Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#191032 by Faizan Docherty Sat Feb 15, 2014 2:32 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 157.55.0.237
Originating ISP: Microsoft Corporation
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Return-Path: <[email protected]>
Received: from compute3.internal (compute3.nyi.mail.srv.osa [10.202.2.43])
by sloti32d2t12 (Cyrus git2.5+0-git-fastmail-9750) with LMTPA;
Thu, 13 Feb 2014 10:08:30 -0500
X-Sieve: CMU Sieve 2.4
X-Spam: spam
X-Spam-score: 9.9
X-Spam-hits: ADVANCE_FEE_3_NEW 0.001, ADVANCE_FEE_4_NEW 0.001, ADVANCE_FEE_5_NEW 0.001,
BAYES_50 0.8, FILL_THIS_FORM_FRAUD_PHISH 0.334, FORM_FRAUD_5 0.001,
FREEMAIL_FROM 0.001, HTML_MESSAGE 0.001, ME_419_MANY0 1.5,
ME_419_MANY1 1.5, RCVD_IN_DNSWL_NONE -0.0001, TVD_PH_BODY_META 3.396,
T_FILL_THIS_FORM_SHORT 0.01, UNCLAIMED_MONEY 2.427, LANGUAGES en,
BAYES_USED global, SA_VERSION 3.3.2
X-Spam-source: IP='157.55.0.213', Host='dub0-omc1-s14.dub0.hotmail.com', Country='US',
FromHeader='com', MailFrom='com'
X-Spam-charsets: plain='Windows-1252', html='Windows-1252'
X-Resolved-to: <snipped>
X-Delivered-to: <snipped>
X-Mail-from: [email protected]
Received: from mx4 ([10.202.2.203])
by compute3.internal (LMTPProxy); Thu, 13 Feb 2014 10:08:30 -0500
Received: from dub0-omc1-s14.dub0.hotmail.com (dub0-omc1-s14.dub0.hotmail.com [157.55.0.213])
by mx4.messagingengine.com (Postfix) with ESMTP id AA6483C0135
for <snipped>; Thu, 13 Feb 2014 10:08:28 -0500 (EST)
Received: from DUB128-W10 ([157.55.0.237]) by dub0-omc1-s14.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 13 Feb 2014 07:08:27 -0800
X-TMN: [liVer5Dn2tIt6bNq3rs1klFcoohpulX7]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_1a883589-00c9-4cab-87fe-631259609da8_"
From: FBI INVESTIGATION <[email protected]>
To: <snipped>
Subject: Federal Bureau Of Investigation ( FBI )
Date: Thu, 13 Feb 2014 15:08:26 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 13 Feb 2014 15:08:27.0355 (UTC) FILETIME=[72A052B0:01CF28CD]

--_1a883589-00c9-4cab-87fe-631259609da8_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


To
KIND RESPECT,

We the Management and Board of the Federal Bureau Of Investigation ( FBI ) hereby contact you reference to your long awaited payment for quite some times now. This funds transfer had been strongly monitored under our (Monitoring Team 25RPD) without you achieving your payment. To that effect, we have received an URGENT MESSAGE from our Monitoring Team 25RPD to stop your funds transfer and call for the funds back and have it deposited into private Bank which we had already done since last weekend. For your Information, You are expected to stop every further communication with all those corrupt officials you have been dealing who planed to divert your funds into their personal account that is why you have not received your payment into your bank account since all this years.

You are expected to stop all your communication with your lawyer and other corrupt official in Africa who is involve in this dirty deal because they all tried to divert your fund into their Private account and also they do not have any legal right over this fund. We sincerely apologies for all that you have gone through in getting this funds. Your funds had been deposited into our recovery account with African Fiscal Commission.
This commission is in-charge of all unclaimed funds recovered by our Monitoring Unit for Security Reasons. Upon receipt of your immediate response, we shall forward to you the following; Name, address and contact details of the accredited paying centre where your fund will be transfer from to your bank account in your Country. Please note that our assurance is that you would receive your fund within 7 working days if you adhere to our simple advice and directives without any stress.

As a matter of fact, we have many Individuals from United States and other parts of the world who had also gone through such things and we have helped in the past to get their funds. They even spent lots of money more than you to these same corrupt officials in AFRICA before we came to their rescue and now they have received their payment. It is a pride to us to release this fund to you hence you will adhere and maintain secret to the highest level. First and foremost, you are obliged to stop further communication to those impostors who claim to be Bank Officer's in Africa you had been dealing with for the past couple of years.

This will enable us work effectively and make our investigation to trap and prosecute them and also it will enable us to effect your payment secretly without these bad eggs knowing to avoid intercepting it. The Federal Bureau Of Investigation ( FBI ) would instruct the AFRICA FISCAL COMMISSION as well as the paying Bank to effect payment of this. Your money to your designated bank account in your country immediately you have contacted them. You are advised to reconfirm to us the following information for documentation and processing of your payment through the Bank.

1 Your home or Office address.---------
2. Telephone Number----------
3. Bank Account Information----------
4. ID Card or International Passport---------
5. Reconfirm Amount---------
6.Reconfirm Amount to be transferred......................

Please Note that as soon as we receive this information’s, we shall forward your payment file to the IFC in Africa . We the management and staffs of the Federal Bureau Of Investigation ( FBI ) assures you of receiving your funds without any problem within (7) business Days from today if we receive from you requested information from you.

Kindly Call the Director immediately you receive this information on 24hrs Telephone Line. +2347081111294. CONGRATULATIONS.

Mr. Williams Smith
Federal Bureau Of Investigation ( FBI )
Marylynne-Accra Ghana
Address 103-109 Lavender Hill Batter sea GHANA SW11 109 QL

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

#193770 by HillBilly Tue Mar 11, 2014 12:03 pm
DO NOT PRINT /FORWARD THIS MAIL ITS AGAINST THE LAW
This e-mail, including any attachments, is covered by the Electronic Communications Privacy Act, 10 U.S.C. 2510-2521






ANTI-TERRORIST AND MONETARY CRIMES DIVISION
FBI HEADQUARTERS WASHINGTON DC
FEDERAL BUREAU OF INVESTIGATIONS J.EDGAR HOOVER BUILDING
935 PENNSYLVANIA AVENUE, NW WASHINGTON, D.C. 20535-0001
Ref: FBI/DC/25/113/13/2014
http://www.fbi.gov/about-us/executives/director






Your attention is needed immediately


We have been informed through our global intelligence monitoring network that the sum of $10.500, 000.00, has been released from a bank in Africa bearing your name as the beneficiary without dist certificate to clear your name and fund from every terrorist or drug or money laundering activities

We sincerely apologize for sending you this sensitive information via e-mail instead of a certified mail, phone call or a face-to-face conversation,We will also send you a certified email later it is due to the urgency and importance of the security information needed. To checkmate financial recklessness, illegal gambling, racketeering and considering the effect of the global financial crisis rocking the United States, our government with the help of the Federal Bureau of Investigation (F.B.I) Washington, DC and the internet crime complaint center (ic3),alongside the CIA signed an agreement with U.K police for an immediate release of all overdue funds presently logged in their treasury and to ensure it is disbursed to the rightful beneficiaries in all parts of the world. If you the beneficiary would adhere to our instruction it will help you receive your payment immediately

The bank knowing fully well that they do not have enough facilities to make this payment from any part of the world to your account directly, used what we know as a secret diplomatic transit payment (s.d.t.p) method to make the payment. direct transfers are difficult and secret diplomatic transit payment (s.d.t.p) are not usually made unless the funds are related to terrorist activities and we ask why must your payment be made in a secret transfer if your transaction is legitimate.

We do not want you to get into trouble as soon as these funds reflect in your personal account, so it is our duty as an international agency to correct these little problems before this fund reflects into your personal account.

we advise you to contact us immediately, as your funds have been stopped and are being held in our custody, until you are able to provide us with the dist certificate within 3 days from the country that authorized the transfer to certify that the funds that you are about to receive are terrorist/drug free or we shall have cause to impound the payment and subsequently prosecute you for cross border terrorist financial activites.

based on our findings, our investigative department wish to warn you against some miscreants, hoodlums and touts who go about scamming innocent people by claiming to be who they are not and thereby tarnishing the image of this wonderful country. By sending out fraudulent emails without our official logo and emblem we shall release your funds immediately we receive this legal document and we will ensure that you receive your payment without any further delay.

Note

We decided to contact you directly by email to acquire the proper verifications and proof from you to show that you are the rightful person to receive this fund, because of the huge amount involved. Be informed that the funds are now with a top bank in the united state in your name and under the monitoring/custody of the FBI. At the moment, we have asked the bank not to release the fund to anybody that comes to them, unless we instruct them to do so, and only if we receive the dist certificate this is to enable us carry out a comprehensive investigation first before releasing the fund to you.

hence, you are to forward your dist certificate to us immediately if you have it in your possession, if you do not have it, then let us know so that we will direct you to the appropriate authority to obtain the certificate then you are to send it to our office. And thereafter, we will instruct the bank holding the funds, to go ahead and credit your account immediately. If you fail to provide the documents to this office, we will prosecute you and take appropriate action against you for not proving the legality of the funds.

Finally if you truly want to receive this funds without F.B.I troubles then reconfirm the following below

Name………………………………………………….
Address………………………………………………..
Sex………………………………………………………
Age.....................................................................
Contact number………………………………………..
Country of origin of funds……………………………..







