A clever Gumtree scam

[@Stringbats]

This video is a ruse. The scam is real and all, but it was all so Jim could advertise his gumtree ad for that computer since nobody was buying it. I see right through you Jim Browning, if that IS your real name.

[@Day-wm7nn]

LOL

[@dashtesla]

@@JimBrowning Scrapyard wars?

[@Lil_vara]

His real name is Mr Bob Vegene I'm tracking his location right now

[@rinima858]

Come on £400 for a gaming pc is really not bad. I so want buy this pc too bad I don't live near 4 Sailsbury Sq London.

[@mikejerk2813]

Nice

[@johnbull1568]

This was waaaaay more sophisticated than I was expecting tbh. I would never have fallen for it, there are too many red flags, but I can see how many people do. It's actually scary and I'll be speaking to my mother tomorrow lol.

[@Vysair]

for someone who is not familiar with internet and iot, they for sure going to fall for it. Always watch your parent and young siblings for this shit

[@wesleymullins623]

honestly I'm pretty tech savvy but had it not lead to an APK I would've fallen for it.

[@cr3237]

I watch these vids because I am worried that I will fall prey to scammers, not being particularly tech savvy. (I am a pensioner). I use Gumtree and other sites to sell stuff and I worry that I might just lose the plot and lose what little money I have to scammers. So I am grateful to Jim, and others like him, who take the time to make and upload vids like this.

[@finmueller7827]

@@cr3237 here's a tip, just use your head, if you don't trust someone, use that gut feeling, and also if you see any glaring red flags, do not trust it

[@rafaelrafaelrafael]

Agree, if it weren't for the downloading of a random apk not from the play store I think I could've fallen for it.

[@lowndown5697]

don’t let this scam distract you from the fact that Jim needs someone to buy his gaming pc

[@proxxgeo1054]

Jim Browning lol

[@wnll0850]

Hehe 999 likes I have the power to make it 1k or keep it 999 You’re welcome ;)

[@proxxgeo1054]

WillzEnd no

[@suzycreamcheesez4371]

oh brother lol! Another"dont let this distract you" post!

[@FlorenceSlugcat]

Ew no. Your computer is a freaking dinosaur that can’t even be moved. I don’t understand anyone who buys a computer that isn’t a laptop...and worse is when it’s not even a mac!

[@TheSaltySailor]

>frequently exposes indian scammers >use bob vegen as fake credentials Brilliant.

[@davidrabbit8868]

🤢😂🤣

[@bigshrekhorner]

@@BaldMancTwat Well, many parts of the ad where actually censored. So he most probably has put the specs in the ad, but they probably were on the censored parts

[@FlyboyHelosim]

@@BaldMancTwat Awesome username! 😂

[@keks-69]

@@BaldMancTwat I'd say it's an advert on which he tried to catch scammers. So he probably made it look like the seller wasn't too much into technical stuff, making potential scammers assume that he's easily scammable.

[@hotshotroom964]

Keks no your just a nonce this man has a life that’s not just catching scammerd

[@lookas.6432]

Little does he know but Jim accidentally just drained Mr Bob Vegen's account.

[@jon8864]

Poor Bob

[@Hazza]

😔😔😔

[@lookas.6432]

@@Hazza hi hazza love ur vids

[@Hazza]

Remi hi hazza love ur vids

[@Ian_Livesey]

I’d be more worried my name was Bob Vegen

[@TheSuperCoolMan122]

phishing level: 100 Honestly if they can do all this, why not just make legitimate apps lol

[@CAMSLAYER13]

Considering the trash that makes money on the app store it's a wonder

[@CAMSLAYER13]

@@JohnTheRevelat0r yea I guess it's not much better to make predatory p2w apps

[@Robert-dB]

If you have a good framework, or another app that does the same general thing (collect stuff and post it to a server) you can knock this out in minutes. The scammer will then pay you ₽20000 for it. At that point "it's not my problem" becomes really tempting. Especially when the law is half way round the planet.

[@Dm3qXY]

Do you think they do this so they can buy their grandma's a new Lamborghini ? or maybe it could rather be dirty money for politics, terrorism and such..

[@Robert-dB]

@@Dm3qXY Um ₽20000 is about US$300 (or £250), some of those phone toolkits are really easy to use. Though you'd want a few dollars more for some sort of web scraper, and the other stuff, that I missed, in the description looks like it'd cost more. As for why, Lamborghinis are always a good draw and the banking trojan might get enough, especially if you can sell it multiple times. I would expect a smart thief to avoid terrorism (bound to piss someone off) but bribes and politics are always popular.

[@defaultmesh]

of course the expiration date is 4/20

[@Stripedspot]

4 / 21

[@hoesseinh8346]

His name was BOB VEGEN how'd you not notice that

[@Stripedspot]

@@hoesseinh8346 i think you got the wrong comment

[@LukaJebo]

@@Stripedspot lol

[@wahidtrynaheghugh260]

4/21

[@TheNpcNoob]

*UK scammers joined chat *Jim Browning joined chat *UK scammers left chat

[@proxxgeo1054]

TRXP RFT why say UK scammers, why not just scammers

[@TheNpcNoob]

@@proxxgeo1054 does it matter? The scam happened in uk so..

[@proxxgeo1054]

anon anon correct

[@TheNpcNoob]

@@hwfq34fajw9foiffawdiufhuaiwfhw true, it's due to stereotyping

[@notarealname8500]

*Elon Musk joined the chat

[@draconic_sprinkles5203]

With their knowledge of software and app development, I'm shocked they didn't just make actual apps which they could sell for a much more stable income.

