DelphiFAQ Home Search:

Fraudulent charge 9.99 by wrkdtg.com

 

comments15 comments. Current rating: 4 stars (15 votes). Leave comments and/ or rate it.

I noticed recently a charge of $9.99 on my checking account, supposedly a debit card transaction. Next to the charge, it said www.wrkdtg.com and a toll free phone number (888)389-0204

I did not recall any business with a site for $9.99 and particularly not with this site. The site itself has no apparent content and maybe they were just a payment processor (I thought).

I looked up the whois information about this domain. It is fraudulent (incorrect information):

Registry Registrant ID: PA_30517087
Registrant Name: John Doe
Registrant Organization: Media Support Online
Registrant Street: 123 Main street
Registrant City: N/A
Registrant State/Province:
Registrant Postal Code: 12345
Registrant Country: US
Registrant Phone: +01.8888888888
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: legal@mediasupportonline.com



I called their 888 customer service number and demanded an explanation. They gave me none, just said that I had subscribed to their service (LIE). Then they demanded my ZIP code, full name and credit card number to reverse the transaction. The guy whom I spoke to had a certain accent and I could hear kids in the background screaming.

I called my bank and they reversed the 2 transactions (yes, they had billed me a month prior as well)

The guy on the phone says that he works for a company called 'Customer Service Management' and that they are not related to wrkdtg.com

Of course that's a lie. They probably have a few of such bogus fraud sites set up and one company that solely processes refunds.

So, if you found this site it's probably because you googled either wrkdtg.com or their customer service number.

The domain was registered through pananames.com -- a registrar based in Panama. No surprise that they don't respect common rules (e.g. the requirement to put in valid information about the domain owner)


Just call your bank and have them block this company, so that they can never withdraw from your account again.


Also, maybe a good idea to cut up your debit card and get a new one issued.


Content-type: text/html

Comments:

2014-07-03, 12:32:12
Rumen Petrov from Wilmington, United States  
rating
The same thing happened to me. I went on the website that I appeared on the description and when I clicked on the link 'unsubscribe' it took me to a screen where I had to enter information in three fields one of which was my credit card information.

I immediately called my credit card company and they had to close my account and issue me a new card.

If you have this transaction on your statement, simply call to report it because it is a fraudulent one.

Good luck!
2014-07-06, 10:55:14
anonymous  
rating
WATCH OUT with these email address they are none existing emails to delivery company, bank and government organisation:

Parcel delivery - Info@atixpress.com - IP address: 31.7.60.58 (Bad IP used in Scam before)
'So right now you are being charged for the FINE of 1650 euro for custom and security clearance for the release of your package. immediately your payment is made your package will be released.

Thanks
ATIXPRESS DELIVERY TEAM '
Package never selivered to the rightful owner!!


Bank - info@linfordtrust.com - IP 174.129.251.4 Bad IP used in scaming before
Email address: Lindamarty@yahoo.com från Lindfordtrust Bank

'Yours truly,

Mrs.Veronica Gill
(Inter.Remitt.Dirc.)
Tel:+44 (0)70 7708 9929
Fax:+44 (0)70 7708
9939
http://www.linfordt..bank.html' dont exist!

Email address: seriousfraudoffice paulsmith <seriousfraudofficeuk@gmail.com>;
Email IP address: 74.125.29.27 Paul Smith is a imposter!

'Thank you for reporting this. You are correct in that the email you have received is indeed someone impersonating a member of the Serious Fraud Office, we do not have a Paul Smith working for us. Thank you for also sending this to Action Fraud, which is what we advise in these circumstances.

Please ignore the email below and if you receive any similar ones, please report this to Action Fraud http://www.actionfr..police.uk

Many thanks
Kind regards
XXXXXXXXXX '

SAME PERSON OPERATING WITH THESE!