Yours Faithfully

Stuart M. Kelly Special Agent
151 Patton Ave
Room211 Asheville N.C.28801
FOR FBI DIRECTOR
JAMES B COMEY

root

cc: general intelligence department (GID)
cc federal bureau of investigation (fFBIi)
cc .internet crime complaint center (ic3)
cc: Asia pacific group on money laundering (APG)
cc: international monetary fund (IMF)
cc: international organization of securities commissions (IOSCO)
cc: international banking security association (IBSA)
cc: world customs organization (WCO)
cc: inter-American development bank (IADB)
cc: national white collar crime center (NW3C)
cc: bureau of justice assistance (BJA)
cc: supreme court of South Africa(SCA)



LEGAL NOTICE:
Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this e-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately.

AVISO LEGAL:
Salvo que se indique lo contrario, este mensaje es confidencial y puede ser privilegiada. Se pretende a su destinatario (s)solamente. El acceso a este e-mail por cualquier otra persona no está autorizado. Si usted no es un destinatario, cualquier divulgación o copia de lacontenidos ni de cualquier acción realizada (o no) en la dependencia en que no está autorizado y puede ser ilegal. Si no son unadestinatario, por favor notifique al remitente de inmediato


DO NOT PRINT /FORWARD THIS MAIL ITS AGAINST THE LAW
This e-mail, including any attachments, is covered by the Electronic Communications Privacy Act, 10 U.S.C. 2510-2521


Return-Path: <[email protected]>
Received: from mx02.vgs.untd.com (mx02.vgs.untd.com [10.181.44.32])
by maildeliver08.dca.untd.com with SMTP id AABKT8KZHA2TL9PA
for <xxx> (sender <[email protected]>);
Tue, 11 Mar 2014 08:08:24 -0700 (PDT)
Authentication-Results: mx02.vgs.untd.com; DKIM=NONE
Received-SPF: None
Received: from mail.ikc.su (mail.ikc.su [85.234.126.230])
by mx02.vgs.untd.com with SMTP id AABKT8KZEAATREUS
for <xx> (sender <[email protected]>);
Tue, 11 Mar 2014 08:08:22 -0700 (PDT)
Received: from User (unknown [213.139.94.197])
by mail.ikc.su (Postfix) with ESMTPA id 01D8D48254F;
Sun, 9 Mar 2014 02:21:42 +0900 (IRKT)
Reply-To: <[email protected]>
From: "FEDERAL BUREAU OF INVESTIGATION"<[email protected]>
Subject: F.B.I- YOUR ATTENTION IS NEEDED IMMEDIATELY
Date: Sat, 8 Mar 2014 14:22:41 -0300
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0054_01C2A9A6.6D554316"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: Undisclosed-recipients:;
Message-Id: <[email protected]>
X-UNTD-BodySize: 52380
X-UNTD-UBE: 5
X-UNTD-UBE-INFO:
4ea4b0dd39c499b09195759414f424414414991914b984c49041fd944129b0911d1d24f9a4d0dda599d034c414
7429e005900105600574
X-UNTD-SPF: None
X-UNTD-DKIM: NONE
X-UNTD-SIGN-INFO:
4ea4b0dd39c499b0917db0d5d114fdc444a4c4193189c1c1393db5f9097091f95014b0ad191064fde464c964ad

X-ContentStamp: 14:7:4092154440
X-MAIL-INFO:4e8121814025a93000b4b4cdd9e9bdf505c901b401e969318001750c0c3db12591f04571154545
0ced2d20
X-UNTD-Peer-Info: 85.234.126.230|mail.ikc.su|mail.ikc.su|[email protected]

#196673 by HillBilly Mon Apr 07, 2014 11:16 am
ANTI-TERRORIST AND MONETARY CRIMES DIVISION

FBI HEADQUARTERS WASHINGTON DC

FEDERAL BUREAU OF INVESTIGATIONS J.EDGAR HOOVER BUILDING

935 PENNSYLVANIA AVENUE, NW WASHINGTON, D.C. 20535-0001

Ref: FBI/DC/25/113/13/2013

http://www.fbi.gov/about-us/executives/director

Your attention is needed immediately

We have been informed through our global intelligence monitoring network that the sum of $10.500, 000.00, has been released from a bank in Africa bearing your name as the beneficiary without dist certificate to clear your name and fund from every terrorist or drug or money laundering activities

We sincerely apologize for sending you this sensitive information via e-mail instead of a certified mail, phone call or a face-to-face conversation,We will also send you a certified email later it is due to the urgency and importance of the security information needed. To checkmate financial recklessness, illegal gambling, racketeering and considering the effect of the global financial crisis rocking the United States, our government with the help of the Federal Bureau of Investigation (F.B.I) Washington, DC and the internet crime complaint center (ic3),alongside the CIA signed an agreement with U.K police for an immediate release of all overdue funds presently logged in their treasury and to ensure it is disbursed to the rightful beneficiaries in all parts of the world. If you the beneficiary would adhere to our instruction it will help you receive your payment immediately

The bank knowing fully well that they do not have enough facilities to make this payment from any part of the world to your account directly, used what we know as a secret diplomatic transit payment (s.d.t.p) method to make the payment. direct transfers are difficult and secret diplomatic transit payment (s.d.t.p) are not usually made unless the funds are related to terrorist activities and we ask why must your payment be made in a secret transfer if your transaction is legitimate.

We do not want you to get into trouble as soon as these funds reflect in your personal account, so it is our duty as an international agency to correct these little problems before this fund reflects into your personal account.

we advise you to contact us immediately, as your funds have been stopped and are being held in our custody, until you are able to provide us with the dist certificate within 3 days from the country that authorized the transfer to certify that the funds that you are about to receive are terrorist/drug free or we shall have cause to impound the payment and subsequently prosecute you for cross border terrorist financial activites.

based on our findings, our investigative department wish to warn you against some miscreants, hoodlums and touts who go about scamming innocent people by claiming to be who they are not and thereby tarnishing the image of this wonderful country. By sending out fraudulent emails without our official logo and emblem we shall release your funds immediately we receive this legal document and we will ensure that you receive your payment without any further delay.

Note

We decided to contact you directly by email to acquire the proper verifications and proof from you to show that you are the rightful person to receive this fund, because of the huge amount involved. Be informed that the funds are now with a top bank in the united state in your name and under the monitoring/custody of the FBI. At the moment, we have asked the bank not to release the fund to anybody that comes to them, unless we instruct them to do so, and only if we receive the dist certificate this is to enable us carry out a comprehensive investigation first before releasing the fund to you.

hence, you are to forward your dist certificate to us immediately if you have it in your possession, if you do not have it, then let us know so that we will direct you to the appropriate authority to obtain the certificate then you are to send it to our office. And thereafter, we will instruct the bank holding the funds, to go ahead and credit your account immediately. If you fail to provide the documents to this office, we will prosecute you and take appropriate action against you for not proving the legality of the funds.

Yours Faithfully

SPECIAL AGENT (admin division)

James Turgal

(BADGE NUMBER JTT047101111)

FORM FBI DIRECTOR

Jim Comey.

cc:General intelligence department (GID)

cc: Federal bureau of investigation (FBI)

cc: Internet crime complaint center (ic3)

cc: Asia pacific group on money laundering (APG)

cc: International monetary fund (IMF)

cc: International organization of securities commissions (IOSCO)

cc: International banking security association (IBSA)

cc: World customs organization (WCO)

cc: Inter-American development bank (IADB)

cc: National white collar crime center (NW3C)

cc: Bureau of justice assistance (BJA)

cc: Supreme court of South Africa(SCA)

cc: Nigeria Financial Intelligence Unit(NFIU)

LEGAL NOTICE:

Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this e-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately.

AVISO LEGAL:

Salvo que se indique lo contrario, este mensaje es confidencial y puede ser privilegiada. Se pretende a su destinatario (s)solamente. El acceso a este e-mail por cualquier otra persona no est? autorizado. Si usted no es un destinatario, cualquier divulgaci?n o copia de lacontenidos ni de cualquier acci?n realizada (o no) en la dependencia en que no est? autorizado y puede ser ilegal. Si no son unadestinatario, por favor notifique al remitente de inmediato

DO NOT PRINT /FORWARD THIS MAIL ITS AGAINST THE FBI LAW

This e-mail, including any attachments, is covered by the Electronic Communications Privacy Act, 10 U.S.C. 2510-2521


