Package Reshipping Job Scams – Round 3:

QY-Shippers / QY Shippers / Quality Shippers, LLC
and RDP Post / RDPPost.com

(Published 12/24/20) In late November, 2020 we began to hear from people asking us about the legitimacy of a company called QY SHIPPERS (Quality Shippers). QY Shippers was offering them “career at home” jobs as “Quality Control Inspectors” to receive, repackage and re-ship packages from their homes to international destinations.  Monthly salaries for this service ranged from $2,800 to $4,000, a very attractive salary for sure.  Also, QY Shippers had a very robust website with lots of information about the company, including  that they have been around for 8 years. (As of December 23, 2020)  As you’ll read below, we have been able to pull back the curtain on this fraudulent business, and several small mistakes by these cybercriminals strongly suggest their general location in the world or at least their native language. The jobs they offer to people are part of an illegal shipping scam.  Most likely, the criminals use stolen credit card information to purchase items online and have the merchandise shipped to an unsuspecting “employee.” New employees are given extensive pdf documentation detailing how to re-ship these packages. They are also sent very clever legal contracts about their terms of employment.  There is even an 8-minute video on the QYShippers.com website that explains the work expected of them! (We’ve downloaded that video and posted it below because it is very likely that QYShippers.com will be taken down.)

UPDATE MARCH 8, 2021: The criminal gang responsible for creating the bogus company “QYShippers.com” has used the exact same website under a different name…. RDPPost.com and are hiring “Warehouse Coordinators.”  You’ll find details about this scam domain/website at the bottom of this article!

Also, we learned something very new, and clever, about this criminal gang that surprised us.  We asked one of their victims how she first learned about the bogus job she was offered at RDPPost.com as “warehouse coordinator” to repackage and reship merchandise that was likely stolen or illegal to ship.  She told us that she was contacted by a Career job website called CareerUSAhub[.]com.

We’re skeptical guys.  The fact that this job search website includes “USA” felt to us like they’re trying too hard to be associated with the United States, so we used a WHOIS tool to investigate this job site.  Remember, it was a person using an email address from this Job site who invited the woman to apply for a job that we KNOW is a fraud!

The WHOIS showed us that CareerUSAHub[.]com was registered through a Registrar and hosting service in Ukraine called Ukrnames, AND this “USA” job website is being hosted on a server in Kiev, Ukraine.  Does any of this sound like “USA” to you?  According to Wikipedia, nearly a third of Ukranians speak Russian, and the Ukranian language is very similar to the Russian language.

UPDATE JANUARY 4, 2021: Sometime in the Fall of 2020 we were contacted by a woman we’ll call “Nan” to protect her identity.  Nan was hired by QY Shippers and worked for them, unpaid, for a few weeks. She was promised that her first paycheck would be sent after her first month of work.  However, her suspicions about her new employer grew strong enough to drive her to search online to look for answers to her questions. That’s when she found our article which confirmed what she had already figured out.  QY Shippers was an illegal operation and she was not likely going to get paid for the work she had done.  Though she still had several boxes that had been shipped to her, she immediately sent QY Shippers an email to say that she had quit.  Then she reached out to us with her story, including inside observations that came from working with this bogus company. When we spoke to her she was exhausted by all of this.  It isn’t just the frequent emails and phone calls that she was getting from the QY Shipper’s “Manager” and “Supervisor,” both of whom were eager to retrieve their boxes, no matter what. It was also because she had filled out a W4 and other forms for this bogus company, giving the scammers very detailed and personal information.  This included her social security number, bank information, a copy of her driver’s license, address and phone number.  She was now deeply involved in protecting herself against identity theft, an effort that can be very time consuming, exhausting and anxiety provoking.

Nan has also contacted her local police, the FBI and the FTC to inform them of her suspicions, about the boxes she still had, and the primary concern that she had been shipping merchandise purchased with stolen credit cards.  She also did something that QY Shippers told all their “Quality Control Inspectors” NEVER to do… She opened the inside boxes of merchandise that were sent to her.  She found laptops, tablets, smart watches, cell phones, and headphones.  By talking to Nan, we’ve learned much more about this scam operation and the tremendous facade they built for their “Quality Control Inspectors.” Here are more details, and speculation, from our conversations with Nan…

Though the majority of her communication with QY Shippers has been via email and the “employee” dashboard at qy-dash.com, she has occasionally received phone calls from women who claimed to be a “Manager” and a “Supervisor.” For example, they called to congratulate her on being hired and to give her information about the job.  Nan told us at first she thought these calls were recordings because the women seemed to be reading from a script.  The employee training informed Nan that her job was to open the outer shipping box, inspect the merchandise box found inside, but NEVER open that merchandise box itself.  If she found an invoice or package list inside the shipping box, she was told to throw it out!  She was also told to remove, or completely cover, ALL other labels that were on the outer shipping box before using the new labels she had been sent to reship the merchandise to its new destination. New shipping labels were available to her through the dashboard. These labels showed other U.S. addresses, sometimes to individuals at a residence, and sometimes to companies. Nan told us that she checked a few addresses found on these reshipping labels using Zillow.com and discovered that some of these addresses appeared to be vacant houses for sale. Her guess is that QY ships stolen merchandise using her as a shield, or that QY ships to other illegal organizations as a means to pay them for services. She also believes that law enforcement would see her as a criminal, conducting stolen credit card laundering. (Nan has not yet shared the names of any of these individuals or companies with us but if she does, we will try to investigate their authenticity.)

