Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#335178 by buried under 419s Thu Jul 27, 2017 9:12 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id UWxSFIoFellrKQAAjbubUg
for <>; Thu, 27 Jul 2017 08:23:54 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 27 Jul 2017 08:23:54 -0700
Received: from smtp303.alice.it ([82.57.200.119]:50972)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dakdk-0002ke-8x
for ; Thu, 27 Jul 2017 08:23:54 -0700
Received: from feu11-alice (82.57.204.66) by smtp303.alice.it (8.6.060.43)
id 5895009A07BDE92F; Thu, 27 Jul 2017 17:22:36 +0200
Received: from (105.112.22.156) by wmlight.pc.tim.it; Thu, 27 Jul 2017 17:22:36 +0200
Message-ID: <[email protected]>
Date: Thu, 27 Jul 2017 17:22:36 +0200 (CEST)
From: "Mr.Herbert Wigwe" <[email protected]>
Reply-To: [email protected]
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Originating-IP: 105.112.22.156
X-Spam-Status: Yes, score=13.5
X-Spam-Score: 135
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: From the Desk Of: Mr.Herbert Wigwe. Foreign Payment Director.
Federal Republic of Nigeria Attn: Beneficiary Please what is going on? I
hope and believe there is no problem. I am writing to let you know that your
ATM Card that worth USD$8.5M, Eight Million Five Hundred Thousand United
States Dollars is ready to be delivered to you and we are only waiting to
receive the reconfirmation of your home address where you want your ATM card
to be delivered and Telephone number. [...]

Content analysis details: (13.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[82.57.200.119 listed in dnsbl.sorbs.net]
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[82.57.200.119 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mahmud.mohammed[at]tim.it)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officemail4good213[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 LOTTO_AGENT Claims Agent
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT REPLY NEEDED,


From the Desk Of:
Mr.Herbert Wigwe.
Foreign Payment Director.
Federal Republic of Nigeria



Attn: Beneficiary

Please what is going on? I hope and believe there is no problem. I am writing
to let you know that your ATM Card that worth USD$8.5M, Eight Million Five
Hundred Thousand United States Dollars is ready to be delivered to you and we
are only waiting to receive the reconfirmation of your home address where you
want your ATM card to be delivered and Telephone number.

We already have your home address here but still want you to re-confirm it to
me so that we can check if it is correct with what we have here and to avoid
sending your ATM card to the wrong person. You are required to reconfirm the
below information to enable us proceed with the shipment now as directed by the
authorities.

Full Name:
Mailing Address:
Your Age:
Direct Phone/ Mobile Number:

Also remember that it will cost you only $100 for delivery...Please I want to
assure you that the only fee you will pay to receive your ATM Card is $100 no
more.. Immediately the $100 is received from you, your Card shall be delivered
to you without a delay...BELOW IS THE INFORMATION FOR YOU TO SEND THE $100
WESTERN UNION OR MONEY GRAM


RECEIVER: CHUKWU STAN
ADDRESS: LAGOS NIGERIA
AMOUNT: $100.00

We await your urgent response. -

Yours faithfully,
From the Desk Of:
Mr. Herbert Wigwe.
Last edited by buried under 419s on Sat Dec 29, 2018 2:34 pm, edited 2 times in total.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