Return-Path: <[email protected]>
Received: from mx04.dca.untd.com (mx04.dca.untd.com [10.171.44.34])
by maildeliver01.dca.untd.com with SMTP id AABKWFNUTASEHT9J
for <xxx> (sender <[email protected]>);
Mon, 7 Apr 2014 07:12:33 -0700 (PDT)
Authentication-Results: mx04.dca.untd.com; DKIM=PASS
Received-SPF: SoftFail
Received: from nm24.bullet.mail.ne1.yahoo.com (nm24.bullet.mail.ne1.yahoo.com
[98.138.90.87])
by mx04.dca.untd.com with SMTP id AABKWFNUTAMZJNT2
for <xxx> (sender <[email protected]>);
Mon, 7 Apr 2014 07:12:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1396879953;
bh=DACnaDyrePcgjFq0H+38yOLZhsd6oQinVzcT3G0m6lM=;
h=Received:Received:Received:X-Yahoo-Newman-Id:Message-ID:X-Yahoo-Newman-Property:X-YMail-
OSG:X-Yahoo-SMTP:X-Rocket-Received:Reply-To:From:Subject:Date:MIME-Version:Content-Type:Co
ntent-Transfer-Encoding:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE:X-Antivirus:X-Anti
virus-Status;
b=UP+ayiRlhGqVjyTJBU5fgzdu0vjO/ak4b9X5RczCFVBjdBGGRKoy6x/RCSmw62wt1W+tDf8EKUj0Js+mF/4fmwT6
V9AHC6+22nZPFpFlB5fZMvguOJyFNEtUzr0gi3E/coeg8Mhk5NkKwQKNwMYtKYg2fZ9w5tS/i/fYTX18faz4rIyOtl
B0596B214yLPj3fVgfbaqW6gYYnnyZ3tTyyy9BiKRZhXCJQB57UL+21ljfjSDlsXEqKnG0x/wZR038kp4IHKA2YxOf
kHDGMPD6KVNMNraWWpsH7AMAnOUIUif0qXSWT6sZyAbnn/Nyf6ruE2Yl6/RgfhW7nDdu6DY/eg==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s2048; d=yahoo.com;
b=sM9ljY0GRrSeHrz+4CkeRnWCuclMENvHqra93YpiA78Bm12zYUeeQUGZbQU9ryrWbj/+v6J6cxxWKvkclQ/ID96
T8JUgftYwZ74S8BLjIiZl2KPOt1zRUo1IAnn7jM8kFNUFvQAzSpYtD8GzwymxI7vuf4gq/DyKPDaP2LOfsp+VgpVYb
n2KH+xJzZI22OLV0fsnnuimLf+EtlgeXxgRJ2xsoMtgjIXPss9gYXJNbjGHVJMaZ2B8ANUz1f+oiCwBCTbm+4qP6+3
WRLgpIrkVtXNUTXt5lRnw390T14Cy7NqHnTujbBeZcNd17XWnSOlheeMBSpxo50hBvt0AjTp/OQ==;
Received: from [98.138.100.115] by nm24.bullet.mail.ne1.yahoo.com with NNFMP; 07 Apr 2014
14:12:33 -0000
Received: from [98.138.226.63] by tm106.bullet.mail.ne1.yahoo.com with NNFMP; 07 Apr 2014
14:12:32 -0000
Received: from [127.0.0.1] by smtp214.mail.ne1.yahoo.com with NNFMP; 07 Apr 2014 14:12:32
-0000
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: 5O1XmUQVM1n3r1YoUTu0hsEsIbWTHKUnB8lkPXK.Z1JfAC1
78vo8m9MlZeiGTFht_7A44Wek_2pfSyzanaPhd5CmZvi6slAdvPNoKDQIUHu
PxI72YBxdcElRWGlZ72kP3lQHE6y3YpE0ekMliJ7.94PLU96uA3QtlXtG4mR
94e1Pxaj.3xgCV9g76rTtzG_O6wsGokFmGsxrZFfNv8EPM5xJe3yjbW8IhJ8
U8cdcz3u65n1zkdyn8cITnXbD7zGR6c0qtJb5ELCdyTXTVOgKIwt7PTDM02I
2uOk5PYH5VjKyv8AEtjaVkxeWbhR.yzgu2KXL5OlzbI0bZEaYwqCootO5uMw
lzoo6rJ54HFIKp3GwS_eQsCHBIk5f.H2r7M_nalHDt2swoJ3NQgEOS1XkCD3
RdVnHe.QlRIIyJ0JjH.aia2T28eYCieA5KvzwrSW.PMTXo1ZtAvT9oDkkJpH
dYRjd9HzR3ilBY7QyiObYD0v50xt2fYegDodlWgTqdEUZSmuRFS_KGJy_8K6
YRyPOTybhi7B875dpJpFz7YRCfzvZaE5U3mmJZK0wT1jFGCYExB1GPBFJMC0
M1MbekrIf1JO9B48uIRw5K7Aj9iMnTkGhwLj60QlYGSWZhbPXUjghrZSU
X-Yahoo-SMTP: LcGnqWCswBACRZuuqUh49Rp4QsnFek1RNci6uQ--
X-Rocket-Received: from AAAA (jamesb.comey.fbi@41.211.198.10 with plain [63.250.193.228])
by smtp214.mail.ne1.yahoo.com with SMTP; 07 Apr 2014 07:12:32 -0700 PDT
Reply-To: <[email protected]>
From: "FORM FBI DIRECTOR"<[email protected]>
Subject: Attention unpaid beneficiary
Date: Mon, 7 Apr 2014 07:12:31 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 140407-0, 04/06/2014), Outbound message
X-Antivirus-Status: Clean
To: Undisclosed-recipients:;
X-UNTD-BodySize: 7926
X-UNTD-UBE: 5
X-UNTD-UBE-INFO:
109ce8a1c1b1ace889c875e90d78c52de50dacbd6d0cfce57d79fca5694d8989e8c55d6c09ac9cecac788c81a5
2c0c4c490cf90c81
X-UNTD-SPF: SoftFail
X-UNTD-DKIM: PASS
X-UNTD-SIGN-INFO:
109ce8a1c1b1ace88979d54525acec55250188c8c9c9b5c191c56889f11c89a1691d01bd4565004529451d
X-ContentStamp: 15:7:2963670797
X-MAIL-INFO:10f5ada9add1d9a9d1ddd848dd38f8482d3175b948f93c81b58175ad683981bcd1d18918955d05
f89d7cf8f8d1885cc8
X-UNTD-Peer-Info: 98.138.90.87|nm24.bullet.mail.ne1.yahoo.com|nm24.bullet.mail.ne1.yahoo.c
om|[email protected]

#202138 by Jack Fendly Mon May 19, 2014 1:13 pm
From FBI Mon May 19 20:27:21 2014
X-Apparently-To:
Return-Path: <[email protected]>
X-YahooFilteredBulk: 209.85.128.178
Received-SPF: pass (domain of gmail.com designates 209.85.128.178 as permitted sender)
X-YMailISG:
X-Originating-IP: [209.85.128.178]
Authentication-Results: mta1485.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 106.10.146.236 (106.10.146.236) by 106.10.146.59(106.10.146.59); Mon, 19 May 2014 12:27:22 +0000
Received: from 127.0.0.1 (EHLO mail-ve0-f178.google.com) (209.85.128.178)
by mta1485.mail.gq1.yahoo.com with SMTPS; Mon, 19 May 2014 12:27:21 +0000
Received: by mail-ve0-f178.google.com with SMTP id sa20so6419326veb.9
for <>; Mon, 19 May 2014 05:27:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed
MIME-Version: 1.0
X-Received: by 10.58.74.201 with SMTP id w9mr101003vev.56.1400502441069; Mon,
19 May 2014 05:27:21 -0700 (PDT)
Received: by 10.52.143.193 with HTTP; Mon, 19 May 2014 05:27:21 -0700 (PDT)
Reply-To: [email protected]
Date: Mon, 19 May 2014 14:27:21 +0200
Message-ID: <CAErCYc1NegKArs3hA1zRmL1pS+L63qyNOgkEWGKAB-0p2v9G0g@mail.gmail.com>
Subject: FEDERAL BUREAU OF INVESTIGATION SEEKING TO WIRETAP THE INTERNET.
From: FBI <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=047d7bacb770826e0204f9bfe29b
Bcc:
Content-Length: 38850


FEDERAL BUREAU OF INVESTIGATION SEEKING TO WIRETAP THE INTERNET.
FED GOVERNEMNT OF THE UNITED STATES
Anti-Terrorist and Monitary Crimes Division
FBI Headquarters in Washington, D.C .
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue, NW Washington, D.C. 20535-0001
Tel: (917)52018608
warrant no; usa/batch/tzx/washington DC
FBI. inest. Washington

FEDERAL BUREAU OF INVESTIGATION.. J... EDGAR. HOOVER BUILDING WASHINGTON D.C FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DU FBI SEEKING TO WIRETAP INTERNET FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DU FBI SEEKING TO WIRETAP INTERNET FBI OFFICIAL NOTICE!!!

This is the final warning you are going to receive from us do you understand? I hope you understand how many times this message has been sent to you? We have warned you so many times and you have decided to ignore our e-mails. Is it because you believe we have not been instructed to get you arrested? today if you fail to respond back to us with the payment details below, then we would first send a letter to the MAYOR of the city where you reside and direct them to close your bank account until you have been put to jailed and all your properties will be confiscated by the FBI, CIA and other enforcement agency. We would also send a letter to the company/agency that you are working so that they could get you fired until we are through with our investigations because a suspect is not suppose to be working for the government or any private organization.

Your ID which we have in our database have been sent to all the crimes agencies for them to insert you in their website as an internet fraudsters and to warn people from having any deals with you. This would have been solved all this while if you had gotten the CERTIFICATE SIGNED, ENDORSED AND STAMPED as you where instructed in the e-mail below. This is the federal bureau of investigation (FBI) am writing in response to the e-mail you sent to us and am using this medium to inform you that there is no more time left to waste because you have been given a mandate. As stated earlier to have the document endorsed, signed and stamped without failure and you must adhere to these directives to avoid you blaming yourself at last when we must have arrested.

