Scam-LR :: The Liberty Reserve Scam Resource

Another fake email claim to be from Liberty Reserve

2011-12-16T18:27:00.000-08:00

Please ignore such type fraud emails, read what LR says about such type Fraud:
Liberty Reserve DOES NOT offer ANY investment opportunities directly or indirectly.
http://blog.libertyreserve.com/2011/06/notice-about-investments.html

Liberty reserve account number of this scammers : U5197223
this guy blacklisted already, now days send out fraud emails from this host
http://hyipspot.com hyipspot.com - some fake hyip monitoring site

Here is email and headers

============================================
Please note that in all e-mails from Liberty Reserve we will:
Always address you by your first name.
Never send you any links or attached files.
Never ask you to send us your password and/or login PIN.
============================================

Dear Libertyreserve Customer,

Since 2002 Liberty Reserve has made considerable progress and improvement
Serving you with most sophisticated electronic payment solutions possible
We're glad to announce that our service has become the leading e-currency in market
Liberty Reserve services are being improved continuously

Recently we have established a very important relation with leading investment fund traders
Our co-operation opens a possibility to make terminal-dividend investments in short term dates
This is our first publicly launched investment program. In order to participate read the terms below

GET 133% RETURN IN 5 DAYS!
Minimal deposit is ($50) while the maximum is ($50 000) per investment.

Terminal payout rate is 133% leaving you an opportunity to earn $133 USD after $100 USD deposit.
Rate is fixed and your investment funds are fully risk-free, warranted by Liberty Reserve
Make 133% out of your capital for 5 day and become a partner of our trustworthy associates

In order to participate make a deposit to
General depository account U5197223 (LR), - https://sci.libertyreserve.com/?lr_acc=U5197223

The 133% payout will be withdrawn back to your Liberty Reserve USD purse.
All transactions are settled without any delay.
Pay-outs from Liberty Reserve S.A funds are fully automated, paid-out without any additional fees

Thank you

==============================================

Do not reply to this e-mail

Received: by 10.231.113.92 with SMTP id z28cs10432ibp;
Fri, 16 Dec 2011 04:05:20 -0800 (PST)
Received: by 10.52.74.163 with SMTP id u3mr5432195vdv.91.1324037118508;
Fri, 16 Dec 2011 04:05:18 -0800 (PST)
Return-Path:
Received: from server.spencer.com (fa.aa.f4.static.xlhost.com. [173.244.170.250])
by mx.google.com with ESMTPS id ij10si4740511vdb.38.2011.12.16.04.05.15
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 16 Dec 2011 04:05:18 -0800 (PST)
Received-SPF: neutral (google.com: 173.244.170.250 is neither permitted nor denied by best guess record for domain of hyipspot@server.spencer.com) client-ip=173.244.170.250;
Authentication-Results: mx.google.com; spf=neutral (google.com: 173.244.170.250 is neither permitted nor denied by best guess record for domain of hyipspot@server.spencer.com) smtp.mail=hyipspot@server.spencer.com
Received: from hyipspot by server.spencer.com with local (Exim 4.67)
(envelope-from )
id 1RbWHB-000419-RW
for *******@gmail.com; Fri, 16 Dec 2011 06:48:33 -0500
To: ******@gmail.com
Subject: LibertyReserve Investment Plan!
X-PHP-Script: hyipspot.com/admin.php for 95.38.50.66
From: no_reply@libertyreserve.com
Reply-To: no_reply@libertyreserve.com
Message-Id:
Sender:
Date: Fri, 16 Dec 2011 06:48:33 -0500

Another imbecile LOL send out same type email
This one used this IP : 79.143.168.8

here is email and headers :

============================================
Please note that in all e-mails from Liberty Reserve we will:
Always address you by your first name.
Never send you any links or attached files.
Never ask you to send us your password and/or login PIN.
============================================

Dear Liberty Reserve Members,

Liberty Reserve has made considerable progress and improvement, it has become the leading e-currency and its services are being improved continuously.

Recently we have estabilished a very important relation with leading Forex traders from Costa Rica and we decided to give a special offer to you:

GET 150% RETURN IN 7 DAYS!

This opportunity will not last long, so you must react quickly.

Deposits are accepted until December 18. 2011. 00:00 (GMT), which means that you have about 24 hours to make a deposit in case you are interested in this offer.

One unit in this special program is worth 100 US dollars. The minimal deposit is 1 unit ($100), while the maximum deposit is 1000 units ($50000) per member.

You need to make a spend to:

Liberty Reserve account U2139917 - https://sci.libertyreserve.com/?lr_acc=U2139917

The 150% payout will be made back to your LR account in 7 days, on December 25. 2011. 00:00 (GMT).

The payout is GUARANTEED and there is no risk from losing your funds.

This is a TIME LIMITED ONE-TIME OFFER and you must ACT NOW!

