Package Reshipping Job Scams – Again!

[UPDATED BELOW on 10/22/20 with lots of new information!]

IMPORTANT NOTE: Be VERY SUSPICIOUS of emails that come from Workmail.com!  It is being used a lot by cybercriminals pretending to represent companies that offer jobs.

We believe that the criminals who created the fake website TradexPlusUSA.com have very likely created another website meant to trick U.S. citizens into receiving, repackaging and shipping products that are likely purchased with stolen credit card information, or are otherwise illegal to ship.  We say this because we can show that all of these “reshipping” businesses and their websites are similar and completely fraudulent.  Also, WHY would a legitimate business ship something to a person and then pay him or her to repackage the contents and reship that package somewhere else?.  Does that make any sense at all?  We didn’t think so either. (Click here to read our article about TradexPlusUSA.com. Scroll down to Email #8 on the page!)

This story begins when a TDS reader sent us an email on June 30, 2020 from someone named “Roxana Midkiff.” Roxana invited the woman to apply for a job as a work-from-home Logistics Manager for a company called Overseas Deliveries. (NOT to be confused with OverseasDelivery.com) The TDS reader knew it was a scam.  We decided to apply for that job disguised as a woman we’ll call Betty Boop!

From: Roxana B Midkiff <Roxana.Breana.Midkiff@workmail.com>
Date: Tue, Jun 30, 2020 at 7:15 AM
Subject: Hello , KJ-259477618
To: Boop-Oop-a-Doop@gmail.com

Hi ,
I am an authorized representative. We have came across your CV on a job seeking resource.
We would like to offer you an opening: Logistics Manager
The pay is $3000 a month + bonuses.
Schedule: Part-time. 

Job regulations:

– Lawful Permanent Resident in the U.S.
– Basic knowledge of Windows & MS Office;
– Strong ability to perform several tasks in the same time if it is needed;
– Perfect interpersonal skill is preferred;
– Rendering client consultation services
– Must be at least 21 years old;
– Retaining traditional paper workflow and working with finance file reports.
Reference number: ID_10-2075

If perhaps you are serious about this job, please email us back with your full name, main
number, and the perfect call time, and certainly one of our HUMAN RESOURCES Professionals will contact you.

Thank you kindly for your attention.

===============================================

RED FLAG #1: Roxanna Midkiff does not say what company she represents and her email contains awkward English. The incorrect English suggests to us that Roxanna is not a native English speaker.
RED FLAG #2: Roxanna’s email address is from the free email service called workmail.com, not from a legitimate company.  There is no other contact information provided.
RED FLAG #3: “Betty Boop” has no CV listed anywhere! She has never before contacted Roxana.

================================================

From: Betty Boop <Boop-Oop-a-Doop@gmail.com>
To: Roxana B Midkiff <Roxana.Breana.Midkiff@workmail.com>

Hi Roxana,
Thanks for contacting me.  Yes, I am interested.  Will you tell me more about the job?
Betty Boop
================================================

From: Overseas Deliveries LTD <mail@overseasdeliveries.com>
To: Betty Boop <Boop-Oop-a-Doop@gmail.com>
Date: Jul 3, 2020, 10:59 AM
Subject: Re: job offer

REF: JOB OFFER

Due to Coronavirus situation in the world Overseas Deliveries  is  delighted  to extend an offer for the work from home position of Logistics Manager. We hope that you will accept the offer and we look forward to working with you. We are sure that you will do well in the role and that you will make a significant contribution to the ongoing success of  the company. The Employment Agreement is attached to this email. Please download the agreement, carefully read it in full and ask any questions as necessary.

Once we receive your signed papers we will give you your personal link

to register in the online office. To log in it you need a computer or laptop or tablet. Parcels will be delivered to your home by Fedex UPS USPS. Once you receive a parcel you need to take pictures of it and upload them to the online office. Then you will receive an outgoing shipping label to print. It is paid. You don’t pay for anything. So you just drop off a parcel and that’s it. Parcels are not heavy and big. Usually it is clothes, electronic devices. Once register in the system you will have your parcels list with the full description of a parcel and tracking information.

For the first month we pay you $20 per package shipped biweekly through PayPal. Starting from the second month additionally $3000 on a monthly basis.

Once  you  have  read it, please PRINT SIGN the agreement, scan it and send  to:   mail@overseasdeliveries.com. If you don’t have a scanner you may  email  it as a picture.  We DON’T accept electronic signature. We also need a copy of your any Document of Identification.               

This offer will remain open until July 15th, 2020.
Attachment: Employment Agreement.
We look forward to hearing from you!                                     

Sincerely,
Alexis Andrews
Head of recruitment
mail@overseasdeliveries.com
www.overseasdeliveries.com
+1(302)208 0134

“Alexis Andrews” included 2 pdf files.  An “Employment Agreement” and a “Job Description.”  We thought it was very clever that the Job Description includes their slogan “Miss Your Home, Not Your Mail!” followed by “And we expect that you can join us and assist expats with their mail. Let’s help our dear customers to live abroad like at home!”

