Clever scam: taxeuropa.org

These people are sending an official looking form appearing to come from the EU tax commissioner, offering a refund of some overcharged tax.

It is being sent to foreign domiciled people who have paid tax in Europe on non-EU income, so they must have got their addresses from somewhere - perhaps the same person who sold that well known CD to HMRC?

To support the reclaim, it asks for a lot of detail including (this is a giveaway) the 3 digit security code for the credit card. Plus a notarised copy of some documents.

The other giveaway is that the domain (for which they show only an email address; no website) does not carry a website.

However, I am sure a lot of people will fall for it because it looks pretty good otherwise.

Reply to
Postman Pat
Loading thread data ...

Postman Pat posted

How do you mean - foreign people domiciled in the UK, or UK citizens domiciled abroad?

Very interesting. Can you paste a copy (including headers) here?

Reply to
Big Les Wade

People only fall for scams because they are thick, stupid and greedy. Scammers know this so make it more attractive to people that can be relied upon to volunteer lots of information. It has nothing to do with information from HMRC CDs unless you have any proof of what you claim? It will be from something the person has done on a web site or through a "friend".

Reply to
Ian

He can't because he doesn't have the details or now can't trace the friend of a friend in the pub that come up with the story. There are so many stories about that fall under "Urban Legend".

Reply to
Ian

I think the OP meant the Liechtenstein CD.

Reply to
fonn_volt_west

Big Les Wade wrote

I cannot post a graphic in usenet. Of course I could email a scan to somebody...

It came via the post, not email. This made it look pretty good - other than asking for some excessive details, and some spelling mistakes. I know the EU employs a million translators - I read enough of their documents - and they would not write that badly.

This was sent to my partner who is foreign domiciled but UK resident. She very nearly sent it off, and she is far from stupid - a PhD and a university teacher.

I don't know the tax deduction details but the letter sounded plausible relative to some recent meausures which she has had to deal with.

Reply to
Postman Pat

"Ian" wrote

WDR that is bollocks.

A good quality postal scam like this is pretty convincing.

Obviously the Nigerian scams are obvious - other than to complete mugs

Reply to
Postman Pat

On Sun, 07 Sep 2008 13:44:28 +0100, Ian wrote:

formatting link

Domain ID:D152678582-LROR Domain Name:TAXEUROPA.ORG Created On:10-May-2008 11:58:06 UTC Last Updated On:10-Jul-2008 03:51:54 UTC Expiration Date:10-May-2009

11:58:06 UTC Sponsoring Registrar:Directi Internet Solutions Pvt. Ltd. d/b/a PublicDomainRegistry.com (R27-LROR) Status:OK Registrant ID:DI_8150836 Registrant Name:Miguel Gonzalez-Gonzalez Registrant Organization:European Commission Registrant Street1:KORTENBERGLAAN 6 Registrant Street2:1040 Registrant Street3: Registrant City:BRUSSELS Registrant State/Province:BRUSSELS Registrant Postal Code:1040 Registrant Country:BE Registrant Phone:+32.22958890 Registrant Phone Ext.: Registrant FAX: Registrant FAX Ext.: Registrant Email:miguel.gonzalez snipped-for-privacy@yahoo.com Admin ID:DI_8150836 Admin Name:Miguel Gonzalez-Gonzalez Admin Organization:European Commission Admin Street1:KORTENBERGLAAN 6 Admin Street2:1040 Admin Street3: Admin City:BRUSSELS Admin State/Province:BRUSSELS Admin Postal Code:1040 Admin Country:BE Admin Phone:+32.22958890 Admin Phone Ext.: Admin FAX: Admin FAX Ext.: Admin Email:miguel.gonzalez snipped-for-privacy@yahoo.com Tech ID:DI_8150836 Tech Name:Miguel Gonzalez-Gonzalez Tech Organization:European Commission Tech Street1:KORTENBERGLAAN 6 Tech Street2:1040 Tech Street3: Tech City:BRUSSELS Tech State/Province:BRUSSELS Tech Postal Code:1040 Tech Country:BE Tech Phone:+32.22958890 Tech Phone Ext.: Tech FAX: Tech FAX Ext.: Tech Email:miguel.gonzalez snipped-for-privacy@yahoo.com Name Server:39677.MERCURY.ORDERBOX-DNS.COM Name Server:39677.VENUS.ORDERBOX-DNS.COM Name Server:39677.EARTH.ORDERBOX-DNS.COM Name Server:39677.MARS.ORDERBOX-DNS.COM
Reply to
Phil Stovell

Phil Stovell wrote

Indeed, but the postal address on the documents is not a complete address. It is just the organisation name, and Brussels with a postcode number.

