The guy went on the Facebook event of a show that was sold out an asked if anybody wanted 2 tickets.
Then he wanted to be paid with Paypal (via “sent to family/friend” feature). Multiple red flags but my GF didn’t listen to me and wanted to believe he was legit on Christmas Eve. His Paypal account is William Okite – [email protected]
He deleted his fake FB account (with another name) right after that but he answered later with his gmail, so probably his true account. Guy seems to be in Kenya (Nairobi). Tried to retrieve his IP address but wasn’t able to do it, I just got a random Google server IP address from the header of the email (I’m not a tech pro).