#362080 by buried under 419s Thu Apr 12, 2018 10:35 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id ALkROsxuz1qbUQAAjbubUg
for <>; Thu, 12 Apr 2018 07:35:56 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 12 Apr 2018 07:35:56 -0700
Received: from sonic311-21.consmr.mail.ne1.yahoo.com ([66.163.188.202]:33415)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1f6dKJ-0005QY-Io
for ; Thu, 12 Apr 2018 07:35:56 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1523543710; bh=Us8J2D7UXiNGWSypI9BHrl+tg6wIVDwwtnl5vdLszDE=; h=Date:From:Reply-To:Subject:References:From:Subject; b=R4unaqfB32tZu1ViicREbIj/McWImG6V34PahKPWLGtrXLtcUF1FQwJIaGUCzLcWYre6siDthZDuplGgByQ9wpGVr+5vydFVr63wbkx/YpryENwFCcsW11PlZTwkJU4oKt5N8ETkFFQ5acZ9pGDslOg5RPWCHaPlMq+pWbZRcwKp+tZti12nsp1Px63/o7I1RjW8dCOr8wtyksMmVSxHt2Igm3QWzsjaHebBc6Yqr1eqv7Gf660+ZzAMB3mTqb1sD4BoffOSHcOuf8G8cl3R4x41IQPzaNiRPeCjzg5uxSbMzGURiL8EGSPhTWPUw/mqZL+WQuWubKtboEyC5w1PXw==
X-YMail-OSG: WuizgVEVM1ky9TZFwdkjMw5mno.uGAiIDz5kpGv.jR2RN1yfgMRdWf7U6b9pwc6
SyNG21Lchc5FsE2OPricQi_9VAiZj6LWxHj1rqWugVQUfWUUxQ2PNghcjadp67RGpbiBaee2.Kqh
KFkQVppnR1p76GeOC1W1VE.jTV7s6RCYQkkcVLNGrWGxlP5WnNqs9WBpVA6g4Fv6AWR.O9E8zBpo
y_keEhyN1iFk3FXJ7Jxwxv6eILhcWN_nnBcVgmaxUAau3DwlWnhvYF3QhLxvi0L9qKl_eaR.c_dS
6tDVoeXaGc8dCC.KZV_slyT1VW7jyf6Mmx580tM2N0XV_lMecbskBFpiodsY3di3NgKoG_9cX2yr
VSBAR4SrhPJwe4lqOcZi_Qlrh5oplMkWuD6YU0DgoFHs9yopxgwiCgDAdk803LZ.I5hiBLduofXv
gFGqccr64yKF86gI.4YUuUecRGQAWL07j
Received: from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.ne1.yahoo.com with HTTP; Thu, 12 Apr 2018 14:35:10 +0000
Date: Thu, 12 Apr 2018 14:35:07 +0000 (UTC)
From: "Mr. James Brown" <[email protected]>
Reply-To: "Mr. James Brown" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.11745 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0
Content-Length: 2135
X-Spam-Status: Yes, score=20.7
X-Spam-Score: 207
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: AIR COURIER INTERNATIONAL SECURITY SERVICES BEVERLY HILL AVENUE,
QUEENS PARK, LONDON, UNITED KINGDOM W1 2152, TELEPHONE: + 44-7045761819 Fax:
+ 44 709 285-8335 Dear Friend, REQUEST FOR A DELIVERY OF $10 MILLION DOLLARS
TO YOUR DOOR STEP [...]

Content analysis details: (20.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 BILLION_DOLLARS BODY: Talks about lots of money
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(christiandennismanofgod1[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.163.188.202 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officemail4good213[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (christiandennismanofgod1[at]yahoo.com)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.0 HK_SCAM_N3 BODY: No description available.
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.6 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** REQUEST FOR A DELIVERY OF $10 MILLION DOLLARS TO YOUR DOOR STEP


AIR COURIER INTERNATIONAL SECURITY SERVICES
BEVERLY HILL AVENUE, QUEENS PARK,
LONDON, UNITED KINGDOM W1 2152,
TELEPHONE: + 44-7045761819
Fax: + 44 709 285-8335



Dear Friend,


REQUEST FOR A DELIVERY OF $10 MILLION DOLLARS TO YOUR DOOR STEP

How are you today? Hope all is well with you and family?You may not
understand why this mail came to you. I have the duty to inform you that
we did receive an instruction to deliver your two consignments boxes with
your reference number xx538rfsqw. The consignments delivery instruction
sent to us has been going through the normal official approval process,
and it is with pleasure that I hereby bring to you the good news that your
consignment delivery has been finally approved.

This authorization was given to us since the signing of a memorandum of
understanding between our country and the government of the UNITED STATES
concerning the issue of delayed of your fund payments.

Note that our method of payment is by cash delivery system, this a process
whereby your funds will package into two metallic boxes and we shall
delegate a special diplomatic agent who will accompany the consignments
boxes down to your destination.

Our management Board gave their consent to this noble request in a way of
reciprocating the patronage of our valued global customers,hence you are
being contacted via a very private and secured email address. So you are
advised to maintain a very low profile till you quietly receive your
consignment boxes.