[@ShadowWolf666666]

Who says they don't? Some people just aren't content with just legal means of making money.

[@jarleskogly8388]

I know that personally I don't settle with ONLY 1 way to make money. I don't divulge in illegal activites, but my money doesn't come from a single source.

[@TheBaldr]

Well it cost money to keep an app on the store. There one thing to actually making an app, there another thing to actually get people to download it. I'm a former smart phone game developer. I want to know how they got an iphone app to download without the app store, it is a pain in the ass to push a developer version of an app to a device.

[@nichita6410]

TheBaldr if that’s the case, they most likely made you install a profile making it look like an app where in reality it’s just a shortcut to their website which looks like a real app, just a guess

[@Jafmanz]

@@jarleskogly8388 you are wise in matters of finance.

[@nottherightone2]

Man running Bluestacks INSIDE Vbox, massive Internet condom

[@andymorin9163]

Bluestacks inside Whonix on Linux (under KVM)

[@Jack-zk6yt]

@@andymorin9163 using dial up connection

[@KeithHearnPlus]

@@Jack-zk6yt wearing gloves

[@spicyweasel]

@@KeithHearnPlus All inside a virtual machine hosted in the cloud

[@CalebHawn]

I'm pretty sure Bluestacks uses VirtualBox to run Android, so that's a lot of VirtualBox there.

[@jonlee2553]

I just discovered your channel today, and I'm in the middle of binge watching at the moment. People like you do amazing work shutting these guys down. Keep up the good work!

[@reptilianbrother5618]

This neeeds more likes, people. Come on!

[@xer0895]

You got it bro

[@TheAngryIntellect-]

Sounds like a fake comment to me... Also highly suspicious the comment I sniffed out as being fake has a like from the channel... Hrmmmmm And this guy talks about scammers... Funny he engages in similar tactics.

[@reptilianbrother5618]

@@TheAngryIntellect- lol

[@ToxicEffingZen]

@@TheAngryIntellect- only a scammer would try to accuse the most skilled person in taking down scammers of being a scammer himself. You're a 🗑️ scammer🖕

[@docholliday9058]

The scammers be like _"and I would've gotten away with it too if it wasn't for you meddling kids!"_

[@randomness6498]

lmao

[@pheresy1367]

Time to reward myself with a "Scoobie snack"!!! mmmmmmmm.....

[@JazunOwO]

kid*

[@chopperking007]

Pesky kids

[@thecreatorofpc7929]

This just made me remember that they literally never say that in the show, i thought the villains(?) said that every time you get caught, but nope You just made me remember everything i know was a lie.

[@rogergommert528]

You are a great public service, Jim Browning

[@brasileiroloko5375]

private

[@jerseyjon3903]

servant

[@ChaBoiNeil]

General

[@SqueekyBums]

Some poor person at 123 fake street has been billed thousands....

[@martinkuliza]

You laugh but There actually is a 123 Fake St in Spring HIll in Queensland , Australia wouldn't it be funny thought if a Mr Smith Lived there or a Mr Joe Citizen LOL

[@SqueekyBums]

@@martinkuliza Also in China, but they deserve karma 😂 123 Fake Street, Mouding County, Chuxiong Yi Autonomous Prefecture, Yunnan, China

[@martinkuliza]

@@SqueekyBums Cool. i didn't know that

[@recursor9469]

@@martinkuliza the person who lives there probably has issues having packages delivered, as every company thinks it's a fake order

[@martinkuliza]

@@recursor9469 i agree, only i was thinking more along the lines of , if the person ordered a pizza delivery, he probably wouldn't get it

[@BitwiseMobile]

Yeah, I looked at the link Zach put in there and this apk is pretty nasty. I'm looking at code right now that scrapes all your SMS messages and sends them to a command server somewhere. It's probably scraping as much PII as it can and sending to those command servers as well. I'm looking deeper, but this is a nasty guy. The code is quite sophisticated too. It starts several background services. It's definitely written by someone knowledgeable.

[@lord_khufu]

@LosFarmosCTL They may use a profile or something and it's act like an app but it's link you to a website when you click on it, but whoever made this sounds smart so it maybe something else, but i think it's probably just a profile

[@reav3rtm]

Android SMS api requires all kinds of permissions to be granted by user. How could it do all the things you mentioned without asking I wonder.

[@bored_person1640]

DDOS it. Kidding, kidding.

[@Blade.5786]

@@reav3rtm the app isn't downloaded through the playstore, so it simply never mentions the permissions. you clicking Install _is_ the permission.

[@reav3rtm]

@@Blade.5786 I think it's not Play Store that verifies whether permissions are granted but Android system itself. It should be irrelevant what store/link app is installed from. Store only verifies signature of app vendor and ensures that whatever user downloads is what app vendor publishes to Store (so prevents third party from tempering). If app vendor is malicious, even Play Store will likely not help as I doubt anyone at Google tests apps that are submitted.

[@lesliesavage9229]

I like the way you treat everybody, even the scammers. Keep up the good work.

[@CyberDocUSA]

Clever and perhaps a bit diabolical. Thumb's up.

[@fantaisiechopin8240]

I have scammed a lot of people on moshi monsters, AdventureQuest, Darkorbit, Gaiaonline, Animaljam, etc. Can I fight God now?

[@IKnowBestest]

Font? How?

