Anatomy of a Puppy Scam Part 1: Meet Layla

An Investigation by Tokyo_v2 and wondersmith_rae

Image for post
Image for post

Money scams are incredibly prevalent online, we have all seen them in our spam folders. Many of these scams arrive in the form of phishing emails penned by a mysterious Nigerian prince who promises to send you $100,000 USD if you can just wire some money upfront. This type of scam is known as an Advance-Fee Scam and is one of the most common types of confidence scams. The setup begins with the victim being promised a large sum of money in return for a small upfront payment to release the large sum. Once the victim makes the initial payment, the thief either disappears or concocts additional small fees they require to complete the transaction. A less common version of this scam involves the sale of goods, or in this case, puppies.

Image for post
Image for post

Designer dogs and purebreds are a highly sought after commodity and people will spend large amounts of money for the dog of their dreams. This blog began as a small idea to locate a puppy mill posing as a rescue and scamming people out of money. What we ended up finding was a massive web of lies and money scams spanning over a decade. Because of the magnitude of details we found on this scam, it is broken into 2 parts. This is part 1, Meet Layla.

Tiny-teacup dot com

Image for post
Image for post

When we click on a specific dog we see a ridiculous description describing how “Lil Cookie naturally pushes us to express more love in our environment.” The descriptions appear to be written strangely and possibly translated into English through a service.
We can also see the price of $6,800.00.

Image for post
Image for post

If we decide to apply for the dog we are taken to a form that allows us to add all sorts of amenities such as a Hot Oil Spa for an extra $150 or a $300 Puppy Photo Package. Additionally, they try to get you to consider buying an extra puppy for a discount of $1,000. Great deal. In several complaints, the fees that the victims paid totaled over $8,000.

Money details aside, the contract also requires the victim to provide a home address, email, and many other family details that could be exploited or sold by the scammers.

Image for post
Image for post

If the contract is approved, Tiny-Teacups emails the victim a receipt with delivery confirmation and eventually flight and puppy passport details. Payment is due back within 2 days or the contract is void. Under no circumstances are refunds issued at the request of the buyer.

It is interesting to note that based on this contract the cost for shipping through PetSafe is $500 USD. Using the measurements for the above dog “Cookie” of 2.5 lbs we used PetSafe’s “Help me Estimate” tool to estimate shipping from Indiana (where Tiny-Teacups dot com states they are located) to Washington, DC. Shipping a dog with these specifications only costs $247 per PetSafe, not the $500 they Tiny-Teacups requires.

Image for post
Image for post
Image for post
Image for post

Verifying the Scam

Image for post
Image for post
https://petscams.com/puppy-scammer-list/tiny-teacup-com/

How the scam works

This scam, although routine, seemed rather elaborate for one single person to pull off so we decided to take a look at the domain using Spiderfoot HX to try to figure out what the organization looks like behind the scenes.

Spiderfoot ended up running for 5 hours and pulling over 65,000 data points just from Tiny-Teacup dot com! Using the correlations feature we were able to see that this domain is considered a malicious entity by a lot of sites.

Image for post
Image for post
Spiderfoot HX run on Tiny-teacups dot com
Image for post
Image for post
Multiple Malicious Correlations

Spiderfoot also scraped the names of reviewers from the website so we investigated them a bit further to find out if they were real customers. We zeroed in on a singular reviewer named Ahmad Alami and his generic review of his purchase.

Image for post
Image for post
Image for post
Image for post

When we view Ahmad’s info in Spiderfoot we get multiple social media accounts to investigate that are associated with his identity. After reviewing every one of his social media accounts it is apparent that they are either empty or most likely bots. This is true for every reviewer on the Tiny-Teacup site, so we began to ask ourselves why would they go through so much work for a puppy scam? This brings us back to Layla.

Image for post
Image for post

Meet Layla

Image for post
Image for post

Having made the connection between her and our target website, we began to investigate and quickly realized Layla has quite a prolific history. Not only does Layla sell and breed teacup dogs, but also large dogs, and she is the CEO of a halal makeup company in Dubai, a self-named “Branding Genius”, an author, and unfortunately due to a fall from a porch in Thailand, she has been paralyzed.

Image for post
Image for post

Without questioning the legitimacy of Layla’s injuries, we are able to see that Layla has several Indiegogo campaigns set up asking for large amounts of money via bank transfer or Swift payment. Indigogo is a crowdsourcing site that allows people to request money and users can back them by sending money through the platform. Layla bypasses the platform by posting her bank transfer info directly into the campaign.

Image for post
Image for post
Image for post
Image for post
Image for post
Image for post

Additionally, you can contact Layla through her organization “Paralyzed Life” which is aimed at raising funds for equipment to help her walk again while simultaneously selling her halal beauty products.

Image for post
Image for post
Image for post
Image for post

Because of Layla’s spinal injury, she was able to receive a service dog from OfficialServiceDogRegistry dot com, however, the reverse image search of the dog photo shows up on multiple other websites unrelated to service dogs.

Image for post
Image for post
Image for post
Image for post

In July, she was spotted with a different service dog named Drama while in Dubai at a “Dog Parent’s Meetup”.

Image for post
Image for post

The Plot Thickens

Image for post
Image for post

Now that we have a confirmed email address, we can run that through RiskIQ. From this scan, we gained a long list of domains that had been registered under this email address. The most notable below are Poshpocket pups, Tiny-teacups, and Bootiquepuppies but as you can see they had quite a few scam sites set up for the same purpose.

Image for post
Image for post
Active sites
Image for post
Image for post
Inactive sites

Starting with Posh Pocket Pups, we did a Google search and found many complaints posted to message boards like Pissed Consumer claiming they were also scammed by Layla through Posh Pocket Pups. Below are just a few examples of how this scam played out and affected real people.

Image for post
Image for post
Image for post
Image for post
Image for post
Image for post
Image for post
Image for post

Anatomy of a Puppy Scam Part 2: The Organization

Written by

@wondersmith_rae | OSINT Analyst | @OSINTCurious Advisory Board | @QuizTime | http://Tracelabs.org | http://safeescape.org | Speaker

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store