Internet Domain Registry

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Thursday, 12 October 2006

Counterfeit Checks? Who cares!

Posted on 12:00 by Unknown
Today I had a pretty typical law enforcement interaction.

Before I get into that, I want to say that I have great admiration and respect for many of the law enforcement folks I meet every day. The down side of this interaction is not a reflection on any individual in law enforcement, but rather of the troubles at the next level - the US Attorney's Office, where they decide whether a federal case will be worked or not.

SCENARIO
============
In this circumstance, a family member had advertised some services on the Internet. Predictably, a number of non-English speaking persons jumped on the service and wanted to buy it. The first wants to know if he can send a Cashier's Check for $4,000 rather than the actual price of $2,100, and would she be willing to deposit it in her account and wire the additional funds to his Travel Agent. The second actually sent a check for $3600 (I have the check), and then Tragedy Struck, and the poor gentleman is hospitalized in Canada and his only hope is if my family member could send $500 of that $3600 to a Canadian address TODAY!

(The other guy wanted the money sent to a Travel Agency in London, who was paying for his son's trip to the United States).

CRIME
=================
So, we have a counterfeit check. The check itself is printed on check stock you can buy in an office supply store, and drawn from an American based Credit Union. Only they've mis-spelled common English words, even on the face of the check, and have given an invalid toll free number for the credit union.

I contact the credit union's "risk management" office, describe my scenario, and ask if its common. She says she gets "two or three calls a day" very similar to mine, each ending with a counterfeit check drawn from their credit union. Sometimes they have deposited the check and sent money to the con man. Sometimes they haven't.


REJECTION
=================
I ask her who her chosen law enforcement partner in this situation is. She says that she has called the Secret Service, who seemed interested at first, but lost interest when they realized the checks were being mailed from Canada. I call her local FBI CyberCrime Supervisor and describe the scenario to him. He says that unfortunately "bank fraud is not the priority that it once was" in the Bureau. He'd love to work the case, but "if there is not at least $500,000 in loss, the local Assistant US Attorney won't prosecute."

So, what should you do if you or a family member or friend receives a counterfeit check?

The best plan, according to all parties, is to fill out the report that you can find at the Internet Crime and Complaint Center website -- http://www.ic3.gov/ -- By entering as much data as possible into that database, your case can be combined with other cases to try to generate those minimums that will make a US Attorney want to prosecute. Note: The $500,000 is a higher threshold than I have heard in most jurisdictions. Some have stated they will take action for as little as $75,000 in proven losses.

I believe this will get better, but part of what will make it better is people like you and I making sure that we gather as much evidence as we can, and put it in front of the people who have to make these decisions. Maybe we waste our time today, but its the necessary leg work to getting this situation turned around.

Good luck!

_-_
gar
Read More
Posted in | No comments

Counterfeit Checks? Who cares!

Posted on 12:00 by Unknown
Today I had a pretty typical law enforcement interaction.

Before I get into that, I want to say that I have great admiration and respect for many of the law enforcement folks I meet every day. The down side of this interaction is not a reflection on any individual in law enforcement, but rather of the troubles at the next level - the US Attorney's Office, where they decide whether a federal case will be worked or not.

SCENARIO
============
In this circumstance, a family member had advertised some services on the Internet. Predictably, a number of non-English speaking persons jumped on the service and wanted to buy it. The first wants to know if he can send a Cashier's Check for $4,000 rather than the actual price of $2,100, and would she be willing to deposit it in her account and wire the additional funds to his Travel Agent. The second actually sent a check for $3600 (I have the check), and then Tragedy Struck, and the poor gentleman is hospitalized in Canada and his only hope is if my family member could send $500 of that $3600 to a Canadian address TODAY!

(The other guy wanted the money sent to a Travel Agency in London, who was paying for his son's trip to the United States).

CRIME
=================
So, we have a counterfeit check. The check itself is printed on check stock you can buy in an office supply store, and drawn from an American based Credit Union. Only they've mis-spelled common English words, even on the face of the check, and have given an invalid toll free number for the credit union.

I contact the credit union's "risk management" office, describe my scenario, and ask if its common. She says she gets "two or three calls a day" very similar to mine, each ending with a counterfeit check drawn from their credit union. Sometimes they have deposited the check and sent money to the con man. Sometimes they haven't.


REJECTION
=================
I ask her who her chosen law enforcement partner in this situation is. She says that she has called the Secret Service, who seemed interested at first, but lost interest when they realized the checks were being mailed from Canada. I call her local FBI CyberCrime Supervisor and describe the scenario to him. He says that unfortunately "bank fraud is not the priority that it once was" in the Bureau. He'd love to work the case, but "if there is not at least $500,000 in loss, the local Assistant US Attorney won't prosecute."

So, what should you do if you or a family member or friend receives a counterfeit check?

The best plan, according to all parties, is to fill out the report that you can find at the Internet Crime and Complaint Center website -- http://www.ic3.gov/ -- By entering as much data as possible into that database, your case can be combined with other cases to try to generate those minimums that will make a US Attorney want to prosecute. Note: The $500,000 is a higher threshold than I have heard in most jurisdictions. Some have stated they will take action for as little as $75,000 in proven losses.

I believe this will get better, but part of what will make it better is people like you and me making sure that we gather as much evidence as we can, and put it in front of the people who have to make these decisions. Maybe we waste our time today, but its the necessary leg work to getting this situation turned around.

Good luck!