[@CyberDocUSA]

@@fantaisiechopin8240 you seem a bit overqualified. ;-)

[@greatest_bumble_bee_dude]

Not everyone on gumtree is actually a scammer though, most are tight wads offering a small fraction of what the item is worth at or even below what the pawnbrokers store would offer or simply time wasters. Sometimes would get lucky and sell an item on gumtree but, haven't sold an item for more than 2 years so gumtree is basically a waste of time using

[@greatest_bumble_bee_dude]

No - I've sold some items years ago though, not lately plus possibly some particular products are more potentially popular than others or perhaps the potential buyer resides too far from the seller hence : is unable to make the journey so decides it's not actually worth it - who knows for sure

[@willharris8632]

Hahahaha mr Bob vagene. Playing to their strengths

[@NecroBanana]

Shaun Bobs-Vagene

[@Maji1]

how do i never realise these jokes

[@saidel8565]

​@@Maji1 Watch this video and you will understand : watch?v=_vvvSyBNiHc

[@gayforbrae5693]

I mean it's a uk server so it'd probably be Mr shite clunge

[@CigaretteTricks]

Sned Bob and vagene

[@backseatgaming2145]

I looked through the decompiled source and couldn't confirm that the app is specifically designed to crash once you already entered your bank details, so right now i believe that it's just poor programming, not a feature. Also from what i see the whole app is just one big web browser that connects to a server and shows you php pages via webview, so all those forms you saw were web pages. The address is "something"/report.php Edit: i also looked through "strings" output, and to me it looks like something is wrong with the apk in the repository, like something is missing.

[@helper_bot]

cool

[@tirsden]

Maybe they generate forms/pages for each person they're going to scam, and the app breaks once the scammers pull those pages off a server somewhere, thinking they got the info (or know they got bogus info from someone who can tell it's a scam)? I know just about enough about apps and web development to know that theory is either vaguely sensible or really stupid. XD

[@BenBete]

@@tirsden It's actually clever and might be that, the app is waiting for a specified web page to open, and if this page had already the info necessary ( associated to the fake number of process ) it should give out a 500 to the app and so crash it if the handle response is not well configured on the app / web page, a crashed page on a webview make the app to close. I'm curious but if it's php maybe just trying out sql insert in parameters path could give some interested info ( two years late but yeah ) and even delete the database with the cards info

[@janetp227]

You lost me after 'I looked through the .....'. You techies talk another language!!

[@dredwick]

I thought it just had one of those go-go-gadget self-destructs?

[@ahnmichael1484]

wow, this app/process was really well put together. I could imagine myself feeling unsure if presented with something that looked so tidy.

[@Ash-cc6om]

Did you report this to gumtree?

[@Ash-cc6om]

@@JimBrowning Thank you. I've been watching your videos for a few days now and I'm really concerned about how easy it is for scammers to create their scam and phish. These people need to be stopped. It shouldn't be so easy to take money. I'm baffled to why the banks themselves can't stop money being transferred. Thank you for your informative videos. 🙏

[@Slvrbuu]

Did you @them? They may not notice it otherwise.

[@Rellana1]

From my experience once Gumtree and eBay know about these scams they shut them down very quickly.

[@beedslolkuntus2070]

Jim Browning wait I taught gumtree is a scam

[@clyde__cruz1]

@@beedslolkuntus2070 It's not. Someone created a sophisticated phishing site and app that said Gumtree but are fake.

[@DannyDenay]

I didn't skip the ad because I like your work Jim. I did however fill the time writing this comment.

[@willharris8632]

I mean give them a round of applause for commitment, but Damn I think lots of people will fall for this

[@Sunseaker]

agree to an extent, the length that you have to go to is a bit much, personally my self i wouldnt enter my card details on anything other than the big names, ie amazon

[@loonas]

yeah, id never put my card details in anything really if i did id have another card with not that much money on it and shop online with it

[@Rainaman-]

@@Sunseaker yeah, but this seemed some what legit

[@azzajohnson2123]

People here fall for the tax office telling them to pay made up debts with iTunes cards.. they would eat that up like a fat kid around cake!

[@evasofia07]

Huh, I always thought gumtree was just an Australian thing, the more you learn

[@MaazAltaf]

Same, lol. I identify Craigslist as USA and Gumtree as Australian

[@evasofia07]

@@MaazAltaf Yep, I sort of thought maybe eBay was the US and UK version of gumtree? Never thought they had gumtree too

[@GokayCEKLI]

@@evasofia07 I use craigslist in japan but yeah its the us made and gumtree is an australian company. They just do branching out.

[@jay-uo2bi]

​@@evasofia07 eBay is everywhere including Australia.

[@evasofia07]

@@jay-uo2bi I know lol, I'm an Australian, it's just because eBay wasn't started in Australia and gumtree is more 'iconically Australian' I guess?

[@shanewhite4816]

These scammers have so much skill to do all of this then why don't they just get a real IT based job that pays them thousands for every month? These scammers make absolutely no sense lol

[@lunalluna9401]

How do you know they don't? Haha they probably do based on their knowledge

[@RetroBackslash]

Because the jobs don't exist or pay a crappy wage...

[@МирославКръстев-с7и]

@@RetroBackslash such jobs exist and I really don't know why don't they work in such places. In almost any country there's atleast 10 high paying IT jobs. Even in small countries like the Balkan ones.

[@Owfore1]

they probably do have a legit job, and this is something on the side.

[@stockloc]

Their country's economy is probably shit. Try find a job like this in Africa. Not many companies there.