Some of the boxes Nan received had no return labels on them at all, while other boxes had labels of the companies that the merchandise came from.  We learned that she received more unlabelled boxes several days after she informed QY Shippers that she had quit.  Nan had a feeling that these “unlabelled” boxes were somehow further out of the control of QY Shippers, as evidenced by the fact that they arrived days after she had quit. Nan told us that she grew very suspicious about her “work” because everything she was asked to do was intended to hide the source of what she received before sending it somewhere else.  Also, the labels on each of the boxes shipped to her had her address but ALWAYS someone else’s name.  Finally, because of her prior experiences with legitimate shipping companies, she knew that the money she was being offered was unrealistically high for the work she was doing.  It just didn’t add up! She told us that the logistics industry for receiving and distributing merchandise is a very low paying wage, in part, to keep shipping costs low.  No one, she said, would ever give a bonus of $50 per box to ship it out on the same day it was received.

Nan said that she received many boxes each week. Once she received a box, she was required to log into the “employee dashboard” (qy-dash.com) within 3 hours to report that she received it.  She told us that the dashboard showed a total number of boxes received, and shipped out, by all “employees.”  Whenever she added a box to the list, the total number would increase by one.  Often, this dashboard server was slow to respond and she sometimes clicked the link twice to input a new package. She could see the resulting total increase by 2 shortly thereafter.  This enabled Nan to make a very interesting observation as to the scope and depth of this fraud.  During her weeks with this bogus company, she saw the total package list increase by several thousand boxes received and re-shipped. If each “Quality Control Inspector” received about the same number of packages per week that she received, it was reasonable to think that QY Shippers had at least 70 – 100 mules, moving merchandise during these 3 weeks!

 

 

The newly hired Quality Control Inspector is told NEVER to open a package he or she receives, only the outer box that it is shipped in.  They are then pressured to re-ship that package overseas immediately (same day), most likely to the scammers or perhaps to whomever they are re-selling the merchandise to. Imagine the risk involved if you are caught shipping stolen or ilegal merchandise overseas!  In the course of these scams, some people have informed us that they had actually received a few week’s salary for their work but then the scammers stopped paying them, while other people told us that they were promised a salary after 2 – 4 weeks of work but then were never paid at all.  Ultimately, all of these “employees” were ghosted by these scam “companies.”  We’ve previously published two related articles about these scams and fake shipping companies:

 

https://www.thedailyscam.com/package-reshipping-scams-again/ (Updated 10/22/20; published 7/3/20)

https://www.thedailyscam.com/package-reshipping-scams/ (Updated 6/24/20; published 6/20/19) 

 

QY SHIPPERS feels exactly like previous package-reshipping scams but thanks to several people who contacted us this December, 2020, we have much more information to shed light on yet another bogus company and their fraudulent practices.  Let’s start with a recent email inviting an applicant to apply for a job, followed by several serious RED FLAGS about the email itself. (Any spelling, grammatical or punctuation errors in the emails we cite are those of the scammer. There are many!)

 

———- Forwarded message ———

From: Juan Sutton <juan.sutton@furcouch.com>
Date: Fri, Nov 27, 2020, 12:21 PM
Subject: RE:[NAME REDACTED] – Open vacancy at QY SHIPPERS
To: [EMAIL REDACTED] 

Dear [NAME REDACTED] ,

We are sending this email one more time. If you already provided your information, please disregard this email.

If you are looking into building your career at home, we (QY SHIPPERS) have a new job opening. The advancement in online marketing and international package deliveries is now opening  great opportunities for everyone who wants to stay home and at the same time have stable income. Quality Control Inspector is another great position which offers fixed monthly salary of $2,800 plus a bonus of $50.00 for each successful package sent. That is an average income of $4,000.00 per month. 

If you are interested to apply for this position, kindly respond to this email with following info: 

1 First name,  Last name
2 Address, city, state
3 Cell phone
4 Home phone
5 Email address
6 Are you already employed?

 

You will then receive a call from our HD Department for the interview to start the trial period.

(NOTE: message with incomplete information might not be accepted by our HR department)

The company provides free training and around the clock support for dedicated staff members. Friendly and always ready to assist supervisors will walk you through the entire work process. 

Feel free to contact us in case if you have any question or concerns. 

Thanks! 

