New WM fraudster on the loose

Hey guys,

Keep your eyes wide open for a strange pattern in affiliate signups. We caught one today.

• Look for patterns in e-mails and usernames
• Check every e-mail that gets bounched when the member signs ups
• Fake or fraudulent domain names in the email addresses and the majority of the IPs are from 85 and 88 IP ranges.
• Each member logged in once, never more than that and never less.

So all of you, if you've been receiving lots of bounced welcome e-mail, check out the affiliate to see if there is a possible fraud going on. Then, if you're with CC bill or other processor, ask them for advice as they have more information than you do. We where advised to suspend this Webmaster and we refunded all the signups from this account.

Xoxo,

Keith

More info on the fraudster:

Used a now confirmed fake address in the UK:

259-269 Old Marylebone Road

Search your records and disable this guy before he rips off any more money

Thanks for the heads up !

Quote:

---

Originally Posted by KMBucks

Used a now confirmed fake address in the UK:

259-269 Old Marylebone Road

---

Thats actually a legitimate address in the UK of a mail forwarding / business address registration service.

Marylebone Rd is full of those types of business services.

Regards,

Lee