Thank you.
Received: by 10.231.113.92 with SMTP id z28cs27808ibp;
Fri, 16 Dec 2011 16:32:32 -0800 (PST)
Received: by 10.213.3.218 with SMTP id 26mr3036565ebo.118.1324081943212;
Fri, 16 Dec 2011 16:32:23 -0800 (PST)
Return-Path:
Received: from mail.elta-kabel.com (ns2.elta-kabel.com. [79.143.168.8])
by mx.google.com with ESMTP id g3si522328eea.118.2011.12.16.16.32.19;
Fri, 16 Dec 2011 16:32:23 -0800 (PST)
Received-SPF: fail (google.com: domain of no_reply@libertyreserve.com does not designate 79.143.168.8 as permitted sender) client-ip=79.143.168.8;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of no_reply@libertyreserve.com does not designate 79.143.168.8 as permitted sender) smtp.mail=no_reply@libertyreserve.com
Received: from smtp.elta-kabel.com (unknown [62.68.122.118])
by mail.elta-kabel.com (Postfix) with SMTP id 755DC14A06FC;
Sat, 17 Dec 2011 01:32:13 +0100 (CET)
Received: from 109.97.118.18 by ; Fri, 16 Dec 2011 20:23:11 -0400
Message-ID:
From: ""
Reply-To: ""
To: *******@gmail.com
Subject: Liberty Reserve Investment Offer
Date: Sat, 17 Dec 2011 03:24:11 +0300
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--7782742238183764"
X-Priority: 3
X-MSMail-Priority: Normal

Please blacklist this LR account numbers:
U2139917
U5197223

Phishing emails

2011-09-13T22:27:00.000-07:00

Please blacklist / write down the following accounts numbers
Fraud LR # U3662958, Fraud LR # U8470122, Fraud PM # U1702130

Here is Phishing emails:
Both emails was sent out from the same server, by the same scammer
admin kolhozniki.com hyip scam
His IP 95.68.111.70 was found near Riga, Riga located in Latvia.

Subject: =?UTF-8?Q?From_Money-News=E2=80=8B-Online_Blog_-_Invest_in_My_Private_Fun?= =?UTF-8?Q?d?=
X-PHP-Script: 72.8.172.158/mail/index.php for 95.68.111.70
Date: Tue, 13 Sep 2011 16:05:33 -0700
From: Paul Abramson
Message-ID:
X-Priority: 3
X-Mailer: PHPMailer 5.0.2 (phpmailer.codeworxtech.com)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dedicated.koddos.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [539 536] / [47 12]
X-AntiAbuse: Sender Address Domain - dedicated.koddos.com

Hello,

This offer is only for MNO downlines and my blog readers. Please note that there isn't a website for the program like we have seen for all HYI programs, instead of it, investments are sent manually into my e-currency accounts. The reason of keeping the investment fund 'offline' is because of the security most programs have with hackers, etc.

There are two plans being offered at this time: 120% after 7 days, 150% after 14 days
Minimum to start with is $50, Maximum - $50,000

To invest your funds, please send the deposit directly to my LR/PM account mentioning the plan you choose in the MEMO.
- Liberty Reserve account: U3662958
- Perfect Money account: U1702130

My investments are diversified into sports arbitrage (speculating on different bookmaker opinions as they say), couple of high yield investments that I have selected to work for many months giving me high returns.

Please pay attention to the fact that there were several scammers trying to impersonate me before, so this time I'm sending you this e-mail directly from my blog's local e-mail address to avoid any issues.

Best regards. Paul

--
Daily News and Monitoring
_http://money-news-online.com

Next one claim to be from Gorgonprojectinvest, that is fake also

Subject: GPI - New Plan added
X-PHP-Script: 72.8.172.158/mail/index.php for 95.68.111.70
Date: Tue, 13 Sep 2011 09:52:40 -0700
From: GPI Admin
Message-ID:
X-Priority: 3
X-Mailer: PHPMailer 5.0.2 (phpmailer.codeworxtech.com)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dedicated.koddos.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [539 536] / [47 12]
X-AntiAbuse: Sender Address Domain - dedicated.koddos.com

Dear GPI members,

We are proud to announce our first, VIP plan. GorgonProjectInvest would like to thank everyone for the continuous support and cooperation you have put into our investment opportunity.

The plan is called "Gorgon VIP", and return is 150% after 1 day. To invest in this plan, you will be required to deposit at least $100 USD and the maximum is $50,000.

In order to make the deposit into our special plan, you're not required to login in our site. Our system will automatically recognize your user name and investment will be credited as soon as we receive the funds.

Please click on link below in order to make deposit. In memo add your username and plan name. Example: Deposit in VIP Plan - GorgonMember

_https://sci.libertyreserve.com/?lr_acc=U8470122

Please note that we send emails only from gorgonprojectinvest domain, all others are fake.