Regards,
HR Department
“QY SHIPPERS”
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203

Phone Support: Mon-Fri 10am-6pm EST
Email Support: 24 hours / 7 days

=======================================================================

RED FLAGS IN THE EMAIL:

1. SENDER’S FROM ADDRESS: The email came from the domain “furcouch.com” rather than the business this email claims to represent.  Google knows nothing about “furcouch.com” (as of 12/23/20).  A WHOIS lookup shows us that it was registered on January 20, 2020 — plenty of time for Google to discover this domain and have information about it UNLESS the domain chooses to remain hidden by instructing search engines NOT to crawl it or not having a website to crawl.  We found no website for this domain on December 23 and the Zulu URL Risk Analyzer tells us that the domain has a redirect that will send a visitor to CareerBuilder.com.  Also, “furcouch.com” is being hosted on a server in Kharkiv Oblast, a province in eastern Ukraine.
2. FRAUDULENT PHYSICAL ADDRESS: QY Shippers lists their address as 15135 Hamilton Ave, Block C-12, Highland Park, MI 48203.  However, a Google search informs us that this address is occupied by a legitimate automotive business called Quality Team 1.  We called this company and spoke to Chris, the Director of Quality at Quality Team 1 on December 23.  He informed us that he has received multiple calls from people investigating a company named “Quality Shippers” because they listed his company’s address as their own.  He’s even heard from the Postmaster General and Better Business Bureau who are investigating QY Shippers.  Chris told us that they have even received several boxes that were shipped to QY Shippers at his company’s address in Michigan but they have refused all the deliveries.
3. LACK OF INFORMATION: Minor issue but the “HR Department” email is not signed by anyone and no other email address is provided.  Nor do they provide a phone number, though they state that Phone Support is available.

 

During December, 2020, several people have continued to contact us about QY Shippers because they were suspicious about these job offers.  One man told us that he had a phone interview with someone from QY Shippers and the representative told him that they do international shipping. They explained that deliveries would first come to him and he will be asked to inspect them for damage. Then he would be required to ship those packages on to the person who ordered the shipped items.  This gentleman was told that the website for QY Shippers is: qyshippers.com  Does this sound like legitimate work to you? We don’t think so!

 

The domain qyshippers.com is another major red flag! This domain was registered anonymously on November 12, 2020 and is hosted on a server in Quebec, Canada. That’s about two weeks before we began to hear from readers about this “8-year old international shipping company.” (According to their website.) However, the waters around this fraudulent company are even muddier than expected.  It turns out that there were two other similar and related fraudulent domains registered around that same time period. Also there is a REAL shipping company of similar name that seems legitimate and located in Hong Kong and China!  The real company, QYShipping.com, was registered back in 2014 and appears to have a robust website to support its mission.  Unlike the real QYShipping.com company, someone anonymously registered these three domains below in mid-November, 2020.  Each of them has been used in emails sent to people who contacted us about suspicious “package reshipping” jobs:

 

     https://whois.domaintools.com/qy-dash.com        (Registered on November 18; hosted in Amsterdam)
     https://whois.domaintools.com/qy-shippers.com (Registered on November 16 from the Netherlands)
     https://whois.domaintools.com/qyshippers.com   (Registered on November 12;hosted in Quebec)

 

NOTE: In previous package-reshipping scams we’ve written about, the cybercriminals have also used business names SIMILAR to real International shipping companies.  These criminals are clever!

=========================================================================

 

In early December we also heard from a gentleman who had a phone interview with QY Shippers which is very unusual for scammers to do. But the man became very suspicious after being hired. To protect his identity, we’ll call him “Paul.”  Paul tells us that after his phone interview, QY Shippers sent him an employment contract, a job manual and other documentation which he gave us to share with our readers. (All are posted below.) He told us that he visited the Michigan government website to search for this business since it was registered in Michigan. Paul told us that he discovered that QY Shippers was registered as a business only a few weeks earlier, in October, even though the QYShippers.com website says they have been in business for 8 years.  (When we tried to search the Michigan business website for this company on December 23, we found nothing about them at all.)  Unfortunately, as part of the “hiring” process, Paul sent these fraudsters a copy of his driver’s license. This could be a big mistake since that document can be used to perpetrate identity theft against someone in many ways.  Should this happen to you, read this article containing important suggestions to protect yourself if your driver’s license is stolen (or handed over to scammers!)

https://www.experian.com/blogs/ask-experian/what-should-i-do-if-my-drivers-license-number-is-stolen/

 

Paul told us that after being hired by QY Shippers he received a voice message from “Ferletta (Ferla or Perla?) Wilcox,” one of the Supervisors of QY Shippers.  The woman completely mispronounced the man’s name, which suggested to us that English is not her native language. If you listen to all the voice messages from her, you can detect a slight accent.  (Paul sent us the voice messages, with permission to post them but we have cut out his name after the woman says “Hi.”)  Ms. Wilcox can be heard reminding Paul about the 3 critical RULES for him to follow:

1. Log into your dashboard at least 3 times a day. (These scammers have an online account for employees on qy-dash.com where they inform people of “deliveries” and keep tabs on their reshipping of the packages.)
2. Report the packages as soon as they are delivered to you. (They want people to upload photos of the packages they’ve received.)
3. Post the packages on the very same day that the shipping label is provided.  

Ms. Wilcox reminds Paul that he will receive a $50 bonus PER PACKAGE if he re-ships the package on the same day he receives it.  DOES THAT SOUND LEGITIMATE??  Listen for yourself. Notice that at the end of the voice message, Ms. Wilcox lists her direct phone number as 313-666-0793 and her email address uses the domain qy-shippers.com.