You failed to comply with our directives/instructions, that was the reason why we didn't hear from you, as our director has already been notified about you get the process completed yesterday and right now the WARRANT OF ARREST has been signed against you and it will be carried out in the next 48 hours as strictly signed by the FBI director. We have investigated and found out that you didn't have any idea when the fraudulent deal was committed with your information's/identity and right now if your ID is placed on our website as a wanted person, I believe you know that it will be a shame to you and your entire family because after then it will be announce in all the local channels that you are wanted by the FBI.

As a good Christian and a Honest man, I decided to see how i could be of help to you because i would not be happy to see you end up in jail and all your properties confiscated all because your information's was used to carry out a fraudulent transactions, i called the EFCC and they directed me to a private attorney who could help you get the process done and he stated that he will endorse, sign and stamp the document at the sum of $250 usd only and i believe this process is cheaper for you.

You need to do every possible thing today and tomorrow to get this process done because our director has called to inform me that the warrant of arrest has been signed against you and once it has been approved, then the arrest will be carried out, and from our investigations we learns that you were the person that forwarded your identity to one impostor/fraudsters in BENIN REPUBLIC when he had a deal with you about the transfer of some illegal funds into your bank account which is valued at Millions of dollars with proofs.

I pleaded on your behalf so that this agency could give you till 24/5/2014 (1) Weeks from now so that you could get this process done because i learnt that you were sent several e-mail without getting a response from you, Bear it in mind that this is the only way that i can be able to help you at this moment or you would have to face the law and its consequences once it has befall on you. You would make the payment through western union money transfer with the below details.

Here is the western union information that you are going to used to send the money

RECEIVE NAME: KATIE ALLEN
ADDRESS: BENIN REPUBLIC COTONOU
TEXT QUESTION:IN GOD
ANSWER: WE TRUST
AMOUNT: $250
Senders Full Name======
Sender Full Address:====
MTCN:=========

Send the payment details to me with the senders name and address, mtcn number, text question and answer used and the amount sent. Make sure that you didn't hesitate making the payment down to the agency by today so that they could have the certificate endorsed, signed and stamped immediately without any further delay. After all this process has been carried out, then we would have to proceed to the bank for the transfer of your compensation funds which is valued at the sum of (US$10.500.000 Million) usd which was suppose to have been transferred to you all this while.

Note/ all the crimes agencies have been contacted on this regards and we shall trace and arrest you if you disregard this instructions. You are given a grace today to make the payment for the document after which your failure to do that will attract a maximum arrest and finally you will be appearing in court for act of terrorism, money laundering and drug trafficking charges, so be warned not to try any thing funny because you are been watched.

FBI Directors James B. Comey
Response soonest.
THANKS FOR YOUR CO-OPERATION.

VICTOR COLLINS BENINUE CONSULATE TO THE FBI
J. EDGAR HOOVER FBI BUILDING
935 PENNSYLVANIA AVENUE, NW
WASHINGTON, DC 20535

You cannot win a lottery you haven't entered

Please DO NOT tell a scammer you found their details posted here
#202768 by Jack Fendly Sat May 24, 2014 1:54 pm
From Mr. Robert Pikus Sat May 24 23:09:51 2014
X-Apparently-To:
Return-Path: <[email protected]>
X-YahooFilteredBulk: 74.125.82.67
Received-SPF: pass (domain of gmail.com designates 74.125.82.67 as permitted sender)
X-YMailISG:
X-Originating-IP: [74.125.82.67]
Authentication-Results: mta1633.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 106.10.146.237 (106.10.146.237) by 106.10.145.167(106.10.145.167); Sat, 24 May 2014 15:09:53 +0000
Received: from 127.0.0.1 (EHLO mail-wg0-f67.google.com) (74.125.82.67)
by mta1633.mail.gq1.yahoo.com with SMTPS; Sat, 24 May 2014 15:09:53 +0000
Received: by mail-wg0-f67.google.com with SMTP id l18so1745526wgh.6
for <>; Sat, 24 May 2014 08:09:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
MIME-Version: 1.0
X-Received: by 10.194.221.69 with SMTP id qc5mr10845529wjc.91.1400944191137;
Sat, 24 May 2014 08:09:51 -0700 (PDT)
Received: by 10.194.28.4 with HTTP; Sat, 24 May 2014 08:09:51 -0700 (PDT)
Reply-To: [email protected]
Date: Sat, 24 May 2014 16:09:51 +0100
Message-ID: <CAByRd=uKUgO5U_H5ptePWQh-C7G8wGfp6nm0xqUtN-RvXFSisQ@mail.gmail.com>
Subject: FEDERAL BUREAU OF INVESTIGATION (F.B.I.)
From: "Mr. Robert Pikus" <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
Content-Length: 1688


Attention:
We have been watching every single transaction you made since last
year until this 2012 and you have to know that we are also working to
make sure your funds which are suppose to be delivered to you, and
also bear in mind that what ever you emailing us will be forward to
the court. Also we are hereby to notify by the federal bureau
of investigation Cotonou department of the insult you imposed on them
by failing to comply by their requirements. Your full residential
address has been forwarded to us for your immediate arrest to face
your charge but I deemed it fit to give you one more chance to save
yourself from this mess.

We have been told that you have failed to dance by the rule of the FBI
which will warrant 2 years jail sentence. Now I john Robert Pikus the
special agent in charge of the FBI Albany department I am giving you
24 working hours to effect the payment of the $78.00 usd. To the FBI
in republic of Benin (fbi security) with the information written
below:

Receiver: PETER EZE
Country: Benin Republic
City: Cotonou
Test: Able?
Answer: now
Amount: $78.dollars
Mtcn number.........

You have to try as much as you can and make this payment so that your
funds will be delivered immediately to your destination. You have to
stop every transaction you are communicating with other organization
to avoid delay on the processing of your funds. Note that you? if you
fail to stick with my advice or any delay will lead to us coming
directly to your home address at any time, so try and dance by the
rule and get back to me with good understanding ASAP. Special Agent in
Charge;
.
Mr. Robert Pikus
Director F.B.I
+22968947820/
E-mail= ( [email protected] )

You cannot win a lottery you haven't entered

Please DO NOT tell a scammer you found their details posted here
#207624 by Jack Fendly Wed Jun 25, 2014 4:06 pm
From MR.JAMES COMEY Wed Jun 25 21:36:15 2014
X-Apparently-To:
X-YahooFilteredBulk: 209.85.223.179
Received-SPF: pass (domain of gmail.com designates 209.85.223.179 as permitted sender)
X-YMailISG:
X-Originating-IP: [209.85.223.179]
Authentication-Results: mta1138.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-ie0-f179.google.com) (209.85.223.179)
by mta1138.mail.gq1.yahoo.com with SMTPS; Wed, 25 Jun 2014 13:36:16 +0000
Received: by mail-ie0-f179.google.com with SMTP id tr6so1578076ieb.24
for <>; Wed, 25 Jun 2014 06:36:16 -0700 (PDT)
DKIM-Signature:
MIME-Version: 1.0
X-Received: by 10.50.142.97 with SMTP id rv1mr42494970igb.13.1403703376020;
Wed, 25 Jun 2014 06:36:16 -0700 (PDT)
Received: by 10.64.60.193 with HTTP; Wed, 25 Jun 2014 06:36:15 -0700 (PDT)
Reply-To: [email protected]
Date: Wed, 25 Jun 2014 14:36:15 +0100
Message-ID: <CAM707fLV8-HQ_+i6gTxLryVXOy2Bj9jzn9quY5-EpKp-AVx=6w@mail.gmail.com>
Subject: FROM DESK OF JAMES COMEY SENIOR OFFICER FBI.WASHINGTON DC.
From: "MR.JAMES COMEY" <[email protected]>
To: undisclosed-recipients: ;
Content-Type: text/plain; charset=UTF-8
Content-Length: 2032

FROM DESK OF JAMES COMEY Senior Office Department
Federal Bureau Of Investigation FBI.WASHINGTON DC

Good Morning package Owner.

I am sorry for the late reply i was not feeling good all this while
due to office stress but everything is ok now due to i followed my
doctor advice and stayed out of office for five days. I resumed office
some hours back and i received update from Mr. Andrew Hill he told me
There will be an International Flight today by 9pm and Mr.
Andrew Hill will act as your diplomat and deliver the package to you
which will take only 18 hours to get the package delivered.

Note: The package you will receive contain a Visa Credit Card which
contain $20 Million usd ,Master Credit Card which contain $200,000 and
a verified cashier check worth $3 Million usd with the required
security document which was made in your name as the sole owner and it
also include the security pin you will use to transact with both
credit cards.

The sum of $75 is required to enable Mr.AUGUSTINE ONWU get a diplomatic
package seal with tag or else the International Airport customs will
not allow him to board the flight with the package and this diplomatic
package seal with tag will be made in your name as the owner of the
package.There is no much time left and the fee need to be paid today to enable
him board tonight flight and it will take 18 hours to get the package
delivered to you.Send the $75 charge fee and get your package
delivered within 18 hours and this will be the only fee and last fee
required from you toward this transaction.

USE THE DETAILS BELOW TO SEND THE $75 VIA MONEY GRAM SERVICE,WETERN
UION OR RIA ONLY.

RECEIVE NAME..........AUGUSTINE ONWU
COUNTRY ........... BENIN REPUBLIC
CITY ................COTONOU
TEXT QUESTION:........GOD
ANSWER:.........BLESS
AMOUNT:......$75.00
MTCN ............................
SENDER NAME................
SENDER ADDRESS...............