2014-07-06, 10:59:59   (updated: 2014-07-06, 11:02:55)
anonymous  
rating
WATCH OUT with these email address they are none existing emails to delivery company, bank and government organisation:
Parcel delivery - Info@atixpress.com - IP address: 31.7.60.58 (Bad IP used in Scam before)
'So right now you are being charged for the FINE of 1650 euro for custom and security clearance for the release of your package. immediately your payment is made your package will be released.
Thanks
ATIXPRESS DELIVERY TEAM '
Package never delivered to the rightful owner!!
Bank - info@linfordtrust.com - IP 174.129.251.4 Bad IP used in scaming before
Email address: Lindamarty@yahoo.com från Lindfordtrust Bank
'Yours truly,
Mrs.Veronica Gill
(Inter.Remitt.Dirc.)
Tel:+44 (0)70 7708 9929
Fax:+44 (0)70 7708
9939
http://www.linfordt..bank.html' dont exist!
Email address: seriousfraudoffice paulsmith <seriousfraudofficeuk@gmail.com>;
Email IP address: 74.125.29.27 Paul Smith is a imposter!
'Thank you for reporting this. You are correct in that the email you have received is indeed someone impersonating a member of the Serious Fraud Office, we do not have a Paul Smith working for us. Thank you for also sending this to Action Fraud, which is what we advise in these circumstances.

Please ignore the email below and if you receive any similar ones, please report this to Action Fraud http://www.actionfr..police.uk

Many thanks
Kind regards
XXXXXXXXXX '
SAME PERSON OPERATING WITH THESE!
2014-07-10, 08:39:00   (updated: 2014-07-10, 09:16:52)
Pootni  
rating
Advanve Fee Frauds! Person connected to this email address has an account at HI5 Adewole Malcom or Adewole M, Nigeria.
Email address: Info@atixpress.com
Email IP address: 31.7.60.58 (Bad IP used in Scam before)
Email address: atixpress@atixpress.com (Zurich)     dont exist no IP     +1 859 538 5321 USA
IP Host:     anewebusiness.net ( - anewebusiness.net was registered on 08/02/2013.
It's main IP address is 31.7.60.58)
Website dont actually exist! http://whois.domain..xpress.com


Keywords:
2014-07-10, 09:24:52   (updated: 2014-07-10, 09:40:29)
Pootni  
rating
Watch out for this IMPOSTOR, he comes in all kinds of shape! He is uses the same IP number in all 3 email addresses as shown below:
IMPOSTOR:
Emailaddress: 7638fran@gmail.com         IP 74.125.29.27
Connecting to host address '74.125.136.26'    
IP Address:     74.125.136.26
IP Host:     ea-in-f26.1e100.net
(dont exist) serioufraudofficeuk@gmail.com     IP 74.125.29.27 calls himself Paul Smith

(dont exist) medicalfconsult@gmail.com     IP 74.125.29.27 calls himself Dr. Razim
2014-07-10, 09:33:58   (updated: 2014-07-10, 09:38:57)
Pootni  
rating
She is a fraudster claim to be a RED CROSS diplomat????
maureenjacobs@diplomats.com     IP 74.208.5.4         ISP: 1&1 Internet usa
2014-07-10, 09:37:58   (updated: 2014-07-10, 09:38:27)
Pootni  
rating
Is a fraudster claims to be a fashion designer working with all the fashionable comapanies like HM, now why will he want money????
Living in Austin Texas.
anthonyfrancesco@gmail.com     IP 173.194.68.27     United States
IP Host:     qa-in-f27.1e100.net
2014-07-11, 11:42:30
Pootni  
rating
Advance Fee Frauds! Person connected to this email address has an account at HI5 Adewole Malcom or Adewole M, Nigeria.
Email address: Info@atixpress.com
Email IP address: 31.7.60.58 (Bad IP used in Scam before)
Email address: atixpress@atixpress.com (Zurich)     dont exist no IP     +1 859 538 5321 USA
IP Host:     anewebusiness.net ( - anewebusiness.net was registered on 08/02/2013.
It's main IP address is 31.7.60.58)
Website dont actually exist! http://whois.domain..xpress.com
2014-07-11, 11:44:19   (updated: 2014-07-11, 11:46:07)
Pootni  
rating
Advance Fee Frauds! Person connected to this email address has an account at HI5 Adewole Malcom or Adewole M, Nigeria, attached to First Bank Nigeria.
Email address: Info@atixpress.com
Email IP address: 31.7.60.58 (Bad IP used in Scam before)
Email address: atixpress@atixpress.com (Zurich)     dont exist no IP     +1 859 538 5321 USA
IP Host:     anewebusiness.net ( - anewebusiness.net was registered on 08/02/2013.
It's main IP address is 31.7.60.58)
Website dont actually exist! http://whois.domain..xpress.com
2014-07-11, 12:15:16   (updated: 2014-07-11, 12:25:57)
Pootni  
rating
Look Below he is back Fraudster! same IP number!
Email address: Lindamarty@yahoo.com
Email IP address: 98.138.112.34, United States
Email address: mikehodgson185@yahoo.com
Connecting to host address: 98.138.112.34 United States
He is also known as kmillsgrindel@yahoo.com
South Africa he is an impostor!