QY Shippers also asked Paul to open personal accounts with Fedex, UPS and with the United States Postal Service, which he did.  This is another HUGE RED FLAG!  Any legitimate company will ask employees to use the company’s shipping accounts, NOT a personally opened account!  The next day another “supervisor” (a woman named “Nico Hathway”) called Paul and left a message, because he didn’t answer the call. (Hear message below.) This was followed by another email asking him to open the shipping accounts.  She included information about how to pack boxes, etc.They also told him that they will send him some packages in the next day or so. 

Email from Nico Hathway of QY-Shippers.com:

From: Nico Hathway <nico.hathway@qy-shippers.com>
Sent: Wednesday, December 2, 2020 12:21 PM
To: [EMAIL REDACTED]
Subject: Shipping Supplies

Hi ,

Please note: You will receive corporate shipping supplies (tapes, bubble wraps, boxes, markers, mailing tubes, poly bags, company branded T-shirt and cups) from the company within the next 6-8 weeks from now. As you are on your first month, YOU DONT NEED ANY SPECIAL SUPPLIES AT THE MOMENT. NO NEED TO PURCHASE ANYTHING AS WE PROVIDE ALL SUPPLIES LATER ON. At the moment, please order your first batch of free supplies from our partnering carriers below. Please, get ONLY 2 rolls of clear tape in order to stick the outgoing shipping labels. In case you need to purchase clear tape, please provide receipt copy and we will reimburse it.

While receiving and shipping packages you deal with the following shipping carriers: UPS, FedEx, USPS, DHL, Laser Ship and OnTrack. The 3 major providers are UPS, FedEx, and USPS. You need to create your PERSONAL online accounts with these 3 shipping carriers to use some of the online features they offer.

IMPORTANT Don’t request package pick-up from UPS or FedEx office if a package has a different name from yours. You wait until drivers will bring it to your door. IMPORTANT

Get registered with FedEx at http://www.fedex.com/us/ (Note that FedEx asks for your credit or debit card to verify your address, they won’t charge you a penny).

Get registered with USPS at https://www.usps.com/. Then log in to your USPS account and place an order for the following FREE shipping supplies:

1. Priority Mail Box – 4 https://store.usps.com/store/product/shipping-supplies/priority-mail-box—4-P_O_BOX4

2. Priority Mail Box – 7 https://store.usps.com/store/product/shipping-supplies/priority-mail-box—7-P_O_BOX7

3. Priority Mail Shoe Box https://store.usps.com/store/product/shipping-supplies/priority-mail-shoe-box-P_0_SHOEBOX

4. Customs Form Envelope https://store.usps.com/store/product/shipping-supplies/customs-form-envelope-P_FORM_2976_E

Note: These products ship in packs of 10 or 25. An order of 1 equals 10 or 25 boxes or pieces. Order 1 of each and the total should be $0.00. Please shoot me an email when you place the order or if you need help.

Get registered with UPS at https://www.ups.com/. Then log in to your account and go to https://www.ups.com/osa/browse?loc=en_US&category=001

Please order the following FREE shipping supplies:
Packaging:

1. UPS Express Boxes (Large)
2. UPS Express Boxes (Med)
3. UPS Express Boxes (Small)
4. UPS Express Hard Pack – Secure

Envelopes:

5. UPS Express Reusable Envelope

Pouches:

     6.Address Pouch

Labels and Stickers:

7. UPS WorldShip Peel-and-Stick Labels – (2 per Sheet)

Please find the closest UPS, FedEx and USPS drop-off locations and use these locations to ship out the packages. If it’s unreasonably far away, you can use third party locations like Office Depot, Staples and others. Please always choose original locations over third party locations if possible.

—

Kind regards,
Nico Hathway
Supervisor | Shipping Department
Direct number: (313) 666-0835
QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271

Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed

==============================================================================

IMPORTANT TDS NOTES: 

“Nico Hathway” offers her direct phone number as (313) 666-0835.  We discovered that on December 8, someone has identified this phone number as a scam number for QY Shippers on Spokeo.com.  A search for the second phone number, 888-509-9271, turns up nothing.

Since accepting the job with QY Shippers, Paul has received more voice messages and other emails from two other domains:
    Docksideway.com (Registered anonymously on July 18, 2020)
    Valuefkew.com (Registered anonymously on May 5, 2020)

Both of these domains are also hosted on a server in Kharkiv Oblast, Ukraine, like “furcouch.com” above. Paul tells us that when he tried to visit these websites he was redirected to CareerBuilder.com as well.  Paul sent us the voice messages left on his phone from QYShippers employees. The first one below is again from “Ms. Wilcox” and the second one is from a different woman. (We had trouble hearing her name and position because of the quality of the call.)

WHY QYSHIPPERS.COM IS A COMPLETE FRAUD:

Though we feel there are enough red flags listed above to strongly support our opinion that this company is a complete fraud, the most revealing proof comes from their website itself.  On their “About Us” web page they list the top four Team Leaders of their company:

Mark Sanders, CEO Founder
Helen McKinney, Operating Officer
Charles Barton, Logistics Manager
James Merritt, Warehouse Supervisor

 

Each one of these names is complete fiction.  The photos used on this website were stolen from real people across the Internet.  Below are the names of the real people in these pictures and a link to a location where the stolen photo can be found:

“Mark Sanders” the CEO of QY Shippers is in reality Mr. John Brennan, a Compliance Officer at Realogy Holdings Corp., a company in the business of real estate.

