Beware Fake Walgreens "Secret Shopper" Job Offers!
Criminals are sometimes stupid, but the clever ones prey on our weaknesses. They use our hopes and fears against us, which is why scammers falsely representing the IRS, the Social Security Administration, Medicare, Medicaid and others threaten us with legal action. It's also why scammers for free vacations, car warranties, student loan forgiveness programs and other scams (when we hope to benefit) offer such things. They love targeting the lovelorn to repeatedly get money sent to them (their photos, names, ages and all other info are fake, but they show attractive images and try to match what you want, including being seductive over the web), because lonely people are very willing to give up their money for love - that happened to me in my youth when I was very lonely. They go after the elderly because they're often confused by mental problems that prevent them from using logic and memory to recognize that they're dealing with fraudsters. They target the young because they're more likely to be naive and trusting, owing to lack of experience.
But, honestly, if they have a really good scam, they'll go after just about anyone, even authorities.
I'm a job seeker and, today, I got an offer from Walgreens to help them by visiting stores and rating the employees. See the image or text below.
Walgreens <[email protected]>
Wed 8/21/2019 2:23 AM
Subject: Job Offer
{Walgreens Logo Image}
{Facebook Instagram LinkedIn links}
No skills needed, just an honest opinion.
Reviewers are selected randomly every week and if selected, they will be contacted via email or sms.
The job requires you to shop and evaluate our employees.
You will receive payment to shop and you can keep the products.
You will be paid with amounts between $100-500 per assignment.
Join our team by filling in the form.
{"Ok, I'm in!" button}
Many stores, banks, restaurants and other businesses hire reviewers to observe and measure customer service, product quality and the general environment of their establishments. Reviewers make purchases and file reports on their experiences.
Sounds enticing, right? Easy money! Well, right off the bat, I suspected something was wrong! Why? I haven't applied to Walgreens anytime recently, and the job I DID apply for months ago wasn't this one. 🚩 Also, the idea that Walgreens would just randomly contact me about this job struck me as odd. 🚩
Detective hat on! 🕵
Links
- The Walgreens logo doesn't link to Walgreens.com. 🚩
- The socmed links go to each site - not to each Walgreen's page. 🚩
- There is only one other link, and it doesn't take you to Walgreens; the button goes to
https://backlinkmarketi.com/newze/. That's certainly not legitimate! They're either headhunters or, far more likely -based on the false email - criminals! 🚩
Jobs on Walgreens.com
Just to make sure, I checked out https://jobs.walgreens.com but I didn't find a job like this listed. 🚩
Backlinkmarketi.com
- The main page is in Turkish. 🚩
- The button takes you to this form. Since when would Walgreens use an unbranded, generic, short form to get employees? 🚩
- Their about us page: (https://www.backlinkmarketi.com/hakkmizda/) claims that they are web developers and surveyors but I'd be horribly embarrassed as a web dev by their site! 🚩
- The chances of Walgreens outsourcing their headhunting to a slipshod company like this are just about zero (unless Walgreens is engaging in fraud, of course).
Registration Info
First Name
Last Name
Address
City
State {dropdown menu}
Zipcode
Email
Phone
{ Submit button}
translation:
about us
Our company, which has guided the market for many years with the active works it carries out in the sector, has made a name for itself with many corporate studies. Our team that brings together its long knowledge with its customers is proud of its achievements. Our company, which can always satisfy its customers with its pioneering works and high quality presentations, proceeds with confident steps to continue to shape the sector with its innovative works in the future.
Meeting of Web Design with Aesthetics
Our company, which succeeds in transforming the concept of web design into an aesthetic appearance with fine details, always carries out successful works with the importance it attaches to visuality. It offers highly crafted designs with visual designs that can be used in every field. It is always one step ahead with its most innovative works in our era called digital revolution.
Web design services, both individual and company-wide, are now among the most basic needs of today. Designs prepared for each sector by adopting different styles serve for long years in quality service conditions.
Digital Support Your Company Needs
Web design works, which are the biggest supporters of the branding process of the companies, are carried out with the scope of warranty within the scope of our company. Thanks to the programs developed as mobile supported, it provides convenient usage from any environment. You can benefit from our professional services by contacting our team for any digital support your company needs.
www.backlinkmarketi.com is an organization owned by OK Biilşim.
The Final Straws
More compelling evidence is found when you look at the original document (which is text only).
- You'll see that the email address it supposedly came from is
[email protected], but the reply-to address is misspelled without the "L":[email protected]. 🚩 A misspelled address is a sure sign of fraud! Hotmail.comis listed (the old name for Live.com email from Microsoft), which we shouldn't see, and...- We also see
mail.krichenbauer.it. 🚩 - There are other things that are questionable about this email, and you could do a whois and check the IP as well to get more info.
Here's the beginning of the email (without all the HTML & CSS formatting).
