STEALING $900 FROM A SCAMMER! [HACKED]

a few days ago i received this voicemail on my voip number this is alert message of amazon a purchase made on your amazon account for apple iphone amount of 599 dollar form different location if you would like to cancel or refund you can call us immediately thank you it's very common for scammers to do they send you a voicemail with some kind of fake information and tell you to call them back or call a certain number and this time it was about an amazon purchase of an iphone even though i don't have an amazon account when you actually call this number and you do actually have an amazon account that fall for this they will tell you that you made a purchase of an iphone and that you can cancel the purchase because obviously you didn't make this purchase and then when you get the money refunded back into your bank account they make it seem like they refunded ten times the amount they should have refunded and then you need to give them that money back even though i knew it was a scam i decided to call anyways and tried to reverse the connection on these cameras so i could have access to their pc without their knowledge but before we get into the video i just want to do a quick little shout out to my patreon frequency wavelength he made it possible that i could have the paid version of my static vpn which make the videos way easier for me and you guys can check out my patreon in the description if you also want to help me out okay and then i click on accept or dismiss yeah accept and finish very good accept and finish yeah except okay accept it says waiting for technician u.s is that you okay okay yeah unlike so uh just give me a second let me now what exactly you can see on the screen um it says session star oh it just closed down it says this desk uh i can see that you have yeah i yes yes yes sir you have been get successfully connected with the amazon company okay and they will be giving you the refund cancellation form okay so okay right now what i'm going to do i will be getting your connection secure with us so that while refunding you the money we will not lose the connection okay sir okay yeah just give me a moment i will make the connection secure on your computer just give me a second and in the meantime so like i would like to have you be ready with your pen and a paper in front of you like do you have a pen handy in front of you okay hold up give me one second sir hold on so at this point the scammer still didn't realize i did do something to his computer and he was still hungry to scam me he kept calling me back over over and over again so i decided i could possibly get another pc in the call center and then this is what happened okay like do you know how to uninstall the file do you know how to uninstall the file i don't think this connection is a problem from my end because your phone also kept disconnecting so maybe you need to try to connect from a from another device or from do something else okay so uh just give me a second just tell me already once again i'm drawing from different so zero server tell me already once again six zero three now yes i can see the warning again yes now it is working okay yes give a click on yes give a click on give a click on i trust this call okay accept uh waiting for technician p.o is that you yes sir that's me very good okay i think it's a style i will be giving you the yeah so now i will be giving you the refund cancellation form okay yes oh yes now i can see the manager yeah and how much is your refund amount sir i think it was 5.99 [Music] okay on the google chrome or what is the balance see all right so as you can see i got two connections from the same ip address and nano core is showing it as if this is from japan but if you actually look up the geo location and the isp and all that information on the ip address on a decent website you can find this information so as you can see they are located in the region maharashtra in the city pune and their isp is cobb technology so i decided to contact the abuse email addresses that were connected to this company to this isp and send them a little email about these cameras and i hope they will take action and maybe shut down their internet or whatever so after i was able to reverse the connection on the scammers i decided to watch them for a little bit so i could watch what infrastructure they use to scan people first thing i noticed when i got the reverse connection on this pc is that there was no mics connected to the pc and i quickly found out why this was it's because they are using actual phones as you can see on the screen right here they are using the trim tone which means that they do not use voids like x-lite or grasshopper like usual scammers do but these guys are actually using actual phones and i decided to contact ringtone as well to report the abuse that these cameras are doing with their telephone system what you're seeing now is me logging into their fisai dial using the logins that i clocked with my keylogger and as you can see this is the screen where they scan people and then i open the logs to see what kind of calls they made i'm gonna blur all the numbers there's a bunch of information that you can see here like the length of the calls and whatever you can check it out for yourselves and this is all the calls that they received on the day which was august 18. on this webpage you could also see the call history of this number this campaign and i could see that they only started a few days ago as you can see right here the last thing that i noticed was that they take the people to their webpage which is their own web page and it's called refundpolicy.uk and on this webpage there's just shortcuts for downloads for things like teamviewer any desk and all the programs they use to remotely connect to their victims so they can go into their bank account inspect the element and fake the refund and when