_-_
gar
Read More
Posted in | No comments

Tuesday, 10 October 2006

Birmingham InfraGard - October 2006

Posted on 00:31 by Unknown
Its about six hours from InfraGard time. My wife asked me about 9 PM, "How long will it take you to finish your presentation?" I told her, "It will be presentable in about an hour, and then it will get better every hour until I fall asleep."

http://www.birmingham-infragard.org/

Today's topics:

(mine) - Jihad Online - the Internet as Propaganda tool
(Dan's) - Two recent IE Zero Days

Its amazing how trivial it is to find many of the Jihad Propaganda pieces - videos, magazines, daily news reports - with a few little "search in Arabic" googlings . . .

The primary distribution points seem to be "large file sharing" services. There are actually several Jihadi blogs here on blogger.com. Google pops up a "Hate" warning for those blogs. Its says:

Some readers of this blog have contacted Google because they believe this blog's content is hateful. In general, Google does not review nor do we endorse the content of this or any blog.

Well, I guess that's nice. Google doesn't endorse blowing up American GI's Hummers with Rocket Propelled Grenades. They just innocently provide the space for the bloggers to tell their fellow jihadists where to download the videos of the action.

More later . . . let me know if you find anything interesting!

_-_
gar
Read More
Posted in | No comments
Newer Posts Home
Subscribe to: Posts (Atom)

Popular Posts

  • Happy New Year! Here's a Virus! (New Year's Postcard malware)
    I've been busy this week looking at the various defacements (see ComputerWorld , and ABC News ) and other cyber attacks (see yesterday...
  • From Russia, With Love . . . new Postcard spam spies on your PC
    Isn't it nice to have friends who send you postcards? The UAB Spam Data Mine is especially fortunate in that way. Beginning the evenin...
  • New Year's Waledac Card
    We haven't seen a new version of Waledac since Independence Day (July 4, 2009), but it looks like its back! I'm on vacation today, s...
  • Top Brands Imitated by Malicious Spam
    WebSense recently released an InfoGraphic titled "Top Five Subject Lines in Phishing Emails." for January 1, 2013 through Septemb...
  • Tempting Photo Attachments Lead to Fake AV
    One of today's largest malicious spam campaigns continued an occasional theme we've been seeing for a few weeks. A subject line, fo...
  • What about the Social Security Numbers? (The Utah Data Breach and your SSN)
    The Utah Data Breach This week the continuing saga of the Utah Medicaid Data Breach continued to unfold. If you haven't been following...
  • Stop the Rumors: Quit SMSing about WalMart Gang Initiations
    My daughter and her teenage friend were sitting on the couch watching TV today when they began getting text messages on their phone. Here...
  • Minipost: IPR Center celebrates Cyber Monday
    The National Intellectual Property Rights Center (IPR Center) announced today that in celebration of Cyber Monday, they have Seized 82 Domai...
  • ACH Spammer switches to Shortened URLs
    For many weeks now the spammers behind one particular malware family have been fighting a running battle to keep their malware-hosting domai...
  • Work at Home . . . for a Criminal?
    How do you tell if a "Work at Home" invitation is a scam? Here's a clue: It comes in your email. In today's Blog, I tho...

Categories

  • china
  • computer security careers
  • conficker
  • cyberwar
  • digital certificates
  • facebook
  • fake av
  • gumblar
  • koobface
  • law enforcement
  • malware
  • pharmaceuticals
  • phishing
  • public policy
  • spam
  • twitter
  • twitter malware
  • waledac
  • zbot

Blog Archive

  • ►  2013 (21)
    • ►  December (4)
    • ►  November (1)
    • ►  October (1)
    • ►  September (1)
    • ►  August (3)
    • ►  July (1)
    • ►  June (1)
    • ►  May (5)
    • ►  April (3)
    • ►  March (1)
  • ►  2012 (18)
    • ►  August (1)
    • ►  June (1)
    • ►  May (7)
    • ►  April (2)
    • ►  March (7)
  • ►  2011 (28)
    • ►  November (3)
    • ►  October (1)
    • ►  August (4)
    • ►  July (6)
    • ►  June (1)
    • ►  May (2)
    • ►  April (2)
    • ►  March (6)
    • ►  February (1)
    • ►  January (2)
  • ►  2010 (80)
    • ►  December (6)
    • ►  November (10)
    • ►  October (6)
    • ►  September (12)
    • ►  August (5)
    • ►  July (4)
    • ►  June (11)
    • ►  April (7)
    • ►  March (8)
    • ►  February (4)
    • ►  January (7)
  • ►  2009 (92)
    • ►  December (12)
    • ►  November (11)
    • ►  October (16)
    • ►  September (7)
    • ►  July (5)
    • ►  June (10)
    • ►  May (2)
    • ►  April (6)
    • ►  March (7)
    • ►  February (6)
    • ►  January (10)
  • ►  2008 (101)
    • ►  December (7)
    • ►  November (17)
    • ►  October (11)
    • ►  September (10)
    • ►  August (22)
    • ►  July (12)
    • ►  June (3)
    • ►  May (7)
    • ►  April (5)
    • ►  March (2)
    • ►  February (1)
    • ►  January (4)
  • ►  2007 (31)
    • ►  December (3)
    • ►  November (9)
    • ►  October (3)
    • ►  September (2)
    • ►  August (5)
    • ►  July (5)
    • ►  January (4)
  • ▼  2006 (5)
    • ►  December (2)
    • ▼  October (3)
      • Counterfeit Checks? Who cares!
      • Counterfeit Checks? Who cares!
      • Birmingham InfraGard - October 2006
Powered by Blogger.

About Me

Unknown
View my complete profile