“Helen McKinney,” the Operating Officer, is really Caroline Winn from San Diego Gas & Electric.

“Charles Barton,” the Logistics Manager, is really Wayne Witinitara, a Warehouse Supervisor with Ibex Lighting.

“James Merritt” the Warehouse Supervisor, is really Mr. Daniel MacGregor, Director Marketing and Sales, at Nexiot AG.

 

Even the reviewers posted at the bottom of the “About Us” web page are bogus!  One quote supposedly comes from a woman named “Mary Ross,” who gives QY Shippers a 5-star rating.

The image used for “Mary Ross” is a stock image found on many websites around the Internet. But what really got our attention was the fact that this image was found to be associated with sites using the Russian language and websites in Russia itself.  For example, we found it associated with a website in Russia called spb[.]ru.  According to Google Translate, this website represents “The Foundation for Assistance to the Development of Internet Technologies and Infrastructure in Russia.”  But Google found the photo of “Mary Ross” on a subdomain at this site described as “Postcard Galleries” which appears to have links to a wide variety of random photos.

WHO IS LIKELY RESPONSIBLE FOR THIS FRAUD?

In truth, we don’t know who is responsible for this fraud or the other bogus companies we have documented in previous articles about this type of scam.  However, we’ve found a number of breadcrumbs to follow and they suggest that the cybercriminals are most likely native Russian speakers.  (According to Babbel.com, “Russian is the official language of Russia, Belarus, Kyrgyzstan and Kazakhstan, and it’s considered an unofficial lingua franca in Ukraine and many former Soviet countries. These include Azerbaijan, Estonia, Georgia, Latvia, Lithuania, Moldova, Tajikistan, Turkmenistan and Uzbekistan.”  Consider these clues:

1. Three of the domains used to send emails to “employees” in this scam are hosted on a server in Kharkiv Oblast, a province in eastern Ukraine where Russian is spoken by a large portion of the population. (“furcouch.com,” “docksideway.com” and “valuefkew.com”)

2. Google’s reverse image search for the photo of “Mary Ross” turns up links and websites in Russia and associated with the Russian language

3. Scammers often use universally accepted pdf files to send to their victims for many different reasons and we’ve attached several of these files below that were sent to Paul.  Every pdf file contains hidden data about the file itself, such as when it was created and what program was used to create it. Most of the time, scammers are very good about removing any data a file may contain that could connect that file to a location or creator of the file.  However, in one of the pdf files sent to Paul, the sender forgot to remove a bit of data that we think is revealing. The “Author” line of the “Dashboard Manual” contains a Russian word “Пользователь” which Google translates to “User.”  This document also has a creation date of May 16, 2019 suggesting that these criminals have been using this document for about a year and a half.  (Coincidentally, we began to hear from TDS readers in mid-May of 2019 about package reshipping scams again after months of silence and we published an article about this scam in late June, 2019. This included the fake business known as TradexPlusUSA.com.)

4. As we stated earlier, this isn’t the first bogus company created to trick victims into shipping stolen or ilegal materials.  We’ve previously reported about fake companies named TradexPlusUSA.com and OverseasDeliveries.com. The domain for the business called Overseas Deliveries (overseasdeliveries.com) was also registered in Russia and the website for OverseasDeliveries.com was hosted on a server in Moscow, Russia.

Of course, we can be wrong about these breadcrumbs.  For example, Paul told us that the last call he received from these scammers was showed up as a phone number from Bangladesh! +880 17 0080 8695

==================================

CLOSURE:

By the time Paul had been hired, he knew that QY Shippers was a complete fraud and had reported them to various authorities.  But the scammers who represented this bogus company did not know that Paul was on to them. Each day they sent him emails to ask why he hadn’t signed into the online dashboard provided to “employees” to see the status of packages sent to him and for him to download shipping labels.  The “rules” were that he agreed to be at home to receive the packages but he wasn’t signing for them.  In fact, Paul was refusing to receive the packages!  Calls from QY Shippers started to remind him about the rules of his “employment.” They also asked him for his bank information so they could “pay him.”  At least, that was their incentive to manipulate him to do their dirty work.  Shortly after he ghosted them, he received a phone call from Bangladesh, he says, and then another from Michigan, both leaving voice messages. Paul also told us that their emails to him included a description of each package as a gold bar “Credit Suisse One Ounce Fine Gold.”  

 

IMPORTANT TDS NOTE: The Better Business Bureau lists QY Shippers (Quality Shippers, LLC) as registering their business on October 26, 2020.  Nothing else is known about this business on the BBB.org website as of December 23, 2020.