AWAIT YOUR REPLY AND THE
REQUIRED PAYMENT CONFIRMATION DETAILS..
STAYS BLESS.JAMES COMEY THE NEW DIRECTOR FBI
SPECIAL AGENT, III

You cannot win a lottery you haven't entered

Please DO NOT tell a scammer you found their details posted here
#212980 by RavenWing Fri Aug 01, 2014 9:06 pm
Bah, FBI scams. I'd admit, the first one gave me a bit of a fright because it threatened to have me arrested. And then I saw "send me $xxx and we'll send your funds from Nigeria" and I just rolled my eyes. Still, a bit nerve racking when you don't expect it.

Also got one from "the department of homeland security" recently. I tell them the same thing I tell the "FBI": if you're the real deal, you've already got all my information on file somewhere so I see no need to send it to you.

The below was one of my first FBI scams. All in bold print, with some text in red to make it even more "legal".
FEDERAL BUREAU OF INVESTIGATION WASHINGTON DC
Oct 13, 2012

ANTI-TERRORIST AND MONETARY CRIMES DIVISION
FBI HEADQUARTERS WASHINGTON DC
FEDERAL BUREAU OF INVESTIGATIONS J.EDGAR HOOVER BUILDING
935 PENNSYLVANIA AVENUE, NW WASHINGTON, D.C. 20535-0001
Ref: FBI/DC/25/113/13/2012
https://www.fbi.gov


Urgent attention needed


We have been informed through our global intelligence monitoring network that the sum of $10.500, 000.00, has been released from a bank in Africa bearing your name as the beneficiary without dist certificate to clear your name and fund from every terrorist or drug or money laundering activities

The bank knowing fully well that they do not have enough facilities to make this payment from any part of the world to your account directly, used what we know as a secret diplomatic transit payment (s.t.d.p) method to make the payment. direct transfers are difficult and secret diplomatic transit payment (s.t.d.p) are not usually made unless the funds are related to terrorist activities and we ask why must your payment be made in a secret transfer if your transaction is legitimate.

We do not want you to get into trouble as soon as these funds reflect in your personal account, so it is our duty as an international agency to correct these little problems before this fund reflects into your personal account.
we advice you to contact us immediately, as your funds have been stopped and are being held in our custody, until you are able to provide us with the dist certificate within 3 days from the country that authorized the transfer to certify that the funds that you are about to receive are terrorist/drug free or we shall have cause to impound the payment and subsequently prosecute you for cross border terrorist financial activites.

based on our findings, our investigative department wish to warn you against some miscreants, hoodlums and touts who go about scamming innocent people by claiming to be who they are not and thereby tarnishing the image of this wonderful country. By sending out fraudulent emails without our official logo and emblem we shall release your funds immediately we receive this legal document and we will ensure that you receive your payment without any further delay.

Note

We decided to contact you directly by email to acquire the proper verifications and proof from you to show that you are the rightful person to receive this fund, because of the huge amount involved. Be informed that the funds are now with a top bank in the united state in your name and under the monitoring/custody of the FBI. At the moment, we have asked the bank not to release the fund to anybody that comes to them, unless we instruct them to do so, and only if we receive the dist certificate this is to enable us carry out a comprehensive investigation first before releasing the fund to you.

hence, you are to forward your dist certificate to us immediately if you have it in your possession, if you do not have it, then let us know so that we will direct you to the appropriate authority to obtain the certificate then you are to send it to our office. And thereafter, we will instruct the bank holding the funds, to go ahead and credit your account immediately. If you fail to provide the documents to this office, we will prosecute you and take appropriate action against you for not proving the legality of the funds.

Yours Faithfully

SPECIAL AGENT JUKE WILLIAMS
FOR FBI DIRECTOR
MR. ROBERT S. MUELLER.
#217264 by Faizan Docherty Mon Sep 01, 2014 6:05 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 184.191.187.133
Originating ISP: Cox Communications
City: San Diego
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.221.79 with SMTP id ib15csp49628vcb;
Fri, 29 Aug 2014 10:07:43 -0700 (PDT)
X-Received: by 10.180.38.84 with SMTP id e20mr5069237wik.43.1409332062586;
Fri, 29 Aug 2014 10:07:42 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.sitespirit.nl (mail.sitespirit.nl. [109.237.211.104])
by mx.google.com with ESMTPS id w7si916372wjw.131.2014.08.29.10.07.41
for <multiple recipients>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 29 Aug 2014 10:07:42 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=109.237.211.104;
Authentication-Results: mx.google.com;
spf=neutral (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from User (184.191.187.133) by mail.sitespirit.nl (Axigen)
with ESMTPA id 3884BB; Fri, 29 Aug 2014 19:00:54 +0200
Message-ID: <[email protected]>
Reply-To: <[email protected]>
From: "JAMES B. COMEY"<[email protected]>
Subject: Division and Cyber Crime Division (FBI)
Date: Fri, 29 Aug 2014 10:07:41 -0700
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000


Federal Bureau of Investigation
Counter-terrorism Division and Cyber Crime Division
J. Edgar. Hoover Building Washington DC
JAMES B. COMEY
Attention Beneficiary,
Records show that you are among one of the individuals and organizations who are yet to receive their overdue payment from

overseas which includes those of Lottery/Gambling,Contract and Inheritance. Through our Fraud Monitory Unit we have noticed

that you have been transacting with some impostors and fraudsters who have been impersonating the likes of Prof.

Soludo/Mr.Lamido Sanusi of the Central Bank Of Nigeria, Mr. Patrick Aziza, Bode Williams, Frank, Anderson, none officials

of Oceanic Bank, Zenith Banks, Kelvin Young of HSBC, Ben of FedEx, Ibrahim Sule, Dr. Usman Shamsuddeen and some impostors

claiming to be The Federal Bureau of Investigation.
The Cyber Crime Division of the FBI gathered information from the Internet Fraud Complaint Center (IFCC) on how some people

have lost outrageous sums of money to these impostors. As a result of this, we hereby advise you to stop communication with

any one not referred to you by us. We have negotiated with the Federal Ministry of Finance that your payment totaling

$5,900,000.00(Five Million Nine Hundred Thousand Dollars). will be released to you via a custom pin based ATM card with a

maximum withdrawal limit of $15,000 a day which is powered by Visa Card and can be used anywhere in the world where you see

a Visa Card Logo on the Automatic Teller Machine (ATM).
We guarantee receipt of your payment. This is as a result of the mandate from US Government to make sure all debts owed to

citizens of American and also Asia and Europe which includes Inheritance, Contract, Gambling/Lottery etc are been cleared.
To redeem your funds, you are hereby advised to contact the ATM Card Center via email for their requirement to proceed and

procure your Approval of Payment Warrant and Endorsement of your ATM Release Order on your behalf which will cost you $250

Usd only and nothing more as everything else has been taken care of by the Federal Government including taxes, custom paper

and clearance duty so all you will ever need to pay is $250.00 only.
Lord Ruben (ATM Card Center Director)
Central Bank of Nigeria
Central Business District,
Cad astral Zone, federal
Capital Territory,Nigeria.
ATM Card Center Director Lord Ruben
Email: ( [email protected] )
Phone: +234-810-109-8678
Do contact Lord Ruben of the ATM Card Center via his contact details above and furnish him with your details as listed

below:
FULL NAMES: __________________________________
DELIVERY ADDRESS FOR ATM CARD: __________________
SEX: _______________
DATE OF BIRTH: __________________
OCCUPATION: __________________
TELEPHONE NUMBER: _____________________
EMAIL ADDRESS: _____________________
On contacting him with your details your file would be updated and he will be sending you the payment information in which

you will use in making payment of $250.00 via MoneyGram or Western Union Money Transfer for the procurement of your

Approval of Payment Warrant and Endorsement of your ATM Release Order, after which the delivery of your ATM card will be

effected to your designated home address without any further delay, extra fee.
JAMES B. COMEY
DIRECTOR
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535
Note: Disregard any email you get from any impostors or offices claiming to be in possession of your ATM card, you are

hereby advice only to be in contact with Lord Ruben of the ATM card center who is the rightful person to deal with in

regards to your payment and forward any emails you get from impostors to this office so we could act upon it immediately.

Help stop cyber crime.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#221811 by Jack Fendly Mon Oct 06, 2014 9:47 am
From "Mr Robert S. Mueller" Mon Oct 6 12:56:29 2014
X-Apparently-To:
Return-Path: <[email protected]>
X-YahooFilteredBulk: 98.138.90.65
Received-SPF: pass (domain of yahoo.com designates 98.138.90.65 as permitted sender)
X-YMailISG:
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1509.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65)
by mta1509.mail.bf1.yahoo.com with SMTPS; Mon, 06 Oct 2014 12:56:33 +0000
DKIM-Signature:
DomainKey-Signature:
Received: from [98.138.100.113] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 06 Oct 2014 12:56:31 -0000
Received: from [98.138.226.166] by tm104.bullet.mail.ne1.yahoo.com with NNFMP; 06 Oct 2014 12:56:31 -0000
Received: from [127.0.0.1] by omp1067.mail.ne1.yahoo.com with NNFMP; 06 Oct 2014 12:56:31 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Date: Mon, 6 Oct 2014 12:56:29 +0000 (UTC)
From: "Mr Robert S. Mueller" <[email protected]>
Reply-To: "Mr Robert S. Mueller" <[email protected]>
Message-ID: <1661861546.490087.1412600189767.JavaMail.yahoo@jws100191.mail.ne1.yahoo.com>
Subject: FINAL WARNING: YOU WILL BE ARRESTED AND JAILED IF YOU FAIL TO READ
THE
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_490086_1656469957.1412600189762"
Content-Length: 12358


FINAL WARNING: YOU WILL BE ARRESTED AND JAILED IF YOU FAIL TO READ THE
ATTACHED E-MAIL AND COMPLY
Anti-Terrorist and Monetary Crimes Division
FBI Headquarters In Washington, D.C.
Federal Bureau Of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue, NW Washington, D.C. 20535-0001

Attention: Beneficiary

This is the final warning you are going to receive from me, do you get me? I hope you understand how many times this message has been sent to you.
We would also send a letter to the company/agency that you are working for so that they could get you fired until we are through with our investigations because a suspect is not supposed to be working for the government or any private organization.

