Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#397184 by buried under 419s Tue Sep 17, 2019 8:40 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 17 Sep 2019 07:20:30 -0700
Received: from [41.214.9.254] (port=9408 helo=esa.osiwanet.lan)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1iAELE-0006zC-IH
for ; Tue, 17 Sep 2019 07:20:30 -0700
IronPort-SDR: Ey+M9W+FmK25Lt4aCSCCQKOq70ZzIB3RRwX57LHIeISG7n5WQpm+oacVL3AqMFG4OXMenKUXaB
XebY6/M6bJc+OUpUwHId/ghDM66/3/HAU=
Received: from unknown (HELO User) ([41.203.78.123])
by esa.osiwanet.lan with SMTP; 17 Sep 2019 14:10:18 +0000
Reply-To: < [email protected]>
From: "FIRST BANK OF NIGERIA"<[email protected]>
Date: Tue, 17 Sep 2019 15:19:44 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=57.9
X-Spam-Score: 579
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: FROM INTERNATIONAL REMITTANCE DEPARTMENT FIRST BANK NIGERIA
PLC 35 ASABA HOUSE LAGOS NIGERIA CONTACT EMAIL:CONTACT EMAIL:[email protected]
Dear Beloved Beneficiary This letter is written to inform you the reason
behind your delay payment.I am Rev,Ashii Ashii the Director,International
Remittance Department of this Bank,my Formal Boss,Mr.Jacobs M.Ajekigbe,the
Managing Director/CEO of this bank is now on compulsory leave and all power
have been vested on me to make all international payments.Also,due to reported
cases of corrupt practices in other Nigeria Banks including the Central Bank
of Nigeria,the Federal Government has revoked/canceled all power vested on
those banks and has appointed our bank (First Bank of Nigeria) to make all
foreign payments.Be informed that the Federal Government have approved the
release of part-payment of$7.5M(Seven Million Five Hundred Thousand Dollars)
out of your total funds,which has been in this bank for many years unclaimed
because Mr.Jacobs Ajekigbe,Collaborated with the Governor of Central Bank
of Nigeria (CBN)and have refused to tell you the truth on how to claim your
fund this is because he has been using t he interest accumulated f [...]

Content analysis details: (57.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
4.1 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.7 NSL_RCVD_HELO_USER Received from HELO User
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[41.214.9.254 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (
firstbanknig84[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
3.7 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.6 MISSING_MID Missing Message-Id: header
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 MONEY_FROM_MISSP Lots of money and misspaced From
2.0 FROM_MISSPACED From: missing whitespace
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM Fill in a form with personal information
1.6 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 MONEY_FORM Lots of money if you fill out a form
1.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
3.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Rev,Ashii Ashii


FROM INTERNATIONAL REMITTANCE DEPARTMENT
FIRST BANK NIGERIA PLC
35 ASABA HOUSE LAGOS NIGERIA
CONTACT EMAIL:CONTACT EMAIL:[email protected]


Dear Beloved Beneficiary

This letter is written to inform you the reason behind your delay payment.I am
Rev,Ashii Ashii the Director,International Remittance Department of this Bank,my
Formal Boss,Mr.Jacobs M.Ajekigbe,the Managing Director/CEO of this bank is now on
compulsory leave and all power have been vested on me to make all international
payments.Also,due to reported cases of corrupt practices in other Nigeria Banks
including the Central Bank of Nigeria,the Federal Government has revoked/canceled
all power vested on those banks and has appointed our bank (First Bank of Nigeria)
to make all foreign payments.Be informed that the Federal Government have approved
the release of part-payment of$7.5M(Seven Million Five Hundred Thousand Dollars) out
of your total funds,which has been in this bank for many years unclaimed because
Mr.Jacobs Ajekigbe,Collaborated with the Governor of Central Bank of Nigeria
(CBN)and have refused to tell you the truth on how to claim your fund this is
because he has been using t
he interest accumulated f

After the transfer,you will confirm the fund in your bank account within 5hours the
same day.No Cost of Transfer (COT) and no stoppage from any Government departments
as the transfer will be done within the bank alone and it is very safe.The method
which was introduced to you before is the Telegraphic Transfer (TT) for which
confirmation was 48hrs,because of the time factor,petitions could come from various
organizations stopping your payment and asking you to pay huge fee which would be
difficult for you to pay so that they can benefit from the huge interest your fund
generates while still in the Bank.

This method is not safe for you because it is not done within the bank alone as
information of the payment would be sent to the Central Control Unit (CCU) of the
Federal Ministry of Finance and office of the Accountant General of the
Federation.As a good Christian, I have nothing to gain by keeping your fund,I want
to assist you receive your fund Before it accumulate Dumurrage.You have to follow up
and work with me now.

Ensure that you keep this very confidential because of fraudsters and impostors who
go about presenting various bank accounts in order to divert another beneficiary's
fund.

your advise to reconfirm the following details below to us with valid account
co-ordinates and amount to be claimed.

Note your transfer code is FBXNZ7XX5M you must keep it confidential to avoid
intruder or claim by anyone so that I do not transfer your
fund to the wrong Bank Account.

1.Account Holders Name..........
2.Bank Name.............
3.Bank Address.........
4.Home Address.........
5.Swift Code..........
6.Your Contact Cell Phone......
7.Occupation..........
8.Age.................
9.A Copy of your id

Finally i ask for your mutual understanding and cooperation to serve you
better.

Yours truly,

Rev,Ashii Ashii
First Bank Nigeria Plc.
CONTACT EMAIL:[email protected]

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 15 guests