Below you’ll find original emails sent to Paul including those he received offering him the opportunity to apply for this job and the acceptance emails. (One of the emails provided a link to a W-4 tax form for Paul to complete.  The website used for this link is NOT a U.S. Government website and VirusTotal.com tells us that the website is known to contain malware!) Also below is a copy of the training video from the QYShippers.com website.  Finally, here are links to the various pdf files sent to Paul in their original format.  The pdf files include:

• Dashboard Manual.pdf

• HOW TO HANDLE THE PACKAGE.pdf

• How to pick up a Package V2.pdf

• HOW TO UPLOAD PHOTOS ON YOUR DASHBOARD.pdf

TDS NOTE: The domain QY-dash.com was used for the “employee dashboard” to communicate about packages sent to victims of this fraud.  This website sits on a server in Amsterdam, Netherlands. Here is a screenshot of the login page on this website:

FINAL NOTE FROM TDS: We have collected evidence and reports from readers about these package reshipping scams that date back to the Spring of 2018.  The operating procedure and practices used in most of these scams we’ve investigated suggest that one cybercriminal gang could be responsible for most of them.

============================================

RDPPost.com (RDP Post) – “Warehouse Coordinator” scam

On Saturday, March 6, 2021 a man reported to us that he discovered the shipping company that had hired him two weeks earlier as a “Warehouse Coordinator” was a fraud.  He did some Internet research and found this article about QY Shippers and was surprised to learn that his “company” website was identical to the scam site for QY Shippers.  The web company that hired him was called RDP Post.  Their website was hosted at RDPPost.com and their email comes from the domain RDPEmails.com.  What you’ll see below from RDP Post will look VERY familiar.  In addition, we now have a lot more information about these criminals thanks to several people who have been “hired” by them and reached out to us.  Their dashboards show that they’ll be paid thousands of dollars at the end of their month but we already know it won’t happen.  They’ll be ghosted.

The RDPPost.com website is identical to QYShippers.com.  Not only that, but after conducting a variety of Google searches for the content on both websites, we now believe that these criminals have stolen a great deal of text from a very real and legitimate business website at TranslogisticsInc.com.  When we searched for text found on RDPPost.com (and QY Shippers), Google showed us the identical, or nearly identical text on TranslogisticsInc.com. Here are two examples…

Translogistics Inc. has been around for more than 20 years and is located at a real address in Pennsylvania.  But RDPPost.com AND RDPEmails.com were both registered anonymously in February, about 3 weeks before we found their website. Keep in mind, like QY Shippers, RDP Post claims on their website to have been in business for 8 years.  It is NOT TRUE!

           

MOST REVEALING, RDP Post shows the same exact list of people who run their company.  These are people we have already shown to have their photos stolen and fictitious names applied to those stolen photos.

The stolen photos used on the RDPPost.com website were easy to find using a reverse image search.  Below are the names of the real people in these pictures and a link to a location where the stolen photo can be found:

“Mark Sanders” the CEO of RDP Post is in reality Mr. John Brennan, a Compliance Officer at Realogy Holdings Corp., a company in the business of real estate.

“Helen McKinney,” the Operating Officer, is really Caroline Winn from San Diego Gas & Electric.

“Charles Barton,” the Logistics Manager, is really Wayne Witinitara, a Warehouse Supervisor with Ibex Lighting.

“James Merritt” the Warehouse Supervisor, is really Mr. Daniel MacGregor, Director Marketing and Sales, at Nexiot AG.

 

It’s important to note that people have already reported RDP Post as a scam company to the Better Business Bureau, according to the BBB.org website.

WHAT ELSE HAVE WE LEARNED ABOUT THIS SCAM AND THESE CRIMINALS:

 

We’ve learned that the “Employee Dashboard” is robust with lots of features that help trick victims into believing this is a legitimate company.  The dashboard is primarily how the criminals communicate with victims about packages they are meant to receive and ship elsewhere.  The criminals even post national holidays as days off, such as Martin Luther King Day.  They copied text about Dr. King from Autobiography.com and posted it for their “employees” to see. The criminals also track your expected salary in the upper left corner of your Dashboard.

NOTE: By the way, we downloaded all of the pdf training files that were posted for employees.  In some of the pdf files we again found hidden words in Russian.

Our insiders to this scam company informed us that they have been re-shipping iPhones (lots of iPhones!), One Ounce Gold Seuss Credit Bars, Victoria Secret products and even Adidas shoes!

On a funny note, these criminals don’t always have an eye for detail.  On their website’s Q&A section, they repeatedly misspell their own acronym “RDP!”  Check out this screenshot to see that they use “RPD” instead of “RDP.”

BELOW YOU’LL FIND COPIES OF SOME OF THE EMAILS SENT TO US BY VICTIMS OF THIS SCAM:

From: accounting@qy-shippers.com <accounting@qy-shippers.com>
Sent: Friday, December 4, 2020 11:02 AM
To: [EMAIL REDACTED]
Subject: Payroll

Dear  [NAME REDACTED],

Accounting Department is requesting your payment information to add you to the payroll.

Quality Control Inspector is paid 2800$ fixed and additional bonus 50$ for successful package sent ontime (paid monthly). Average monthly income after Federal and State taxes is 4000$. Tax will be taken out automatically and at the end of the year, employee will receive W-2 Form in order to files tax return.

