Mr Allen Ibrahim - [email protected]

Initial Sender: [email protected]
Follow up Emails from: [email protected]
Subject: "DO CONTACT ME FOR MORE DETAILS"
Gmail already flags it as a scam
See subsequent posts in this thread for the later emails sent, more details, and headers.
Initial Email:

Offers a huge sum if you fill out your bank details, pay fees, etc
***

Hello Dear Friend,

I am Mr Allen Ibrahim, a staff in African Development Bank (A.D.B)Ouagadougou, Burkina faso West Africa. I Hoped that you will not expose or betray this trust and confident that i am about to extablish with you forthe mutual benefit of you and i.

I need your urgent assistance in transferring the sum of $15.2 )millionusd into your bank account within 7 banking days. This money has been dormant for years in our Bank without claim.if you can assist and capable of assisting please i need your urgent response to enable me provide your with the details.note that you will have 40% of the above mentioned sum if you agree to handle this business with me while 60% will be for me then after you confirm this fund into your account i will come over to you country for the sharing of the fund.

Regards

Stats on the first email, from [email protected]


Message ID <[email protected]>
Created at: Sat, May 19, 2018 at 10:33 AM (Delivered after 4 seconds)
From: Mr Allen Ibrahim <[email protected]> Using WebService/1.1.11871 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:59.0) Gecko/20100101 Firefox/59.0
To:
Subject: DO CONTACT ME FOR MORE DETAILS
SPF: SOFTFAIL with IP 74.6.132.123 Learn more
DKIM: 'PASS' with domain yahoo.com Learn more
DMARC: 'FAIL' Learn more

Header from this email:

Delivered-To: X_Removed__X
Received: by 2002:a4a:19c3:0:0:0:0:0 with SMTP id 64-v6csp8202390ooy;
Sat, 19 May 2018 07:33:57 -0700 (PDT)
X-Google-Smtp-Source: AB8JxZodtbgXXEYuHUhZVTzqoyw9YOPaMKqlJLUzs6lebYzn9zWKprnsCyyOFEMeVjcnho+feyc+
X-Received: by 2002:ac8:3431:: with SMTP id u46-v6mr12802272qtb.193.1526740437512;
Sat, 19 May 2018 07:33:57 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1526740437; cv=none;
d=google.com; s=arc-20160816;
b=R9Vkuy++MqdazIInj5Nyw4/bLgo/0gbFWMM3rL5KUXwqRa70ge3fGFvHoxZULDKc4h
CuuxT0pAJI6LwTCljy7NXXagIeS1iO6jps7Il6ztNySGQO26I7vHAizYMvw2Rg/MskgP
pKu8WqhxQ9IvRV3JA4wvLkNbzKCOdD3v5H3vtgFYLn74ICIb2ryTtnY5/hbblDYPc3t+
XjzYj21ZKkONdut8egMqnASb0KCPhIcU790eoitQZR06zehnsQeVfPRt0XKnQAw3FBfJ
aEy43qyHkSd/Cw0yOiM+yVps/mTDtkGwzhqkykItrIQ5rP1QDPBEEArfFdtJGqh3tX0M
qtDg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=references:content-transfer-encoding:mime-version:subject
:message-id:reply-to:from:date:dkim-signature
:arc-authentication-results;
bh=YVYYW/BrGpBWjHxIZ1qllvqIb2JysXZ6zXVVqRVk3Rg=;
b=qJK/j+Viv2oX1nKh0uao3iRIv6WukiSqjNAKUP9PAdTKwZJptzFn+x1O29+Kk26IkA
luisaI3vp+sIuyIfYMDH7mJBtCrfCEg/P0Sl4Usm05pZ/NGSz3RcF0VxN2k3h94unTID
B1zuKjFWQwkentg/2Q3JnB3leWGnhgZSuJ7j+WmNLrElG3xdFZrhRDQMSp8BDrnup9oh
x6GBHjCIfbSSezBsfK8gl36SzSAvv8KVFiMr20S8F272Yr9k6PCAcummTgq3A60KBolu
K1kMzwwyfKdwARaoiwcnK5LofzLfUUQXRxRXia/Bx25D0cXLOuqVxHa0VMN0UPsW74NS
vvuw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=s2048 header.b=uPoo7zus;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 74.6.132.123 as permitted sender) [email protected];
dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <[email protected]>
Received: from sonic314-13.consmr.mail.bf2.yahoo.com (sonic314-13.consmr.mail.bf2.yahoo.com. [74.6.132.123])
by mx.google.com with ESMTPS id u14-v6si9599391qvn.155.2018.05.19.07.33.57
for <X_Removed__X>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 19 May 2018 07:33:57 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 74.6.132.123 as permitted sender) client-ip=74.6.132.123;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=s2048 header.b=uPoo7zus;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 74.6.132.123 as permitted sender) [email protected];
dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1526740436; bh=YVYYW/BrGpBWjHxIZ1qllvqIb2JysXZ6zXVVqRVk3Rg=; h=Date:From:Reply-To:Subject:References:From:Subject; b=uPoo7zusSkh3P4okNjuyUN5r47IjAo4IxR1clw81X0dF3RlHi5NfCOSJIXeAtSHXzWHuUxezxsIyg0v9hKtCNTiO/ohj2hm0NiZEa/lhFDv0DiKm2bF7A8ggoj8zlxIP4uZd9exxPYH2epsDHB/QKnbe+eMfuie739Adk8VQhGrVh/ncGbvT0TEsT1AkySXSyGuqqUrEavpGmpTVOBxkhvblNc5RRaN+qCLCjXjKL2dsdC3Sc9Kmp5M14NLLqjZcFg50gDuMgboipk1LaQCiv6iLu9q8DsApK3cMpW+eVZvdlCcvtN24DmD6TJUjlAZ1sAPcgiTNUgicPkfeL/CQ6g==
X-YMail-OSG: Sw.hbe0VM1k1.jXgetUOW68fFAP7RTWieBeSNpmSLBoLhzQqxyecLfiPjv1bDro 0XVO6K0BLpgq3AZ.ZYIoYP3r9GEZUGarQ2y1guZqqnNFFZbdBa3Ol.CQJbBkxZ8ZgphB_dUeSAoj nVOJUcHjpUNblxr7jbgDnBAkvwvOizpbM5mNVFxnUQ0mkBuJUpuCy3N5VP8XCB.b0yZhx4XortRr 15hZz57fa1sCJ9nD9d1B7Y53CuZq4i_PAMmP5Vsp0IARAIxwhOZPXhKjtavF.O_m.UJJ6QKnMscB XwhUS.fqhfRDvL0dfUamRI9EDXJznsQ69pi4pgCNFFFsytW7PuDgQ3WGP4TBY17J0SvaqOr96_id K17EWXJG_zQxDFzrQ5EmOZn.7JxGbZwWoXQFQnAK3ehlLP8dW7mSmFBszBUiWlnZQ.PSYEmSUE73 f_RaOnW8.9zvbmF0s0K1a9Zdfy4b9QLHJhn9fdz3f7GvUlIJGvQLNpvv3NewO31lGqnQWflzlNjc SqQRhTZvXtjb7PDYpPHKzFHNJx8yarJ29nKT2ogfPERUa2Zd.0tkT_a_hdwDOXmDVMzyjdZULmG8 4C_iAcQL3WxI-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic314.consmr.mail.bf2.yahoo.com with HTTP; Sat, 19 May 2018 14:33:56 +0000
Date: Sat, 19 May 2018 14:33:53 +0000 (UTC)
From: Mr Allen Ibrahim <[email protected]>
Reply-To: Mr Allen Ibrahim <[email protected]>
Message-ID: <[email protected]>
Subject: DO CONTACT ME FOR MORE DETAILS
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.11871 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:59.0) Gecko/20100101 Firefox/59.0
Content-Length: 846

Second Email
Subject: Here is the details go through for more understanding

Dear Partner ,

Thanks you for your quick reply, I am very glad to hear from you.I
contacted you for the both of us to make success.I anticipate that
you read this mail quickly and let me know your opinion or
willingness on the classified information's I am about to released to
you concerning claims of fund. Firstly, I am a citizen Burkina Faso, I
am happily married man with kids and there fore I would not want to
jeopardize this opportunity to change this-possibilities of my financial
break-through. I also strongly believe it will help you as well and
secured our futures.

