A parallel log analysis might show you when you were being bombed and from where but you need to accurately correllate that with the data.

The assumption being that they don't log both together... and maybe they don't. I would, though, if I were pulling a scam like this. (And, if they aren't this time, they probably will next time.)

As you don't need the return data you would really want to spoof the sending IP address.

That would certainly help.

Education is a nice thought but if you take virus spread as an example some people are difficult to educate.

I agree entirely. Of course, losing one's savings might be a lesson that's hard to forget. Regardless of whether or not education is an effective solution, it is the only real one. Like I said though, I'm not opposed to vigilantism in a case like this; I'm just trying to make a realistic assessment of how effective it would be in the long run. My conclusion remains: "not very."

-sauoq
"My two cents aren't worth a dime.";