[@H4WK6969]

I got a clever phone scam the other day, it was a woman asking me if i have had any injuries at work or elsewhere, at first i thought i was speaking to a person but then she said something that seemed a bit odd and i thought wait a minute is this a robot im talking to, so i asked if she could confirm to me that she is a person and not a robot and all she said was 'No' and hung up on me lol

[@Robert-dB]

I'd bet that was a person, but you took her so far off script that she could hang up and still get paid. She was also insulted; but only a little 'cause she knows it's a really dumb job.

[@SamTheEnglishTeacher]

@Berzanz are you a robot?

[@blxtothis]

H4WK69 - I am signed into the national scheme that filters these nuisance calls but some slip through the net. My tactic is to go along with the call and invent ever more ludicrous incidents until they ring off. I doubt that it will prevent the occasional calls but it gives us a laugh here and at least it wastes their time as much as mine.

[@peterjones6640]

When I get a call from someone suggesting I was injured in an accident I always say yes the injury was so bad I died.

[@Loki-and-Thor]

In the case of a call about injuries I say yes, I had such a bad head injury that I can’t remember the details.

[@PS4sos21]

You are one of the only people on the internet I would love to be able to support through patreon. You are really doing something very important. Not like other's who only give out their opinions and then expect people to just throw money into their patreon account. But you, you are different. If in anyway my situation changes, you'd be one of the first to know. I love people like you who is a selfless person whose forever thinking about helping people, specially old and infirm. These scammers are forever ringing my mother's home and forever asking her about the computers in her home. But she is not stupid and knows they are scammers. But this never stops them from trying. All I can do at the moment in to say thank you for all that you do. People like you never get the credit they deserve from the state or media.

[@EnglishLaw]

www.patreon.com/JimBrowning

[@PS4sos21]

Judicial Watch is another group I would love to be ale to support. But I live in one of the most deprived neighbourhoods in Ireland. I barely get enough to feed myself or my family. If things do change, I will for sure be able to help in whatever way I see is the best way.. I hope you understand.

[@jerseyjon3903]

ps4 his patreon is a scam. He has two pc's and does all the voices himself!!!!

[@PS4sos21]

@@jerseyjon3903 I do not care how many PC's he has.. He is doing great work here exposing all the scammers that he can. I couldn't care if he lived in a castle. He is helping out a lot of people with these uploads...

[@jerseyjon3903]

ps4 it's a joke you fucktard

[@Calverto99]

The fact people scam on here is shocking. Older people could fall for this!

[@reeman2.0]

I think that’s the reason they scam.

[@Calverto99]

ReeMan2.0 Well we know that but if it was their older relatives they would threaten death to those people but yet to others they don’t care

[@gibbo9089]

Unfortunately it's not just older people who fall for this type of scam.

[@kohmy2036]

@@gibbo9089 ye, you literally can fall for it if you're really that careless

[@CRAZEDDUCKling]

This is why you have to be up front and strict about what type of payment you want. (e.g. cash on collection or paypal) That way you can challenge anyone attempting otherwise.

[@R0B_WR]

Noob: gets scammed Pro: wastes scammers time Jim Browning: taking down scammers buildings from my computer

[@isabellearaindrop]

Victims aren’t dumb, theyre normal people. You wouldn’t admit it but you’d probably fall for this, it looks so real. I definitely would.

[@user-to8ki3dv6x]

@@isabellearaindrop I don't believe his comment implied that the victims were dumb, only that they're unaware of people that do this.

[@da_pikmin_coder8367]

1 IQ: Falling for a scam, giving away your information, and getting screwed over 120 IQ: Identifying that the link is a scam and ignoring 3000 IQ: Identifying that the link is a scam, and then going through with the scam the whole way just to see what it does.

[@funnystoriesshorts481]

10000 IQ: Identifying that the link is a scam, then scam the scammer with his own app by modding the code.

[@lorreba]

@@funnystoriesshorts481 100000 IQ ive never felt the urge or need to buy a computer or laptop or mobile phone

[@funnystoriesshorts481]

Lorre Ba you are smart

[@lorreba]

@@funnystoriesshorts481 sadly my presence here proves you wrong, lol

[@nailozaz7596]

3000 iq should be 50 iq lol

[@natedog8147]

Is the PC still for sale ? Email me your bank details !

[@mattkossuth3008]

Dont forget to attach CVC code as well, so your payment doubles

[@John.strong]

I don't need cvc code, just the card numbers and name on card I paid my electric bill last week with just the card number and name

[@bajeebies]

Wouldn’t they find u by using it to ball ur bills? Lol

[@bajeebies]

Pay* idk how autocorrect switches it from pay to ball

[@John.strong]

nomoreuglybangs2k18 taeyeon yes, most likely But maybe pay someone elses like robin hood?

[@IceRiver1020]

I found your channel yesterday, binge watched a bunch of your videos, and then had a weird dream about tech support scammers last night. That sort of thing tends to happen to me when I watch too much of one thing in a day lol!

[@gausts]

Legend says a random guy gets charged 6000£ every time Jim uploads.

[@ShuckfacedShank]

This was the first Jim Browning video I ever watched. Now I'm absolutely hooked on this channel :)

[@elly8353]

My brother put his expensive speaker set up for hire on Gumtree, and we all told him to make a written contract and get an ID from whoever he hired it out to, but he thought we were overreacting. First guy who hires it nicks the set. Faked his name and details, the house he met my brother in front of wasn't even his, and my brother didn't suspect a thing until he'd waited 2 hours for the guy to turn up and return the set. Gumtree couldn't do anything because my brother was an idiot and didn't take any precautions, so now the speakers he used at his wedding are gone forever. Remember, you have no idea who is on the other end of that ad, whether you're posting or responding. Stay safe and stay sensible.