GorgonProjectInvest Admin

Another fake email claim to be from Liberty Reserve

2011-08-10T22:48:00.000-07:00

Another scam -- Investment Revolution -- claim to be "invest-program" from Liberty Reserve.
Please ignore such type fraud emails, read what LR says about such type Fraud:
Liberty Reserve DOES NOT offer ANY investment opportunities directly or indirectly.
http://blog.libertyreserve.com/2011/06/notice-about-investments.html

Liberty reserve account number of this scammers : U5197223

Here is fake email:

============================================
Please note that in all e-mails from Liberty Reserve we will:
Always address you by your first name.
Never send you any links or attached files.
Never ask you to send us your password and/or login PIN.
============================================

Dear Member ,

Investment Revolution is Live! ONLY FIVE DAYS LEFT FOR TO JOIN!

We want You to take a part in our third invest-program from Liberty Reserve
Deposits are accepted until 10 of August. The program is then activated till 17 August, 2011
Each unit is valued at $100 tag. Minimal accepted deposit - 1 unit($100), maximum - 200 units($200,000)
Final payout rate is 135% per unit, with an opportunity to get up to $7.000 profit in a week
Dividend-rates are fixed and your funds are fully secured, warranties by Liberty Reserve
No taxation, transactional or withdrawing fees are applied for investments

Our prospective Investors, in order to apply for a program make a spend to:

General depositary account U5197223(LR) - https://sci.libertyreserve.com/?lr_acc=U5197223

Final day for deposits is 12th of August, 2011 00:00 (GMT), any afterward investments shall be reversed
The 135% payout will be withdrawn to your account purse on 17 August 2011 without any delay
This is the last program from Liberty Reserve in current summer season, invest today - profit tomorrow!

Do not reply to this e-mail

Peace & Profit!
Thank you

==============================================

Email header:

Delivered-To: myemail@gmail.com
Received: by 10.231.30.138 with SMTP id u10cs3998ibc;
Wed, 10 Aug 2011 19:18:19 -0700 (PDT)
Received: from mr.google.com ([10.52.175.234])
by 10.52.175.234 with SMTP id cd10mr2531679vdc.245.1313029099616 (num_hops = 1);
Wed, 10 Aug 2011 19:18:19 -0700 (PDT)
Received: by 10.52.175.234 with SMTP id cd10mr1725630vdc.245.1313029099220;
Wed, 10 Aug 2011 19:18:19 -0700 (PDT)
Return-Path:
Received: from ipap.fazaha.com ([173.242.120.226])
by mx.google.com with ESMTPS id dd2si3699340vdc.119.2011.08.10.19.18.18
(version=TLSv1/SSLv3 cipher=OTHER);
Wed, 10 Aug 2011 19:18:19 -0700 (PDT)
Received-SPF: neutral (google.com: 173.242.120.226 is neither permitted nor denied by best guess record for domain of earnhigh@ipap.fazaha.com) client-ip=173.242.120.226;
Authentication-Results: mx.google.com; spf=neutral (google.com: 173.242.120.226 is neither permitted nor denied by best guess record for domain of earnhigh@ipap.fazaha.com) smtp.mail=earnhigh@ipap.fazaha.com
Received: from earnhigh by ipap.fazaha.com with local (Exim 4.69)
(envelope-from )
id 1QrKu1-0000rs-Ap
for myemail@gmail.com; Thu, 11 Aug 2011 06:21:45 +0400
To: myemail@gmail.com
Subject: Hedge-fund investments from Liberty Reserve
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
From: no_reply@libertyreserve.com
Reply-To:
X-Originating-IP: []
X-Originating-Email: [no_reply@libertyreserve.com]
X-Mailer: Anonymail
Message-Id:
Date: Thu, 11 Aug 2011 06:21:45 +0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ipap.fazaha.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [502 501] / [47 12]
X-AntiAbuse: Sender Address Domain - ipap.fazaha.com

Fake Liberty Reserve Investment site

2011-07-18T18:54:00.000-07:00

Admin of old HYIP scam site called Prosperitywallet.com
Run another scam project Fake investment site that is claimed to be a own by Liberty reserve.
Site name is : libertyreserve-invest.net
This scum tried to gain naive members by spam since he has members emails from his own hyip scams (not only Prosperitywallet)
Here is spam email that this scum sent out last time

============================================
Please note that in all e-mails from Liberty Reserve we will:
Always send e-mails from no_reply@libertyreserve.com
Never ask you to send us your password and/or login PIN.
============================================

Hello,

With Liberty Reserve S.A. you no longer need to worry about your investments online. We are serving millions since 2002 and now you have the opportunity to invest in the worlds largest payment processor.

We propose you three types of investment period: 1 week, 2 weeks and 4 weeks. After the investment period ends, a payment will be made to the same Liberty Reserve account deposit was received from. Choose your plan and click on Deposit Funds, then you will be transferred to the investment page.

You can make direct investments here: http://www.libertyreserve-invest.net/

Please DO NOT reply to this e mail.

Thank you.

