Check Scams, Debt Collection scams and other financial scams.
#25323 by J barber Wed Mar 31, 2010 2:42 pm
I received an email from a pastor in Kenya asking for money to complete a land purchase. I know the man, but not well. So I asked him to provide me the email of the seller of the land. He complied and gave me [email protected] I emailed Virginia and felt comfortable that the deal was solid. Now I'm having second thoughts. I fear Virgina Syombua is a fictitious name for the Kenyan man, and I have helped put a lot of money into his pocket. I googled the IP address of Virginia's email (found it in email properties). It is is 98.136.167.130. This IP is identical to the IP address for a known scammer in Africa who went by "Amaro Bello" which is 98.136.167.130 My fear is that my Kenyan friend has used both Amaro Bello and Virginia to do dirty work. On the plus side the IP of the seller is different from the Kenyan man asking for help, although both are yahoo accounts (as is Amaro Bello). The entire info info for the "seller" is: web113910.mail.gq1.yahoo.com (98.136.167.130) by col0-mc4-f9.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959). The complete info for the Kenyan man's email is: web36305.mail.mud.yahoo.com (209.191.91.182) by col0-mc4-f40.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959)

Any advice is welcome. Thanks.
Advertisement

#25331 by Crispy Duck Wed Mar 31, 2010 3:37 pm
Hello, JBarber & welcome. :)

Sadly, all the I/P's you posted are Yahoo (Sunnyvale, USA).

Could you please post any relevant emails with the full headers (removing your own personal details)?

If you don't know how to get the headers, please let us know which mail program you use & we can help.
#25335 by Arnold Wed Mar 31, 2010 4:06 pm
Welcome to Scamwarners. It's not really possible to tell based on what you have told us. He doesn't seem to be offering you anything so it's not a 419 scam as such. Which doesn't mean it's it's not a scam.
J barber wrote: I know the man, but not well.

If all your contact has been via the Internet, you may not know him at all. The Internet makes it too easy to deceive people.

#27378 by J barber Mon Apr 26, 2010 10:47 am
Crispy Duck

Sorry to take so long to get back. I am not sure how to post the full header. I use hotmail as mail program.
#27392 by Jillian Mon Apr 26, 2010 12:46 pm
Welcome J barber.

To find email headers with hotmail:

While looking at the index of your inbox, right click on the subject line for the email you want to find the header on and choose "view source" from the options that show up in the drop down menu. A new window will open with the full email, including header.

Regarding your situation, as Arnold said: If you have only known this paster over the internet, it is very possible that it has all been a deception.

Have you sent a payment to a scammer with Western Union and now realize it's a scam? If the payment has not been picked up, you can cancel it immediately! 1-800-448-1492

Follow ScamWarners on Twitter: http://twitter.com/ScamWarners
#27406 by J barber Mon Apr 26, 2010 2:11 pm
This is all the info, minus message...I assume this is the header. Thanks.


X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MDtTQ0w9MA==
X-Message-Status: n:0
X-SID-PRA: Virginia Syombua <[email protected]>
X-AUTH-Result: NONE
X-Message-Info:

Received: from web113910.mail.gq1.yahoo.com ([98.136.167.130]) by col0-mc4-f9.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 23 Feb 2010 01:10:46 -0800
Received: (qmail 22902 invoked by uid 60001); 23 Feb 2010 09:10:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1266916246; bh=+hMwaACdPQkNjSFx8JHFO9r/VM/d0b2dmjDYuk7isVs=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=
Message-ID: <[email protected]>
X-YMail-OSG:
Received: from [41.212.69.167] by web113910.mail.gq1.yahoo.com via HTTP; Tue, 23 Feb 2010 01:10:45 PST
X-Mailer: YahooMailRC/300.3 YahooMailWebService/0.8.100.260964
References: <[email protected]>
Date: Tue, 23 Feb 2010 01:10:45 -0800 (PST)
From: Virginia Syombua [email protected]
Subject: Re: Payment for Land
To: Removed
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1481519497-1266916245=:22899"
Return-Path: [email protected]
X-OriginalArrivalTime: 23 Feb 2010 09:10:46.0268 (UTC) FILETIME=[156F13C0:01CAB468]

Edited to remove member name and email address and tidy the header to make it easier to see the important bits ;) Ralph
#27510 by J barber Wed Apr 28, 2010 10:03 am
41.212.69.167 Kenya (Nairobi)

Not sure what this means or how it helps my question. Sorry.

Who is online

Users browsing this forum: No registered users and 11 guests