Accepted Report: 76561197997581478 & 76561198019417197

Victim:
steamID: [SysE] RudeDude
steamID32: STEAM_0:0:17483410
steamID64: http://steamcommunity.com/profiles/76561197995232548
customURL: http://steamcommunity.com/id/RudeDude
steamrepURL: http://steamrep.com/profiles/76561197995232548

CLAIMED to be middle-man:
steamID: Vintage Cobra [DO NOT ADD]
steamID32: STEAM_0:1:12913087
steamID64: http://steamcommunity.com/profiles/76561197986091903
customURL: http://steamcommunity.com/id/proevox
steamrepURL: http://steamrep.com/profiles/76561197986091903

Scammer 1:
steamID: KULIto
steamID32: STEAM_0:0:18657875
steamID64: http://steamcommunity.com/profiles/76561197997581478
customURL: http://steamcommunity.com/id/111122
steamrepURL: http://steamrep.com/profiles/76561197997581478
[email protected]

Scammer 2 (middle-man):
steamID: Vintage Cobra [DO NOT ADD]
steamID32: STEAM_0:1:29575734
steamID64: http://steamcommunity.com/profiles/76561198019417197
customURL: http://steamcommunity.com/id/proevax
steamrepURL: http://steamrep.com/profiles/76561198019417197


Screenshots:

Invited to trade window:
http://tinypic.com/r/23jo5g4/5
Scammed MM profile page:
http://tinypic.com/r/16hnqtg/5
Scammer:
http://tinypic.com/r/34g68o1/5


Description:
I bumped my unusual hat trade on TF2outpost and someone added me. I accepted the friend request. The scammer accepted my $40 offer and told me about a middle-man. I looked at the SteamREP page and loaded the Steam Profile page. When the MM joined chat I didn't look closely at the associated profile page. When money was supposedly sent to the MM I should have realized something was wrong. I traded the hat the the MM and they dissappeared. I saved the chat log transcript but I didn't realize a chat window screenshot was needed. I have opened a ticket with Steam support to notify them of the scammer accounts.

The item was a Doctor's Sack with Nuts n' Bolts custom named "Nut-Sack":
http://tf2b.com/item/76561197995232548/736405791

Code:

8:23 AM - KULIto: hi
8:23 AM - KULIto: You were selling a unusual at Tf2outpost?
8:23 AM - [SysE] RudeDude: yes
8:23 AM - [SysE] RudeDude: Doctor's "Nut SacK"
8:24 AM - KULIto: Alright, I got about 210$ paypal how much is it worth? I really want this hat
8:24 AM - [SysE] RudeDude: about $40
8:24 AM - KULIto: hmmm
8:24 AM - KULIto: ok
8:25 AM - KULIto: I got a middleman right http://steamrep.com/profiles/76561197986091903  He is 100% trusted, he middlemanned me 2 days ago
8:25 AM - [SysE] RudeDude: ok, I'll check it out real quick
8:26 AM - [SysE] RudeDude: here is one of my rep threads http://www.sourceop.com/modules.php?name=Forums&file=viewtopic&p=1159553
8:26 AM - KULIto: and?
8:26 AM - KULIto: 1 comment
8:26 AM - [SysE] RudeDude: just if you wanted to see it I suppose. :)
8:27 AM - KULIto: )
8:27 AM - KULIto: i call middleman?
8:27 AM - [SysE] RudeDude: soudns good
Your chat with KULIto is now a multi-user chat.
Vintage Cobra [DO NOT ADD] entered chat.
Friday, March 30, 2012
8:27 AM - [SysE] RudeDude: Hi there
8:27 AM - Vintage Cobra [DO NOT ADD]: Hello, how can I help you?
8:28 AM - KULIto: We need you to middleman for us, I am buying his unusual for 40$
8:28 AM - Vintage Cobra [DO NOT ADD]: are you ready?
8:28 AM - [SysE] RudeDude: I am
8:28 AM - KULIto: yes
8:28 AM - Vintage Cobra [DO NOT ADD]: Alright , i have time
8:28 AM - KULIto: And, What is your PayPal Cobra?
8:28 AM - Vintage Cobra [DO NOT ADD]: [email protected]
8:29 AM - KULIto: Ok, hold on
8:29 AM - [SysE] RudeDude: Mine is *censored personal info*
8:29 AM - Vintage Cobra [DO NOT ADD]: ok
8:29 AM - KULIto: did you recieve it?
8:30 AM - Vintage Cobra [DO NOT ADD]: No
8:30 AM - Vintage Cobra [DO NOT ADD]: Hold on
8:30 AM - [SysE] RudeDude: PayPal is not quite instant... usually 1-2 minutes
8:30 AM - Vintage Cobra [DO NOT ADD]: ok
8:31 AM - Vintage Cobra [DO NOT ADD]: alright, i got it
8:31 AM - Vintage Cobra [DO NOT ADD]: rudedube you can go ahead and trade me the unusual
8:31 AM - [SysE] RudeDude: ok
Vintage Cobra [DO NOT ADD] left chat.
KULIto left chat.
 

The hat appears to be on this account now:
steamID: off3r
steamID32: STEAM_0:0:14221031
steamID64: http://steamcommunity.com/profiles/76561197988707790
customURL: http://steamcommunity.com/id/off3rrr
steamrepURL: http://steamrep.com/profiles/76561197988707790

I had a little chat with the new hat owner and looked at their network of untrusted friends... Here is a chat screenshot:
http://tinypic.com/r/2i26eit/5

The trade posts this "off3r" person put on TF2TP looks like they had my hat right away and then stripped off the custom name tag:
http://tinypic.com/r/3517iwh/5

steamID: off3r
steamID32: STEAM_0:0:14221031
steamID64: http://steamcommunity.com/profiles/76561197988707790
customURL: http://steamcommunity.com/id/off3rrr
steamrepURL: http://steamrep.com/profiles/76561197988707790

is an alt of:

steamID: Vintage Cobra [DO NOT ADD]
steamID32: STEAM_0:1:29575734
steamID64: http://steamcommunity.com/profiles/76561198019417197
customURL: http://steamcommunity.com/id/proevax
steamrepURL: http://steamrep.com/profiles/76561198019417197