Scam Liberty reserve account number : U1111388 (Liberty Reserve)
Old name was U1111388 (ProsperityWallet)

So, please read what LR says about such type Fraud:
Liberty Reserve DOES NOT offer ANY investment opportunities directly or indirectly.
http://blog.libertyreserve.com/2011/06/notice-about-investments.html

6/27/2011
Notice about investments
Dear friends,

It has come to our attention that there have been reports of e-mails appearing to be sent from Liberty Reserve web site regarding an investment opportunity. Please note that Liberty Reserve DOES NOT offer ANY investment opportunities directly or indirectly. The ONLY business Liberty Reserve is in - to execute instructions of our customers correctly, securely and in timely manner regarding their transfers to other Liberty Reserve account holders. Any claims otherwise by anyone are false and misleading. We ask you to forward all suspicious e-mails to our abuse department via ticketing system so that we can investigate the source and take appropriate action against those in violation of our Terms of Service. Please always exercise extreme caution when conducting any business on-line and perform your own due diligence on any entity you wish to do business with on-line. This does not only apply to Liberty Reserve account holders, but it is a good practice in general. Always remember: if the deal sounds too good to be true - it probably is!

You will find more information soon on how to secure even more your on-line experience from our upcoming Consumer Education Center that will offer tips on how to safeguard your information on-line and steps to take to determine the validity of a business on-line.

With best wishes,
Liberty Reserve

Please ignore such type fraud emails.
Stay away from the site : libertyreserve-invest.net
Blacklist this account number: U1111388

Fake Email announcing Liberty reserve Debit Card!

2011-06-14T01:23:00.000-07:00

Okay they just don't seem to stop! I got an another email from another idiot scammer
Admin vivaprofit.com (HYIP scam that is claim pay about 110% after 1 day)
The trick is old crap to force you setup API.

NEVER DO THIS, SETUP AN API MAY GET YOU LOSE ALL YOUR LR MONEY

Here email header (part)

Received: from shared2.dragonara.net ([91.205.41.152])
by secondary.b2bstoragemail.com
; Tue, 14 Jun 2011 08:53:31 +0100
Received: from nobody by shared2.dragonara.net with local (Exim 4.69)
(envelope-from )
id 1QWORA-0006cH-Sg

Message-ID: <8323a49192759998753335248e9bf89e@vivaprofit.com>
X-Priority: 3
X-Mailer: PHPMailer 5.0.2 (phpmailer.codeworxtech.com)

Here this is email body:

Hello dear Liberty Reserve customer,

we are finally announcing our own Debit Card! Now you can withdraw your LR funds instantly to an plastic VISA debit card. In order to apply for the card, you need to make new settings in your LR account and the card will be sent within five business days by post. There is no charge for the card purchase, but there will be $1.25 fee for every card withdrawal you will make.

1. You need to logon your LR account, go to Merchant Tools (in upper menu).

2. Click on Create new API and enter following entries:
API Name: DebitCard
Sec. Word: DebitCard1

3. Tick Enabled and also check following operations:
Balance, History, Transfer

4. Now enter your Master key and SUBMIT the new settings.

After you have made new settings, confirm them by responding to this e-mail with your LR account number.

--
Liberty Reserve S.A.
Parque Empresarial Forum II
Torre D, Piso 4
San José, Costa Rica
Postal Code: 10903

Well, you should never follow the instructions mentioned in the above.

Also, avoid please this vivaprofit.com HYIP scam just like plague.
Don't spend single cent in this scam.

Phishing mail

2011-04-05T10:04:00.000-07:00

Well known scammer oskarferengi has issued another phishing mail this time in the name of LibertyReserve.
Some times ago this scammer attempts to blackmail the FxCambier admin.
Latest email same old crap Fraudulent type email, claim to be from liberty reserve department.

Never follow the the instructions mentioned in these sort of mails !!!!!!!!!

Phishing mail:
MIME-Version: 1.0
Received: by 10.213.103.82 with SMTP id j18mr1814014ebo.64.1302012228910; Tue,
05 Apr 2011 07:03:48 -0700 (PDT)
Sender: gioccom@gmail.com
Received: by 10.213.10.6 with HTTP; Tue, 5 Apr 2011 07:03:48 -0700 (PDT)
Date: Tue, 5 Apr 2011 16:03:48 +0200
X-Google-Sender-Auth: jev3CYUwDhtkAthSoy5uFRPU0hQ
Message-ID:
Subject: Liberty Reserve - UPDATE 4
From: "no_reply@libertyreserve.com"

Dear Liberty Reserve Members,

We are back! We are sorry for the outage. We will do our best to avoid such a situation in the future.

Liberty Reserve has made considerable progress and improvement, it has become the leading e-currency and its services are being improved continuously.

Recently we have estabilished a very important relation with leading Forex traders from Costa Rica and we decided to give a special offer to you:

GET 150% RETURN IN 7 DAYS!

This opportunity will not last long, so you must react quickly.

Deposits are accepted until 7. April 2011. 00:00 (GMT), which means that you have about 37 hours to make a deposit in case you are interested in this offer.

One unit in this special program is worth 100 US dollars. The minimal deposit is 1 unit ($100), while the maximum deposit is 1000 units ($50000) per member.

You need to make a spend to:

Liberty Reserve account U1294492 - https://sci.libertyreserve.com/?lr_acc= Fraud LR #

The 150% payout will be made back to your LR account in 7 days, on 14. April 2011. 00:00 (GMT).

The payout is GUARANTEED and there is no risk from losing your funds.

This is a TIME LIMITED ONE-TIME OFFER and you must ACT NOW!

Thank you,
Liberty Reserve Team

Emails of this scammer oskarferengi :
gioccom@gmail.com
oskarferengi@gmail.com

Fraud LR # U1294492

Another Phishing liberty Reserve site

2011-01-27T12:34:00.000-08:00

Another Phishing liberty Reserve site _http://www.libertylreserve.com libertylreserve.com
( liberty l reserve.com )
Whois Records: libertylreserve.com
IP Address: 207.150.212.75
IP Location: United States United States Affinity Internet Inc
Reverse IP: 132 websites use this address.

Phishing spam emails going around right now, claiming to be from LibertyReserve

Here is a copy of the received emails:

Liberty Reserve account access limited.

Dear XXXXXXXXXXX,

We have reason to believe that your account was accessed by a third party. Because protecting the security of your account is our primary concern, we have limited access to sensitive Liberty Reserve account features. We understand that this may be an inconvenience but please understand that this temporary limitation is for your protection.

How can I restore my account access?

Click the link below and confirm your Liberty Reserve account information, otherwise your Liberty Reserve access will remain restricted:

https://www.libertyreserve.com/en/customer/login2/index.aspx
Hiden Link http://www.libertyresecurity.com with a Redirect to libertylreserve.com

Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account. We apologize for any inconvenience.

© 2002-2011 Liberty Reserve S.A. All rights reserved.

Fraud website - libertyforfree.com

2010-12-10T14:33:00.000-08:00

New Modern Technique to stole your money from Liberty Reserve account.
A fraudster send you spam via the internal LR-mail, here is the message that they sent to me.

Subject : Get Free $ 1 LibertyReserve daily!
Message:

Date: 12/10/2010 20:41:02

From: U9673940 (AN)

Subject: Get Free $ 1 LibertyReserve daily!

Message Hello.

You have to do nothing, just register in our program!

No sponsoring required to get paid!

No registration fee!

Referral commission 10 %!

www.libertyforfree.com

After registration they send you automatic email with instruction to next step for grab Free 1$
I was not surprised when I read that letter, here is

Hello, xxxxxxx

To complete registration you must setup your Liberty Reserve account:

1. Login to your Liberty Reserve account.

2. Click On "Merchant Tools".

3. Click On "Create new API".

4. Fill this information:
a. *API Name: isdnoir
b. *Security Word: isdnoir1
c. Check "Enabled"
d. Check Available Operations "Transfer" and "Balance"
e. Enter your Master key.

5. Click on "Submit".

Congratulations!
Now you have successfully registered in the program!

Your referral link:
http://www.libertyforfree.com/?ref=Uxxxxxx

LibertyForFree Team
-------------------------------------------------------
Get Free $ 1 daily to your Liberty Reserve account!

Well, you should never follow the instructions mentioned in the above.
Don't Create any API for someone, NEVER. If you share the API info it's same as you give someone your Login / Password and Pin. You will lose all of your money in LR at the same time !!!!!!

Fraud LR # U9673940 (AN)
Fraud site libertyforfree.com
Stay away from this site please
Don't be a victim!

2010-11-04T19:56:00.000-07:00

Same fraudster ( owner lEbIrtyreserve.com ) used another trick to scam people by offering Fake "Promotional Forex trade program" and entice you to pay him via Liberty Reserve.
Fraudster liberty reserve account number is: U6182712 (Liberty Reserve FX)

Dear Liberty Reserve Members,

We are please to announce that Liberty Reserve has made considerable progress and improvement, it has become the leading e-currency and its services are being improved continuously.

Recently we have estabilished a very important relation with leading Forex traders online: InstaForex Group , Prime4x, FXOpen and Finexo.com (Safecap Investments Ltd) so we have started a Promotional Forex trade program using high ranked Brokers.

================================================================================

GET 150% RETURN IN 7 DAYS! PAYOUT GUARANTEED BY LIBERTY RESERVE S.A. RISK FREE!

================================================================================

Deposits are accepted until 15. November 2010 00:00 (GMT)

One unit in this special program is worth 10 US dollars. The minimal deposit is 1 unit ($10), while the
maximum deposit is 1.000 units ($10.000) per member. ID verification required for deposits over 5.000 USD.

================================================================================
================================================================================

If you decide not to lose this great opportunity you need to make a spend to:

Liberty Reserve account U6182712 - https://sci.libertyreserve.com/?lr_acc=U6182712
*Account Name: Liberty Reserve FX - Memo: "No. of units" and e-mail.

================================================================================
================================================================================

The 150% payout will be made back to your LR account in 7 bussiness days from the time you make your deposit.

Example: If you decide to invest 10 Units in our Fx Program you will get 15 units after 7 trading days - (150 usd)

The payout is GUARANTEED and there is no risk from losing your funds.

This is a TIME LIMITED ONE-TIME OFFER and you must ACT NOW! Your money will not go to any third-party, they will be stored in our sistem-currency.

================================================================================
Keep your account secure by following these simple rules:
Do NOT click on any links!
We will never send you attached files or ask you to update your login information.
Contact us if you are unsure about an email you received.
================================================================================

Thank you,

Liberty Reserve Team

Note Liberty Reserve never sends you any offer by email.
Never assume that if a particular email or website has the words, "libertyreserve" in its name for example it has anything to do with Liberty Reserve.
1. Never access your Liberty Reserve account by clicking on any link in an email.
2. Never open or view any email attachment that is purported to be from Liberty Reserve.

lebirtyreserve.com new fraud triks

2010-11-02T08:18:00.000-07:00

lebirtyreserve.com fraud site moved to new new hosting 1sthost-inc.
Continue sent out Phishing spam email, claiming to be from Liberty Guard (LibertyReserve anti Phishing software)
This is new trick that would cause you to download Trojan software and steal money from your LR account.
A Trojan horse, or Trojan, is malware that appears to perform a desirable function for the user prior to run or install but instead facilitates unauthorized access of the user's computer system. "It is a harmful piece of software that looks legitimate. Users are typically tricked into loading and executing it on their systems"

Here is a copy of the fake email:

Return-Path:
Received: from server2.1sthost-inc.net ([76.73.94.202])

LibertyGuard
Liberty Guard Features
° Notifies you with a blinking "You're on LibertyReserve.com" icon on the bottom right corner of Firefox when you visit the real Liberty Reserve web site. If the icon is not blinking then you are on a fake web site.
° Blocks fake (phishing) web sites that were reported to us by users like you.
° Updated every hour for increased security and every time you start firefox.
° Allows you to add four more web sites to the list of good web sites.
° Open source - you can view the source code of the plugin to verify that it is safe for use.
° Let us know if you want more features added to Liberty Guard.
What is Liberty Guard?
LibertyGuard is a Firefox plugin that blocks fake/phishing web sites that will try to steal your Liberty Reserve password. It will also notify you when you visit the real Liberty Reserve web site.
How can fake web sites steal my password?
These web sites are called phishing web sites. These web sites were made by hackers to look as real as possible to Liberty Reserve web site. These web sites will try to scare you that your LR account might get closed if you do not provide your Liberty Reserve password. Some people might fall for this trick and will provide the hackers their login info to their LR account.
Why should I use Liberty Guard?
For the same reason why people put car alarm on their cars - extra protection against thieves. We recommend using this plugin even if you can distinguish the real LR web site from a fake one because some fake web sites will also try to infect your computer with viruses. LibertyGuard will block the fake web site and its viruses from getting to your computer.
Please Update your Guard Now and get protecty your account.
Download LibertyGuard Now!

© 2002 — 2010 Liberty Reserve S.A. All rights reserved.

Don't be a victim! Don't download a file! Don't click on email links.

New Phishing site lebirtyreserve.com

2010-08-12T15:42:00.000-07:00

Another Phishing liberty Reserve site created by HYIP scammer

Site link - _http://lebirtyreserve.com/en/customer/verify/
Domain: lebirtyreserve.com

Registration Service Provided By: Gold-Domain's Customer
Contact:
Domain name: lebirtyreserve.com
Registrant Contact:

John Schreck alanmorniem@yahoo.ca
Fax:
1245 Glenwood St.
Livermore, 94550
US

Whois Records lebirtyreserve.com
IP Address: 76.73.94.204
IP Location: United States - Illinois - Woodstock - Fdcservers.net
There are 40 domains hosted on this IP address.

Mass spam send out from two different hosting accounts

First from account maxicash( blacklotus.net )
X-PHP-Script: 208.64.126.5/tmp/log/kirang.php for 94.23.114.11
Second from the variofun (nvhserver.com )sent out from site sofixfund.com
X-PHP-Script: sofixfund.com/images/temp/kirang.php for 94.23.114.11, 94.23.114.11

Phishing spam emails going around right now, claiming to be from LibertyReserve

Here is a copy of the received emails:

Return-Path:
Received: from server13.nvhserver.com (server13.nvhserver.com [72.20.34.206])
by mx.google.com with ESMTP id g14si722385vcj.141.2010.08.11.10.22.07;
Wed, 11 Aug 2010 10:22:08 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of variofun@server13.nvhserver.com designates 72.20.34.206 as permitted sender) client-ip=72.20.34.206;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of variofun@server13.nvhserver.com designates 72.20.34.206 as permitted sender) smtp.mail=variofun@server13.nvhserver.com
Received: from variofun by server13.nvhserver.com with local (Exim 4.69)
(envelope-from )
id 1OjF0A-0008U0-QZ
for xxxxxxx@gmail.com; Thu, 12 Aug 2010 00:22:06 +0700
To: xxxxxxx@gmail.com
Subject: Liberty Reserve Security Measures!
X-PHP-Script: sofixfund.com/images/temp/kirang.php for 94.23.114.11, 94.23.114.11
From:
Reply-To: no_reply@libertyreserve.com
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id:
Date: Thu, 12 Aug 2010 00:22:06 +0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server13.nvhserver.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [569 565] / [47 12]
X-AntiAbuse: Sender Address Domain - server13.nvhserver.com

Business account at Liberty Reserve

Dear Member,

We have reason to believe that your account was accessed by a third party. Because protecting the security of your account is our primary concern, we have limited access to sensitive Liberty Reserve account features. We understand that this may be an inconvenience but please understand that this temporary limitation is for your protection.

How can I restore my business account access?

Click the link below and confirm your Liberty Reserve account information, otherwise your Liberty Reserve access will remain restricted:
http://libertyreserve.com/en/customer/verify/

Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account. We apologize for any inconvenience.

© 2002 — 2010 Liberty Reserve S.A. All rights reserved.

Phishing site reservexchange.net

2010-06-21T12:30:00.000-07:00

Phishing site reservexchange.net his Web page appears to be directed to getemoney.com, but is actually pointed at reservexchange.net site instead.

On this page they ask you download "invoice" actually archive contains a virus that will steal your Liberty Resrve account number and password.

MasterSurfs.com scam - Fake email

2010-06-19T15:09:00.000-07:00

There is a Phishing spam email going around right now, claiming to be from LibertyReserve
Here is a copy of the received email:

To: xxxxxxxx@gmail.com Subject: Liberty Reserve New Investment Program

MIME-Version: 1.0Content-type: text/plain; charset=iso-8859-1

From: "no_reply@libertyreserve.com" <no_reply@libertyreserve.com>

Reply-To: "NoReply" <support@mastersurfs.com>

X-Priority: 3
X-Mailer: PHP 4
Message-Id: server9.go-mama-hosting.com>
Date: Sat, 19 Jun 2010 17:07:26 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server9.go-mama-hosting.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [99 32002] / [47 12]
X-AntiAbuse: Sender Address Domain - server9.go-mama-hosting.com
X-Source:
X-Source-Args: /usr/local/apache/bin/httpd -DSSL
X-Source-Dir: possiblefunds.com:/public_html/mail

============================================
Please note that in all e-mails from Liberty Reserve we will:
Always address you by your first name.
Never send you any links or attached files.
Never ask you to send us your password and/or login PIN.
============================================

Dear ,

MasterSurfs Ltd. is a registered company in the USA and is the most trusted name
for online making money . You can advertise your favorite website
and show it to who is interested in it...

Advantages of MasterSurfs.com :

1.Make THOUSANDS U.S DOLLARS a day (14.9% x 10 days = 149%)
2.5% Referral commission (upgraded members)
3.1% Referral commission (free members)
4.Each unit costs $2
5.Payout in 24 hours (No Minimum)
6.Earnings guaranteed
7.24/7 Support services
8.Experience forums to learn about MasterSurfs
9.30 Free credits for joining
10.Up to 2 sites to advertise

Pay with:

- CreditCards, AlertPay, Liberty Reserve and Bank wire!

Use the following link to join here for free :

http://www.mastersurfs.com

Regards

----------------------------------------------------------

Tel : +1 213-784-4265
Fax : +1 213-784-4265

M.Surfs Ltd.
7660 Beverly Blvd 243
Los Angeles, CA 90036
USA

Sender is scam admin of Mastersurfs.com fraud site started by
well known scammer who has launched multiple fraud autosurf programs before this one.
Some of them :
fundssurf.com
Magicsurfs.com
Auto-surfs.com
Goldensurfs.com
Dollarsurfs.com
Coinsurf.com

Avoid please this fraud - autosurf just like plague. Don't spend single cent in this scam.

Another intresting fact that this spam send out from Possiblefunds.com site, looks like this scumbag also scam people with HYIP's too.

Phishing email

2010-04-24T15:12:00.000-07:00

Phishing email, sender Cedexinvest.com Hosting: nvhserver.com

Subject: Liberty Reserve Service
X-PHP-Script: 72.20.34.206/~cedexinv/procces.php for 125.167.250.141, 125.167.250.141
From: no_reply
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id:
Date: Sun, 25 Apr 2010 16:43:06 +0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server13.nvhserver.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [517 513] / [47 12]
X-AntiAbuse: Sender Address Domain - server13.nvhserver.com

Dear Sir or Madam,

===============================

Thank you for using a Liberty Reserve service.

This letter was sent to your Liberty Reserve account.
===============================

As you may have noticed, Liberty Reserve's website was offline or undergoing various software upgrades a few weeks ago because of the need to apply some new security updates to the system. Everything is fine now but we need you to confirm your account with us. Please click on the following link and verify your account info by filling the form. This is done because there is a chance that some accounts do not function properly with the newly updated system and we would like to ensure that you are the genuine holder of the account. In case you don't fill all the fields, and an internal system conflict occurs between your account and system database, your Liberty Reserve account will be locked down for an unknown period of time.
We apologize for any inconvenience this might cause.

Please click on the following link to verify your account:

_http://www.libertyreserve.com/en/customer/login2/account/

Hiden link is:
http://fibertyreserve.com/en/customer/login2/account/
For information and support please e-mail us at support@libertyreserve.com

Thank you.

© 2002 — 2010 Liberty Reserve S.A. All rights reserved.

Phishing site: http://fibertyreserve.com
IP Information for 72.20.34.206
IP Location: United States United States Fullerton Staminus Communications
Resolve Host: server13.nvhserver.com
IP Address: 72.20.34.206
SSL Cert: www.rockfxltd.com SSL Certificate has expired.
Reverse IP: 61 other sites hosted on this server.

Phishing email

2010-04-21T15:43:00.000-07:00

Phishing email,

** Liberty Reserve Account Block Notice **

Your account has been blocked due to numerous invalid login attempts. You will be unable to send and receive funds until your account has been activated. Click here to remove block from your account:
-http://www.libertyreserve.com/en/customer/unblock.aspx
hidden link :
_http://www.xjsparts.com.au/images/Libertyreserve.com/qwp/
Failing to unblock your account will result temporary account suspension.
Sincerely, Liberty Reserve Customer Service

If you receive this e-mail
* Do not reply.
* Do not open any attachments. Attachments may contain malicious code that will infect your computer.
* Do not click on any links.
If you clicked on links in a suspicious e-mail or phishing Web site and entered confidential information, change email and passwords and also Lgin PIN and Master Key - immediately

Phishing site: http://www.xjsparts.com.au/
IP Information for 209.25.170.13
IP Location: United States United States Dania Liquidnet Ltd
Resolve Host: supremeserver15.com
SSL Cert: liquidnet ltd. SSL Certificate has expired.
Reverse IP: 649 other sites hosted on this server.

lrexchange.net is a Fraud LibertyReserve "exchange site"

2010-04-18T10:14:00.000-07:00

lrexchange.net is a Fraud LibertyReserve "exchange site", they claim to pay 25% additional bonus on Exchange Liberty reserve (LR) to PayPal (PP)or AlertPay (AP)
http://www.lrexchange.net
IP Location: United States United States Los Angeles Webnx
Resolve Host: 67-220-217-230.hosted.static.webnx.com
IP Address: 67.220.217.230
Reverse IP: 2,294 other sites hosted on this server.

Fraud LR # U3706256 (Investors Account)
Stay away from this site please
Don't be a victim!

Gudoil.net - Gudoil Fraud via API

2010-04-03T20:19:00.000-07:00

This scum forced naive users to install API for getting paid and then steal all the money from their Liberty accounts via API.

---------- Forwarded message ----------
From: Gud Oil
Date: Fri, 26 Mar 2010 14:16:45 +0100
Subject: Re: HAVE INVESTED
To: *************

We want to pay you now

Sir we can not currenlty send money with direct. transfer we need to
make it a secure transfer.

For us to be able to pay you follow this steps.

1. Login to your Liberty Reserve Account.

2. Click On Merchant Tools

3. Click On Create new API

4. FIll the form *API Name, *Security Word and also remember to check
on "Enabled" and also Transfer "Enabled".

5. Send us The API Name and the Security Word you use. ( this is
important to make the transfer securely.)

By sending us this, it will help us to transfer you fund to you securely.

Regards
Admin

Fraud LR # U7626786 (GUDOIL INVESTMENT)

Fraud LR

2010-04-03T18:56:00.000-07:00

Cheating at HYIP forums: posting fake LR# and claim that it is LR number of some HYIP site for making deposit Fraud LR # U6710999

Financenova sent out Phishing Emails

2010-04-03T18:33:00.000-07:00

Fraudulent emails, claim to be from liberty reserve department sent out from Financenova.com server.

Subject: Liberty Reserve Offer - ACT NOW!
X-PHP-Script: www.financenova.com/admin.php for 212.150.184.108
From: no_reply@libertyreserve.com
Reply-To: no_reply@libertyreserve.com

Dear user

Liberty Reserve has made considerable progress and improvement, it has become the leading e-currency and its services are being improved continuously.

Recently we have estabilished a very important relation with leading Forex traders from Costa Rica and we decided to give a special offer to you:

GET 148% RETURN IN 7 DAYS!

This opportunity will not last long, so you must react quickly.

Deposits are accepted until April 2. 2009 00:00 (GMT), which means that you have about 32 hours to make a deposit in case you are interested in this offer.

One unit in this special program is worth 100 US dollars. The minimal deposit is 1 unit ($100), while the maximum deposit is 1000 units ($100000) per member.

You need to make a spend to:

Liberty Reserve account U1931963 - https://sci.libertyreserve.com/?lr_acc=U1931963

The 148% payout will be made back to your LR account in 7 days, on April 9. 2010. 00:00 (GMT).

The payout is GUARANTEED and there is no risk from losing your funds.

This is a TIME LIMITED ONE-TIME OFFER and you must ACT NOW!

Thank you.

Liberty Reserve Team

Fraud LR # U1931963 and U6619747 (Finance Nova)