The Job Description includes a list of skills that are required, such as “Mathematical Skills” like “ability to add and subtract two-digit numbers…”  They set the bar really high! Click each link to open the pdf:

Employment Agreement OD

Job Description OD

=========================================================

RED FLAG #4: We got offered a job without any interview process or meeting!  Alexis didn’t  even request a phone call!  English continues to be awkward indicating that “Alexis Andrews” is not likely a native English speaker.
RED FLAG #5: The domain for the business called Overseas Deliveries (overseasdeliveries.com) was registered in Russia just 16 days earlier.  The website for OverseasDeliveries.com is also hosted on a server in Moscow, Russia.

=========================================================

From: Betty Boop <Boop-Oop-a-Doop@gmail.com>
To: Overseas Deliveries LTD <mail@overseasdeliveries.com>

Mr. Andrews,
I am very interested in this opportunity! Can we have a video chat to discuss this job.  Is that possible?
Betty Boop

==========================================================

From: Overseas Deliveries LTD mail@overseasdeliveries.com
To: Betty Boop <Boop-Oop-a-Doop@gmail.com> 

We can give you a call. What is the number we can contact you?                               

Sincerely,
Alexis Andrews
Head of recruitment
mail@overseasdeliveries.com
www.overseasdeliveries.com
+1(302)208 0134

===========================================================

From: Betty Boop <Boop-Oop-a-Doop@gmail.com>
To: Overseas Deliveries LTD <mail@overseasdeliveries.com>

Mr. Andrews,
I am a very cautious person by heart.  And so, I would feel much more comfortable seeing you in person over a video chat rather than just a phone call.  Do you use skype or zoom?
Betty

======================================================

From: Overseas Deliveries LTD mail@overseasdeliveries.com
To: Betty Boop <Boop-Oop-a-Doop@gmail.com> 

No, we don’t use it                             

Sincerely,
Alexis Andrews
Head of recruitment
mail@overseasdeliveries.com
www.overseasdeliveries.com
+1(302)208 0134

======================================================

That was the last we heard from Mr. Alexis Andrews, Head of recruitment for OverseasDeliveries.com!  Below is a screenshot of the top page of their website as of July 3, 2020.  Click to enlarge it. (We’ve removed a LOT of empty, white space on their website to make the image smaller.)

WHY DO WE BELIEVE OverseasDeliveries.com IS FRAUDULENT?

1. If you looked at their website screenshot, you’ll see that they clearly say the company was founded in 2013 and serves 73 countries, delivering at least 15,430 packages.  So why was their domain name, OverseasDeliveries.com, registered just 16 days earlier?
2. For a 7 year old company operating in 73 countries, why is it that Google knows NOTHING about this company?
   
3. Perhaps the most damning evidence of all comes from the section of their website called “Meet the Team.” Their Team consists of 3 photos of men they identify as:
   a) Anthony Harper, Senior Manager
   b) Mark Horton, Logistics Manager
   c) Richard Lang, Warehouse Supervisor
   We found that each of these 3 photos were stolen from other websites and are NOT the names they posted on the OverseasDeliveries.com website.  Look below. You can verify our findings yourself by Googling the real names of these 3 men and looking at images of them…
   From the OverseasDeliveries.com website:
   
   

MEET THE REAL TEAM:

• Anthony Harper, Senior Manager in real life is Mr. Bo Andersson, President/CEO of the Japanese automotive supplier called Yazaki Europe.
  
• Mark Horton, Logistics Manager in real life is Mr. Rick Peterson, a businessman from Edmonton, Canada.
  
  
  
• Richard Lang, Warehouse Supervisor in real life was the Bosnian-Serb businessman named Slavisa Krunic.  He was killed in a mafia-style execution on April 22, 2020.
  

At the bottom of the web page for OceansDeliveries.com, there is a single review under the title “What Customers Said.” The review is by a young man identified as “Peter Wilson.”  We were able to find that same photo of “Peter Wilson” on the Internet.

“Peter Wilson” appears to be someone named Jorjiko from Kazan, Russia. He was found to give online ratings for many things including a restaurant/coffee shop called “Monkey Grinder” in Perm, Russia (near the Ural Mountains), according to a Russian search service called 2gis[.]ru.  We also found his photo on a rating for an electric toothbrush!

             Click to enlarge:     

It is crystal clear to us that OverseasDeliveries.com is a fake website and business, very likely tricking U.S. citizens into engaging in illegal activities. We also believe that it is likely that the criminals behind this effort are Russians, considering how many breadcrumbs point back to Russia. We also think this website is connected to the same cybercriminals who created TradexPlusUSA.com because this scam is so very similar to that of TradexPlusUSA.com.   OverseasDeliveries.com appears to be one more fake website on a growing list of fake business websites and jobs meant to trick Americans into shipping packages overseas.

