Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#316472 by RayyanH Mon Jan 09, 2017 5:29 pm
I was emailed by a university email, to be revealed it was hacked by a scammer the first email just had the subject Contact me back, and I ended up replying thinking it was a uni survey and it a James Cook, saying about a army veteran wanting to give me money and asking for information

Here is a transcript of the entire email,

Delivered-To: [email protected]
Received: by 10.80.182.175 with SMTP id d44csp912816ede;
Mon, 9 Jan 2017 13:12:46 -0800 (PST)
X-Received: by 10.98.28.129 with SMTP id c123mr8720269pfc.92.1483996366691;
Mon, 09 Jan 2017 13:12:46 -0800 (PST)
Return-Path: <[email protected]>
Received: from COL004-OMC3S11.hotmail.com (col004-omc3s11.hotmail.com. [65.55.34.149])
by mx.google.com with ESMTPS id q187si89806898pfb.256.2017.01.09.13.12.46
for <[email protected]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 09 Jan 2017 13:12:46 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.149 as permitted sender) client-ip=65.55.34.149;
Authentication-Results: mx.google.com;
dkim=pass [email protected];
spf=pass (google.com: domain of [email protected] designates 65.55.34.149 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from APC01-PU1-obe.outbound.protection.outlook.com ([65.55.34.137]) by COL004-OMC3S11.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Mon, 9 Jan 2017 13:12:44 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
Received: from SG2APC01FT049.eop-APC01.prod.protection.outlook.com (10.152.250.60) by SG2APC01HT067.eop-APC01.prod.protection.outlook.com (10.152.251.167) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.803.8; Mon, 9 Jan 2017 21:12:43 +0000
Received: from HKXPR01MB0360.apcprd01.prod.exchangelabs.com (10.152.250.52) by SG2APC01FT049.mail.protection.outlook.com (10.152.251.207) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.803.8 via Frontend Transport; Mon, 9 Jan 2017 21:12:43 +0000
Received: from HKXPR01MB0360.apcprd01.prod.exchangelabs.com ([10.161.178.144]) by HKXPR01MB0360.apcprd01.prod.exchangelabs.com ([10.161.178.144]) with mapi id 15.01.0817.020; Mon, 9 Jan 2017 21:12:42 +0000
From: James Cook <[email protected]>
To: xxxxxxxxx <[email protected]>
Subject: Re: Contact me back
Thread-Topic: Contact me back
Thread-Index: AQHSafCpP2vrt8ZpSv6nU/fv+C+6P6EvD+yAgAGWZTs=
Date: Mon, 9 Jan 2017 21:12:42 +0000
Message-ID: <HKXPR01MB036052236C8D400F291963E187640@HKXPR01MB0360.apcprd01.prod.exchangelabs.com>
References: <MWHPR04MB0816B538370ED5D2B029B356BE650@MWHPR04MB0816.namprd04.prod.outlook.com> <CA+jdb1ddGDjUMZ0n6ij3mz=Jr4Jad94yya-QqaPM31JWF8dKXQ@mail.gmail.com>,<CA+jdb1faMvidmpsOz21vFzCzu66_+PWa5bfqPJf0dfum7C8HUw@mail.gmail.com>
In-Reply-To: <CA+jdb1faMvidmpsOz21vFzCzu66_+PWa5bfqPJf0dfum7C8HUw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=outlook.com;
x-incomingtopheadermarker:
x-forefront-antispam-report: EFV:NLI;SFV:NSPM;SFS:(10019020)(98900003);DIR:OUT;SFP:1102;SCL:1;SRVR:SG2APC01HT067;H:HKXPR01MB0360.apcprd01.prod.exchangelabs.com;FPR:;SPF:None;LANG:en;
x-ms-office365-filtering-correlation-id: ba69bb98-a1f9-4ba1-e664-08d438d44018
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(1601124038)(1603103113)(1603101340)(1601125047)(1701031023);SRVR:SG2APC01HT067;
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444111334)(444112120)(432015012)(82015046);SRVR:SG2APC01HT067;BCL:0;PCL:0;RULEID:;SRVR:SG2APC01HT067;
x-forefront-prvs: 0182DBBB05
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_HKXPR01MB036052236C8D400F291963E187640HKXPR01MB0360apcp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jan 2017 21:12:42.4487 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2APC01HT067
Return-Path: [email protected]
X-OriginalArrivalTime: 09 Jan 2017 21:12:45.0105 (UTC) FILETIME=[1F250A10:01D26ABD]

--_000_HKXPR01MB036052236C8D400F291963E187640HKXPR01MB0360apcp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


Dear Friend,

Thank you very much for replying my mail I hope you where not too embarrass=
ed by my short email to you since we have not met before now or had any con=
versation till this moment and i ask that you give me the benefit of doubt =
as i understand these day internet has be grossly misused by crueless minde=
d people making it difficult for people like me with genuine intention to t=
ransact freely without skepticism however, whatever i am about to say to yo=
u now is true and correct and i have no reason or whatsoever to lied to you=
God almighty who shinnest light on us will bear me witness on this.

