Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#417639 by buried under 419s Wed Sep 23, 2020 11:10 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id jiQNFaQIal86HAAAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 22 Sep 2020 14:22:28 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 22 Sep 2020 14:22:28 +0000
Received: from mail-ed1-f67.google.com ([209.85.208.67]:41752)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kKjBb-0001ru-Kd
for m; Tue, 22 Sep 2020 14:22:28 +0000
Received: by mail-ed1-f67.google.com with SMTP id ay8so16324267edb.8
for <>; Tue, 22 Sep 2020 07:22:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=hGP4lVAKTnx1w6+haNkb5S2oLUKHbxoRrgLH5DhAoAY=;
b=J8sZr6v6Zp1EPUDJ4LnwBqrFmPyqWgRFj/EPmBgfCAS8SOq5cr23WHsULdQovfAUl6
Y7DVJ25L/vgR+JhyhAEfJkpNPuOuVQaA0/J8I+tY15Itfdx1gNh4j8ik6sOIGHNU2B1o
houawMGbep1JBwoAN7gSYRGQJQBZJQgfWlwszC6jyfwYnWLwRJ6VbcdvBlaNcJALMJVu
CkOLuCghbpPAVP8yVt4PoqCEHjIWh20VYrkj/iCvfwi/Z182vubWB4cqfNd5na7CjNcv
TdQgG56nzia44XON7K13MNshDkrcHlDWiA+6xcQjQU6mKkddzFGJaBvaxDXqRduajPc4
9mOw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=hGP4lVAKTnx1w6+haNkb5S2oLUKHbxoRrgLH5DhAoAY=;
b=nuCrYJj58YmMvbLoL1Lyr3SeNrIU4ZX9d6ZZQbZiEuPsDDXO8W426M2PTO+iNzR3od
U1Fs69T3o4+7WjK7qCxSIUBOtaLbUrm8ql2s9SECyeLvvfhjFpxlOj4Q7AH4W4U495To
x8XBtdU6h67aRyI77HhjeZzkF+volTTJqtR4moad3zRmX3MdOun0Mr2c4N8O0DiNIdHP
WO5h92hxHYV10qx1hjs7PJ1ZEoQkavaY8Qat4XyUUfq2j+SUKI8J4ggGC/D5fOGhiTxi
dS5yZD9fa9mlOyWmNKNS4dLHMKqnDdA5jSE5H+coQ8nuAe0xF8ww1FL/RCGsSQCzYIBr
5YmA==
X-Gm-Message-State: AOAM533hZfrnl+txWZGDEMctjetG3VI9M+LvPu2Wa/BW1wsybyEsrzGv
a6IBBrmjToIZPZe9t2U6pUfdOchO9Fd9eDZAORg=
X-Google-Smtp-Source: ABdhPJwyKYhZe+Il1a6MAktrb0bWMuQ6uNdUiFu4MIEg5u8GpOFOLf/BRRF0SQThnlxVp9arLzpsrvwSlfPY+VUk2fo=
X-Received: by 2002:a50:d4d8:: with SMTP id e24mr4252262edj.1.1600784505479;
Tue, 22 Sep 2020 07:21:45 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a54:2511:0:0:0:0:0 with HTTP; Tue, 22 Sep 2020 07:21:45
-0700 (PDT)
Reply-To: [email protected]
From: "Mr.Charles Goodman" <[email protected]>
Date: Tue, 22 Sep 2020 15:21:45 +0100
Message-ID: <[email protected]om>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=9.2
X-Spam-Score: 92
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Beneficiary: Congratulations!! Your Payment has been
approved and endorsed,with the instruction and approvals given from the Authorities
Due to the incessant scam activities going around the globe,the Authorities
[...]
Content analysis details: (9.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[oauofafrica1977[at]hotmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[revjohnmorgan1919[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[revjohnmorgan1919[at]gmail.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.67 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** From US Capital Bank Branch North Carolina

Attn: Beneficiary:

Congratulations!! Your Payment has been approved and endorsed,with the
instruction and approvals given from the Authorities Due to the
incessant scam activities going around the globe,the Authorities has
instructed our Financial Institution to use high Performance in
Banking System to set up Personal On-line Banking Account.

The sum of US$15,500,000.00 was deposited in our bank,The Management
has resolved to open Personal On-line Banking Account for you with our
bank and then give you the on-line access which will enable you to
check and make electronics wire transfer out to any part of the world
of your choice.

Kindly Send the below information to enable us set the account open for you.

Full Name:...........................
Full Address:...........................
Direct Cellphone Number:...................
PASSPORT AND ID CARDS:...................
YOUR OCCUPATION.........POSITION...........
DATE OF BIRTH..............

Looking forward for your next letter

Regards

Thanks for banking with us ,

Mr.Charles Goodman .
A/C Online Payment Officer ,
US Capital Bank Branch North Carolina,
United States of America

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot], Majestic-12 [Bot] and 56 guests