Page 1 of 1

Possible Scam Email

Posted: Fri Apr 28, 2017 8:56 pm
by rubenfer
Hello my name is Ruben, I work for a Lodge located in the Cloud Forest of National Reserve of Manu in Peru, please does anyone can help me, I´ve received this email and I don´t know if it could be a scam.
------------------------------------------------------------------------
21/04/17 6:05 p.m., "Ciro Travels" <karen.reservation@gmail.com> wrote:

Greetings,

I would like to make reservation for my clients the Daniel's family as
they want to come to your country for honeymoon trip and they are
interested in using your accommodation for their stay along with their
friends.

Below is their booking details:

MR / MRS DANIEL MORRISON.

MR / MRS MICHAEL H. OLIVIA.

MR / MRS FEDERICO ALLEN.

MR / MRS ZACHARIAH DONALDSON.

ROOM NEEDED: 04 DOUBLE / SUPERIOR ROOM.

ARRIVAL: 10th TILL 15TH JUNE 2017.

DURATION OF STAY: 05 NIGHTS.

So, I want you to go ahead and quote me for the above booking details
and let me know the quotation for the 04 double rooms with full
breakfast fee to be included and credit card advance payment is the
only option my clients prefers for the payment of their stay.

Regards,

James Forbes.

------------------------------------------------------------------------

I will appreciate your help.

Posted: Sat Apr 29, 2017 5:09 am
by AndrewH
Welcome rubenfer. A Bing search shows that 'Ciro Travels' has a holiday-makers website and appears to be in the business of putting together holidays and trips for their customers. On that basis I don't think they are scammers. In contacting you for a reservation for those names, it seems that they are simply doing their job. The proof of course will be if they make their payments to you when they are required by you.

They are not to be confused with 'Ciro Travel' which is another agency with a similar name.

Posted: Sat Apr 29, 2017 5:31 am
by Giuliano
There is some room for suspicion...language is a bit funny, from the initial "greetings" to the generic mention of "your country". The address of the sender is a gmail one (Cisco Travels cannot afford to register its own domain?). Four couples on a honeymoon trip? Possible, but a bit unusual.
I would go ahead, but use some caution. Maybe the credit card details have been stolen and this turns into one of the many forms of the overpayment/money back scam.

Posted: Sat Apr 29, 2017 8:21 am
by greenbarn
Everything about it screams “Scam” to me. The wording is classic scam in very poor English but supposedly written by someone with a very English sounding name. Whoever wrote it, English was definitely not their first language.
I’ve not heard of Ciro Travels; they may be a genuine organisation, but my suspicion is that the only link is that whoever sent the email has heard of them.
As Giuliano suggests, I’d expect their email address (and why is “James Forbes” using Karen’s email address?) to have a corporate name, and I’d expect some genuine links to their website.

Posted: Sat Apr 29, 2017 8:26 am
by Dotty
Well it might be genuine, but my gut feeling is that its probably a scam. ....your country, your accomodation, refers to the Daniels family but Daniel appears to be the first name of the 1st couple - scammers often construct names like this with both first and second names as common first names, maybe with 'son' stuck on the end.

Posted: Sat Apr 29, 2017 10:51 am
by RichardHenshall
Peter Potter seems to be using this email address too.

https://www.bbcanada.com/bb_bbdug_help_view.cfm?id=8322
karen.reservation@gmail.com

Dear Sir / Ma,
I will like to make reservation for my family & friends as my wife Mrs. Potter will be celebrating her 40th birthday by 15th of OCT and we are interested in using your accommodation for our stay and below is our booking details:

MR / MRS POTTER SNR

MR / MRS ALLEN ROBIN JNR.

MR / MRS KEN DA SILVA

ROOM NEEDED: 03 DOUBLE / SUPERIOR ROOM.

ARRIVAL: 15th TILL 18th OCT 2016.

DURATION OF STAY: 03 NIGHTS.

So, I want you to go ahead and quote me for the above booking details and let me know the quotation for the 03 double rooms with full breakfast fee to be included after that we can proceed with the payment and note that the payment can only be done via my credit card only in advance before arrival and let me know if that is ok before proceeding.

Regards,

Peter.

Posted: Sat Apr 29, 2017 1:08 pm
by AndrewH
Well, reading the above comments I have changed my tune about this and brand it as a definite scam. Someone with a Scottish name like James Forbes would not write such bad English. And then there is "Peter", using the same or similar wording, writing to RichardHenshall .

I don't know what the purpose of the scam is. The repeated mention, in bad English, of paying by credit card ("and credit card advance payment is the only option my clients prefers for the payment of their stay") makes me think it's a stolen card.

Posted: Sat Apr 29, 2017 4:17 pm
by greenbarn
AndrewH wrote:The repeated mention, in bad English, of paying by credit card ... makes me think it's a stolen card.
+1 - I’m struggling to think of an alternative, although you’d think the window of opportunity to use it would be small. There again, some card payment handlers don’t do an automatic check against the register of stolen card numbers.

Posted: Sat Apr 29, 2017 5:55 pm
by Marks
Gold plated scam.

Posted: Sat Apr 29, 2017 6:04 pm
by FelicityA
Sometimes the card is not stolen so there is no report. It is just cloned.

Posted: Sun Apr 30, 2017 6:28 am
by Giuliano
AndrewH wrote:
I don't know what the purpose of the scam is. The repeated mention, in bad English, of paying by credit card ("and credit card advance payment is the only option my clients prefers for the payment of their stay") makes me think it's a stolen card.
credit card has been cloned. After a while, they cancel the booking and ask for a refund....on another account.