Fake Checks. Williams Brown, [email protected]

DULWICH PICTURE GALLERY LTD
Gallery Road, Dulwich Village,
London SE21 7AD
RC: 122132
Switchboard: 020 8693 5254
Fax: 020 8299 8700



Hi, my name is Mr. Williams Brown, an Artist and also the Managing director of
DULWICH PICTURE GALLERY LTD and I live and work here in United Kingdom, Would
you like to work online from home and get paid without affecting your present job?
Actually I need a representative who can be working for our company as online
book-keeper. We make lots of supplies to some of our clients in the USA/CANADA,
AUSTRALIA, EURO, and ASIAN for which I do travel to receive payment and have it
cash after I supply them raw materials.

It's always too expensive and stressful for me to come down and receive such
payment twice in a month so I therefore decided to contact you. I am willing to
pay you 10% for every payment receives by you from our clients who make payment
through you.

Please note you don't to be a book keeper to apply for the job...
Kindly get back to me as soon as possible if you are interested in this Job offer:

- Name:
- Mail address: (NOT P.O.BOX)
- City
- State
- Zip code
- Phone Number
- Email
- Age
- Nationality
- Do you have a checking account?
- Are you self employed
- Most convenient mode of contact ? Email / Phone

Mr. Williams Brown


Email header details;