Payments are issued once a month on your pay day. All packages MUST BE SENT before the paycheck is issued every month. Any delayed tasks might cause payroll being on hold. The first payment is issued after 30 or 31 days from the date the first package has been shipped out. It might take addtional 24-48 hours for the banks to process your payment ONLY for the first time for security purposes. We want to make sure that your payment information is accurate, thus we check if twice for you.

1. If you would like to be paid by direct deposit to your personal bank account, pls provide the following information.

Bank Name:
Bank Address:
Account Holders Name:
Account Number:
Routing number:
Account type (Checking/ Saving):

Note: The account you would like to use to get your salary needs to be registered on your name.

2. If you would like to be paid by PayPal, please provide the email address linked to your PayPal account. Note: 3.4% commission fee is deducted by PayPal.
3. If you would like to be paid by check, please provide your mailing address.

Please provide your payment information by responding to this email.

Thank you for your cooperation.

Regards, Accounting Department
QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271

Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed

=====================================================

From: accounting@qy-shippers.com <accounting@qy-shippers.com>
Sent: Friday, December 4, 2020 3:02 PM
To:  [EMAIL REDACTED]
Subject: W-4 Form

Dear [NAME REDACTED],

Please complete Form W-4 so the company can withhold the correct federal income tax from your pay. You can download the Form here: h t t p://u[.]pc[.]cd/lUq

We ask for the information on this form to carry out the Internal Revenue laws of the United States. Internal Revenue Code sections 3402(f)(2) and 6109 and their regulations require you to provide this information; we use it to determine your federal income tax withholding. Failure to provide a properly completed form will result in your being treated as a single person who claims no withholding allowances; providing fraudulent information may subject you to penalties. Routine uses of this information include giving it to the Department of Justice for civil and criminal litigation; to cities, states, the District of Columbia, and U.S. commonwealths and possessions for use in administering their tax laws; and to the Department of Health and Human Services for use in the National Directory of New Hires.

Please return completed Form to accounting@qy-shippers.com

Note that your net pay is 2800$ fixed salary + bonuses (50$ for each shipment) successful package sent ontime BEFORE taxes. Average monthly income 4,000$.

Regards, Accounting Department

QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271
Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed

[TDS HAS BROKEN THE W-4 LINK ABOVE ON PURPOSE. IT LEADS TO MALWARE! It does not point to any U.S. government website providing a W-4.  In fact, the link points to a website hosted in the Democratic Republic of Congo! “.cd”]

===============================================

From: notifications@qy-shippers.com <notifications@qy-shippers.com>
Sent: Saturday, December 5, 2020 8:56 AM
To:  [EMAIL REDACTED]
Subject: Unboxing Policy

Hi, [NAME REDACTED].

Please observe this inspection policy:

While inspecting packages, DO NOT open or unseal product’s original packaging, unless you receive instructions from the management team to do so. You are only allowed to open the outer shipping box (so-called brown box) to count items, check it for any damages and match them against packing list or invoice (if it’s provided) and then take pictures and make copies of paperwork. You take photo of product in its original box. If it’s damaged you report it immediately to your supervisor and wait for further instructions.

The company guarantees our customers that we ship out brand new products. Except for some cases wherein customers order refurbished/open-box products and they are aware of it.

You may receive correspondence addressed to our customers. DO NOT open it or remove its seal. Please report it to your supervisor. Wait for further instructions from management.

We always keep our customer’s correspondence safe and confidential.

If you have additional questions, let me know.

Thanks.

Regards, HR Department
QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271

Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed

==========================================

From: human.resources@qy-shippers.com <human.resources@qy-shippers.com>
Sent: Saturday, December 5, 2020 1:02 PM
To:  [EMAIL REDACTED]
Subject: Important mail/correpondence management rules

Dear [NAME REDACTED],

This is a reminder of the steps to take should you receive any correspondence or letters PayPal or any others:

1. DO NOT OPEN.
2. REPORT as an UNKNOWN PACKAGE on the dashboard.
3. KEEP LETTER SECURE until further instructions. We provide special company pouch once a month. You need to put all mails received during the month and send it to our corporate office. You will get the pouch within 3 days after you payday.

We provide this mail forwarding as additional service for our customers. They might received promotions , statements and notifications about their purchases. Make sure You dont open them and keep SEALED.

For any questions or concerns, reach out to your supervisors.

Thank you for your cooperation.

—

Regards, HR Department
QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271
Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed

=====================================

Hello [NAME REDACTED],  

The QY SHIPPERS is looking for a Quality Control Inspector with a keen interest in inspecting packages and make visual and measurements tests. This job is entirely home-based and has flexible working schedule from Mon – Fri.

You’ll work on a small team in the QY SHIPPERS who will Receive incoming shipments of merchandise, Make visual and measurement tests. Prepare Merchandise for shipment, keep records concerning these transactions and quick response to emails and phone calls. 

The Ideal candidate is familiar with inspection and has dedication in making job more successful and progressive.

 We offer a competitive salary and benefits. 