Your ID which we have in our database have been sent to all the crimes agencies in America for them to inset you in their website as an internet fraudsters and to warn people from having any deals with you.
This would have been solved all this while if you had gotten the CERTIFICATE ENDORSED AND STAMPED as you were instructed in the e-mail below. This is the federal bureau of investigation (FBI) am writing in
response to the e-mail you sent to us and am using this medium to inform you that there is no more time left to waste because you have been given a mandate. As stated earlier to have the document endorsed,signed and stamped without failure and you must adhere to this directives to avoid you blaming yourself atlast when we must have
arrested and jailed you for life and all your properties will be seized and bank account will be confiscated too.

You failed to comply with our directives/instruction and that was the reason why we didn't hear from you, as our director has already been
notified about you get the process completed yesterday and right now the WARRANT OF ARREST has been signed against you and it will be carried out in the next 48hours as strictly signed by the FBI
director. We have investigated and found out that you didn't have any idea when the fraudulent deal was committed with your information's/identity and right now your ID is placed on our website
as a wanted person, I believe you know that it will be a shame to you and your entire family because after then it will be announce in all the local channels that you are wanted by the FBI.

As a good Christian and a Honest man, I decided to see how i could be of help to you because i would not be happy to see you end up in jail and all your properties confiscated all because your information's was
used to carry out a fraudulent transactions, i called the EFCC and they directed me to a private attorney who can help you get the process done and he stated that he will endorse and stamp the document at the sum of $60 usd only and i believe this process is cheaper for
you.

You need to do every possible thing today and tomorrow to get this process done because our director has called to inform me that the
warrant of arrest has been signed against you and once it has been approved, then the arrest will be carried out, and from our
investigations we learnt that you were the person that forwarded your identity to one impostor/fraudsters in Nigeria when he had a deal with you about the transfer of some illegal funds into your bank account
which is valued at the sum of $10,500,000.00 only.

I pleaded on your behalf so that this agency could give you till 6/8/2014 so that you could get this process done because i learnt
that several e-mails has been sent to you without getting a response from you. Bear it in mind that this is the only way that i can be able
to help you at this moment or you would have to face the law and its consequences once it had befallen on you. You would make the payment
through western union money transfer with the below details.

receivers NAME:EUGENE NNEKWE
Country..Benin republic
city..cotonou
TEXT QUESTION: BETTER
ANSWER: BEST
AMOUNT: $60
Senders Full Name:
Sender Full Address:
Direct Phone Number:
MTCN:

Send the payment details to me as stated above and make sure that youdidn't hesitate making the payment down to the agency by today so that they could have the certificate endorsed, signed and stamped immediately without any further delay. After all this process has been carried out, then we would have to proceed to the bank for the
transfer of your compensation funds which is valued at the sum of $10.500,000.00 usd which was supposed to have been transferred to you
all this while.

Note: All the crimes agencies have been contacted on this regards and we shall trace and arrest you if you disregard this instructions. You
are given a grace today to make the payment for the document after which your failure to do that will attract a maximum arrest and
finally you will be appearing in court for act of terrorism, money laundering and drug trafficking charges, so be warned not to try anything funny because you are been watched.

Expecting your anticipated- Co-operation.

Yours in service,

Mr Robert S. Mueller
email..[[email protected]]
FBI DIRECTOR

You cannot win a lottery you haven't entered

Please DO NOT tell a scammer you found their details posted here
#222198 by Jack Fendly Wed Oct 08, 2014 8:52 am
From ROBERT MUELLER Wed Oct 8 08:46:36 2014
X-Apparently-To:
Return-Path: <[email protected]>
X-YahooFilteredBulk: 98.138.120.56
Received-SPF: pass (domain of yahoo.com designates 98.138.120.56 as permitted sender)
X-YMailISG:
X-Originating-IP: [98.138.120.56]
Authentication-Results: mta1501.mail.ne1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm49.bullet.mail.ne1.yahoo.com) (98.138.120.56)
by mta1501.mail.ne1.yahoo.com with SMTPS; Wed, 08 Oct 2014 08:49:30 +0000
DKIM-Signature:
DomainKey-Signature:
Received: from [127.0.0.1] by nm49.bullet.mail.ne1.yahoo.com with NNFMP; 08 Oct 2014 08:49:29 -0000
Received: from [98.138.100.117] by nm49.bullet.mail.ne1.yahoo.com with NNFMP; 08 Oct 2014 08:46:38 -0000
Received: from [106.10.166.120] by tm108.bullet.mail.ne1.yahoo.com with NNFMP; 08 Oct 2014 08:46:37 -0000
Received: from [106.10.150.25] by tm9.bullet.mail.sg3.yahoo.com with NNFMP; 08 Oct 2014 08:46:37 -0000
Received: from [127.0.0.1] by omp1026.mail.sg3.yahoo.com with NNFMP; 08 Oct 2014 08:46:37 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG:
Date: Wed, 8 Oct 2014 08:46:36 +0000 (UTC)
From: ROBERT MUELLER <[email protected]>
Reply-To: ROBERT MUELLER <[email protected]>
Message-ID: <988890868.243289.1412757996365.JavaMail.yahoo@jws10938.mail.sg3.yahoo.com>
Subject: Fbi Headquarters In Washington, D.C.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_243288_1917710435.1412757996359"
Content-Length: 14745


Anti-Terrorist and Monetary Crimes Division
Fbi Headquarters In Washington, D.C.
Federal Bureau Of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue, NW Washington, D.C. 20535-0001 Website: http://www.fbi.gov


Attention, this is the final warning you are going to receive from me do you get me?
I hope youre understand how many times this message has been sent to you?.

We have warned you so many times and you have decided to ignore our e-mails or because you believe we have not been instructed to get you arrested, and today if you fail to respond back to us with the payment then, we would first send a letter to the mayor of the city where you reside and direct them to close your bank account until you have been jailed and all your properties will be confiscated by the fbi. We would also send a letter to the company/agency that you are working for so that they could get you fired until we are through with our investigations because a suspect is not suppose to be working for the government or any private organization.

Your id which we have in our database been sent to all the crimes agencies in America for them to inset you in their website as an internet fraudsters and to warn people from having any deals with you. This would have been solved all this while if you had gotten the certificate signed, endorsed and stamped as you where instructed in the e-mail below. this is the federal bureau of investigation (fbi) am writing in response to the e-mail you sent to us and am using this medium to inform you that there is no more time left to waste because you have been given from the 3rd of January. As stated earlier to have the document endorsed, signed and stamped without failure and you must adhere to this directives to avoid you blaming yourself at last when we must have arrested and jailed you for life and all your

properties confiscated.

You failed to comply with our directives and that was the reason why we didn't hear from you on the 3rd as our director has already been notified about you get the process completed yesterday and right now the warrant of arrest has been signed against you and it will be carried out in the next 48hours as strictly signed by the fbi director. We have investigated and found out that you didn't have any idea when the fraudulent deal was committed with your information's/identity and right now if you id is placed on our website as a wanted person, i believe you know that it will be a shame to you and your entire family because after then it will be announce in all the local channels that you are wanted by the fbi.

As a good Christian and a honest man, I decided to see how i could be of help to you because i would not be happy to see you end up in jail and all your properties confiscated all because your information's was used to carry out a fraudulent transactions, i called the efcc and they directed me to a private attorney who could help you get the process done and he stated that he will endorse, sign and stamp the document at the sum of $298.00 usd only and i believe this process is cheaper for you.

You need to do everything possible within today and tomorrow to get this process done because our director has called to inform me that the warrant of arrest has been signed against you and once it has been approved, then the arrest will be carried out, and from our investigations we learnt that you were the person that forwarded your identity to one impostor/fraudsters in Nigeria when he had a deal with you about the transfer of some illegal funds into your bank account which is valued at the

sum of $20.500,000.00 usd.

I pleaded on your behalf so that this agency could give you till, so that you could get this process done because i learnt that you were sent several e-mail without getting a response from you, please bear it in mind that this is the only way that i can be able to help you at this moment or you would have to face the law and its consequences once it has befall on you.

You would make the payment through western union money transfer with the below details.

Receivers Name: MR.MIKE EZE
Location: Lagos Nigeria
Question:For
Answer: Now
Amount $298
Senders:
Mtcn:

Send the payment details to me which are senders name and address, mtcn number, text question and answer used and the amount sent. Make sure that you didn't hesitate making the payment down to the agency by today so that they could have the certificate endorsed, signed and stamped immediately without any further delay. After all this process has been carried out, then we would have to proceed to the bank for the transfer of your compensation funds which is valued at the sum of $20.500,000.00

usd which was suppose to have been transferred to you all this while.