[@zg3342]

That’s crazy. I’ve seen the ones where you can rent out music gear you aren’t currently using to make money on the side from people using your gear. I can’t get behind it. I don’t want my guitars or amp stuff going missing/stolen then depending on the cops to do anything or them coming back dinged or broken while insurance messes around trying to not replace it and instead “fix it” where it’ll never be as good again.

[@AreYouCubingMe]

Scary. That’s super sophisticated.

[@NeThZOR]

For someone who has not grown up with tech, yes. But the red flag will immediately pop up when someone tries to install the .apk file and their phone warns them with a message along the lines of 'your app settings do not allow installation of applications from outside sources'

[@Bring_MeSunshine]

Still loving your work, Jim. More scam-busting power to your elbow in 2019

[@thedude5295]

The biggest flaw in this scam, IMO, is that it starts the countdown from exactly 16 hours the moment you log in. That seems extremely suspicious to me. I would either have it throw out a random amount of hours, minutes and seconds between 10 hours and 24 hours on a login, or I'd just give it some arbitrary clock starting at something like 15 hours, 3 minutes and 27 seconds the moment you log in.

[@greenprofile5755]

Your a programmer init lol That's acc smart

[@subzerotheiceninga8254]

Imagine the fake bank card info he typed in was actually someone's card number.

[@neonicplays]

I feel bad for mr vegen

[@dilksjoel]

Tropical imagine if it was his own details

[@subzerotheiceninga8254]

@@dilksjoel Wouldn't really be as funny to me because, "One does not simply, accidentally enter their card details"

[@andyowens5494]

There are genuine test “cards” out there for exactly this purpose. There are two types, unmonitored, which initiate responses to test developers systems but don’t do anything behind the scenes, and monitored, which are used to trace fraudulent b@stards. There are increasingly better ways to trace people through the electronic trail they leave; the old ways to obfuscate their identity are being eroded, so unless they are actually clever enough to stay three steps ahead, they will get caught. Set enough traps and bears fall in.

[@Chonksta]

if you only needed the card number to pay, im sure so many people would have accidentally put someones card into a scam

[@crxdelsolsir]

Jim: You are at home Scammer: No I am not. You do not know anyth.. (hears metal slider sound and metal loading into a chamber) Jim: I suppose you didn't hear that behind your head just now then.

[@craigory87]

Wowwwww... very nice work, Jim. Thanks for bringing even more attention to this issue. You're the man!

[@DanielleCherise]

I love that there are people like you out there looking out for the masses. Amazing work! 👌🏾💯

[@impr3subie]

I train my reflexes by seeing how fast i click ur new vid posts.

[@tobiasurey1434]

@@JimBrowning your bliring game is weak here, you should work on that. Considering the first two

[@charlesdickens6706]

.....whew, I'm impressed by all the competent IT skills . You deliver at a good measured pace . I know I'd understand everything if I had background in the field myself .

[@AAlim22]

I had a similar encounter on Gumtree too. I posted an Ad to sell my phone, and I was presented by a message from someone asking me for my email. I was a bit suspicious for someone on Gumtree to ask me for my email to communicate which usually doesn't happen. So I told the person to continue messaging me on Gumtree and the person said he still wanted my email so I ignored him. So an hour later he makes another Gumtree account and asked for my email again. I told him to "piss off" so he wouldn't have my email address. So I did a little bit of digging and I found out he wanted to hack my email credentials to attempt and log into my PayPal and other banking accounts. Luckily with the help of Google, I did a little research and found out that it was a scam. Please, everyone, don't get fooled by this scam.

[@Villager811]

how does one hack email credentials?

[@AAlim22]

@@Villager811 He prompts you with a virus link asking for you're email and send you an email with a virus and claiming that it is a gumtree offer

[@Villager811]

@@AAlim22 oh ok

[@rosxjun]

the internet is such a diabolical scary place 😥

[@ytnoname1189]

im sure he wanted to send you a fake paypal payment receipt... none of this hack stuff m8

[@TotoDG]

I always assumed Gumtree was an Australian website, because it’s where you find, you know… Gum trees.

[@tedvarrick9599]

Jim I haven't received my pc yet! Told you I definitely paid western union!

[@fog-]

@@JimBrowning lol

[@herkabie9480]

@@JimBrowning lel

[@b.5728]

@@JimBrowning lol

[@insidescuff]

@@JimBrowning lol

[@Sam_888]

@@JimBrowning lol

[@NoogahOogah]

The greatest scammer of all time would collect billions of credit card numbers, and charge each of them a single cent.

[@eadbert1935]

there once were some guys who removed all money smaller than cents (ab.cd*xyz*) from all accounts from a bank and they got a few tenthousand bucks out of that it's not really a scam, it's just stealing an amount of money no one would realise well, the bank did and they were caught xD

[@sameash3153]

bro I wouldn't even mind if someone stole a fraction of a cent from my account, they can have that lmao, I think they deserve an award for being that smart

[@timothye.2902]

@@eadbert1935 that's the plot of Office Space

[@eadbert1935]

@@timothye.2902 thanks, i (unironically) didn't know that i was told that story in my early years, a short time after the movie came out in 1999... i wasn't really watching a lot of non-animated/non-comic movies back then xD i wasn't sure if it's an urban legend or a real story, i didn't know it was a movie

[@ayupmeduck5708]

@@eadbert1935 Richard Pryor's character did that in a Superman film. kzbin.info/www/bejne/n33aaoJ4i5x7j6M

[@jakepullman4914]

8:45 Per your request, I am getting back to you with urinalysis results: * pH: 6.2 * Specific Gravity: 1.005 * Blood: ++ * Protien: negative * Leukocyte esterase: + * Nitrites: + * Ketones: negative * Glucose: negative * Bilirubin: negative * Urobilinogen: 0.2 Given these results it is likely that you have a UTI and should seek treatment with your Primary Care Provider.

