BadBuyerList.org Logo

« Back to home page

Bad Buyer: juanlinda123@gmail.com

Details

Purchase date:July 2016
Buyer's name:Linda Juan
Buyer's username:n/a
E-mail:juanlinda123@gmail.com
Phone number:8174628394
Buyer's address24 Cyprus Road, Hiram, OH 44234
Store:other
Buyer's country:United States
Payment method:Credit Card
Category:Cars, Boats, Vehicles & Parts
Details:

customer tried to use a stolen credit card. owner of card called us to verify that it was not them who made the purchase. the customer stole her credit card number and tried to have it delivered to the OH address.

Buyer's IP address:106.187.38.110
Reported at:
Reporter:72.215.X.X
« Back to home page

Similar reports

Name/Username E-mail Phone Reported at
Linda Juan juanlinda123@gmail.com (813) 942-0394 2016-09-21
Linda Juan juanlinda123@gmail.com 813-940-2930 2017-10-11
Juan Linda juanlinda123@gmail.com 8139402930 2017-11-21
Linda Juan juanlinda123@gmail.com 8139402930 2017-11-28
Linda Juan juanlinda123@gmail.com 8133482938 2017-12-19

Comments

Thank you for saving my company money! Just got an order from this person and I thought it looked weird.


Posted about 3 years ago by 173.11.X.X Report as SPAM

Another one here on September 23, 2016.


Posted about 3 years ago by 98.233.X.X Report as SPAM

Upon further inspection, it appears that this customer attempted a cross-site-scripting (XSS) attack on our site. Here is a discussion started by someone else who had the same thing happen: https://security.stackexchange.com/questions/135489/script-tag-loading-xss-re-692-in-e-commerce-transaction-data-real-attack-or?newreg=8de2aece8b804194baf4d9f371204903


Posted about 3 years ago by 98.233.X.X Report as SPAM

The OH address isn't a good address either.


Posted about 3 years ago by 146.18.X.X Report as SPAM

We had an order as well from this person. Really glad I found this post. The order looked strange. The address is not good.


Posted about 3 years ago by 192.0.X.X Report as SPAM

Searching the address and this page came up. Another fake order/fake address? Ordered from US on a card and we now have charge back. Customer address not valid and product lost with Canada Post.

Linda Juan>">
24 Cyprus RD">
24 Cyprus RD, 24 C
Hiram"> AB T1P 1N1
CA
Phone: 021-234-4444
Email: juanlinda224@gmail.com


Posted about 3 years ago by 24.108.X.X Report as SPAM

She tried placing an order through our website. Thought it looked fishy.


Posted about 3 years ago by 47.201.X.X Report as SPAM

we also had a order from this customer
thanks we canceled it


Posted about 3 years ago by 67.86.X.X Report as SPAM

Same!! Tried that same cross site scripting in Memphis TN


Posted about 3 years ago by 66.236.X.X Report as SPAM

Just got an order from this loser, email juanlinda224@gmail.com Trumbull, CT.


Posted about 3 years ago by 24.151.X.X Report as SPAM

Tried to order on our site, but card declined.
Thanks to everyone for making internet safer!


Posted about 3 years ago by 82.81.X.X Report as SPAM

Attempted an order today as well same info as others.


Posted about 3 years ago by 165.189.X.X Report as SPAM

bad buyer ! problem with emails.Thank you for info...


Posted almost 3 years ago by 108.30.X.X Report as SPAM

Just had an order come through that looked strange. It fell into quarantine, It said unknown street so I googled the address and the badbuyer list came up with her name.


Posted almost 3 years ago by 12.31.X.X Report as SPAM

This person tried to use my credit card this morning at 3 a m. Thank goodness the GPS store in N. C. found it and called me. The order was not shipped.


Posted over 2 years ago by 108.162.X.X Report as SPAM

My clients site had this person attempt the same late last night. We caught it by seeing the hack attempt at the same time, luckely we don't allow customer input to be printed directly as HTML in any part of our site. He/She used juanlinda224@gmail.com as the email, FYI.


Posted over 2 years ago by 172.68.X.X Report as SPAM

Attempted several orders with us this past week, using stolen/fake cards and injecting cross-site-scripting (XSS) attacks. Used a new email address: juanlinda225@gmail.com


Posted over 2 years ago by 108.162.X.X Report as SPAM

placed an order with me. there was a script injection in the contact info. used juanlinda225@gmail.com


Posted about 2 years ago by 108.162.X.X Report as SPAM

placed an order with us using juanlinda225@gmail.com there was script injection on all lines of order address used was 24 cyprus rd, hiram, oh 44234


Posted about 2 years ago by 172.68.X.X Report as SPAM

Received an online order from this person. Glad we found this post!!!