you go into their website refundpolicy.uk and you scroll down you can actually see that the webpage is hosted by website.com so i decided to contact website.com and make them aware of these fraudulent activity that the scammers are doing by mainly using this webpage as well it's a part of their infrastructure to scam people and it plays a big role in scamming their victims so i've been watching the scammers for about three to four hours now and then came the time that they shut off which was at around 4 30 a.m indian time but before they shot off the pc they did something very interesting they went to google chrome to the settings and they deleted all cookies all password all browsing history etc which is probably routine because it seemed like they had done it before and after sending the complaint email to website.com after nine hours they already responded which is fairly quick because usually i don't get any response or it takes a few days or weeks so they took down the website and now if you go to the web page this is what happens yeah after the scammers shut down for the night i decided to come back the next day and to my surprise they had already been active for a few hours even though it was fairly early usually scammers don't operate in these times so i was surprised but i found out that they were trying to scam uk people so in the daytime they scammed uk people and at night they scammed us people and when i looked into their records into the logs and that my keylogger clocked from them i found login credentials to a winscribe account that they used so i decided to go ahead log into that winscribe account change the password and change the reset email and i also found something which is kind of more shocking um i found seven uh numbers uh seven codes which said that they were each 100 pound sterling so 100 british pounds of google play cards so they had managed to scam someone while i was not watching which is very unfortunate i couldn't prevent it but after the scam i could do some work to try and get this person's money back so i contacted google directly and i'll show you guys what happened after i found out about these codes but before i do that i just want to show you guys that these cards are actually eligible it's not in english but it basically says that you are about to add 100 pounds to your account so these all these seven cards were still active these cameras had not activated them yet and i knew i could do something all right so after shutting down their website after hijacking 700 or pounds from them contacting their isp and contacting the host for their telephone system me and my friend went ahead and destroyed the pc in a funny way to spook them and to prevent them from any further scamming in the future yeah i sound yeah i think it sounds legitimate enough all right i'm gonna run it all right all right let's let's see which one are you running on the afk one or the active one both well which one first though i'm going to i'm just going to start deleting files i think they have files uh just their applications yeah just delete everything from um us i'm gonna do us first yeah unless you want me to you upload by ransomware all right i'm waiting for the pop-up are you ready to delete all the files and i run the locker yeah once you run it which i'm gonna go for i'm gonna go for the one that has google up right now first oh yeah should i run it yeah go ahead go and run it tell me when it's active oh all right the other one is gone as well oh i got hiss actually it's easier yep they both got [ __ ] you like their pune police picture as well let's see let's see the picture is uh the police force like where they're from the police i wish i had their mics i mean if we can i don't have any numbers i can call them on on like unfortunately yeah let's just go going through their files and um just delete everything you can delete just delete everything there is possible all right any desk is gone i mean they didn't have a lot of files anyway so it's fine oh what's in there roaming um teamviewer oh he's trying to enter passwords he's doing one two three four five six these things were [ __ ] stupid bro all right so the us guy is active the po guy is uh still afk i think and after this they restarted their pc a few times like four or five times but the system locker is added to startups so every time they restart the pc they see the system locker and the police force their local police force picture i hope to spook them we put up a message i would put it on the screen right now this was the script that i put down on their screen to spook them yeah after two or three hours i haven't had any connection coming from them so they might format the hard drive or download a new version of windows whatever they want to do and continue scamming but i hope that at least we slowed them down while their web page is done their broadband might be cancelled whatever i tried everything i could do to slow them down and also just get some money back to the victim

Channel: Scambaiter

Views: 985,839

Keywords: scammer, files, deleted, file, delete, scammers, indian, tech, support, refund, scammerrevolts, payback, acces, rat, pc, destroying, destroy, all, facebook, ip, ratted, dox, exposed, expose, memz, memz virus, ratting a scammer, scammer memz, syskeying a scammer, syskey, destroying scammer computer, memz scammer, ratting scammer, memz trojan, rat scammer, memz virus scammer, scammer syskey, scammer rat, scammer ratted, ratting scammer pc, scambaiter, ransomware, tech support scam

Id: 69XhXIdLMvw

Length: 15min 49sec (949 seconds)

Published: Wed Aug 19 2020

Reddit Comments

[u/TerryVelbar]

I screw with if I don't have time to talk and tell them yes I did make the purchase. They habg up.

If I have time, I act like I'm installing Teamviewer or other software they ask for,and give them fake login and password. I keep playing stupid until they hang up.