To apply you can email to us your basic info and your Resume:  

 1 First name,  Last name
 2 Address, city, state
 3 Cell phone
 4 Home phone
 5 Email address 

Thank you

Regards,
HR Department
“QY SHIPPERS”
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
Phone Support: Mon-Fri 10am-6pm EST
Email Support: 24 hours / 7 days

============================================= 

Dear [NAME REDACTED],

Congratulations!

Your employment application at QY SHIPPERS, has been approved. We are happy to announce that you meet the requirements for the Quality Control Inspector position.

Please, watch employment explainer video: https://qyshippers.com/video.html

It will give you detailed information about the business nature and position itself. The video lasts about 7 minutes, that’s why get pen and paper so you can take notes.

Feel free to review the video several times so that you can understand the job duties properly. We will call you shortly in order to conduct employment interview and provide more information. Please, make sure that you are available on the phone for an interview.

Thank you

P.S. in case if video does not play, please refresh it several times or download it! It must be converted to Your web browser to watch it. Make sure to download the video first and then play it.

—

Regards, HR Department

QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271
Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed

================================================== 

Here is a link to view the training video that QY Shippers posted for their “employees” to view for their training.

From: Kiran McManus <kiran.mcmanus@qy-shippers.com>
Sent: Monday, November 30, 2020 10:39 AM
To: [EMAIL REDACTED]
Subject: RE: WELCOME TO QY SHIPPERS 11/30/2020 

   Confirm Employment Acceptance

Please follow these steps to complete the employment agreement.

1.Download the attached file below (Employment Agreement Form in PDF  ) and review form details.

2.Complete the employment agreement by replying to this email using the template below.

I, (NAME OF THE APPLICANT), read the employment agreement of the company. I accept all the terms and conditions and would like to start work as soon as possible.

Address to send packs: (APPLICANT NEED TO PUT FULL ADDRESS WHERE WE CAN SEND PACKS)

Emergency contacts: (APPLICANT NEED TO PUT EMERGENCY CONTACT PERSON, NAME AND PHONE NUMBER)“

3. Make sure to attach a front and back photo of any government-issued identification to your response. 

NOTE: The Employment agreement file is for reviewing purposes only

Kind regards,
Kiran McManus | HR Department
Direct number: (313) 666-0766
QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271
Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed 

=================================================

From: Kiran McManus <kiran.mcmanus@qy-shippers.com>
Sent: Monday, November 30, 2020 10:37 AM
To: [EMAIL REDACTED]
Subject: WELCOME TO QY SHIPPERS 11/30/2020 

Hi!

Thank you for attending the interview with QY SHIPPERS. You are just 1 step away from building your profile and getting your dream job. Kindly confirm on this thread if you are interested with the Job Position as Quality Control Inspector.

Simply reply on this email

BEST WISHES!

Kind regards,
Kiran McManus | HR Department
Direct number: (313) 666-0766
QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271

Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed

============================================

From: Esther.DaCosta@qy-shippers.com <Esther.DaCosta@qy-shippers.com>
Sent: Wednesday, December 2, 2020 11:01 AM
To: [EMAIL REDACTED]
Subject: Dashboard Activated 

Dear [NAME REDACTED],

Your dashboard has been fully activated. Please, follow the next steps in order to get fully set.

1) Go to https://qy-dash.com/user/login.php

2) Enter your username and password. The one you created upon registration process.

 3) When you login to your dashboard go to “HELP” section. Study the section in detail. You will find attached link which will give you step-by-step in on how to process the packages. Download and study it please.

Put my email in your contact list. You will receive numerous emails from me.

Feel free to contact me in case if you have any questions or concerns.

Once again, welcome to the team!

—

Kind regards,
Esther Da Costa | Manager Shipping Department
Direct number: (313) 666-0768
QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271
Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed

===============================================

From: Nico Hathway <nico.hathway@qy-shippers.com>
Sent: Wednesday, December 2, 2020 12:20 PM
To: [EMAIL REDACTED]
Subject: Welcome to QY Shippers! 

Hi !

Congratulations and Welcome to QY SHIPPERS.

To prepare yourself  for the upcoming packages to inspect, please review the email I sent  you.

For detailed illustrations on the steps on how to process packages, please go to this link h t t p://u[.]pc[.]cd/zgditalK and study them.

how to upload photos on dashboard: h t t p://u[.]pc[.]cd/F2ditalK

[TDS NOTE: We have broken these links because malware has been found on this website.]

Basically, just remember the 3 rules:

** Rule number 1. Please log in to the dashboard at least 3x a day (Monday- Friday).

** Rule number 2. When the package is delivered, make sure to report package as RECEIVED and upload the photo of the item and invoice in the Dashboard within 3 hours from the time you received the package.

** Rule number 3. When the shipping label is already available in the Dashboard, make sure to ship out the package within 3 hours from the time the label is provided. After shipment, secure the receipt and upload a photo of it in the Dashboard.

Again, welcome to the company and good luck on your first packages!

—

Kind regards,
Nico Hathway
Supervisor | Shipping Department
Direct number: (313) 666-0835
QY SHIPPERS
15135 Hamilton Ave, Block C-12, Highland Park, MI 48203
(888) 509-9271 

Mon-Fri 09:00AM-06:00PM EST
Sat-Sun Closed