Posted about 2 years ago by 173.245.X.X Report as SPAM

Same thing today. This thief has stick fingers.


Posted about 2 years ago by 162.158.X.X Report as SPAM

Same incident this week with the XSS attempt in the contact info.


Posted about 2 years ago by 172.68.X.X Report as SPAM

Placed an on-line order today using juanlinda225@gmail too. So glad I found this site as well. I was searching for the address and found this site. Used XSS on all lines. Linda Juan 24 Cyprus Rd Hiram, OH 44234


Posted about 2 years ago by 108.162.X.X Report as SPAM

This person is trying to buying something with this address, this looks fishy.

Linda Juan">
juanlinda123@gmail.com

Shipping Address
Hiram">, AB T1P 1N1
Canada
8174827374

[-] Billing Address

Billing Address
,
24 Cyprus">
Hiram">, AB T1P 1N1
Canada
8174827374


Posted about 2 years ago by 108.162.X.X Report as SPAM

Yesterday she tried it in Germany - https://kugelbunt-shop.de

Linda Juan
Linda1986
24 Cyprus RD">
44234 Hiram
Austria

juanlinda123@gmail.com


Posted about 2 years ago by 162.158.X.X Report as SPAM

We just got a weird order from her today. How can we report this scammer and how can we tell if our system has been compromised?


Posted about 2 years ago by 162.158.X.X Report as SPAM

We received an online order from this same juanlinda225@gmail.com on 9/20/2017, the payment went through, and we shipped the product (only $24 worth) but it was returned for bad address, phone, and email. Doesn't Visa keep track of this?


Posted about 2 years ago by 172.69.X.X Report as SPAM

Caught this buyer today. Shipping address when you remove the script doesn't even exist. juanlinda225@gmail.com

Here is about what it looks like, with the script urls removed

Linda Juan
">
24 Cyprus RD">
Hiram">, WV 25530

Credit Card Type:
MasterCard
Name on Account:
Linda Juan
Credit Card Number:
xxxx-xxxx-xxxx-6902
Expiration Date:
08-19


Posted about 2 years ago by 162.158.X.X Report as SPAM

tried our website twice this week. First had no address and email bounced. Second time googled address and you good folks came up


Posted about 2 years ago by 162.158.X.X Report as SPAM

Just had an order from this person, same phone number, email address doesn't exist, there is no Cyprus Road in Hiram, Ohio, and as this was an international sale to us, it would have cost a lot to send the goods (although we only send tracked to USA).


Posted about 2 years ago by 162.158.X.X Report as SPAM

Tried to purchase something from our store 9x times yesterday. Luckily each one declined.

Address used:
24 Cyprus Rd
Hiram NSW 2000


Posted about 2 years ago by 162.158.X.X Report as SPAM

Just received an order today. Credit card was approved. AVS did not block it. Attempting to ship, address was unknown by USPS. We are gong to void the order. Address was 24 Cyprus Rd, Hiram OH 44234. Also there was illicit script in the address line.


Posted about 2 years ago by 162.158.X.X Report as SPAM

Just had the same thing, was attempting to ship the order, address was no good....also the 24 Cyprus Rd in Hiram Ohio.
Order processed yesterday, today I issued a refund for returned funds. Also had the fishy look with script lined on the address line.
This person needs to be dealt with, phone number, email and address are all no good.
I was very glad to see the Bad Buyer post, when i researched the ship to address.......Thank you :D


Posted about 2 years ago by 172.68.X.X Report as SPAM

This idiot tried buying from me twice late last night. First was declined by processor and it had a failed


Posted about 2 years ago by 162.158.X.X Report as SPAM

This idiot tried buying from me twice late last night. First was declined by processor and it had a failed


Posted about 2 years ago by 162.158.X.X Report as SPAM

Our company just received an order for
Linda Juan
24 Cyprus Rd
Hiram, OH 44234
216-234-5678
juanlinda225@gmail.com

No payment, or attempted payment, but we will not ship this.
Thanks for the heads up.


Posted about 2 years ago by 162.158.X.X Report as SPAM

We had a order as well, I did not ship anything because there email didn't even work, im gonna call the credit company today.


Posted about 2 years ago by 162.158.X.X Report as SPAM

Today, again. Same email and mail adresses.
One detail (maybe it's not important) : my ebusiness is based in France...
Thanks to everybody.


Posted about 2 years ago by 162.158.X.X Report as SPAM

Received and order from this email for an un-customized product, to be shipped to a random house in Pennsylvania. Phone number given goes to a cafe in same town. IP Address is from Hong Kong. Will not be shipping.


