//Include JS file PPscam.js - Payment Processing Scam Lifecycle tooltips

var offsetxpoint=-60 //Customize x offset of tooltip
var offsetypoint=20 //Customize y offset of tooltip
var ie=document.all
var ns6=document.getElementById && !document.all
var enabletip=false
if (ie||ns6)
var tipobj=document.all? document.all["dhtmltooltip"] : document.getElementById? document.getElementById("dhtmltooltip") : ""

function ietruebody(){
return (document.compatMode && document.compatMode!="BackCompat")? document.documentElement : document.body
}

function ddrivetip(thetext, thecolor, thewidth){
if (ns6||ie){
if (typeof thewidth!="undefined") tipobj.style.width=thewidth+"px"
if (typeof thecolor!="undefined" && thecolor!="") tipobj.style.backgroundColor=thecolor
tipobj.innerHTML=thetext
enabletip=true
return false
}
}

function positiontip(e){
if (enabletip){
var curX=(ns6)?e.pageX : event.x+ietruebody().scrollLeft;
var curY=(ns6)?e.pageY : event.y+ietruebody().scrollTop;
//Find out how close the mouse is to the corner of the window
var rightedge=ie&&!window.opera? ietruebody().clientWidth-event.clientX-offsetxpoint : window.innerWidth-e.clientX-offsetxpoint-20
var bottomedge=ie&&!window.opera? ietruebody().clientHeight-event.clientY-offsetypoint : window.innerHeight-e.clientY-offsetypoint-20

var leftedge=(offsetxpoint<0)? offsetxpoint*(-1) : -1000

//if the horizontal distance isn't enough to accomodate the width of the context menu
if (rightedge<tipobj.offsetWidth)
//move the horizontal position of the menu to the left by it's width
tipobj.style.left=ie? ietruebody().scrollLeft+event.clientX-tipobj.offsetWidth+"px" : window.pageXOffset+e.clientX-tipobj.offsetWidth+"px"
else if (curX<leftedge)
tipobj.style.left="5px"
else
//position the horizontal position of the menu where the mouse is positioned
tipobj.style.left=curX+offsetxpoint+"px"

//same concept with the vertical position
if (bottomedge<tipobj.offsetHeight)
tipobj.style.top=ie? ietruebody().scrollTop+event.clientY-tipobj.offsetHeight-offsetypoint+"px" : window.pageYOffset+e.clientY-tipobj.offsetHeight-offsetypoint+"px"
else
tipobj.style.top=curY+offsetypoint+"px"
tipobj.style.visibility="visible"
}
}

function hideddrivetip(){
if (ns6||ie){
enabletip=false
tipobj.style.visibility="hidden"
tipobj.style.left="-1000px"
tipobj.style.backgroundColor=''
tipobj.style.width=''
}
}

document.onmousemove=positiontip

//var WesternUnion = "<font face='arial' size=-1>Western Union funds can only be picked up within a certain range of the destination address (this is dated information and needs to be confirmed), whereas MoneyGram funds can be picked up anywhere in the world. " + 
//"Therefore, if Victim B (Payment Processing victim) wires the funds via WU, then the recipient must be located within the WU destination hub.  If funds are moved by MoneyGram, a tracking report must be obtained to ascertain the location.</font>" 

var WesternUnion = "<font face='arial' size=-1><B><FONT color=blue>Click the Western Union icon for full details</B>"

var PayPal = "<font face='arial' size=-1>" +
"Stolen funds can be transferred into and out of the scamployee’s PayPal account in two ways:<P>" +
"<OL><LI>The scamployer asks for the scamployee’s PayPal information and alerts him that he will be receiving funds from a customer.  Under instructions from the scamployer, the scamployee victim withdraws the funds from his PayPal account and wires the money to various members of the scam group, believing he is wiring funds to various company offices.<P></LI>" +
"<LI>The scam group sends a keylogger and remote login to the scamployee’s computer and steals the scamployee’s PayPal login information.  With remote login, a scammer can make it appear as if the PayPal login is coming from the scamployee’s computer.  With that information, the scammer can both transfer funds into and out of the scamployee’s PayPal account without the victim’s knowledge.  <B>NOTE:</B> This is also done with online banking accounts.</LI></font>"
// Often, funds are also sent to the Payment Processing victim via PayPal account.  At that time, the Reshipper Victim's PayPal information is stolen and used for money laundering by the scammer group (money in / money out). " +
// "Reshipper Victim only learns of this activity later if notified by PayPal or discovers it in his PayPal statement.<P>" +

// Victim B - Reshipper
var VictimB = "<font face='arial' size=-1>If the victim responds to a <B>Reshipper</b> job offer, he immediately becomes an identity theft victim and ID is sold to ID resellers.<P>" +
"Reshipper is sent product that was purchased from stateside merchants using stolen credit cards.  He is instructed to reship the product to various addresses overseas.<P>" +
"Reshipper is also sent envelopes of checks (in batches) to forward to stateside scammers AND individually to Payment Processing victims. If not, Reshipper receives instructions by email as to where each check should go.<P>" +
"Alternately, Reshipper is furnished with ready-to-go labels and a FedEx (or other delivery service) account number.<P>" +
"Reshipper Victims are netted by fake direct response emails to a job seeker’s online resume or by fake job offers sent by bulk email.<P>" +
"<P align=right><Font color=blue><B>Click the Reshipper Victim icon for additional details.</B>"