Note/ all the crimes agencies have been contacted on this regards and we shall trace and arrest you if you disregard this instructions. You are given a grace today to make the payment for the document after which your failure to do that will attract a maximum arrest and finally you will be appearing in court for act of terrorism,

money laundering and drug trafficking charges, so be warned not to try any thing funny because you are been watched.


THANKS FOR YOUR CO-OPERATION.
ROBERT MUELLER
WASHINGTON DC

Anti-Terrorist and Monetary Crimes Division
Fbi Headquarters In Washington, D.C.
Federal Bureau Of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue, NW Washington, D.C. 20535-0001 Website: http://www.fbi.gov

You cannot win a lottery you haven't entered

Please DO NOT tell a scammer you found their details posted here
#222355 by Jack Fendly Thu Oct 09, 2014 8:35 am
From MR John Francis Wed Oct 8 13:54:14 2014
X-Apparently-To:
Return-Path: <[email protected]>
X-YahooFilteredBulk: 67.195.87.168
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG:
X-Originating-IP: [67.195.87.168]
Authentication-Results: mta1360.mail.gq1.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm45-vm10.bullet.mail.gq1.yahoo.com) (67.195.87.168)
by mta1360.mail.gq1.yahoo.com with SMTPS; Wed, 08 Oct 2014 13:57:00 +0000
DKIM-Signature:
DomainKey-Signature:
Received: from [127.0.0.1] by nm45.bullet.mail.gq1.yahoo.com with NNFMP; 08 Oct 2014 13:56:58 -0000
Received: from [216.39.60.180] by nm45.bullet.mail.gq1.yahoo.com with NNFMP; 08 Oct 2014 13:54:15 -0000
Received: from [212.82.98.127] by tm16.bullet.mail.gq1.yahoo.com with NNFMP; 08 Oct 2014 13:54:15 -0000
Received: from [212.82.98.84] by tm20.bullet.mail.ir2.yahoo.com with NNFMP; 08 Oct 2014 13:54:15 -0000
Received: from [127.0.0.1] by omp1021.mail.ir2.yahoo.com with NNFMP; 08 Oct 2014 13:54:15 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG:
Date: Wed, 8 Oct 2014 13:54:14 +0000 (UTC)
From: MR John Francis <[email protected]>
Reply-To: MR John Francis <[email protected]>
Message-ID: <2080123871.305996.1412776454405.JavaMail.yahoo@jws11158.mail.ir2.yahoo.com>
Subject: ATTENTION
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_305995_182797051.1412776454398"
Content-Length: 6856

ATTENTION,

We have been watching every single transaction you made since last year until this 2014 and you have to know that we are also working to make sure your funds which are suppose to be delivered to you and also bear in mind that what ever you emailing us will be forward to the court Also we are hereby to notified by the federal bureau of investigation Cotonou department of the insult you imposed on them by failing to comply by their requirements.


Your full residential address has been forwarded to us for your immediate arrest to face your charge but I deemed it fit to give you one more chance to save yourself from this mess.We have been told that you have failed to dance by the rule of the FBI which will warrant 2 years jail sentence. Now I John Francis Pikus the special agent in charge of the FBI Albany department I am giving you 24 working hours to effect the payment of the $97.00 usd. To the FBI in republic of Benin (FBI security ) with the information written below:

Receiver: EKENE ONYEAKAH
Country: Benin Republic
City: Cotonou
Test: good
Answer: good
Amount: $97.dollars
MTCN Number .........

You have to try as much as you can and make this payment so that your funds will be delivered immediately to your destination.You have to stop every transaction you are communicating with other organization to avoid delay on the processing of your funds.

Note that you??if you fail to stick with my advice or any delay will lead to us coming directly to your home address at any time,so try and dance by the rule and get back to me with good understanding ASAP.
Special Agent in Charge;

MR John Francis Pikus Direct line +229=6865=6258
E-Mail=([email protected])

You cannot win a lottery you haven't entered

Please DO NOT tell a scammer you found their details posted here
#229139 by Faizan Docherty Mon Dec 01, 2014 4:32 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 190.41.235.179
Originating ISP: Telefonica Del Peru
City: Lima
Country of Origin: Peru
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.145.137 with SMTP id t131csp146527lfd;
Sun, 30 Nov 2014 05:01:01 -0800 (PST)
X-Received: by 10.68.135.100 with SMTP id pr4mr89222888pbb.123.1417352460234;
Sun, 30 Nov 2014 05:01:00 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.ec3s.com ([123.103.16.231])
by mx.google.com with ESMTP id z4si3838702pde.93.2014.11.30.05.00.54
for <multiple recipients>;
Sun, 30 Nov 2014 05:01:00 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 123.103.16.231 as permitted sender) client-ip=123.103.16.231;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 123.103.16.231 as permitted sender) [email protected];
dkim=pass [email protected]
Message-Id: <547b150c.0416460a.443d.ffffe4e2SMTPIN_ADDED_MISSING@mx.google.com>
Received: from localhost (localhost [127.0.0.1])
by oldmail.ec3s.com (Postfix) with ESMTP id E18CF1CA5C2;
Sun, 30 Nov 2014 20:58:52 +0800 (CST)
X-Virus-Scanned: amavisd-new at ec3s.com
Received: from mail.ec3s.com ([127.0.0.1])
by localhost (mail.ec3s.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 8eev0JcSrBsX; Sun, 30 Nov 2014 20:58:50 +0800 (CST)
Received: from User (unknown [190.41.235.179])
by oldmail.ec3s.com (Postfix) with ESMTPA id 92FAA1CA4CF;
Sun, 30 Nov 2014 20:58:28 +0800 (CST)
X-DKIM: Sendmail DKIM Filter v2.8.3 oldmail.ec3s.com 92FAA1CA4CF
DKIM-Signature: <snipped>
Reply-To: <[email protected]>
From: "F. B. I."<[email protected]>
Subject: RE: URGENT,Please Respondsatp.org
Date: Sun, 30 Nov 2014 07:58:50 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000


FBI Headquarters in Washington, D.C.
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C. 20535-0001



REF: US/28028/8A28/11

ATTN: RECIPIENT

This is to officially inform you that it has come to our notice and we have thoroughly completed an investigation with the help of our Intelligence Monitoring Network System that you legally won the sum of $800,000.00 USD. from a Lottery Company outside the United States of America. During our investigation we discovered that your e-mail won the money from an Online Balloting System and we have authorized this winning to be paid to you via a Certified Cashier's Check.

Normally, it will take up to 10 business days for an International Check to be cashed by your local banks. We have successfully notified this company on your behalf that funds are to be drawn from a registered bank within the United States of America so as to enable you cash the check instantly without any delay, henceforth the stated amount of $800,000.00 USD. has been deposited with Bank Of America.

We have completed this investigation and you are hereby approved to receive the winning prize as we have verified the entire transaction to be Safe and 100% risk free, due to the fact that the funds have been deposited at Bank Of America you will be required to settle the following bills directly to the Lottery Agent in-charge of this transaction whom is located in London Uk,. According to our discoveries, you were required to pay for the following -
Deposit Fee's (Fee's paid by the company for the deposit into an American Bank which is - Bank of America)
Cashier's Check Conversion Fee (Fee for converting the Wire Transfer payment into a Certified Cashier's Check)

The total amount for everything is $420.00 (Four Hundred and twenty USD.) We have tried our possible best to indicate that this $420.00 should be deducted from your winning prize but we found out that the funds have already been deposited at Bank Of America and cannot be accessed by anyone except the legal owner (you), the winner; therefore you will be required to pay the required fee's to the Agent in-charge of this transaction via Western Union Money Transfer Or Money Gram.

In order to proceed with this transaction, you will be required to contact the agent in-charge (PAUL STANLEY) via e-mail. Kindly look below to find appropriate contact information:

CONTACT AGENT NAME: PAUL STANLEY
E-MAIL ADDRESS: [email protected]
You will be required to e-mail him with the following information:
FULL NAME:
ADDRESS:
CITY:
STATE:
ZIP CODE:
DIRECT CONTACT NUMBER:
You will also be required to request Western Union details on how to send the required $420.00 in order to immediately ship your prize of $800,000.00 USD via Certified Cashier's Check drawn from Bank of America, and also include the following Fund Reference Identification : EA2948-910.