Many websites appear to have been used in this and related scams:

On February 6, 2020 we reported in our previous article about package reshipping scams about a company called HoldenParcel[.]com. Before the HoldenParcel[.]com website was taken down, it was found to contain nearly all of the same names found on the Tradex Plus USA website.  It also contained the exact same “Press Release” bogus design that was found on the Tradex Plus USA website.  These “Press Release” links were for Mashable, Business Insider, VentureBeat, and Forbes.  They didn’t point to anything about HoldenParcel[.]com. (Click to enlarge screenshot of HoldenParcel[.]com)

Besides holdenparcel[.]com we have found a collection of suspicious websites that have been registered in the last 2 years:

Career-portal.net (Registered on June 28, 2019 in St. Kitts & Nevis; hosted in Nordhein, Germany.
Careers-site.com (Registered on Dec. 11, 2019)
Employment-portal.net (Registered on May 13, 2018)
Home-based-vacancy.com (Also registered on May 3, 2018)
Submit-application.net (Registered on May 3, 2018)

BOTTOM LINE: We STRONGLY recommend that you stay far away from any “work from home” job that asks you to receive, repackage and reship merchandise!  Our bet is that you’ll be shipping stolen goods!

UPDATE 9/3/2020:
On September 1 we received the email below in which a woman was offered a job to receive packages delivered to her home for her to re-package and ship to others.  It is a scam!  For example, “Tracey F Lora’s” email came from the free generic email domain “workmail.com” NOT from a real business!

From: Tracey F Lora <Tracey.Francesca.Lora@workmail.com>
Date: Tue, Sep 1, 2020 at 11:30 AM
Subject: Hello [NAME REDACTED] Quaintance, FD-7326482857
To: [EMAIL REDACTED]

Hi [NAME REDACTED] Quaintance,

This is an authorized representative. We came across your resume on a job search website. We would like to offer you a position: Escrow Assistant. The pay is $3750 a month + bonuses.
Open in: U.S (Any State)
Work type: Full time Mon-Fri.

Employment stipulations:
– Registered in the United States of America
– Must be at least 25 years old
– Skills in Microsoft Office and Adobe Acrobat Reader
– Basic personal computer experience
– Overall knowledge of electronics and appliances
– Physical efficiency to handle big packages, which are low-weight
– Access to an internet connection and a printer.

Job Purpose:
– Accepting incoming goods at your residential address.
– distributing goods
– Submitting daily reports
– Staying in touch with your supervisor on a daily basis.
– Recording facts about the parcels
Ref. number: ID 056-19;

If you find this position exciting we are looking for your reply to our email. Thank you for sparing your valuable time to read this offer.

And then on September 3, another person sent us this nearly identical email from a scammer pretending to be someone named “Maria C Beatson” using the Workmail.com email.

From: Maria C Beatson <Maria.Carrie.Beatson@workmail.com>
Date: September 3, 2020 at 9:33:57 AM PDT
To: [EMAIL REDACTED]
Subject: Hello , WT-4371845

Greetings ,

I am an HR representative. We came across your resume through an employment agency.  We would like to offer you a position: Logistics Manager.  The basic payment is $3000 a month plus bonuses.
Available in: United States (Any City)
Job type: Part time.

Job stipulations:
– Ready to work the United States;
– Familiar with Microsoft Office;
– Strong ability to perform different projects together when it’s required;
– Perfect interpersonal experience is preferred;
– Rendering customer consulting services
– Must be aged 21 or older;
– Keeping up with paper work flow as well as , working together with market credit reports.

Job Summary:
– Receiving delivered packages at your residential address.
– distributing packages
– Making reports everyday
– communicating with your team leader daily without delays.
– Documenting information regarding the packages
Requisition code: ID#06-5618;

If you are serious about this status, please reply in return with your complete name, working phone-number, and the very best call time, and one of our HUMAN RESOURCES Experts is going to get in touch with you.
Thank you kindly for your attention.

UPDATE October 22, 2020:

During October we began to hear from several more Americans who were invited to interview for package reshipping jobs.  The emails were all similar and people were asked to contact email addresses at the free email service workmail.com rather than any business domain.  One woman told us she actually accepted the job in August but recently figured out it was a scam.  And she was never paid for her work to reship packages.  She says “I read your Article about online scamming logistics companies hiring package handlers and I believe I was a victim of this same exact thing recently. Due to the pandemic, I have been unemployed filling out various explications for work from home when i recieved their e-mail.  I worked from August 25, 2020 through October 1st, 2020 without any form of payment and little to no contact other than from my “supervisor “ Maria Bell via email and phone.  I began getting suspicious when I noticed that the sender name on all the new prepaid labels were my name and address but with a different phone number. I tried calling some of them and of course they didn’t work.” 

This woman thought she was hired by a company called POST-PARTUM, with a warehouse address located at 151 William Street, New York, NY.  She was given a contact phone number of 332-600-5272 for this fictitious company and Maria Bell’s email was a generic Gmail account: mariabellhr@gmail.com.  The woman received her instructions through a website called parcel-assistant.com. This bogus website was described as an “internal special system where she was to receive instructions about the packages coming to her.” It was registered in the Netherlands in 2019 and is hosted on a server in Bucharest, Romania.

Other emails about these scam jobs have looked like this recently…