Quote from: bitcoinTrader on June 09, 2011, 05:07:03 PM

Quote from: KCanini on June 09, 2011, 05:03:42 PM

It seems you have both been the victim of a very clever and well-executed scam. To give away the ending, it was a man-in-the-middle attack by a 3rd person. The scam was so good, in fact, that no one here seems to be able to recognize what actually happened. Sit back and listen as I recreate the scene:

0. The scammer (pork_) recognizes that #bitcoin-otc has a very serious flaw and sets out to exploit it to make a quick 20BTC for free.
1. The scammer (pork_) advertises that he wants to buy BTC on the #bitcoin-otc channel, and tiner contacts him about a sale
2. The scammer (pork_) and tiner agree to the terms of the sale, and tiner gives him his PayPal address so pork_ can send the payment
3. This part is crucial: The scammer (pork_) now has a limited amount of time to find a buyer to complete the scam. To give himself some time, he says: " ill be a few minutes"
4. The scammer now goes into the channel using a different nick (let's call it "h___"), and advertises that he wants to sell some BTC for cheap (to get a buyer quickly)
5. jacker224 contacts the scammer (h___) and offers to buy the BTC
6. The scammer (h___) tells jacker224 to send the money to tiner's paypal address, and jacker224 does so
7. The scammer (pork_) tells tiner that he sent the payment, when in actuality it was jacker224 who sent the payment
8. tiner verifies that he has received the money, and sends the BTC to the scammer (pork_). As far as tiner is concerned, the transaction was 100% legit.
9. The scammer (h___) leaves his conversation with jacker224 without sending ever him the BTC

But how does jacker224 contacts tiner?
Do you mean scammer logs in with tiner as nick (and not h___)?

Wow, that totally fits. I wouldn't have put it together, but I'll be sure to watch for stuff like this in the future. Nice eye, KCanini!