As the Director of Air Courier International security company, I hereby
assure you that your consignments boxes shall be deliver to you smoothly
and all normal official protocols shall be observed. All you have to do is
to reconfirm the following information of yours to enable us proceed
further.

1, Your full name and current billing address.
2, Direct telephone number where you can be reach.
3,Your nearest air port.
4, Copy of identification.
5, Occupation.
6, Age.

Once we receive this information, further details shall be giving to you
and the diplomatic agent will leave with your two trunk boxes.

In Sincere Service,

Mr. James Brown

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
#381476 by buried under 419s Mon Feb 11, 2019 10:49 am
Return-Path: <[email protected]>
Delivered-To:
Received:
by with LMTP id oHIDHDxyYVx0EwAAjbubUg
for <>; Mon, 11 Feb 2019 05:01:48 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 11 Feb 2019 05:01:48 -0800
Received: from sonic305-21.consmr.mail.ne1.yahoo.com ([66.163.185.147]:33830)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gtBDS-0001HY-Gr
for ; Mon, 11 Feb 2019 05:01:48 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1549890061; bh=EN9HqIfgoh9Z+KtI7gMLf4c9EZ0aaAcpzwKV0L0XQJQ=; h=Date:From:Reply-To:Subject:References:From:Subject; b=gNf16r6WaR0CqyKRuymIT0ck244YqTfogEVoULtxjhq2+NbjhdG4+rYlkdX8+qCdlmRF1q5wn/jdTobWQlsks/dZGWxfTWMT4qEpvqSWPEg62uR3aQuPjzEADmdYRdoD8VYj/mIZSovJRnizlFI5lBlC58hP2k64E8p3d24aVwbSqFYzh+02JN4LU1HS+Ftk/360Z1gxNRSLuEW1Pdckm0i97XIT+nwTndSByNlZy7i7RHVhZPxDmghnEqfR1qfAaWhxPkFBW3nEbqUXIkhHfzSwSsqfL6qyXQcQbGZ8aBCS0Gt2zmvjZeVMONm+TrdUMGLITIcpt6k2Z6xz3/scPA==
X-YMail-OSG: rwuanroVM1lYn3WyhgfoV1oxLEc6iBeiJgJ_IY9rjkM12_tt1ECyKD2QI_vDdKs
S1aL9uOQwGqLMnymrwifR29pELPBQpCjAFoNvP7qRUNNoFEBbfVzArU4P76fwp82T9OvkF0EDn1K
JGxxpCG8nrpDjPK8mpSnnR67nTSCbN5rIkfVN_rjm1ABft01ZTLefVo9O_t8yeKLGGcafQe7IAl6
k6pd6QYj.NsCvxn_I.sZvnynx_SnXuMM.Kr9JniAXoEgXTxT7usC6l9E.VabN6dtlb2LSzPt3JkG
sekKiS2.e15R6arA_qdOzRA4REqmBKSuVGkvYjh3lmMyyB.wRmusW_ctOIw4RvN9eAFFdR7hdJR3
E1ElSqr1EXEf_.c.K_HY.3fyW8A8u_DaM4nzOeyTnYEtHQV0OHZKsfmCRq5xFrFeJtsSA.16bkvQ
ewLRsbaPi3SOaYGAVSbskJ1V5mDZg6KtG8v9M0JTJMbD4YK_L7NTZ84zG2lw6kG65rN5cUIG6zKp
PKwzVvNw5.AGRR0yugQHSvqx3VH_KFNhrTWoOK9WKy.A4gxIkHxx9gis_ILUKPOzU27VMtilcfJp
ORAxm.0vfkCcsao0sv2rw_8ViEh7cz7f3IpvmnZ3qjDSYJVfGbDts8kysdKr519i4zJukc8.rW4B
rjMTI19qWeQ9pth3xJ_9j4lv5dz.S9AkiXJ9U7nOggzopTYh9U85ODGbKCDG7w0g2eoBqWg9DFQ.
xMd3.LEdvCm.bY5ZMZ18xtB.MByIPGjf4R_P_fksK3R4XBPLFOr.7_SFINFmpnTSJGEFFnvNRqtq
y5Lr8VKEQXpynwXj7lXncgsU3JdamYaHTyNtpTKJRwvbUJboW_iy_Kri5DgFw5PAtJ1psTqX5eaF
_iZf0iTAdV883iH5GB515DTth4SxOCetrdBPOfaLyRepGeZbDAKXLEt59OILUAhE8VfvDvbYvA9S
t7JLzGfM1ASmB1SngChH_520rQvOn9sreHFQs2yHe_wF9Fc8XfWVbEiH52ytAlloco_W1CpMbDMj
OCcHvfQ7sLKha
Received: from sonic.gate.mail.ne1.yahoo.com by sonic305.consmr.mail.ne1.yahoo.com with HTTP; Mon, 11 Feb 2019 13:01:01 +0000
Date: Mon, 11 Feb 2019 13:00:59 +0000 (UTC)
From: OFFICE <[email protected]>
Reply-To: OFFICE <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.13027 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:66.0) Gecko/20100101 Firefox/66.0
Content-Length: 3062
X-Spam-Status: Yes, score=10.5
X-Spam-Score: 105
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: UNITED BANK FOR AFRICA. UBA HOUSE, 57, MARINA, P.O.BOX. 2406,
LAGOS NIGERIA 11/02/2019 Attention Beneficiary [...]