Keywords:
2014-07-11, 12:27:05   (updated: 2014-07-11, 12:30:50)
Pootni  
rating
Look Below he is back Fraudster! same IP number!
Email address: Lindamarty@yahoo.com
Email IP address: 98.138.112.34, United States
Email address: mikehodgson185@yahoo.com
Connecting to host address: 98.138.112.34 United States
He is also known as kmillsgrindel@yahoo.com
South Africa he is an impostor!
2014-07-13, 06:12:26
anonymous  
rating
WATCHOUT! this photo surely belongs to someone who does not know that his picture is used by Fraudster I got in touch with him long time ago and he called himself Richmond Abi.

richmondabi@yahoo.com         IP 66.196.118.35
IP Host:     mta-v4.mail.vip.bf1.yahoo.com

also using this name same IP

Email address: kkmillsgrindel@yahoo.com
Email IP address: 66.196.118.35, United States

IP Host:     mta-v4.mail.vip.bf1.yahoo.com

Found him as:
john118 on Fresno www.loveawake.com

Bernad Powells hotornot.com

WATCH OUT LADIES!

This image was also posted here:
Another dating / chat scam - USA/ Nigeria connection



Keywords:
2014-07-13, 08:05:24   (updated: 2014-07-13, 08:48:36)
anonymous  
rating
Fraudster impersonating: WATCHOUT LADIES! SAME PERSON!
Email address: flowergal41@ymail.com is actually from kmillsgrindel@yahoo.com
Email IP address: 98.138.112.33, 98.186.217.202, United States cox communications inc.
IP Host:     mta-v2.mail.vip.ne1.yahoo.com
ISP:
Emailaddress: franklinisaac661@yahoo.com
Email IP address: 98.138.112.33
Email address: Lindamarty@yahoo.com She claimed to be from Lindfordtrust Bank A/M
Email IP address: 98.138.112.34, United States
IP Host:     UNKNOWN-98-136-112-X.yahoo.com


Keywords:
2014-07-13, 12:12:04
Pootni  
rating
Still in action he has now changed to a new email address, PLEASE WATCH OUT LADIES!
He comes in many shapes!

7638fran@gmail.com                     IP 74.125.29.27
Connecting to host address '74.125.136.26'    
IP Address:     74.125.136.26
IP Host:     ea-in-f26.1e100.net     My IP Host:     ea-in-f26.1e100.net

(dont exist) serioufraudofficeuk@gmail.com     IP 74.125.29.27 called himself Paul Smith

(dont exist) medicalfconsult@gmail.com     IP 74.125.29.27 called himself Dr Razim

and Now??

mhillard954@gmail.com
IP Address:     74.125.136.26
IP Host:     ea-in-f26.1e100.net


Keywords:
2014-07-13, 12:47:48
Pootni  
rating
Fraudster has many names and profiles WATCH OUT LADIES!
kmillsgrindel@yahoo.com         IP 98.136.112.37    

lindamarty@yahoo.com         IP 98.138.112.34
   
mikehodgson185@yahoo.com     IP 98.138.122.37
   
w.james007@yahoo.com         IP 98.138.112.33


Keywords:

 

 

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture: