This scammer asked me to buy gift cards and claimed they are going to an orphanage.

Delivered-To:
Received: by 10.37.76.198 with SMTP id z189csp131792yba;
Mon, 26 Jun 2017 09:03:42 -0700 (PDT)
X-Received: by 10.28.4.135 with SMTP id 129mr180972wme.69.1498493022644;
Mon, 26 Jun 2017 09:03:42 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1498493022; cv=none;
d=google.com; s=arc-20160816;
b=TEwQyPVY5UIA6rhnOnE9f1o2+QEo2kTvu4WmdKRHW512B/Yw+Kmb6c1cA2U5IQIkVu
Gr5JawNIwprgLBVlBdXFO84ha01OONVuea0jqFVxOinShVyRg8 WY76tU0BpNn6QMOJm/
vjSnYDYREojo2jjHYy/qYE7DFF+ZqaQcxNh8p1I7aGw+x9UaYgmPiN4w6G9/meJ3CpWO
Lsu8GWa/Hn+yZK1xzxD1Jc8ba231QLkAEHv/pji5avrambVu9wkRQmEtG2e85TTWtRYx
IFD/Dtcf2jkbZB7cs9FqXnAzjveOFHpZ5RmyKdAuaGLiacmc/sa344cDSGEc7Ugm3yQX
tKMA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=to:subject:message-id:date:from:references:in-reply-to:mime-version
:dkim-signature:arc-authentication-results;
bh=+mQomM0EZzEyDQgOUkGr69Rb/Z3WohIMvlEOLEoxrH4=;
b=GOLyKAiENACeX0nbZSSMc9fEABBT04cUkJfIvvD0zxKECpdQ sUiGZhzbG7oOZXZBBY
ylvgEuSDpzvrMPkB2pSmIqnT96JrqxycErfjCkRKZZd3IYal3/hjvv+0/Aj59B5v8nCq
4mqjqYWIANHYuqyCehr4XmJwzg3Y31mydvEBv2cvM/3txw6hfYQjYdDxLfu0ol2wLt43
YuZC/2rErgRpA1t5qn8aV8gYUR0CQ+oNOEkFbGWTqham0epxW3tSrdU riAnIwKLUDyR3
oJAXojt6vPCwRG3lMaIJGRsl+63fFbX5ftqWusT3ao8GlcLg6G wglyKeOrJqbaWyH/Pg
LU6w==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@gmail.com header.b=s35vw200;
spf=pass (google.com: domain of kathright17@gmail.com designates 2a00:1450:400c:c0c::22f as permitted sender) smtp.mailfrom=kathright17@gmail.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Return-Path:
Received: from mail-wr0-x22f.google.com (mail-wr0-x22f.google.com. [2a00:1450:400c:c0c::22f])
by mx.google.com with ESMTPS id c4si7034854wrc.38.2017.06.26.09.03.42
for <>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 26 Jun 2017 09:03:42 -0700 (PDT)
Received-SPF: pass (google.com: domain of kathright17@gmail.com designates 2a00:1450:400c:c0c::22f as permitted sender) client-ip=2a00:1450:400c:c0c::22f;
Authentication-Results: mx.google.com;
dkim=pass header.i=@gmail.com header.b=s35vw200;
spf=pass (google.com: domain of kathright17@gmail.com designates 2a00:1450:400c:c0c::22f as permitted sender) smtp.mailfrom=kathright17@gmail.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Received: by mail-wr0-x22f.google.com with SMTP id 77so97552782wrb.1
for <>; Mon, 26 Jun 2017 09:03:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
bh=+mQomM0EZzEyDQgOUkGr69Rb/Z3WohIMvlEOLEoxrH4=;
b=s35vw200+O0PdpCa81gfn6//Lvuz8YheuQq+Wqv3KXYE1uOYID2E3ZXCKV3arRofwB
w1ACXkigrmRdXfpd5OrDfoGhi5PbHal6Z+aL+p4L1CNLbY0YBe ct2TqdLYoWQI+yASfS
t5Xo25ZhvcD8oEa6F8IqElFLMY5d01GNEVLlLFOwjrDR+oqYgn a40ko/guT3petXM70t
e0KU9Cw9p+vNg0V92VFWmM7zwaKJ/bv9dLOtdhjxr1Bp4sU2mGAO6vcxVkULMOiVzfSO
AwxKn5HFA+LH626dww/YcTfbnKinzM+cN3l887CfePhaabdSV9IOSYskUr+0opcV/1zw
yoeg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:in-reply-to:references:from:date
:message-id:subject:to;
bh=+mQomM0EZzEyDQgOUkGr69Rb/Z3WohIMvlEOLEoxrH4=;
b=a3jiJqqyI+u5yCzdkUUQcRf0ERrxS3xvf1Wg4Uy8mP4ctvuh Itfmje4HPfSUTxg3SA
4MBzqt0wcSJCF2gscDHJnP5+a2QJmTF43TDhFr3BfHVZoYSY3d ETEFj0+y6+8S5PfHSX
8RcgwZZItcejycuLihRvSJ5pamp0xI8/wGq6v5klBFwUBSpqiZguiCycZNtfsqfpNuQ/
hBa3oRpk5QHMv/diSK9NqgK3svgVbN5qIDZWBz8n3chHYgNHi8p1VDGiDZ4npDSu UWpG
DB/lZ/dCqv3SLnRLsxjfBleM/FjSWWtq3w/WiO+wEQRzCa0GJpZFZXV1OMNznj8qjRMe
5h6w==
X-Gm-Message-State: AKS2vOzoCkTHqCupt7cZ/fa+BuN2KBX4h7n38xUaFZVctlLWZtgIRKBr oMxuYgzL7fX5V5cws9pN9WZGCE7uDbNdjTg=
X-Received: by 10.223.157.4 with SMTP id k4mr15157480wre.43.1498493021705; Mon, 26 Jun 2017 09:03:41 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.28.113.153 with HTTP; Mon, 26 Jun 2017 09:03:41 -0700 (PDT)
In-Reply-To:
References:
From: Kathryn Wright
Date: Mon, 26 Jun 2017 12:03:41 -0400
Message-ID:
Subject: Re: cleaning
To: <>
Content-Type: multipart/alternative; boundary="f4030438897041e43e0552df18a6"

--f4030438897041e43e0552df18a6
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

How are you doing today. Am Glad to Inform you that a payment has been sent to you which is your First Assignment and is being delivered by FedEx today with the tracking number: 810121677608


As soon as you have receive the check at hand,take it to your bank and have it deposit into your account OR via Mobile deposit or ATM


However, I am donating it to the orphans. I contacted the orphanage home, and I was given the list of the items to be bought, the items are much and will cost a lot to get them shipped, so we have reached an accord, They will be getting the items themselves.
Once the check has been cashed you are to deduct $400 your weekly salary as I promised and the remaining Money should be deposited to their account, I have their account info so you should let me know soon as the check as been cashed/deposited and I'll provide you with the Orphanage home information I will be providing in my next email as soon as you might have cashed the Check today.


After depositing or cashing the check, you are to make sure the money is being deposited to their account only in cash as they have informed me their account is only active for a cash deposit transaction.


I will be waiting to read back from you ASAP today and I also have some other assignment for you to do by next week.
I want you to be rest assured that I'll never stress you at all in any assignment given to you and I promise to pay your fees weekly as we both agreed.


Take good care of yourself and have a blessed day.
From: Kathryn Wright < kathright17@gmail.com>
Date: Tue, 20 Jun 2017 18:19:54 -0400
Message-ID:
Subject: Re: cleaning
To: <>
Content-Type: multipart/alternative; boundary="f403045f1622b1283a05526ba6df"
Thanks for the response to the job posting, your response to the posting has been received.Unfortunately the position has already been filled but another offer still available if you are interested, which is the Personal Assistant Position.




My name is Kathryn Wright, 50 years of age and I live 18 miles from your Zipcode. I'm a business entrepreneur, a human capital investor and philanthropist maintaining established business relationship with diverse companies within and across the Globe. Due to my, recent engagement and subsequent business expansion, my schedule necessitates the role of an Assistant who will help leverage my work load in order to ensure timely delivery of services and attendance to matters of concern and as such eschew excess backlogs and unattended briefs.

The sensitivity of this position warrants the office holder to be upright, responsive, accountable, trustworthy, emphatic, persevering, honest and willingly ready to go an extra mile.


Receiving Phone Calls from my clients.
Making Regular Drop offs at FedEx Stores for letters meant for my clients.
Basic wage is $400 weekly.
Working 3 to 5 hours Daily, and 3 Days weekly. ( you can choose your working days because it is flexible )






I tend to have a very busy schedule at the moment, please note that this position is not office based for now due to my frequent travels. It's a part-time work from Home for now. I'm currently away for some property survey in the North American Caribbean Island, Puerto Rico, Europe and Kuala-Lumpur Malaysia. I'll be back to the states in three weeks time. So, I need an assistant to handle dealings for me on the home front when away on business which is habitually quite often. I need someone who can be able to reply to Emails in a prompt manner and has good communication skills.

This is just an explanatory message, as time goes on we should be able to arrange a proper meeting upon my arrival. I do have a number of things you could help me with this week if you will be within reach for me. If you're interested in the offer, this could act as a good start to our working consanguinity.


DO CONFIRM ACCEPTANCE OF THIS POSITION BY PROVIDING THE BELOW DETAILS.
DECLINE THE OFFER BY NOT REPLYING, OR SAYING NO.
PLEASE COMPLETE THE APPLICATION FORM REQUIREMENT BELOW :


*FULL NAME:
*HOME ADDRESS WITH APT # :
*CITY,STATE & ZIP CODE :
*MOBILE & HOME PHONE#:
*SEX:
*AGE:
*PRESENT JOB:
*NATIONALITY:
*DO YOU HAVE A BANK ACCOUNT:
*HOW SOON ARE YOU AVAILABLE TO START?




Best Regards.