Received: from DM6NAM10HT182.eop-nam10.prod.protection.outlook.com
(2603:10b6:903:1f::14) by CY4PR03MB2742.namprd03.prod.outlook.com with HTTPS
via CY4PR01CA0004.PROD.EXCHANGELABS.COM; Tue, 20 Aug 2019 19:23:15 +0000
Received: from DM6NAM10FT048.eop-nam10.prod.protection.outlook.com
(10.13.152.60) by DM6NAM10HT182.eop-nam10.prod.protection.outlook.com
(10.13.152.234) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.0; Tue, 20 Aug
2019 19:23:14 +0000
Authentication-Results: spf=none (sender IP is 93.104.244.250)
smtp.mailfrom=jobs.walgreens.com; hotmail.com; dkim=none (message not signed)
header.d=none;hotmail.com; dmarc=fail action=none
header.from=jobs.walgreens.com;
Received-SPF: None (protection.outlook.com: jobs.walgreens.com does not
designate permitted sender hosts)
Received: from mail.krichenbauer.it (93.104.244.250) by
DM6NAM10FT048.mail.protection.outlook.com (10.13.152.204) with Microsoft SMTP
Server id 15.20.2052.0 via Frontend Transport; Tue, 20 Aug 2019 19:23:14
+0000
X-IncomingTopHeaderMarker: OriginalChecksum:0C6A76E4406DE1843EEC117B783893AD9CE1AB6E3A21C812FB0F722E52488BFF;UpperCasedChecksum:0AD7D9E86077A159EA56B560E0AECEA862ABE73D5C9277718454D46D470A87D6;SizeAsReceived:561;Count:8
Received: from [185.234.216.93] (port=53452 helo=185.234.216.93)
by mail.krichenbauer.it with esmtpa (Exim 4.82_1-5b7a7c0-XX)
(envelope-from <[email protected]>)
id 1i07Si-0006La-1n; Tue, 20 Aug 2019 18:58:24 +0200
Message-ID: <[email protected]>
Reply-To: Walgreens <[email protected]>
From: Walgreens <[email protected]>
Subject: Job Offer
Date: Tue, 20 Aug 2019 09:58:23 -0700
Content-Type: multipart/alternative;
boundary="0a2f99cac1eac0c84441f75bbe7a505d347a0c"
X-IncomingHeaderCount: 8
To: Undisclosed recipients:;
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 20 Aug 2019 19:23:14.4445
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id: 19ebcf72-3441-4c1f-9143-08d725a3d8dc
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
DM6NAM10FT048.eop-nam10.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 8/20/2019 6:17:16 PM
X-MS-Office365-Filtering-Correlation-Id: 19ebcf72-3441-4c1f-9143-08d725a3d8dc
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(2390118)(5000188)(711020)(4605104)(610169)(8291501072);SRVR:DM6NAM10HT182;
X-MS-TrafficTypeDiagnostic: DM6NAM10HT182:
X-MS-Exchange-PUrlCount: 5
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 93.104.244.250
X-SID-PRA: [email protected]
X-SID-Result: NONE
X-MS-Exchange-Organization-PCL: 2
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Aug 2019 19:23:14.2672
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 19ebcf72-3441-4c1f-9143-08d725a3d8dc
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6NAM10HT182
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.0467683
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2178.000
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(4900115)(8390120)(8386120)(8375121)(8374160)(4920090)(6375004)(4950130)(4990090)(9140004);RF:JunkEmail;
X-Message-Info:
qoGN4b5S4yoZj1tYlRsjA+WmVi2OxOZr3ZJv+aBQlY+1wg+eSv6qk7kB0ZWmeZXz1WTIbViS1ijZ3l6Q9OlMb+BJ9/AOpY4gHz1vGKPPwUaElr5v6Wcfh+1PSeKr2KGBjvgZsSAPVWlU5A0oagiDG0gO5J45SAvFGu1Ova1/XkxqyrdCbnNvNasMpade/1F8o/gr23QBavbMPOKEdJvHVQ==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Microsoft-Antispam-Message-Info:
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
MIME-Version: 1.0
--0a2f99cac1eac0c84441f75bbe7a505d347a0c
Content-Type: text/plain; charset="windows-1256"
Content-Transfer-Encoding: quoted-printable
No skills needed, just an honest opinion.
Reviewers are selected randomly every week and if selected, they will be =
contacted via email or sms.
The job requires you to shop and evaluate our employees.
You will receive payment to shop and you can keep the products.
You will be paid with amounts between $100-500 per assignment.
Join our team by filling in the form.
=A0Ok, I'm in! =20
Many stores, banks, restaurants and other businesses hire reviewers to ob=
serve and measure customer service, product quality and the general envir=
onment of their establishments. Reviewers make purchases and file reports=
on their experiences.
Ultimately, it's a big fat fraud, and I hope someone roasts those scum! 🤬
Be vigilant, dear reader, because scamming has become far worse than in the days of my youth before the world wide web became a major playground for scammers, haters, pedophiles and other types of criminals!
If you appreciate this article, please 🏅upvote/like👍
, 🤩resteem/share
and share it to Facebook
, Twitter
, Reddit
, LinkedIn
and wherever else
you can!