I am Mr. Allen Ibrahim Manager Audit and Account Department of ADB Bank,
AFRICAN DEVELOPMENT BANK, Ouagadougou, Burkina Faso. In my department I
discovered an abandoned sum of USD $15.2Million(Fifteen Million Two
Hundred Thousand United States Dollars) in an account that belongs to
one of our late foreign customer in the bank.the owner of this fund
German billionaire Adolf Merckle has committed suicide on 5January
2009 by throwing himself in front of a train near his hometown .

Since we got information about his death the year 5 January
2009,we have been expecting his next of kin to come over and claim
his money,because the bank management cannot release it unless some
body applies for it as next of kin or relation to the deceased as
indicated in our banking guidelines and laws but unfortunately we learn
that all his supposed next of kin or relation is not aware of this
fixed deposit. It is therefore upon this discovery that I now decided
to make this business proposal to you and for the bank to release the
money to you as the next of kin or relation to the bank
deceased customer for safety and subsequent disbursement since nobody is
coming for it and Idon't want this money to go into the bank treasury
as unclaimed bill.

The banking law and guideline here stipulates that if such
money remained unclaimed after many years, the money will be
transferred into the bank treasury as unclaimed fund. The request of
foreigner as nextof kin in this business is occasioned by the fact that
the bank deceased customer was a foreigner, and a citizen of my country
can not stand as next of kin to a foreigner. I agree that we shall
sharein ratio 40% of this money will be for you as a respect to
the provision of a foreign account and your full support, with good
ideas and every necessary support during the bank processing, and then
60% would before me, there after I will visit your country for my own
share.Please, you are advised to keep this top secret as I am still in
service working with the bank for security reason until we conclude
this deal successfully.You can open a new bank account for this
project, or if you have any current bank account it can also
serve.Note: this business can only take the bank 7 bank working
days depending on our seriousness and commitment with the bank to
enable the release the funds to you as the next of kin to the bank
deceased customer been the depositor of the funds for safety
and subsequent disbursement.


I will be monitoring the whole transfer processing here in the bank as
an insider until you confirm the funds in your bank account, and ask me
to come down to your country for subsequent sharing of the fund
according to percentages indicated and further investment, either in
your country or any country you may advice us to invest write me
urgently so we can commence all arrangements and I will give you more
information on how we shall handle this project.

Finally,I will be drafting an application form of claim that
you oughtto quickly complete the application letter with your data and
your banking information where you would like this USD$15.2 m. to be
transferred subsequent to the bank approval,as soon as i receive
the following information’s listed below::

(1) Your Full names:
(2)Your Nationality:
(3)Your city:
(4)Your Private phone number:
(5)Your Current residential address:
(6)Your Occupation:
(7)Your Age and Sex:
(8)Your international passport or national id card:
This is to enable me to locate you for my own share.


Waiting to hear from you.
Sincerely,

Mr Allen Ibrahim +226 68874958

Stats on second email:

Original message:
Message ID <CAKrTRTFJZ7b4Ln0VwvAP4xsdC=xSj6H5n+kF_oPMj4ZVZoTiAg@mail.gmail.com>
Created at: Sun, May 20, 2018 at 1:43 AM (Delivered after 1 second)
From: ALLEN IBRAHIM <[email protected]>
To: X___X
Subject: Here is the details go through for more understanding
SPF: PASS with IP 209.85.220.65 Learn more
DKIM: 'PASS' with domain gmail.com Learn more
DMARC: 'PASS' Learn more

Header:

Delivered-To:X___X
Received: by 2002:a4a:19c3:0:0:0:0:0 with SMTP id 64-v6csp8769800ooy;
Sat, 19 May 2018 22:43:37 -0700 (PDT)
X-Received: by 2002:ae9:f405:: with SMTP id y5-v6mr3831358qkl.75.1526795017537;
Sat, 19 May 2018 22:43:37 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1526795017; cv=none;
d=google.com; s=arc-20160816;
b=aIEOf2MJEvh4c12pO81BgNdFnUh7sfpMGnqh1rsdFMn1YOZGmSiYx3dlYtR1X3HCfn
Xcks3amVN2SnyyzJvgWE1oDyC+X7c1qyaDXz4vc0DdxcWWCtf74BAOqWdfZUi0RtJ2N2
tFDF88zMbRCMSwLBOeIVRgQ2tS2O6CBcrDjGlq2hfrBG6dWi9o4tnFlu7054gyiKQprI
JNmW9Z1UHbYeIYZVgl5H7I3lwlwk2VQSp67Ma1OA4DTqzASxKNDqUIm+nZve2Oiv/0BV
FEMDnpLDUPs2+TPZexYePMuCUJppLCJPrPU4RWAGZW6MG0SKr3N8XiFQr0fMKwh6VbAp
zU4A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-transfer-encoding:to:subject:message-id:date:from
:mime-version:dkim-signature:arc-authentication-results;
bh=+sAPlecUQFXuIMJAxpM9nuut1O+mzv5LWVFaSOBlxmo=;
b=BjdnFqXpzJT+oMZg0fNGB1pbdc2k2fwYRmJ/19Rg9UAtI+sG6zeCaVIuxxFguhF2rv
ZIUISd6LCDi8s+XgK1c+qif3WBLetg0Enqob1275Pduw9D8i5lYPXCpGgSRQbwSiVj6h
kOIaipm1XwL7+k/PDckrazdFKqQBI7ICqAux9hDL7vuSa3kaV6swMF3xVtvfaqjNrPca
+18JAuwrhljZtQu29lWrLOHr8dnJe9thIUOjGUi4xPoXBW3H0eGY/fe3YSsQ+kvfiH8F
NxN/0B3WGtRPOvhc3ruTmIGTxk6vFmiGejcbuedrRP41Tqb9PnbZ6tCG7LRNH8RfHYfx
Uq3w==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=20161025 header.b=ODKqfm0h;
spf=pass (google.com: domain of [email protected] designates 209.85.220.65 as permitted sender) [email protected];
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <[email protected]>
Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65])
by mx.google.com with SMTPS id e54-v6sor6578788qvd.123.2018.05.19.22.43.37
for <lX___X>
(Google Transport Security);
Sat, 19 May 2018 22:43:37 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=20161025 header.b=ODKqfm0h;
spf=pass (google.com: domain of [email protected] designates 209.85.220.65 as permitted sender) [email protected];
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to
:content-transfer-encoding;
bh=+sAPlecUQFXuIMJAxpM9nuut1O+mzv5LWVFaSOBlxmo=;
b=ODKqfm0h/uaihEBBVj8FAlx2x+w+twWO1UnI6/tdTzu+MNOh8Q1vuvXH6ycJjM21wb
IH5Aw/2N0ylLSRfhbI7984esZH5tH4m21NTvBs8Vmi1l5zrp/R0a4jVuP7VVl3SUd+zu
Ss74nyhSGrSzCxh2gxrMSXQRwSo4R4M/TRkdQbV94vt2Sc2G6lulff/3RImdX675t/M+
bEqsx195qUgmPN5OTX/H8sr5pcsH/jEyLnOOC2YPSWhuQ6cudzr6M3tpP65aLMUl4yUP
u8Nc775XTCJ01eV81Pic3ryPrvucCIy/hoxyJA3V8mfO3KZzkNU+SjtYkwoyDp5Wrz/O
ljDQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to
:content-transfer-encoding;
bh=+sAPlecUQFXuIMJAxpM9nuut1O+mzv5LWVFaSOBlxmo=;
b=pyBlaEGdEPVFjLkiqnUG8e1n3ufinfrmyPn0ocL6mhYMuoeFHPBiNDqomY9ZiORrBO
gRrd0L5R16mR4yDknZBnET2xW+EtyxdhzfNMThPmlFpoLGY0QS+bMHlBZ+LYd1seo5Xi
1l4K2jKWCK7Mix9JyjEXI09Vxcy8mB3AqbHz66wnpPKNckYihvOFErS5EE7ylvq9tIx5
jW0ibPyGjDLAiPBX0i8LjRS1a3yXQti9TrH93PsUoU+1mtiuifk1hKtIZVWNg2v8Y0io
r7q8NEpUWur/ueFENvvP48vrcxg1FDHPMIQIw+v+zZqonY/ZjwhzJwzw6/mrogUQwPBP
CIVg==
X-Gm-Message-State: ALKqPwde1zWN7s9oBfFs+Rb6IpI1/8oE5OzSrGnKrTPoj14qxdEOqVEr WbCQ+ndPGdAK9RijQVN3UHnrE+Q7TSxJ7/TpMPg=
X-Google-Smtp-Source: AB8JxZovAtpzpgkQqpUtL9waUH/YD6M8CT+MKMJoR9VTa55G+TETLcVgbXNlPyqctiD310isjgHDpwSVZN5eyIvBOtg=
X-Received: by 2002:a0c:965a:: with SMTP id 26-v6mr14132965qvy.133.1526795017093; Sat, 19 May 2018 22:43:37 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.200.34.240 with HTTP; Sat, 19 May 2018 22:43:36 -0700 (PDT)
From: ALLEN IBRAHIM <[email protected]>
Date: Sun, 20 May 2018 07:43:36 +0200
Message-ID: <CAKrTRTFJZ7b4Ln0VwvAP4xsdC=xSj6H5n+kF_oPMj4ZVZoTiAg@mail.gmail.com>
Subject: Here is the details go through for more understanding
To: XXX
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Delivered-To:

Third email, requesting $$
Subject Do let me know???
Dear Partner XXXXXX,

Thanks for your mail together with you personal details really it has
give me more courage to go ahead with you believed that you cannot
betray me when this fund transfer into your bank account.
Now can you be able to come down here in person ???? Or contact the
bank attorney and paid for his services???? So that I will send you
the text of application form to fill you bank details with the
attorney contact information to apply so that he will help you to summit it
to the bank and also stand on your behalf to sign all the necessary
papers and document for easy of transferring this fund into your
account and also sign the final release order of this fund.



Am waiting

Allen

Dear Partner Lyra K Costanza ,


What to do next is fill the attached application form and send to the
bank Attorney.


open the attachment form fill you bank details information and send to
the Bank recommended Attorney so that him will help you to summit it
to the bank for easy of tranfering this fund into you bank account.
.

Here below is the Bank Attorney email address where to send the application
and forward a copy to me for record purpose which I will use in
monitoring the process before the BANK.

[email protected]

Lastly lets keep this a top secret until we achieve success in
transferring this fund into your account

Get back to me asap

regards
Mr Allen Ibrahim
+226 68874958


There was an attached word doc I did not open in case it was malware. It appeared to be a form with an offical looking header and seal

Letter to the Banks Attorney

HON.BARR.OSSY CHUKS (Esq)
ADVOCATES AND SOLICITORS OF THE SUPREME COURT
PLOT 77, AVENUE UNIGA DU FASO
ASSOCIATION COPERATE HEADQUARTERS
Tel/fax +226 76 940 571
Email: [email protected]

I am , XXXXXXXXXXXXXXXXX beneficiary claimer of the my inheritance
fund of $15.2 million USD of my deceased Partner, i want you to help
me summit the application form to the bank and also stand on your
behalf to sign all the necessary
papers and document for easy of transferring this fund into my bank
account and also sign the final release order of this fund.Kindly
assist me and reply urgently for the transfer of my fund to be
made based on legal grounds.
Regards


XXXXXXX