In the domain data above, somebody registered the domain using an address which is meant to look like the EU Commission.

miguel.gonzalez snipped-for-privacy@yahoo.com looks really authentic ;)

Reply to
Postman Pat

I agree.

The letter that I got from the 'person'[1] claiming to represent the Data Protection Agency was very convincing. You had to read it very carefully to see that you didn't actually have to pay the money.

It would be quite easy for a busy person, or a junior clerk to just scan it and pop a cheque for IIRC 40 pounds in the post

tim

[1] I think said person is holidaying at Her Majesty's pleasure!

Reply to
tim.....

The original email was sent to my partner's work email address and she doesn't know how to view headers on that system, but here is the actual email:

Date: 13 May 2008 18:32 -0400 From: European Commission Taxation and Customs Union To: [deleted for privacy] Subject: IMPORTANT : Your EU Savings Tax returns

[Image: title-en.png]

Dear Financial Customer

This is in reference to your account in a financial institution in one of the participating EU Countries In light on the 2008 Tax System (EU Savings Tax Directive).

The Directive is an agreement between the Member States of the European Union (EU), which require each Member State to exchange information with each other about EU residents who earn interest on savings and investments in one EU Member State, but live in another but does not apply to residents outside the EU with accounts in the EU.

To avoid withholding tax/ double taxation on your non-resident SAVER, BROKERAGE AND INSURANCE ACCOUNTS, We have attached a tax form to this message, we will require you to fill/sign and return to our office through our confidential email or fax numbers below before the 3oth of May. Once we review your application any unlawful tax on your account since the inception in 2005 will be refunded to you with interest.

[Image: image002.jpg]

László Kovács Commissioner

EUROPEAN COMMISSION

DIRECTORATE-GENERAL TAXATION AND CUSTOMS UNION

VAT AND OTHER TURNOVER TAXES UNIT.

B-1049 BRUSSELS

BELGIUM

EMAIL snipped-for-privacy@TAXEUROPA.ORG

snipped-for-privacy@taxeuropa.org

or by fax to +32-2-791-9790

+34-91-184-98-32

+447092812329

Reply to
Postman Pat

I don't understand why more scammers are not dealt with and sent on a trip to HMS holiday camp. They must be incredibly easy to track down, as they leave traces all over the place. Just follow the money...

Reply to
johannes

I should add that the scammer's initial contact *was* in fact an email (the one I have just posted); my partner then responded by requesting the forms, and nearly returned them all completed before I saw them.

To me, the email is clearly a scam although one does have to read it several times to be 100% sure, and same for the paperwork bit.

It is an identity collection scheme, with which they can empty out your credit card account and almost certainly your bank account too.

Who should this be reported to? The police?

Reply to
Postman Pat

I have to say that believing a mail sent to "Financial Customer" and not naming the institution (or even the country)with which I am investing is a tad dumb.

tim

Reply to
tim.....

Why. What would they do?

Reply to
I Like Bunnys

"tim....." wrote

I just seen more of the original email. It has a 'letterhead' graphic at the top, whose URL is

formatting link
:)

But if like 99% of people you use Micro$oft email software, you don't see the URL which the graphic comes from.

Reply to
Postman Pat

Arrest the scammers for obtaining, or conspiracy to obtaining money by deception. Why not?

Reply to
johannes

I Like Bunnys wrote

Well, they could do their JOB and pass it to the police in Belgium who can go to this address and "have a word" with the occupant, who (if he is still there after a few months) must be physically there to retrieve the faxes. Unless he is using a fax2email service.... that would be quite clever, if he also uses an anon remailer :)

Reply to
Postman Pat

But in all that, he can run but he can't hide. The money has to find a way into his trouser pocket. Just follow the money trail..

Reply to
johannes

Because plod don't work like that. In fact they dont work at all!

Reply to
I Like Bunnys

BeanSmart website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.