Posted about 2 years ago by 162.158.X.X Report as SPAM

Also received the SAME order tonight. I can't believe they are still using the SAME free email address. Idiots


Posted almost 2 years ago by 108.162.X.X Report as SPAM

This person tried to place an order on my site today. Her email was no good and neither was her phone. Glad I googled her.


Posted almost 2 years ago by 162.158.X.X Report as SPAM

I wonder what is the purpose of this ? to have business waste time and money ?
I mean, if the address does not exist, this person don't really gain anything personally from it.

just so you know, they start to use a different name and address :
Gurwinder Rakkar%22>
2656 flintlock lane%22>
rocklin, CA 95765
United States of America
8139402902


Posted almost 2 years ago by 162.158.X.X Report as SPAM

IP 103.242.1.43


Posted almost 2 years ago by 162.158.X.X Report as SPAM

This bad buyer strikes again trying to order using stolen cards. juanlinda666@gmail.com . IP 103.242.1.43. Trying to send to john campbell with phone 2059076020. The problem is the credit card and banks do not allow customers to put passwords with their credit cards making it easy for anyone to use. Why do banks do this? it is because the banks benefit from chargebacks charging the merchant from 10-50 dollars each chargeback. They make money from this. Don't you think something is wrong? The people working for the credit card companies including fraud department just follow what they are told without realizing the problem is from the banks and credit card companies. BANKS BENEFIT FROM FRAUD MAKING CHARGEBACK FEES!


Posted almost 2 years ago by 172.68.X.X Report as SPAM

Same email registered at our site and ordered something for $1900


Posted almost 2 years ago by 162.158.X.X Report as SPAM

Again juanlinda666@gmail.com with embedded scripting, from the land down under. Now as Brian Halm (828)264-2517 - 334 GOSHEN CREEK ROAD trying to buy subscription for mail redirection. Not very creative!


Posted almost 2 years ago by 172.68.X.X Report as SPAM

Happened again.

IP Address: 128.14.128.69

juanlinda123@gmail.com

Linda Juan\">
24 Cyprus RD\">
Hiram Ohio
44234
United States


Posted almost 2 years ago by 162.158.X.X Report as SPAM

IP Address 128.14.128.69
City Los Angeles
State/Region California
Country Code US
Postal Code 90017
ISP Zenlayer Inc
Time Zone -07:00


Posted almost 2 years ago by 162.158.X.X Report as SPAM

Looking into this further it may not be a credit card attack but a hacking attempt trying to input this: script src=//zs.mk/z /script
Scary stuff...


Posted almost 2 years ago by 162.158.X.X Report as SPAM

ADMIN please remove the link above NO ONE GO THERE


Posted almost 2 years ago by 162.158.X.X Report as SPAM

juanlinda666@gmail.com Bad money, address. I believe this is coming from Europe because of an intended purchase on our website with the time stamp of clearing six hours east, not in Ohio


Posted almost 2 years ago by 108.162.X.X Report as SPAM

We've had an attempted order placed by this person. Please note however in most cases as in ours it appears to be an attempt to hack your site as opposed to obtaining goods. If your site is vulnerable to cross site scripting you need to get a security expert to look into it.

Details given were:-
Linda Juan
Linda1986
24 Cyprus RD
london
OHIO
TW20 0XN

juanlinda666@gmail.com

8139402930


Posted almost 2 years ago by 141.101.X.X Report as SPAM

The same here:
Linda Juan
24 Cyprus Road
DANVILLE, CA 94526
juanlinda225@gmail.com
2162345678

with cross scripts injection in all fields on order form. Actually order went through and charge settled. Not sure if need to refund. To who?


Posted almost 2 years ago by 172.68.X.X Report as SPAM

Attempted order from our Australian store today.
Name: Gary Le
Address: 24 Cryprus Road, Sydney (not a real address)
Script inserted throughout billing & shipping details. IP address is Japan. Name of credit card holder totally different but the transaction was approved by our credit card processor.


Posted almost 2 years ago by 172.69.X.X Report as SPAM

Order attempt today,
EMail: juanlinda888@gmail.com
Address: 24 Cryprus Road, Sydney, 2000
IP: Japan


Posted almost 2 years ago by 162.158.X.X Report as SPAM

We received an order and blocked the IP address. 24 Cyprus Rd in Ohio (not a real address) The charge went through and processed in our system. We refunded.


Posted almost 2 years ago by 108.162.X.X Report as SPAM

Received an order 12/15/17, card went through.
Linda Juan">
24 Cyprus RD">
Hiram"> North Carolina, 28056
#- 2162345678
email- juanlinda225@gmail.com
All are fraudulent. Will be putting in return.