From Mr. Williams Brown Sun Mar 27 14:37:35 2011
X-Apparently-To: *removed* via 98.138.85.182; Sun, 27 Mar 2011 07:37:46 -0700
Return-Path: <[email protected]>
Received-SPF: neutral (mta1015.mail.re4.yahoo.com: domain of [email protected] is neutral about designating 209.44.108.250 as permitted sender) ZCwgRHVsd2ljaCBWaWxsYWdlLApMb25kb24gU0UyMSA3QUQKUkM6IDEyMjEz MgpTd2l0Y2hib2FyZDogMDIwIDg2OTMgNTI1NApGYXg6IDAyMCA4Mjk5IDg3 MDAKCkhpLCBteSBuYW1lIGlzIE1yLiBXaWxsaWFtcyBCcm93biwgYW4gQXJ0 aXN0IGFuZCBhbHNvIHRoZSBNYW5hZ2luZyBkaXJlY3RvciBvZgpEVUxXSUNI IFBJQ1RVUkUgR0FMTEVSWSBMVEQgYW5kIEkgbGl2ZSBhbmQBMAEBAQE-
X-YMailISG: cHa3eWYcZAo.5JE5OljYwPRaMdb2EuUHXliqip3xPVgtO5pq xmzFYWP7Xz7vVjbZzPvahnpjlk8TfrICNr9smnfADF19rzBiSUqI2nq3_bw9 zotA1GG8fL9feJHFnmnyf2y_9JfW7EUDZBMtREcgpscu2x6pxR4EQ95VmAKM 4fQP1buTX73JYwgFMJ6_gHbHWEsLkinxGt_hK.FxJ6CARkrXPj_GRM.AoHGe 5KoRk594BG.d5jZHha2KQG8eUUvj6IwaGt6OOyo9.aHt.6re4t7zNjBKYwy3 YwT2z2d7zjYN5lurQAg0DPrvMfw.C_Z1LIzXk813S0qp9Fces3SKYzG6YdcS F4ZUO32FAEqmyzMEme.q95Z84s65jpzBEQYu1PevAsOiMRcasIXTEUuDqcS7 IfzYeKXszVjWcmYPGnT6I3q9q0SVFxtX0cjw_zjK7ifY22xcrlCdz.wO311c g7CVga_IGZLTX9WWKjFg6vWzucduxypRZsc7WFr7qJpMP5SuhQk8GdR85SV_ .t7f5a1T0T3iRMhhhoAL7_386I11IngOaRqX.lGImJ3lXHRFCMFeTbowq0Nb KXp2zeUhEjz7Th0WlQBc9F1RaNGGDn0m7uTndJGMo1zSLbGGGJR5ANQ9NOsE rKAS_.2ry0hJ520JIpGm9uXRZjZOgR8oWG4P35cb1H8jnMN9lTFZ38AJYZ96 iO5cvnXiQ9gGUavj6nwuuCfORB9HKDopGUfiKOlKSbe5rHPzROs189O7d5Dh LH4QPYrZPgCZKRz7Bq3zamfusAizxXari.n0O8qOyz4KS4X0XR9QSMKFEJ_l _AJ8Q9.wXnb_s107UUd6_r7c8JHo49fMsg63a6DHFCmYY0s_rCLjQ_PY2WAl 8a2VwLnc_flrXQm6LHJIVJwo.wLQ1yYR7eGWqvqVfz.qB0VPAPbA9eYq9qCB _XwIVCXD9qPP0tXO6mEphbdeY7XALIeGXmsyOgD3lCA7sw7K59XfJRQCoRq8 KLueCqDJsTFi1XT7LxSgBwYt4_si.sAU6aqHt0h7l9OLI3QAWQn2KmgXzrKn tVfxlP332bPFLPrkJKKdap5iVSmDBtzREZB6u5KcPHe9sQDYN0qZ5yohAsi9 s9lcd.0.B7EHeADZamtpX14N7Qd.gRTJHm_xnVuBtUYghnDmu_n95tmP4p8A b2IMd6za83J0EEVDHb3AGWfo2C21U7gfnEC3BrWQ5jAm0dvmkAJ2kT_AdYSP 2JVhzg419u7P96kZRlSbO8tjzPkxL55GUyG6FvpcMwBmbspWh8XaGY.IxXr8 .RDF3yCAEoAYRK7nzHiqktVE8dg7BZRMJT_m0bQXED7h6dcH7p46p3P_AvtZ 90a.PqBDXrQi1St_ZXADf8Fsxi_eoeLwkMxXjoslmU49ZW5hhAtf7Afczotn nBng4TyYS6w5CiqUOZyQHBqmBeTgKiAV3z45HzXVTeStoDb6cgqSInYoU_VH 2iW8R_JIH4gONERNnj30KvkL_m0qmpT0W.AWgXxwX8s9G6iS97.43l2n.6rp 1zdB2ZyIv6akfnS6G8bCxEl.ZRet9kDxp3h9LDLLWQPaRImDwjJMUlKEFimD fDANxZUoR87zKxJ5DBJXtpbylpiCMoS52F45tQwaflwvP08ba7K2Wmjih3F4 JrD4.CtjbBoRER3GnVC1JBD7Hr14VOlBVbDpnpfWKmUmZ6o4eiFClhkdvz5c 6xOTHEMjq4gr7jWHZVKsQ7Qn63v8jD_j2HiqCFpGPAWVfl8yfh8IpZie1HMn zx8kH2_g66A03zuP7C5RHw0oMKvxOkqNO.9bS2CnvWEYsj5PvOzzLSh2bf.X HyBFc_bD_IFMRHSMuYMjsZhlCmQkDKcWKn1pc7bnUshyNTarYdh7j2F1S0QS xabCcR56Ff1RANvRFMZ8V2bVxlkEK2mi1s0zega2yMIgBPF86a9ZqIRGXGBa QmpBDAEJPGLtB.wdL2VFVpJmVccdtr3Ime_aAMvm_7Cjx3JlQIlyMgbGxQvG D26SWltzEqe8juwQLLHnWQawEXK25H8sRn9zPZUJ3BEsISjuzrlwEQh9S4XD daL36KeK_Qh8tWZPlnjE_KalhfPbe_lz6c32C3LURuAgAKA8VGdu8OJIdgtZ Yw.Hk.4BCefUo8vVA8cwyI4U37b7wlCED_2AFlPyOzGmfk83E9umtL37gKZt 5Deh_Ro8rpxiSgxwEE2eI_LFdlw7AlnuW6zR3kr69yOnYnWFDoH6HUqmSn7W pEn4jCiJGHImZK9V2a0shgYETylxzbtTgV9gp0W91B29Rlegw4XZoaomD6Yr zG2t_M7YpCNWJ7Y0M0fr4Zl_jSXJP025crnsaXell64buvofDEiab0yPVLlw VQIzXLMBhPkdPxAO_ovtSEvlBYKdeOTBAc1EAYd_zGmI5.zOMbXaWU6f76LP 1jspo_oCyM8zQPgGNROmFE9jEny1gpWwNRRBpz0y93Pyuk5K4ro-
X-Originating-IP: [209.44.108.250]
Authentication-Results: mta1015.mail.re4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mx3.r4l.com) (209.44.108.250) by mta1015.mail.re4.yahoo.com with SMTP; Sun, 27 Mar 2011 07:37:36 -0700
Received: by mx3.r4l.com (Postfix, from userid 0) id 8E06B5C85A7; Sun, 27 Mar 2011 10:37:35 -0400 (EDT)
To: "."@localhost
Subject: RE: DULWICH PICTURE GALLERY.
Message-ID: <[email protected]>
Date: Sun, 27 Mar 2011 10:37:35 -0400 (EDT)
From: "Mr. Williams Brown" <[email protected]>
Add sender to Contacts
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
User-Agent: IMP/PHP IMAP webmail program 2.2.3
Content-Length: 1292

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 15 Mar 2017 13:43:28 -0700
Received: from owa.portraithomes.ca ([184.69.159.138]:63085 helo=mail.com)
by with smtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1coFlX-0004yf-3j
for ; Wed, 15 Mar 2017 13:43:28 -0700
Reply-To: <[email protected]>
From: "Chris Bell" <[email protected]>
Date: Wed, 15 Mar 2017 13:43:26 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=29.0
X-Spam-Score: 290
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: HAVE YOU RECEIVE YOUR FUND Have you receive your pending fund
of 4.5 million dollars from the Bank If not content the information below
in order for them to reconfirm your information and proceed with sending
your fund. [...]

