Archived 76561198044156546 (Galactico/Lft.med)

Subject: 76561198044156546 (Galactico/Lft.med)

Victim:
|steamID: gmanyy
|steamID32: STEAM_0:1:16547841
|steamID64: http://steamcommunity.com/profiles/76561197993361411
|customURL:
|steamrepURL: http://steamrep.com/profiles/76561197993361411

Scammer:
|steamID: Galactico/Lft.med
|steamID32: STEAM_0:0:41945409
|steamID64: http://steamcommunity.com/profiles/76561198044156546
|customURL:
|steamrepURL: http://steamrep.com/profiles/76561198044156546

Screenshots:
These are in Russian, I'll explain everything a bit later, now I'm just following the Acceptable Format.





Description:
First off, I understand that it's my own fault for losing stuff, it's okay. This report is to warn others (if it's proven legit by moderators).

Basically, the guy just asked me to help him out after he got scammed. Now, why would I do that? Well, we've been friends for some time and helped each other out. (You can see this in my Maxs' history http://tf2b.com/tf2/item/76561197993361411/1205834135 on tf2op, for example.) He called me by my name in the first line of chat, so I knew it was him. (Although, his account could have nickname attached to me, so the hacker could have my name, but his spelling was same as always, so I think it's him.)

To the point: I gave him my bud and 4 crates #40 (he asked for three buds in chat) http://yhub.ru/u/p/trade.png and then he vanished, removed me from friends, made his profile private, and canceled all his trades on tf2op (his profile: http://www.tf2outpost.com/user/44427).

The chat logs are in Russian, and I'm posting this here, because he know English and traded on tf2op (profile link above) for some time. I can post chat log translation, if you want, but why would you trust my translation?

Thank you, I greatly appreciate your work.

Look, now he's trading again! http://www.tf2outpost.com/trade/5961553

The guy even has my buds equipped!

And he blocked me, so I can't add him to friends, obviously.

And this guy:
|steamID: MonCeBer lft mix/merc
|steamID32: STEAM_0:0:33085218
|steamID64: http://steamcommunity.com/profiles/76561198026436164
|customURL: http://steamcommunity.com/id/monceber945
|steamrepURL: http://steamrep.com/profiles/76561198026436164

even has the trade with my crates, so he could be involved too.

Hello, this guy (http://steamcommunity.com/profiles/76561198044156546) was my friend. Today he told me, that he scammed Gmanyy for 3 buds (a bud + 4 40 creates).
i have 3 screans with it. i can translate anything if u want.

gmanyy, added u to give screans

Thank you!

In those screenshots, the scammer admits to the scam several times. Unfortunately I couldn't find any line that you can feed to google translate and get acceptable results, but in this extract from the second picture:

you can read Aprrr's "а кого наебал то?" which translates to "who have you f✿✿✿ed?" and then the scammer says my nickname and then posts the link to this thread with the following word "репорт" which translates to "report".

So, basically, he knows about the report (I posted the link for him to see here), and admits to it's commitment.

Previously I've thought that maybe his account was hijacked, now I know it's not the case. He's a scammer.

Also, in this conversation he's asking for help to clear his items and move them to another account, so we must hurry

Also, about the post #4, it's not the case, in the new logs scammer admits that he has already sold #40 crates. (Line "40 е ящики я уже продал" on the second screen on the top translates to "I've already sold #40 crates").

Oh, and look what I've found. His unusuals: on the second page of this fella's backpack (item1, item2, item3, also, if items are not there, you can see this snapshot from tf2items.com). Look, how they've been friends since February to a couple of hours ago, but not anymore. And this fella is really his (probably, real life) friend, because he has no trading profiles, and not so many friends.

I guess, he started moving accounts.

Also, they joined steam at exactly the same date and are from the same country.

Hello again!

I created alternative account and got him to talk to me. I asked him about the buds, and then he blocked me. Here's the the transcript:

Code:

Never tell your password to anyone.
Tuesday, November 06, 2012
11:34 PM - BURN.GalacticoO#med: hey
BURN.GalacticoO#med is now Away.
BURN.GalacticoO#med is now Online.
BURN.GalacticoO#med is now Away.
Wednesday, November 07, 2012
12:12 AM - Advenchorous|BP: hi theer
BURN.GalacticoO#med is now Online.
12:12 AM - BURN.GalacticoO#med: sup?
12:12 AM - BURN.GalacticoO#med: ypu added me ?
12:13 AM - Advenchorous|BP: so
12:13 AM - Advenchorous|BP: i wonder, when will u return me my buds
12:13 AM - Advenchorous|BP: huh?
12:13 AM - BURN.GalacticoO#med: ?
12:13 AM - Advenchorous|BP: It's gmanyy =)
12:13 AM - BURN.GalacticoO#med: nice
12:13 AM - Advenchorous|BP: You owe me three buds
12:14 AM - Advenchorous|BP: Want to talk?
12:14 AM - BURN.GalacticoO#med: you reported me ect so nope
12:15 AM - Advenchorous|BP: I can withdraw, if you'll return me what's mine
BURN.GalacticoO#med is now Offline.

Here's the the screenshot:


And some proof that this is genuine:
First of all, here's the full picture of the desktop: http://yhub.ru/u/p/chitchat_full.png
You may wonder, why the fonts are so pixelated, well it's because I was in RDP session and DirectWrite was on. Also, if you turn the Direct write off, all fonts will become smooth. It would be hard for me to fake all those images in 20 minutes =)

You can swap these two pictures quickly to get some effects:
http://yhub.ru/u/p/chat_direct_write.png
http://yhub.ru/u/p/chat_no_direct_write.png

Also, if at this stage there's not enough evidence of this guy being a scammer, I think I need a hint from moderators. What am I missing?

I don't know if my word has any weight here, but I can confirm, that on Aprrr's screenshots, Galactico(scammer) admits scamming gmanyy(victim) out of 1 pair of earbuds and 4 crates #40.
If a mod or admin needs any help with translating these logs, please feel free to add me, I'll be glad to help.

We apologize for the amount of time it has taken us to review your report. We've recently received a large volume of reports and have not been able to process them all in a timely fashion.
Thank you for your report, it has been sorted and is currently awaiting admin jurisdiction.

Thank you!

I also can provide screen of the steam support ticket that got him trade banned and now on probation, if necessary (it's in Russian). And also can come up with the translation of all the screenshots to English with links to google translate, if that's all is not enough.