Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#413548 by buried under 419s Thu Jul 09, 2020 7:33 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from m
by with LMTP
id jtDxN3aAB18lMQEAibB4EA
(envelope-from <[email protected]>)
for <>; Thu, 09 Jul 2020 16:39:18 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 09 Jul 2020 16:39:18 -0400
Received: from mail-il1-f195.google.com ([209.85.166.195]:34352)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jtdK9-000KJJ-Fn
for ; Thu, 09 Jul 2020 16:39:18 -0400
Received: by mail-il1-f195.google.com with SMTP id t4so3219981iln.1
for <>; Thu, 09 Jul 2020 13:38:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=EUC/GTn+ZNeGbmRag3hxxtebrqNsjnnZIfhstgPWKbo=;
b=AtLgnGeMFLfl4hfbMjxtP3vwgRpdZ5sxMENqTXGY4CF+E9GupX5S8V7qiJYuDTjvZF
OKHKI5/kwvtc53RCj2scmxJyJkJpJpiezME/9ufzUUe2WrGWgVog0IUWvkq2TDDnIpEz
LVtQwVuj01OdpskPILwd38Z8rb+EJu5wQQxBNvtWAw9+zCjxMo15v93XzDH6XUaebp+Y
wR/sJ3tzizsGVG/z8bh2monY4ZSEwUpQuaiAAqBWnSss/paDmSIHXMIW9iVl3wzfOauj
50BFBhQiSuSSBP3NlUUqQdXI1fPw7zJHK5UDrVavF85U61wDH9h0YZmNcRrYCHWI20MF
Tp7Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=EUC/GTn+ZNeGbmRag3hxxtebrqNsjnnZIfhstgPWKbo=;
b=qNntDTdKO1UD9BTfWBRCdd4swAwakhKrV9TSkguirnM5JztwTi+FZBbCGlaePMzSsy
aleGIQCIsMLyqH7RHXLH0ZMef9Ak1aWvcohUpRcldj2v3/hGfKhXRpX4n/cux3yNQRI4
lHalltRcCXrm0hevJtAoBadI/FDHGj5kG9eegg6TvT6sqGMy/R9TmchV+omllpwJGN0t
aMGznM4I5xylspcw93cJICwJHeXe7U2sM48ME+baFQdHofuerCdyfkjGtOQAkDkc+/hC
k4KH8daHPSBhGdx5DJQvtpbdEjD/Y8oXS3WtMqjGAGN2HI20daWts2mjaIqzfRB3xjAa
2axw==
X-Gm-Message-State: AOAM5314vkLd0pCjk9DAbm6FbNp1kP6g1Ie5W24FsUlQwd/oTRwyCbD9
C0QHZP5XoyM6oI70xENyWPd+jZpzp29ngFd6t2Q=
X-Google-Smtp-Source: ABdhPJwvcHaDkOuYBpnhVsOiNVjY24XprouROLO61amRoOE7EqsjNR/HR9r1blTtpUCUE7Uy6VHRSds1UR9qEEjiP4M=
X-Received: by 2002:a92:ca8d:: with SMTP id t13mr46153318ilo.274.1594327113559;
Thu, 09 Jul 2020 13:38:33 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: george duru <[email protected]>
Date: Thu, 9 Jul 2020 21:38:22 +0100
Message-ID: <[email protected]om>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000042796e05aa0835b0"
Bcc:
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *FROM THE DESK OF: MR BELLO MOHAMMED.DIRECTOR, INTERNATIONAL
REMITTANCE /FOREIGN OPERATIONS.DEAR SIR/MADAM,YOUR CONTRACTOR/INHERITANCE
FUNDS $10.5MILLION.THIS IS TO NOTIFY YOU THAT YOUR OVER DUE INHER [...]
Content analysis details: (11.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.166.195 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[georgeduru2015[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[georgeduru2015[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[bm8118921[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.195 listed in wl.mailspike.net]
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** FUND TRANSFER.

--00000000000042796e05aa0835b0
Content-Type: text/plain; charset="UTF-8"

FROM THE DESK OF: MR BELLO MOHAMMED.
DIRECTOR, INTERNATIONAL REMITTANCE /
FOREIGN OPERATIONS.

DEAR SIR/MADAM,

YOUR CONTRACTOR/INHERITANCE FUNDS $10.5MILLION.

THISIS TO NOTIFY YOU THAT YOUR OVER DUE INHERITANCE FUNDS HAS BEEN GAZETTEDTO BE RELEASED, VIA TELEX TRANSFER (TT)DIRECT WIRE TRANSFER TO YOU BY THE SENATE COMMITTEE FOR FOREIGN OVER DUE FUND TRANSFER. MEANWHILE,A WOMAN CAME TO MY OFFICE FEW DAYS AGO WITH A LETTER,CLAIMING TO BE YOUR TRUE REPRESENTATIVE.HERE ARE HER INFORMATION:

NAME JANET WHITE
BANK NAME: CITI BANK
BANK ADDRESS:ARIZONA, USA.
ACCOUNT Number: 6503809428.

PLEASE,DO RECONFIRM TO THIS OFFICE, AS A MATTER OF URGENCY IF THIS WOMAN IS FROM YOU SO THAT THE FEDERAL GOVERNMENT WILL NOT BE HELD RESPONSIBLE FORPAYING INTO THE WRONG ACCOUNT NAME AND FOR IMMEDIATE RELEASE OF YOUR CONTRACT, INHERITANCE/AWARD WINNING CLAIM IS INFORMED THAT YOU ARE NOT ALLOWED TO CORRESPOND WITH ANY PERSON OR OFFICE ANYMORE, YOU ARE REQUIRED TO SEND BELLOW:INFORMATION REQUEST FOR YOUR TRANSFER.

(1) YOUR FULL NAME:
(2) FULL ADDRESS OF YOUR CITY, STATE AND COUNTRY:
(3) PHONE, FAX AND MOBILE:
(4) COMPANY NAME, POSITION AND ADDRESS:
(5) BANK INFORMATION:
(A) BANK NAME:
(B) BANK ADDRESS:
(C) ACCOUNT NUMBER:
(D) SWIFT CODE/
(E) ROUTING NUMBER:
(F) IBAN NUMBER
(6) PROFESSION, AGE AND MARITAL STATUS:
(7) A COPY OF YOUR INT'L PASSPORT/DRIVERS LICENSE.

THERESERVE BANK GOVERNOR, EXECUTIVE, BOARD OF DIRECTORS AND THE SENATE COMMITTEE FOR FOREIGN OVER DUE INHERITANCE FUND HAVE APPROVED AND ACCREDITED THIS REPUTABLE BANK WITH THE OFFICE OF THE DIRECTOR,INTERNATIONAL REMITTANCE /FOREIGN OPERATIONS,TO HANDLE AND TRANSFER ALL FOREIGN INHERITANCE FUNDS THIS THIRD QUARTER PAYMENT OF THEYEAR.HOWEVER,WE SHALL PROCEED TO ISSUE ALL PAYMENTS DETAILS TO THE SAIDMRS.WHITE,IF WE DO NOT HEAR FROM YOU WHITEN THE NEXT SEVEN WORKING DAYSFROM TODAY.

CONGRATULATIONS IN ADVANCE.

BEST REGARDS

MR.BELLO MOHAMMED.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Majestic-12 [Bot] and 38 guests