Content analysis details: (10.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officemail4good213[at]yahoo.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officemail4good213[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officemail4good213[at]yahoo.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.163.185.147 listed in list.dnswl.org]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
X-Spam-Flag: YES
Subject: ***SPAM*** WELCOME TO UNITED BANK FOR AFRICA


UNITED BANK FOR AFRICA.
UBA HOUSE, 57, MARINA,
P.O.BOX. 2406, LAGOS NIGERIA

11/02/2019

Attention Beneficiary

DHL Tracking Last delivery (2234039102)

WELCOME TO UNITED BANK FOR AFRICA

Re: Approval Slip Confirmation / Payment Information

With respect to the foregoing business matter regarding the final release and
subsequent transfer of your approved payment valued at the sum of $10,500,000.00 USD
via ATM Card, I write to officially inform you that your payment order by Automated
Teller Machine (ATM) Card System has been successfully processed today and the
US$10,500,000.00 has been loaded into an ATM Card Hence, in compliance with the
Payment Procedure of the FINANCIAL BANK PL C, you are expected to settle in full a
"Processing/Shipping Fee" estimated to the value of $250, USD before final delivery
of funds can be effected to your designated address.

You are advised that a maximum withdrawal value of $20,000.00 USD is permitted on
withdrawal per day with a minimum of $1000 per withdrawal and we are duly inter
switched, meaning you can make withdrawal in any location and ATM Center of your
choice. We have concluded delivery arrangement with FedEx COURIER SERVICE, to be
fully insured by Nice Insurance Corporation. In view of this development, you are
requested to immediately offset the Courier and Insurance charges of $250 USD
through the Company given payment instruction as follows to enable the receiving
company insure and deliver the card to your address;

Send the Transfer Number to this office for further action. Be informed that
delivery will be made to your address in 4 hours after our confirmation of this
payment for delivery, as you know that the delivery fee receipt will be attach on
your payment delivery documents to avoid being delay by the customs. Please advice
this office your preferred time of visitation for delivery and be informed that your
valid ID card must be presented to the dispatchers before release will be done.

TAKE NOTE. Be aware that you are the only person left to receive your ATM Card out
of the (6) Six beneficiaries and for your confirmation go to FedEx Express Delivery
Services website (w. FedEx.com) and you will see the one we delivered (2234039102)
,) Track FedEx Express Shipments with (.DHL.com)

I stated the above for you to know that you are the only person left to receive your
ATM Card. You have to stop any further communication with anybody or office for you
to receive your own ATM Card without any further delays.

If you will follow my sincere advice I will urge you to contact me immediately to
make things less complicated to you. Thanks.

When you reply me back, i will send you the western union receiver information of
the $250, To enable you send the fee across to us here in Nigeria, OR IF YOU WANT TO
SEND TO OUR UBA UNITED BANK FOR AFRICA ACCOUNT WE WILL PROVIDE TO YOU THE ACCOUNT,

I want you to track the last delivery, DHL.COM Tracking 2234039102

I will wait to hear from you ASAP.

Rev Moses Eze

Managing Director

Swift Card Consultants Payment Center.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: Google [Bot], Majestic-12 [Bot] and 31 guests