Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#337174 by buried under 419s Sat Aug 19, 2017 11:01 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id sh2JCEfYl1miJwAAjbubUg
for <>; Fri, 18 Aug 2017 23:18:47 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 18 Aug 2017 23:18:47 -0700
Received: from gw02.mail.saunalahti.fi ([195.197.172.116]:60338)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dix5p-0002dK-8C
for ; Fri, 18 Aug 2017 23:18:46 -0700
Received: from cfwo-21-2.mail.saunalahti.fi (cfwo-21.mail.saunalahti.fi [62.142.5.103])
by gw02.mail.saunalahti.fi (Postfix) with ESMTP id 93B0B40105
for <>; Sat, 19 Aug 2017 09:18:01 +0300 (EEST)
Received: from localhost (localhost [127.0.0.1])
by cfwo-21-2.mail.saunalahti.fi (Postfix) with ESMTP id 56C9D20084
for <>; Sat, 19 Aug 2017 09:18:01 +0300 (EEST)
X-Spam-Checker-Version: SpamAssassin 3.3.2-saunamods_5.22 (2011-06-06) on
cfwo-21.mail.saunalahti.fi
X-Spam-Level: **
Received: from webmail.elisa.fi (wm-web16.pa.saunalahti.fi [195.197.1.109])
by cfwo-21-2.mail.saunalahti.fi (Postfix) with ESMTP id 815B220074;
Sat, 19 Aug 2017 09:17:48 +0300 (EEST)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_a37e663d18c2fedcfd710a34ba0d4766"
Date: Sat, 19 Aug 2017 09:17:48 +0300
From: Payment Confirmation Office <[email protected]>
To: undisclosed-recipients:;
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Elisa Webmail/1.0
X-Originating-IP: 169.159.82.224
X-Spam-Status: Yes, score=7.4
X-Spam-Score: 74
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: U.S. Department of the Treasury 1500 Pennsylvania Avenue,
NW Washington,DC 20220 Tel No: +1 (202) 241-2357 Email : [email protected]
Attn : Beneficiary This is to bring to your notice that the US Department
of the Treasury in affiliation with the Office of Foreign Assets Control
("OFAC") has been authorised in our Compensation Programs to compensate 3,000
scam victims who has being a victim of internet/Facebook scam here in United
States.The US Department of the Treasury has decided to pay you $350,000.00
USD(Three Hundred and Fifty Thousand United States Dollars) each in order
to restore the global economy to the enviable standard of respectability.
as a verified scammed kindly contact us for the release of your $350,000.00
USD compensation fund to you as approved . [...]

Content analysis details: (7.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[195.197.172.116 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[195.197.172.116 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 LOTTO_DEPT Claims Department
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Payment Approved


U.S. Department of the Treasury
1500 Pennsylvania Avenue,
NW Washington,DC 20220
Tel No: +1 (202) 241-2357
Email : [email protected]

Attn : Beneficiary

This is to bring to your notice that the US Department of the Treasury
in affiliation with the Office of Foreign Assets Control ("OFAC") has
been authorised in our Compensation Programs to compensate 3,000 scam
victims who has being a victim of internet/Facebook scam here in United
States.The US Department of the Treasury has decided to pay you
$350,000.00 USD(Three Hundred and Fifty Thousand United States Dollars)
each in order to restore the global economy to the enviable standard of
respectability. as a verified scammed kindly contact us for the release
of your $350,000.00 USD compensation fund to you as approved .


Your particulars was mentioned by one of the syndicates who was arrested
as one of the victims of their operations.You are hereby warned not to
communicate or duplicate this message to him or her for any reason
whatsoever as the US SECRET SERVICE is already on trace of the other
criminal gang who specialises in love/dating/facebook scam,these
information should remain confidential till they are all
apprehended,other victims who have not been contacted can submit their
application as well for scrutiny and possible consideration.

You should contact this office directly by replying to this email for
the release of your $350,000.00 USD compensation fund, as the director
of Compensation Payment Department Office of Financial Research
(OFR).You are also advised to provide me with the under listed
information for verification:

You are advised to provide us with the under listed information for
verification:

(1). Full Names
(2). Home Address
(3). Nationality:
(4). Age
(5). Sex
(6). Occupation
(7). Phone Number.
(8). Amount you lost

Waiting to hear from you soon.

Thanks,

Mr. Steven Terner Mnuchin

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google Adsense [Bot] and 69 guests