Please pardon me why I explain the reason I contacted you firstly, I am Sgt=
James Cook from US army HHB 3-7 Field Artillery Regiment in Afghanistan. I=
found your contact detail from a search for a partner, am seeking your ass=
istance to evacuate the sum of US$5,000,000.00 to you as long as I am assur=
ed that it will be safe in your care until I complete my service here in Af=
ghanistan 25% will be taking by you for your effort and time.

I want to believe in you and have my trust in you that you can handle this =
funds which am about to deliver to bank in your name as long as I am assure=
d that it will be safe in your care until I complete my service here in Afg=
hanistan. So I can have a changed of story, Please Note that this is not st=
olen money and there are no dangers involved. There is no risk whatsoever,I=
have all the necessary documents that will be needed by bank as regards th=
is money and also, I want you to be rest assured that everything been done =
here are strictly legitimate, so you do not need to have any doubt. The mos=
t important thing is for you to give me your words that you will be very ho=
nest and straight forward with me when the money gets to you and That you a=
re willing to contact the Bank either through Email, phone calls or in pers=
on to discuss the terms of releasing the funds to you and that you will onl=
y take the 25% as agreed between me and you. I believe in my country and i =
want to be part of the solution not the problems I believe in building up a=
good relationship with you as a friend and as a business partner, which I =
never did have before. I want us to have a good trust for each other as thi=
s transaction will be successful only if we can work together and make thin=
gs go well. I am a very straight forward man, am honest and sincere in all =
I do, because I believe in having a good name.

Thus, for this reason, it is important you no more about my life history as=
it will help us to build our trust as long as you agree with me to do this=
. Please know this, I was adopted after I lost my parents in a car accident=
when I was 13 Years old, I was brought up by my adopted parents, but unfor=
tunately, both adopted parents are deceased now, I lost my adopted dad 2002=
and my adopted mom 2007, the relatives of my adopted parent threw me out o=
f the house saying that I was not their real son. All my life, I have alway=
s wanted the true feeling of having a family and being happy with the peopl=
e around me. I have always been lonely because I have always been moving ar=
ound as a soldier, and my commitment to the Military has made me risen very=
fast in ranks than my colleagues. I have never been married but I have an =
8years old Daughter (Erlyna ) outside wedlock. My Daughter is the only fami=
ly I have because I grew up going from one foster home to another, she has =
been my strength, motivation and the reason I fight to stay Alive when I go=
on missions. My Dad was from France, why my mom was from Calgary, AB, Cana=
da. I grew up in France till I was 13 before I came to the U.S before joini=
ng the U.S Military Academy, I was the only surviving child of my biologica=
l parents as my only sister died during child birth.

The Last time I saw my daughter was when I returned from Iraq. When I retir=
e I am ready to Live anywhere in the world where there is Love, trust and p=
eace with my daughter and make friends who are willing to make sacrifices f=
or the sake of Love because being a soldier has given me so many ugly exper=
iences of Hatred, Betrayal, Greed and Dishonesty all over the World. I will=
say this to you with an open heart, life here in Afghanistan is not worth =
living as we are open to any attack but it's the Grace of The Lord that has=
kept us till now. I am a committed and devoted Christian; I hate lies, che=
at, disunity and evil minded people. I really want to live where there is p=
eace, honesty and straightforward people, As I like to learn a new life sty=
le from them. I believe that you fully understand this transaction up to th=
is stage and you are ready to proceed under these terms.

I will also appreciate that you Make available to me these information of y=
ours to enable me forward it to bank to establish communication with you.

These are the information required from you:
Name (full)........................................House Address/Country...=
...............................Occupation..................................=
Age.................................. Telephone.......................

Get back to me for more details. Please let me know about you more.....

I await your reply as soon as possible.

May god bless you.
Sgt. James Cook




Sent from Outlook<http://aka.ms/weboutlook>
Last edited by Bryon Williams on Mon Jan 09, 2017 5:39 pm, edited 1 time in total. Reason: Removed personal information.
Advertisement

#316695 by RayyanH Wed Jan 11, 2017 5:59 pm
UPDATE 2:

I have reported the offending email to my local governments scam reporting sites.

SCAMWATCH.gov.au case number: accc-scamwatch:158668

ACORN.gov.au case number: ARN-RJGP-GJBK

Who is online

Users browsing this forum: No registered users and 201 guests