it could be, it’s happened before.

RB

[alpal]

OK - I wondered where the 2 photos in the advert were found?


I did a Google and TinEye reverse image search
and I also checked out Astromart -

but I couldn't find any pictures the same.
So - I wonder where the 2 pictures came from?

[RB]

I have no idea.
The account has been banned until and if the member is willing to contact Mike and explain.

RB

[Leo.G]

Andrew as a moderator your hands are tied beyond banning the account/IP.
You could possibly do an IP search on what-is-my-IP:


https://whatismyipaddress.com/


It will give you a general location though most ISP's like the one I use have a generic bunch of IPs. You could however compare the last X amount of posts with older entries by the original member.


Financial matters are beyond your control (and the boards control) and is a matter for the banks and police though, I'd strongly suggest if anyone has lost money to this scammer they contact the relevant authorities and try to recover some if not all of it.


Every bank account in Australia theoretically requires several forms of ID and the person behind this should be in jail (sorry, gaol, I'm an Aussie).

[RB]

Yes thanks Leo.
I do check IPs regularly.
I've banned many, many spammers, even before they finish registration sometimes.
:lol:

Cheers
RB

[EpickCrom]

Thanks for the heads up, any individual carrying out a scam and defrauding people should be in jail. :mad2:

[Leo.G]

You can also ban a range of IP addresses known for spamming but the general problem with banning any range of IPs is you can get a lot of members caught in the middle of the range. I found it's a use carefully feature. I used to be Admin on quite a large international forum (non related with a few million registered members. It was a nightmare and a lot of stress. i got asked to take over when the forums owner had a child and could no longer commit with work and family. From mod to global mod to Admin.





But I need my Viagra, it keeps my ice cream firm during summers. Haha

[ronson]

Unfortunately, there is little hope any money will be recovered. Hope at least the perpetrator doesn't go away unpunished.

With this type of online transactions, there is always a risk. Given this is a small community, we are probably not a prime target compared to say Gumtree or FB Marketplace, but still random incidents like this happen and will keep happening.

In terms of protection, IP addresses are disposable, so blocking them has very little to no effect.

Having Captcha or another technology to prevent bot registrations is a good thing.

Having the restrictions on new accounts is a good way to make it harder for people to misuse.


It's good, if for inactive accounts (say more than 12 moths since last login), the user is requested to reactivate via email link before being allowed to use them again.


A big issues for this, and other forums, is hijacking genuine/established accounts where the user has used a weak password or reused passwords that have subsequently leaked in other compromises. This will really affect the credibility of doing any business as everyone will be paranoid if the person they communicate with is genuine or a scammer, regardless of how old the account is or the number of their posts. To counter this, mandatory multi-factor authentication is a very effective security control. Some might think it's pain in the rear, but once setup, it makes it very hard for an attacker to get access and they usually just move to the next easier target.
Worst case scenario is if the database of this forum is compromised and all our credentials leaked, and some decrypted, and all the personal info exchanged via direct messages is leaked, then this would be a big issue, which I have flagged a while ago as a risk ISS using a very old outdated forum version with known vulnerabilities and unfortunately it seems this is not being rectified anytime soon.


What this means for me personally, is that from now one, if I am buying anything on this forum, I will have to scrutinise people a lot more before sending any money. Possibly using a middle man platform such as PayPal as an extra protection. Apology to everyone in advance, and I realise this might deter some from doing business with me, but this is the reality, and I will also understand if you scrutinise me if I am selling something.

[RB]

All valid points Ronson.
I don't think Mike and Terry will be updating the forum atm.

Guys, please exercise extreme caution when dealing with others.
Personally, I couldn't hand over money for an item simply because I'm dealing with another IIS member.
Unless it's face-to-face or I'm 100% sure who I'm dealing with then no way will I purchase.

Further investigations into dikman's account indicate to me that the original account was hijacked.

A reminder to check the strength of your passwords and change them now and then.

Also, I'll repeat myself here, I can't understand why other members who delt with dikman and had problems, didn't alert us so we could've acted sooner.

Well, there it is.

RB

[ChrisD]

I've noticed in the past that the forum platform is based on VBulletin 3.8.7 which was originally released in 2011 and reached "end of life" in 2017.

I'm no expert but maybe the latest version provides better protection options like 2FA?

[JA]

Two factor authentication has recently been put to the test and failed against some new criminal techniques / recently released hacker software. It involves intercepting the info and then reposing as a fake site, or similar. So best be careful at all times there's still no substitute for a cash in hand transaction where you can inspect and test the goods for sale. Nowadays you can have fast and convenient transactions, they're just not as safe as they could be.

Best
JA

[Leo.G]

I much prefer to pay by Paypal where I can.
I purchased my Nikon D810 from Gumtree, unseen and from a gentleman in Queensland. He insisted I phone not just message through gumtree, more so since he was honouring an incorrect pricing $870 with 35.000 shutter count but he did research and was going to change it to $1500, the cheapest available anywhere at the time. The gentleman I purchased it through had a great deal of knowledge on various cameras, new and old and we spent ages discussing both cameras and lenses (and shared images following the sale). I knew this person knew cameras and was 99% certain it was no scam.
Though I did pay through paypal and around 1 week later a pristine Nikon D810 turned up in the post, despite my younger sister insisting numerous times I'd been scammed.
I know $870 isn't a great deal of money to a lot of people but I've been on disability pension for 3 decades and it's a huge amount to me.



I have also heard horror stories but direct bank transfer where the money isn't traceable.


It's not just online, my elderly neighbour texted me last night to ask if my son and I could go through security camera footage, all of her gold jewellery has been stolen. My son and I have a fair idea who would have taken it, her next door neighbour, he's a real slime bag and his last commission house burned down.
Though my neighbour (across the road) did tell him her security cameras weren't working, after I'd loaned her a new DVR when her old unit stopped working. We're hoping he's clearly visible walking through her front door where I adjusted one camera to capture in that position.


Stealing jewellery from a 70 year old lady, HOW DISGUSTING!


The sad reality is even if we get footage to prove he (or anyone else) was in her house there's no chance of recovering her jewellery and the police are close to useless especially since the lady is of Filipino origin and her English isn't the best.