Content analysis details: (29.0 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(williambrown199000[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=mail.com;ip=;r=
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[184.69.159.138 listed in zen.spamhaus.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.4 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
2.5 DOS_OE_TO_MX Delivered direct to MX with OE headers
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** HAVE YOU RECEIVE YOUR FUND


HAVE YOU RECEIVE YOUR FUND







Have you receive your pending fund of 4.5 million dollars from the Bank If not
content the information below in order for them to reconfirm your information and
proceed with sending your fund.





JP MORGAN CHASE BANK



EMAIL; [email protected]



MANAGER; William Brown





also make sure you reconfirm your information to the bank to avoid any mistake



Full name .........



Home address .......



Country ............



Telephone number ...



State .............



Occupation ........







Contact the Bank as fast as this mail get to you .To avoid any delay of your payment.





I have receive my fund of $4.5 million a week ago and the only money i paid after i
met William Brown was just $200 for the Endorsement Fee, take note of that.





The bank is waiting for you with imediate respond as the UNITED NATION DEVELOPMENT
ORGANIZATION has urged us to make sure you recieve your funds and our GOVERNMENT can
not bear any more pressure from them





Thanks



Chris Bell

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 19 May 2017 21:20:53 -0700
Received: from owa.portraithomes.ca ([184.69.159.138]:50596 helo=mail.com)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dBvsp-0003lW-TL
for ; Fri, 19 May 2017 21:20:52 -0700
Reply-To: <[email protected]>
From: "Admin Chairman" <[email protected]>
Date: Fri, 19 May 2017 21:20:49 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=33.8
X-Spam-Score: 338
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: International Reconciliation and Logistics Vault International
Monetary Fund (IMF) COMPENSATION SETTLEMENT OF ESCROW ACCOUNTS. [...]

Content analysis details: (33.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[184.69.159.138 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?184.69.159.138>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(williambrown199000[at]gmail.com)
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=mail.com;ip=]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[184.69.159.138 listed in zen.spamhaus.org]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.4 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
2.5 DOS_OE_TO_MX Delivered direct to MX with OE headers
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** COMPENSATION SETTLEMENT OF ESCROW ACCOUNTS(IMF)...(ATM-7750)


International Reconciliation and Logistics Vault

International Monetary Fund (IMF)

COMPENSATION SETTLEMENT OF ESCROW ACCOUNTS.



It is a pleasure to write you that we have reconciled with our logistic department
on the reimbursement of some fund spent by you during the cause of your inadequate
dealings with some imposters who claim to be staff in banks and other regional
payment centers. Our reconciliation teams with the prospectus instrument of the
United Nations after freezing suspected impostors account.



This support was fully effective with the help of World Bank after a summit meeting
in London, on the financial analysis on financial stability issues fluctuating their
economy with the international global standard.



After gathering of this sum, our logistic department gave us a list of customers to
be paid who fell victims to those Imposters to unawareness. And mode of payment was
as well specified for proper conducts and financial regulations to kick against
criminality during process of payment. We have arranged your payment through our
swift card centers, which is the latest instruction from International Monetary Fund
Reconciliation Office.



The card center will send you an ATM Debit card with cash equivalent of $5.5 Million
USD which you will use to withdraw your money in any ATM Center, Banks and Union Pay
Credit outlets in the world, You are hereby selected as an honor for this payment
approval, which you are to acknowledge the receipt of this mail in returning the
required below to the Logistic Department by email listed below.



Office of Reconciliation and Logistics Vaults,

International Monetary Fund (IMF),

Contact Manager: Mr. William Brown

Email: [email protected]

Phone Number: +1 (690) 234-2945



1. Full Name:

2. Phone and Fax Number:

3. Your age and Current Occupation:

4. Delivery Address:



For your information, you have to stop any further communication with any other
person (s) or office (s) to avoid any hitches in receiving your payment. Because of
Impostors, we hereby issued you our code of conduct, which is (ATM-7750) so you have
to indicate this code when contacting the Card Center by using it as your subject.



Kindly be informed that recipients shall be liable to all cost arising for the
delivery of the donation parcel. This is due to Legal law protecting all donation
funds misappropriation.



Yours in Service,



Mr. Robert Ferguso

Admin Chairman

International Reconciliation and Logistics Vaults

International Monetary Fund (IMF)