[@shadowsythe22]

that was a smooth "grand chase" ad you put in there.

[@AwesomeAim]

That's pretty great work for a scam. Now, imagine if it was honest work too. They would probably make more money with an actual useful app with those kinds of skills.

[@infinitedeathloop5517]

they paid someone to make the app

[@AwesomeAim]

@@infinitedeathloop5517 I didn't think of that. That makes a lot more sense lol.

[@roninpawn]

You can go the other way with that too. Imagine if they had more devious goals than the charge as much as they can to just one credit card! You could throw error messages that ask you to use another card, and collect all the cards you can get someone to enter. You could build in a new payment section and lead users to pay by direct transfer from their bank accounts...

[@EnglishLaw]

Smartphones have the potential to cause havock that most people are not aware of, all without then even knowing @@roninpawn

[@valeriavagapova]

Maybe somewhere in London or California, but not in a tiny town in Bashkorstan where this man seems to live.

[@Ray2Jerry]

We don't really use Gumtree in Canada, but it's how I found my apartments in NZ and Australia! Brought back memories...

[@natzzzy9119]

We don't use Gumtree in NZ but we have Trademe haven't seen many scams on this level though

[@DiscoFang]

Finding a NZ apartment via an Australian site is quite a good starting point to open yourself to a scam!

[@LuisGomez-ok8im]

Aislínge, hello, Jim! These are just a delight to watch. You are very knowledgable and really have a great sense for these.

[@360Collector]

Everyone gangster until Jim logs onto his computer

[@JJ-kl7eq]

Kooky burglar sits in the old Gumtree Merry, merry king of the scam is he. Laugh kooky burglar Laugh kooky burglar Jim Browning is on to thee.

[@mmmk1616]

I have been humming that song for a while now! I didn't watch the video right away, but the "gumtree" got me humming the song earlier today :)

[@TheGamerWithMore]

Nice. An Aussie nursery rhyme made better!

[@christiankneupper7011]

@Phat Pigeon oi

[@5winder]

Hahaha.

[@LordofHogwarts]

No matter how many times I hear it I still love the outro music so much.

[@inukeforfortune2220]

When that ask for card details just use a visa gift card for 5$ see if it takes it all

[@Ubernator]

Kloss Hunter didn’t you watch the video, they have his name and phone number in the database. You use your real card and they will dig your account dry

[@tharglet]

@Kloss Hunter DO NOT DO THIS IN THE UK. The name is NOT validated. There is a very high chance the transaction will still go through. If you want a number that passes a luhn check then the easiest is 4444333322221111

[@CodOfAges]

@Kloss Hunter How does that make any sense? "Give them your real card details so they can steal all your money! But don't give them your real name otherwise they might know you are called David!"

[@egis4500]

@@CodOfAges i think he meant. When you enter your card code name and surname is also required. Just like ccv. If you dont have both it wont work. You need ccv card number name exp date. Not sure but I think thats what he meant

[@indyvisualist]

@Admiral Chan Visa Gift Cards usually don't have a name on them. You can buy them at Walmart and pay at the register. They come loaded with a prepaid balance. Anything I buy online I go to the Trouble of doing it this way. It works just the same as any VISA but it is not tied to anyone name. IF they hack the number they can get all the money however if there was only $5 on it then that is all their is to take.

[@ncooty]

Nice of you to advise the scammers on how to improve their app for better scamming.

[@TheDaggwood]

Were you ever blackhat, and what has inspired you to perform such dedicated work? I'm amazed and inspired. You don't seem to get pleasure from the hackers pain, no silly playing characters with the hackers, and you care about the victims. Simply awesome!

[@Hinchdistillery]

So did you sell the car?

[@outlawdoggo8205]

car lol

[@tigrejor22]

c a r

[@ThomasBob]

@@JimBrowning think it was a joke

[@orsencart]

ｃａｒ

[@HH-kl8ed]

c a r

My favourite response to a cold call is;”No,I’m afraid he/she’s dead!” Then;”Hang on they’re still moving!” Loud thumping noise.”Yes,definitely dead,now,how can I help you?” Silly,but fun!

[@andreyoung6420]

Silly , yes. Traumatising? Possibly.

[@darkeuropa7]

You both used commas incorrectly

[@andreyoung6420]

Darkeuropa how should I have used it?

[@darkeuropa7]

Andre Young I honestly do not care for this conversation

[@darkeuropa7]

Andre Young commas do not come after spaces

[@UnwovenSleeve]

Ooh a new Jim Browning video. Gonna enjoy this

[@jamnmikefx]

I’ve had this happen two separate times on gumtree. Glad you’re bringing it to light so vulnerable people don’t fall for it

[@exyler9319]

I started watching you for the entertainment/comedy value. I shed some tears on one video and now I'm full of rage. I've always been fascinated by white hat hacking and the occasional Wi-Fi. I've always been a good bluffer with the scammers (and creditors) sufficiently pissing them off and satisfying myself but now i want to fully immerse myself in helping, doing my part to stop these slimy *explicit words* I support you 100% and hope to see you on the field of battle Jim.

[@ownerfate]

"... I recently bought a bookshelf on Gumtree.... " - Randy

[@Pleiades1432]

Came looking for this comment ;D

[@Mr.C-Mister]

You deserve more views then you get.

[@VamsiKrishnavamsshy]

EXACTLY MY THOUGHTS MATE

[@anthony8382]

In addition to the obvious captures: The first step of the registration process generates a unique ID for your "phone" and sends this to the server in the registration start event The second step sends all the phone identity details (IMEI, phone number, SDK version, (locale) country, service operator, model, and whether the device is rooted) The third step sends a list of all apps installed on the phone The fourth step dumps the contents of your sms inbox The fifth step dumps the contents of your sms outbox The sixth step sends your contact list (name / number)

[@t_albino]

Well this scared the beejezus outta me. As I always say, evil does not equal stupid- whether its terrorism or scammers. They're prepared to go to whatever lengths necessary to fulfil their intentions. Thanks so so much Jim- You and the other scam baiters are 21st century heroes.

[@edwardwatson9478]

4:49 Is it just me but isn't it just USA and the UK that use decimal points not commas to show decimal places?

[@zombiegun71]

kinda terrifying when you consider that people fall for the obvious scams all the time, imagine how many will fall for this...

[@Cra1gst]

when i get home from work ill have quick tear down of the apk file see what i find

[@Cra1gst]

on fast lil check you was right app dont attually crash was coded to close with error MasterCard Play Market Save €‚€‚Unfortunately Google Play Services has stopped. im guessing has a set timer from when installed if you try to load 5 min after install will close with error but i can decrypt at home

[@Cra1gst]

UPDATE : the app has full access to the phone , sms read : full list:

[@Cra1gst]

ok it loads a web ui , and it uses ip to lock you out once ur ip sends credit card it will crash the app , maybe a RAT in the app too , i seeing lots of mms and sms on receive so seems like any text ath codes get sent to them as well but you won't see notification as it has code to remove sms or mms notification ill look for domain it talks too

[@sindurwavesismaturf]

Following

[@Cra1gst]

@@JimBrowning no prob cant find any address yet just it relays everything to them via php form but so so so may files

[@addick675]

"Canceled" spelt incorrectly. Bad spelling is always a pointer

[@DrumCobra]

int * canceled = &(new int); thats right

[@patrickwalker2509]

@@DrumCobra might be a yank....see it all the time

[@ahmed4363]

@@chyza2012 I dont know what you just said but it sounds cool

[@benalkan8559]

@@ahmed4363 C++ is a programming language. Chyza gave an example of a valid C++ expression. If you ever wondered about how the computers _really_ work (none of that Python bs) have a go at learning C++. The joke was that in C++, int* is a pointer

[@ahmed4363]

@@benalkan8559 yeah I know what C++ is, I just haven't learnt it I'll first start with lua ( for sibling reasons) then python then C++ and I think I would go java after that

[@Woodgate425]

I can’t believe that anyone is questioning JB’s integrity because he does fantastic work exposing scammers. Keep up the good work Jim, your a star.

[@tonykett]

your wireshark might have captured the udp/tcp dns request revealing the url the app was attempting to connect to that eventually resolves into the azure IP (or just tell your bluestacks phone to use your own dns server (which is logging it). normally these sort of things dont go directly to an IP (espeically with AWS/azure hosted servers). love your work mr Browning, please do continue to box their ears in your spare time!

[@Roman-eq7ed]

I only ever do cash and in person for this reason. Also, for your own security, always make it day-time, public place, and absolutely, ensure you are not alone.

[@jahimuddin2306]

Always have a buddy and a gun.

[@damienrobbie5974]

a good way to spot something suspicious is bad grammar, a reliable company would speak with perfect english

[@burstkelio]

and you're right damien, the scammer could've typed "pre-payment" with a dash or with a space instead, not just type "prepayment"

[@phizzelout]

wud yu tolkin abot? yu r so stoopid, I is a scummer aind I gots purfaked grahmer, dank yu bary mahch

[@video99couk]

I don't know, I've seen some dodgy grammar from real banking sites. I forget now if was First Direct or Santander who once used the word "till" (as in cash register) where they meant "'til" as in abbreviation for "until". Common mistake.

[@gandalftheantlion]

Actually even pro companies has had bad grammar.

[@smokeybarr]

Yep, usually a good indicator. And this one was pretty good. Though "This is guarantee for directly...." at 1:44 would have had me questioning it.

[@CODENAME]

It's amazing that someone with the ability to create this type of scam can't find a legitimate way to make money.

[@jdavison8551]

CODENAME what makes you think they don’t just choose to do this rather than honest work? It’s probably more lucrative and tax free.

[@neutronstar6739]

We app developer are less likely to get money back from the google play store and apple store. Perhaps the guy was experiencing this and decided to do these types of things in order to get money. Or perhaps he is getting paid for doing this by some other guys in a company.

[@cheshirecat2641]

@Willie Stroker Russia is not a third world country. But the rest of your sentence makes perfect sense

[@cheshirecat2641]

@David Beem Russia is not third world country. Accept the fact and move on. No need to lecture me with your personal definitions and opinions. It won't change the world, neither my knowledge.