var VictimA = "<font face='arial' size=-1>If the victim responds to a <B>Payment Processing</b> job offer, he immediately becomes an identity theft victim and ID is sold to ID resellers. " +
"Victim A's ID is used to open eBay accounts and Classified Ads.<P>" +
"Victim receives checks directly from the scammer group, from Reshipper Victim and from the Buyer Victim (the buyer of the non-existant products). " +
"Victim also receives funds wired into his checking account and money via Western Union (WU).<P>" +
"Victim is instructed to wire off what he receives to various members of the scam group depending on each group member's share as determined by the group leader. " +
"Victim is to pick up those funds that arrive by WU and immediately wire them off again, apportioning the amounts to each group member as the group leaders instructs him to do by email. " +
"<P align=right><Font color=blue><B>Click the Payment Processing Victim icon for additional details.</B>"

var VictimC = "<font face='arial' size=-1>Buyer Victims are netted (hooked) by fake advertisements on online auction sites, online and offline Classified Ads, and fake online stores.<P>" +
"If Buyer Victim responds to an eBay or classified ad, he immediately becomes an identity theft victim and ID is sold to ID resellers. Buyer Victim's ID is also used to open money laundering bank accounts.<P>" +
"The Buyer Victim believes he is purchasing product from the Payment Processing Victim and receives email from the scammer group <i>posing</i> as the Reshipper Victim.  When the Buyer Victim never receives his product, " +
"he will often report to his local law enforcement who will occasionally track down the unaware Payment Processing Victim and issue a warrant for intent to defraud and/or theft.<P>" +

"Buyer Victims are netted by fake advertisements on online auction sites, online and offline Classified Ads, " +
"and fake online stores.<P>" +
"<B>Scenarios:</B><BR>" +
"<UL><LI>The buyer pays for an item that is never delivered.  This is both a domestic and international scam.</LI>" +
"<LI>The buyer pays for an item, sending the payment to a Payment Processing Victim who has no idea that his " +
"name has been used for such a purpose.</LI></UL><P>" +

"Buyer Victims are at increased risk of Identity Theft.  See Stolen Identity and Financial Data in this flow " +
"chart.</font>"

var VictimD = "<font face='arial' size=-1><b>The Identity and Account Theft Victim's checks, account information, and/or credit card info is stolen." +	
"The Identity and Account Theft Victim's ID is used to open money laundering bank accounts, purchase domain names and websites and other illegal purposes."

var ItemClassifieds = "<font face='arial' size=-1>Non-existant product is advertised, often using picture from magazines, catalogs or obtained from the internet.</font>"

var FakeWebsites = "<font face='arial' size=-1>The scammers use some stolen ID's to register domain names and open fraudulent web sites such as fake banks, fake online stores, and fake security company sites or investment sites or " +
"fake online stores, and fake security company sites or investment sites or charity sites that have [Payment Processing Scam and Reshipper] job offerings.</font>"

var HackCrack = "<font face='arial' size=-1>Information from emails gives the <b>Hackers & Crackers</b> enough data to start their research, including the victim's IP and possibly personal info.<P>" + 
"They may insert malicious code into the next email to the victim in the form of malware or leading them to click on a malicious website link.<P>" +
"Once all primary information has been determined, they use standard net research tools and inquiries. If the victim has forwarded copies of " +
"some form of identification (driver's license, passport, social security card) the maximum damage is already done.</font>"

var ScammerGroup = "<font face='arial' size=-1>" +
"<U><B>Geographical locations for group members involved in this scam:</B></U><BR>" +
"Nigerian scammers: West Africa, South Africa, Kuwait, Western Europe (mainly England, The Netherlands, " +
"and Spain), Canada, Japan, US (mainly in Texas, California, Georgia, Virginia, and Florida).<P>" +
"Eastern European scammers: Mainly Romania, Latvia, the Ukraine, Lithuania, Hungary, and Moscow. " +
"<B>NOTE:</B> Nigerian and Eastern European scammers can be found working together on any one Payment " +
"Processing Scam.<P>" +

"<U><B>Knowing involvement of US citizens:</B></U><BR>" +
"There are US citizens who have been successfully recruited as knowing participants in these scam groups. " +
"These individuals may be identified as those who have never attempted to deposit or cash a counterfeit draft. " +
"Recruitment attempts are an on-going part of the scam and most frequently arise when a scam target calls " +
"the scammer’s bluff or through social engineering (see Methodology of the scam below). " +
"While lower echelon group members loudly protest when accused of being a scammer, higher echelon group " +
"members will attempt to recruit.  However, recruited members must adhere to the rules and regulations " +
"governing the group, and group members who do not follow the rules may be dealt with very roughly and are " +
"at risk of physical violence." +
"<P align=right><B><FONT color=blue>Click the Scammer Group icon for further details.</B>"


var Counterfeit = "Counterfeiters"
var IDbuyers = "ID buyers"
var CheckCCthieves = "Check & Credit Card Thieves"
//var Counterfeit = "<font face='arial' size=-1>Counterfeit text goes here<font>"
//var IDbuyers = "<font face='arial' size=-1>ID Buyers & Resellers text goes here<font>"
//var CheckCCthieves = "<font face='arial' size=-1>Check & Credit Card thieves text goes here<font>"

var StolenID = "<font face='arial' size=-1>" +
"Nigerian scams and those coming out of Eastern Europe (the Former Soviet Union countries or FSU) have 3 goals:" +
"<OL><LI>Identity Theft</LI>" +
"<LI>Financial theft – both directly from accounts and from bogus fees (Advance Fee Frauds)</LI>" +
"<LI>To involve the unwitting victim in laundering money</LI></OL>" +

"Of all the Nigerian/FSU schemes involving counterfeit drafts and money laundering, the most pernicious is " +
"the Payment Processing Scam because its very complexity allows for the manipulation of several victims " +
"and their personal and financial information at once.<P>" +
"<P align=right><B><FONT color=blue>Click the Stolen Identity & Financial Data icon for further details.</B>"

var NothingYet = " "