Posted almost 2 years ago by 172.69.X.X Report as SPAM

Just got an order from this person - she is using a card belong to Ronald Dilts at the moment (he appears to be dead upon a google search). I had a feeling and found this very helpful forum. Thank you!


Posted almost 2 years ago by 172.68.X.X Report as SPAM

Received an order 1/20/18 - payment was processed. Origin was France. Unfortunately for me, I shipped the product. It was when I tried to send her an email with the tracking number that things started to look fishy (no last name with order and email returned) - so I went into Stripe and looked at payment. No last name there either and the France origin for the credit card started to raise flags as well.
HOW IS THIS PERSON NOT CAUGHT with all of us catching her?


Posted almost 2 years ago by 172.68.X.X Report as SPAM

Received unusual order from this person and promptly refunded purchase and cancelled order.


Posted almost 2 years ago by 162.158.X.X Report as SPAM

Just received an order on our website. Same scripts all throughout. no payment though. How can we make a complaint on this?


Posted almost 2 years ago by 172.68.X.X Report as SPAM

We received an order from this person with the cross-site-scripting (XSS) attack as well. Ordered parts from our site. juanlinda666@gmail.com. No response to any queries.


Posted almost 2 years ago by 162.158.X.X Report as SPAM

We received an attempted XSS attack from juanlinda678@gmail.com. The script was going to a file on the address zs.mk


Posted almost 2 years ago by 141.101.X.X Report as SPAM

Received an order today from: Linda Juan, 24 Cyprus Road, Hiram, OH 44234 - Phone#: 8139402930, email: juanlinda666@gmail.com. originated from Hong Kong. Called Post Office - add does not exist - it is a scam, as I am sure you can see. They tried to put the order through several times - probably with different cards until they got a winner.


Posted over 1 year ago by 162.158.X.X Report as SPAM

Tried placing an order online, paid with an e-check. The check was declined. Address entry was as follows (punctuation and all):

Linda Juan">
24 Cyprus RD">
Hiram, OH 44234
813-782-7273
juanlinda123@gmail.com

Obviously a script. Nice try, nerd.


Posted over 1 year ago by 162.158.X.X Report as SPAM

Received order for amount $1.900 , from :

Linda1986
Linda Juan
24 Cyprus RD"__script src=//zs.mk/b__/script_
Hiram, Ohio 44234
United States
Telephone Number: 8139402930
E-Mail Address: juanlinda666@gmail.com
IP Address: 103.64.12.132 - 103.64.12.132

Thank you very much to everybody for share bad buyers info, great website


Posted over 1 year ago by 162.158.X.X Report as SPAM

I received an order from her as well. Card went through & I shipped ($40) Package came back and of course, I tried to contact her to no avail. Address on order had "> after each line. Anyone know what I need to do?
Linda Juan
24 Cyprus Road
Hiram, OH 44234
Phone 813-940-2930
juanlinda666@gmail.com


Posted over 1 year ago by 172.69.X.X Report as SPAM

Just posted above - Here is the IP info:
103.242.1.43

Details for 103.242.1.43
IP: 103.242.1.43
Decimal: 1743913259
Hostname: 103.242.1.43
ASN: 55933
ISP: Rainbow network limited
Organization: Cloudie Limited
Services: None detected
Type: Broadband
Assignment: Static IP
Blacklist:
Continent: Asia
Country: Hong Kong hk flag
State/Region: Sham Shui Po
City: Sham Shui Po
Latitude: 22.3333 (22° 19′ 59.88″ N)
Longitude: 114.15 (114° 9′ 0.00″ E)


Posted over 1 year ago by 172.69.X.X Report as SPAM

Great site and very helpful. I too received an online order for one of our items and it also appeared very weird. The phone number had been disconnected and the name and address printed had scripting language included as well. Now I have been informed by members on this site what to be watching for.
Thanks,


Posted over 1 year ago by 173.245.X.X Report as SPAM

We just got a weird order from her today. How can we report this scammer and how can we tell if our system has been compromised? http://123bowlinggames.com/bowling-ball-games.html


Posted 12 months ago by 162.158.X.X Report as SPAM

FYI- This person ordered something from my website with a fraudulent credit card and fake address.
Linda Juan">
juanlinda333@hotmail.com
'">
444 Rollins St">
Missoula, Montana 59801


Posted 11 months ago by 172.69.X.X Report as SPAM

hey make money from this. Don't you think something is wrong? The people working for the credit card companies including fraud department just follow what they are told without realizing the problem is from the banks and credit card companies. https://123gamesfree.com/cannon-basketball-3/


Posted 10 months ago by 162.158.X.X Report as SPAM

Thank you for saving my company money! Just got an order from this person and I thought it looked weird. https://123gamesfree.com/tag/awesome-tanks-2-cool-math/


Posted 10 months ago by 162.158.X.X Report as SPAM

1/18/19 Received this order i knew something wasnt right... Thank you all!!!!