[@kael070]

@@cheshirecat2641 it is a third world country though

[@kpshahul]

If the cyber police was doing 10% of your work, there would not have been these many cyber criminals. Good work mate. I wish I can become a patron. Definitely I will once I get a proper emplyment. All the best for your cyber crusade. 👍

[@TheKinkyOrb]

Kudos to your fantastic effort to unmask this culprit who are stealing people money

[@imranino]

Feckers tried to scam me too! I smelled a rat right away, but it is indeed a very sophisticated scam!

[@MariusNinjai]

stinky rat

[@ArcadeMaster207]

Just refreshed my notifications & saw your vid!

[@ArcadeMaster207]

@@JimBrowning hahaha thanks man!

[@Wltler]

Once i fell for that, and when i realized it, i already clicked through the pages. Never again, thanks for explaining this ruse.

[@skittstuff]

When I'm watching your videos, I try to look for ways the average person might be able to detect a scam. So far, the best method has been checking the grammar/spelling/wording of things. Even if it's grammatically correct, the wording might be suspicious enough to set me off. Proper websites/apps usually have standards for spelling and grammar, so finding typos or odd wording is a potential cause for concern. (I say 'potential' because sometimes these things happen by accident and it's not the end-all-be-all of suspicion. Some folks are just not native english speakers!) A few examples here: -"Waiting for the seller confirmation" this technically could work, but I think most people would say 'waiting for the seller TO confirm' or 'waiting for the seller's confirmation' as it feels more natural to speak that way. -"An order payment is received" normally, you'd want to use past-tense here. Again, this is technically correct, but in the more natural flow of english we tend to say 'an order payment WAS received' I try to scan over every strange email I get in search of weird mistakes like this, or formality issues (like if you're getting an email supposedly coming from a branch of the government, why is the email address @hotmail or @gmail?). It doesn't necessarily mean you're facing a scam, but it's something that tips me off a bit and hopefully can help people who don't know about technology that much and can't exactly check the IP addresses and whatnot. Love your videos, Jim! Spreading awareness about things like this can help a lot of people. I hope this isn't a weird comment, lol

[@ohjackieb0y]

Never stop making videos!!! You are my hero

[@aturtle4499]

Bob vegan, nice lmao

[@melody3741]

Its not bob vegan, its bob vegen. Its a reference to "show me bobs and vagene" where an indian guy is trying to hit on a girl online.

[@aturtle4499]

Melody I meant bob vegen, auto correct made me say vegan

[@__--red--__]

@@melody3741 no shit

[@melody3741]

TechnoLogic He got it wrong so i thought he misheard it and i corrected him. You dont need to act like an asshole to everyone you meet.

[@melody3741]

Yes Ok oh sorry

[@Slarti]

Thanks for this. It really does come across as seeming legit so it's great you have exposed this.

[@jblen]

Jim is the only person who will suspect that a scam site may be taken down so he preemptively downloads the scam to run later.

[@ashtonhartley2662]

I don't know why you do what you do but I'm glad that you do it.

[@MutarFuqueer]

I've been binge watching your videos ever since this COVID nonsense happened and i love the work you do and want to contribute. Trouble is I lost my job, as many people have. I hear there's a lot of job openings in Kolkata recently, so fingers crossed! :-)

[@AstrosElectronicsLab]

I wouldn't call SARS-CoV-19 "nonsense".

[@crylune]

@@AstrosElectronicsLab It's SARS-CoV-2 good sir, unless you're from the future and the 19th iteration of coronavirus has taken over the world once again...

[@LizzieBisMe]

8:34 Urine analysis will be sent once received from my dr.

[@Kurkii]

5:48 if anyone wants to flood his server

[@notgeorge7563]

doing it right now

[@imalaia8033]

Ninjas George after one year rly

[@c0smo709]

Ah yes because that will do shit

[@RKroese]

Never too late to add ur 2 cents

[@maliciousbloke]

Gumtree has an API iirc, so it's probably simple enough to do a scrape and get like firstname/phone number/AD URL from that, making it look like a targeted scam even though it might not be.

[@maliciousbloke]

​@@JimBrowning Oh certainly it's several steps up in effort and creativity from your everyday phishing scam.

[@philipvernejules9926]

..... Thanks for taking the time. I understood half of it and need to watch again later.

[@salessiteboost7665]

Awesome work Jim! These scammers are making hundreds millions and of course they will be allocating more resources to app and digital asset development. Something needs to be done. The internet has become the wild west!

[@Lemons28KZ]

"It was my wife's bookshelf."

[@pixelated_knight]

Was that a randy feltface reference?

[@Lemons28KZ]

@@pixelated_knight You know it!

[@SkeletonSyskey]

Congrats on 200k Jim

[@eswee6780]

skeleton definetly gonna watch your channel if jim likes you

[@SkeletonSyskey]

@@eswee6780 Jim has been Helping me with VoIP for UK numbers

[@77936fief]

Jim, that was my phone number you used

[@kwiin2022]

Ha!

[@ethan8819]

Sure ...

[@eyelidstew4360]

ernst de waal doubt it mate

[@pieloloon]

quit your bullshit

[@77936fief]

your avatar freaks me the fk out! @@eyelidstew4360

[@MansisHotaOfficial]

This was the very first video I watched years ago. Now, KZbin has recommended me this once again.

[@nobbystyles4807]

great work. i keep blue stacks on a spare laptop for this exact purpose. for a long time i did think that my phone provider was force leaking data in order to place extra charges on my phone bill. i couldnt find one single cause in the end from testing apps but i did notice that even when apps were forced stopped they were still actually working in some cases.i find the nature of phone software quite pervasive in general.