This letter will serve as proof that the Federal Bureau Of Investigation is authorizing you to pay the required $420.00 ONLY to AGENT PAUL STANLEY via information in which he shall send to you, if you do not receive your winning prize of $800,000.00 we shall be held responsible for the loss and this shall invite a penalty of $3,000 which will be made PAYABLE ONLY to you (The Winner).
Please find below an authorized signature which has been signed by the
James B.Comey
FBI Public Affairs Director

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#229469 by Faizan Docherty Thu Dec 04, 2014 12:45 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 190.41.235.179
Originating ISP: Telefonica Del Peru
City: Lima
Country of Origin: Peru
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.145.137 with SMTP id t131csp653473lfd;
Wed, 3 Dec 2014 10:54:07 -0800 (PST)
X-Received: by 10.70.109.174 with SMTP id ht14mr11707195pdb.74.1417632846417;
Wed, 03 Dec 2014 10:54:06 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.ec3s.com ([123.103.16.231])
by mx.google.com with ESMTP id qf1si4097851pab.192.2014.12.03.10.54.04
for <multiple recipients>;
Wed, 03 Dec 2014 10:54:06 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 123.103.16.231 as permitted sender) client-ip=123.103.16.231;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 123.103.16.231 as permitted sender) [email protected];
dkim=pass [email protected]
Message-Id: <547f5c4e.2189420a.74de.ffffeb24SMTPIN_ADDED_MISSING@mx.google.com>
Received: from localhost (localhost [127.0.0.1])
by oldmail.ec3s.com (Postfix) with ESMTP id BDBCD1E3C35;
Wed, 3 Dec 2014 23:53:19 +0800 (CST)
X-Virus-Scanned: amavisd-new at ec3s.com
Received: from mail.ec3s.com ([127.0.0.1])
by localhost (mail.ec3s.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id FlHQSUq_rFOe; Wed, 3 Dec 2014 23:53:17 +0800 (CST)
Received: from User (unknown [190.41.235.179])
by oldmail.ec3s.com (Postfix) with ESMTPA id E13E71E527B;
Wed, 3 Dec 2014 23:52:42 +0800 (CST)
X-DKIM: Sendmail DKIM Filter v2.8.3 oldmail.ec3s.com E13E71E527B
DKIM-Signature: <snipped>
Reply-To: <[email protected]>
From: "jamesb.comey"<[email protected]>
Subject: RE: URGENT,Please Respond
Date: Wed, 3 Dec 2014 10:53:08 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000


FBI Headquarters in Washington, D.C.
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C. 20535-0001



REF: US/28028/8A28/11

ATTN: RECIPIENT

This is to officially inform you that it has come to our notice and we have thoroughly completed an investigation with the help of our Intelligence Monitoring Network System that you legally won the sum of $800,000.00 USD. from a Lottery Company outside the United States of America. During our investigation we discovered that your e-mail won the money from an Online Balloting System and we have authorized this winning to be paid to you via a Certified Cashier's Check.

Normally, it will take up to 10 business days for an International Check to be cashed by your local banks. We have successfully notified this company on your behalf that funds are to be drawn from a registered bank within the United States of America so as to enable you cash the check instantly without any delay, henceforth the stated amount of $800,000.00 USD. has been deposited with Bank Of America.

We have completed this investigation and you are hereby approved to receive the winning prize as we have verified the entire transaction to be Safe and 100% risk free, due to the fact that the funds have been deposited at Bank Of America you will be required to settle the following bills directly to the Lottery Agent in-charge of this transaction whom is located in London Uk,. According to our discoveries, you were required to pay for the following -
Deposit Fee's (Fee's paid by the company for the deposit into an American Bank which is - Bank of America)
Cashier's Check Conversion Fee (Fee for converting the Wire Transfer payment into a Certified Cashier's Check)

The total amount for everything is $420.00 (Four Hundred and twenty USD.) We have tried our possible best to indicate that this $420.00 should be deducted from your winning prize but we found out that the funds have already been deposited at Bank Of America and cannot be accessed by anyone except the legal owner (you), the winner; therefore you will be required to pay the required fee's to the Agent in-charge of this transaction via Western Union Money Transfer Or Money Gram.

In order to proceed with this transaction, you will be required to contact the agent in-charge (PAUL STANLEY) via e-mail. Kindly look below to find appropriate contact information:

CONTACT AGENT NAME: PAUL STANLEY
E-MAIL ADDRESS: [email protected]
You will be required to e-mail him with the following information:
FULL NAME:
ADDRESS:
CITY:
STATE:
ZIP CODE:
DIRECT CONTACT NUMBER:
You will also be required to request Western Union details on how to send the required $420.00 in order to immediately ship your prize of $800,000.00 USD via Certified Cashier's Check drawn from Bank of America, and also include the following Fund Reference Identification : EA2948-910.

This letter will serve as proof that the Federal Bureau Of Investigation is authorizing you to pay the required $420.00 ONLY to AGENT PAUL STANLEY via information in which he shall send to you, if you do not receive your winning prize of $800,000.00 we shall be held responsible for the loss and this shall invite a penalty of $3,000 which will be made PAYABLE ONLY to you (The Winner).
Please find below an authorized signature which has been signed by the
James B.Comey
FBI Public Affairs Director

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#229724 by Faizan Docherty Fri Dec 05, 2014 9:29 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 217.12.8.244
Originating ISP: Yahoo! Europe
City: n/a
Country of Origin: United Kingdom
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.145.137 with SMTP id t131csp267813lfd;
Fri, 5 Dec 2014 17:01:11 -0800 (PST)
X-Received: by 10.194.80.193 with SMTP id t1mr14193942wjx.8.1417827671760;
Fri, 05 Dec 2014 17:01:11 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm4-vm4.bullet.mail.ir2.yahoo.com (nm4-vm4.bullet.mail.ir2.yahoo.com. [212.82.96.102])
by mx.google.com with ESMTPS id dr1si47592wib.48.2014.12.05.17.01.09
for <snipped>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Fri, 05 Dec 2014 17:01:11 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=212.82.96.102;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.pt
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>;
Received: from [212.82.98.51] by nm4.bullet.mail.ir2.yahoo.com with NNFMP; 06 Dec 2014 01:00:58 -0000
Received: from [212.82.98.110] by tm4.bullet.mail.ir2.yahoo.com with NNFMP; 06 Dec 2014 01:00:58 -0000
Received: from [127.0.0.1] by omp1047.mail.ir2.yahoo.com with NNFMP; 06 Dec 2014 01:00:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: by 217.12.8.244; Sat, 06 Dec 2014 01:00:57 +0000
Date: Sat, 6 Dec 2014 01:00:57 +0000 (UTC)
From: David Jackson <[email protected]>
Reply-To: David Jackson <[email protected]>
Message-ID: <1032974149.6253648.1417827657046.JavaMail.yahoo@jws11138.mail.ir2.yahoo.com>
Subject: Dear Beneficiary
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_6253647_1799438743.1417827657043"
Content-Length: 3474


To. Beneficiary.


This is Agent David Jackson and we are here in Nigeria as an FBI/UNITED NATION delegate that have been delegated to investigate these fraudsters who are in the business of swindling Foreigners that
came for transaction in Nigeria .

Please be informed that during our investigation,we found out that there is a total sum amount of money $12.5million that has been assigned in your name as the beneficiary and these fraudsters are busy
swindling you without any hope of receiving your fund.

These are the works of the fraud stars who needed to extort money from you in the name of this transfer.We have to inform you that we have made some arrested in respect of this delayed over due fund. I have a very limited time to stay in Nigeria here so I advise you urgently respond to this message .

These criminals will be caught unaware and we don't want them to know this new development to avoid jeopardizing our investigation,you need to conceal anything that has to do with this exercise to enable us get
all the necessary information we required.I shall be expecting your swift response as soon as you receive this email.With the following informations

(1) Your full name.
(2) Phone, fax and mobile #.
3) Home address/ Country
4) Profession, age and marital status.

Best Regard,
AGENT DAVID JACKSON
FEDERAL BUREAU OF INVESTIGATION VISIT IN NIGERIA

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#230313 by Faizan Docherty Thu Dec 11, 2014 3:33 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 60.38.167.87
Originating ISP: Open Computer Network
City: n/a
Country of Origin: Japan
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.145.137 with SMTP id t131csp685298lfd;
Tue, 9 Dec 2014 05:19:36 -0800 (PST)
X-Received: by 10.66.65.168 with SMTP id y8mr5552519pas.48.1418131175222;
Tue, 09 Dec 2014 05:19:35 -0800 (PST)
Return-Path: <[email protected]>
Received: from msgw009-01.ocn.ad.jp (msgw009-01.ocn.ad.jp. [180.37.203.198])
by mx.google.com with ESMTP id dw1si1726425pab.181.2014.12.09.05.19.34
for <snipped>;
Tue, 09 Dec 2014 05:19:35 -0800 (PST)
Received-SPF: neutral (google.com: 180.37.203.198 is neither permitted nor denied by domain of [email protected]) client-ip=180.37.203.198;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 180.37.203.198 is neither permitted nor denied by domain of [email protected]) [email protected]
Received: from User (p7087-ipbfp801gifu.gifu.ocn.ne.jp [60.38.167.87])
by msgw009-01.ocn.ad.jp (Postfix) with SMTP id A276984BDB4;
Tue, 9 Dec 2014 22:19:18 +0900 (JST)
Reply-To: <[email protected]>
From: "Federal Bureau of Investigation"<[email protected]>
Subject: FBI FUNDS NOTICE!!!
Date: Tue, 9 Dec 2014 09:23:03 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;


This is to notify you that US$10.5 Million have been transferred into an account in your name as the beneiciary of funds.

This funds was transferred without proper documentation to show it is not related to terrorist or money laundering activities.
The Federal Bureau of Investigation(FBI) advice that you obtain the proper DIST(diplomatic Immunity Seal of Transfer/Antiterrorist Certficate) transfer release document which should release and effect the funds valued at $10,500,000.00 to you.

You are expected to have the CLEARANCE DOCUMENT obtainable at a fee of USD Three Hundred and Fifty ($350). Only then shall we release your FUND as clean money devoid of any illegality, and you will be free of any involvement. To this end, the funds will be legally credited into any account of your choice with immediate effect.

Get back to us, so we can direct you on how to obtain the transfer release document.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: Clive Wire and 87 guests