Posted 10 months ago by 172.68.X.X Report as SPAM

1/29/19 - Received this order as well on our website. Thank you all for alerting us.

Linda Juan">
juanlinda222@hotmail.com
'">
444 Rollins St">
Missoula, Montana 59801


Posted 10 months ago by 172.68.X.X Report as SPAM

Us too! Thank you for this blog same montana address 02/16/2019


Posted 9 months ago by 162.158.X.X Report as SPAM

Linda Juan">
juanlinda222@hotmail.com
'">
444 Rollins St">
Missoula, Montana 59801

same ordered from us 2/19/19


Posted 8 months ago by 172.69.X.X Report as SPAM

Here is the order that was tried with us. linda juan">
">
444 Rollins St">
">
Missoula, MT 59801
United States
3059707467
juanlinda222@hotmail.com


Posted 7 months ago by 108.162.X.X Report as SPAM

Same here, order came through 4/27/19. Don’t these people have anything better to do?

Linda Juan">
444 Rollins St">, Missoula, Montana 59801
'">
United States
Email: juanlinda111@hotmail.com
Phone: 3059707467
IP Address: 194.156.230.16


Posted 7 months ago by 173.245.X.X Report as SPAM

Same here, got one from:

juanlinda222@hotmail.com

444 Rollins St
MISSOULA, MT 59801

IP: 106.185.30.192


Posted 7 months ago by 162.158.X.X Report as SPAM

We had 2 a couple of months ago and then another one today. Bill to address in AZ but ship to in Missoula, MT. So glad they were all declined before I found this website.


Posted 6 months ago by 162.158.X.X Report as SPAM

Just received an online order from:

Linda Juan
444 Rollins St
Missoula,MT 59801
305.970.7467
juanlinda111@hotmail.com

It's a fraud. They've tried ordering from us before.


Posted 5 months ago by 162.158.X.X Report as SPAM

Another attempt by this buyer with declined credit card. Info as follows:

Linda Juan
444 Rollins St
Missoula, MT 59801
United States
3059707467
juanlinda222@hotmail.com


Posted 4 months ago by 172.69.X.X Report as SPAM

Linda Juan. Just tried to scam me too! Of all the weird things.


Posted 4 months ago by 172.68.X.X Report as SPAM

In my scam, she's juanlinda222@hotmail.com


Posted 4 months ago by 172.68.X.X Report as SPAM

Received an order a couple of days ago. luckily bank declined. had scripts all the way through
the order doesn't even make sense for a personal buyer.

linda juan
juanlinda222@hotmail.com
3059707467
444 Rollins St"
Sydney


Posted 4 months ago by 162.158.X.X Report as SPAM

Just had a purchase made by this person on our web phone no invalid and email bounced. Thank you everybody Address and email same as above.


Posted 4 months ago by 172.68.X.X Report as SPAM

We received an order from this person on 18/8/2019. Address details entered using lots of strange charachters etc which didn't make sense. Order cancelled and customer removed from website.


Posted 3 months ago by 162.158.X.X Report as SPAM

This customer tried our company today on 2019-08/21. The payment was declined but it caught our attention that he tried to purchase an item of $25000 AUD. Customer name and address like have wired symbol ">". He used email address juanlinda222@hotmail.com


Posted 3 months ago by 162.158.X.X Report as SPAM

This account (juanlindaxxx) is still attempting fraudulent purchases. I had Stripe as my credit card processor. The transaction was identified as highest risk but the transaction was allowed to go through anyway. Stripe is supposed to block all highest risk transactions by default but collected their fee anyway.


Posted about 2 months ago by 162.158.X.X Report as SPAM
Your comment cannot be longer than 1000 characters, or contain more than 2 URLs. All HTML tags will be removed. In order to prevent SPAM, some words are not permitted in comments.

Random bad buyers

Name/Username E-mail Phone Reported at Comments
michael supcha michaelsupcha@gmail.com 095443212 2018-11-23 1
Prashant Saraswat prashant.saraswat@laptoptree.com 2015-09-08 3
Brian Pascoe 2016-03-25 0
REBECCA MEREDITH rebecceh.jane__xx@hotmail.com 2010-10-06 1
Gary Barger 2019-02-21 0