by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id UN86O4MzwltlBAAAjbubUg
for <>; Sat, 13 Oct 2018 11:03:47 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 13 Oct 2018 11:03:47 -0700
Received: from mail-qk1-f196.google.com ([209.85.222.196]:34087)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gBOGN-0000Hr-6F
for ; Sat, 13 Oct 2018 11:03:47 -0700
Received: by mail-qk1-f196.google.com with SMTP id p6-v6so9606210qkg.1
for <>; Sat, 13 Oct 2018 11:03:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=5fcljvh3J7Zf4qEnOun9sCfdtxuSgKjMjtTxWme9RuM=;
b=AEYo+XucLBW3LJAsz6aKzcjFKstFtTeeYYXW/spDydXExncgrWGkpPI53m5EgcFr5j
GoDEtgrcZjYUjvIRStvwgB0/ilv+y4l+BxmxhlOe1fz1eurp9kevvLpKr2L6qUi3Nutg
zNSoAL8BjkeRFkUwPJ+LcWalsX23akvK8XTVq+AiL2gtT4mYF4kgZgdCs1Up6aeI4rNu
O0ThkggbweEzXkwaIgURmru46+2UZff3V1/1fTY+9oRoU+m5uFkBtTcxs5OzizO556Z6
hCSh4kDy753JWvhLJFnFH1aBt7wHgOP9qVmenOhREXRF15zcuVxN0oDG2nIPcDO1913f
52Cg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=5fcljvh3J7Zf4qEnOun9sCfdtxuSgKjMjtTxWme9RuM=;
b=sbc1TnNkkAQIE80gC9L3eG86rUt1oMK2MsQsOEHQtnmnbyzEf2vDDqCba5Y5I/WCMI
ZbZhQ+dDT1eYHbhe5msL9orQ7Op/JhjxNDVomlmuFCO2vwjdwIpPrYoRT38IMgqcj9tm
LyXPE3ebmG18w6lKCU4JDu3F6lTu3Ss/aVyRYrl0TOOR/jHrP8jF7XbtbLeKXfnQdqSx
h+AEfgHqdzTdqyAa/evhOdR5HYP46O5PGgqui0P7FaECI6pCkFJ447T5BHoiWuAaRMKP
O3Hb/sTZX1Azwmz8mheAAtCheFp5jKmr4A4rFthpYDflkxOxBIEpPXbG8qEivEkSNxua
IfDA==
X-Gm-Message-State: ABuFfogge/eUegLs+lqmvWWsa5AFkUPSyDr46iik0IpfQ8RFusOcCxut
sYMy1j+Lm6bPe0DSGXFBtHdx+tp9uXkYQTmB/f+qo3kk
X-Google-Smtp-Source: ACcGV61pGTxYFDhKDQB3l950KavbBhFrVLAMz1Mg4MHuKiCCe/ZrfOKS4a/WMaUlgdKjbEIz00/0tTwtiT7gh21AQAc=
X-Received: by 2002:a37
: with SMTP id q20-v6mr10423411qkh.248.1539453782001;
Sat, 13 Oct 2018 11:03:02 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a0c:a105:0:0:0:0:0 with HTTP; Sat, 13 Oct 2018 11:02:58
-0700 (PDT)
Reply-To: [email protected]
From: Jerome Marcus <[email protected]>
Date: Sat, 13 Oct 2018 19:02:58 +0100
Message-ID: <CAP8UTqFjUjRgrYyBp_XRUp_w8wTKtBPz+QihgsCM-YMF3Bdq-g@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=15.2
X-Spam-Score: 152
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FEDERAL BUREAU OF INVESTIGATION - F.B.I WEST AFRICA/SAHEL
REGION DIRECTORATE, Foreign Operation Annex, Cotonou, BENIN REPUBLIC. Tel
Call/SMS: +1 (202) 677 3984 To: beneficiary, This is to bring to your notice
that we have attempted for the 10th record time contacting you on this email
account and on your phone number as provided to us by the US Ambassador to
African Union. In all the attempts you neither replied to our 10th previous
email sent to you nor give us a call back by phone. [...]
Content analysis details: (15.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.196 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(inlandrevenueunitedstate1[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (inlandrevenueunitedstate1[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FBI_SPOOF Claims to be FBI, but not from FBI domain
0.0 FBI_MONEY The FBI wants to give you lots of money?
0.0 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** FEDERAL BUREAU OF INVESTIGATION - F.B.I
FEDERAL BUREAU OF INVESTIGATION - F.B.I
WEST AFRICA/SAHEL REGION DIRECTORATE,
Foreign Operation Annex,
Cotonou, BENIN REPUBLIC.
Tel Call/SMS: +1 (202) 677 3984
To: beneficiary,
This is to bring to your notice that we have attempted for the 10th
record time contacting you on this email account and on your phone
number as provided to us by the US Ambassador to African Union. In all
the attempts you neither replied to our 10th previous email sent to
you nor give us a call back by phone.
Be informed that this is our last attempt to contact you for the
compensation payment of your overdue rightful entitlement totaling
US$15.8Million made available by the joint efforts of Federal
Governments of Nigeria, Ghana, Burkina Faso, Benin Republic and Kenya.
This is a compensation entitlement agreed upon and being fulfilled by
the African Union as agreed and mandated upon the above mentioned
African governments in the last General Assembly meeting in February,
2018.You are by this notice to resubmit your correct and accurate data so
that the ATM DEBIT CARD loaded with the US$15.8Million will be shipped
to you through Airmail without further delay.The US$15.8Million
compensation payment is already loaded in an ATM DEBIT CARD with the
PIN CODE as 0819.
This is to further educate you that whoever that asks you or is asking
you for ATM CARD Pin Code fees(payment) is a fraud and you should
immediately discontinue any email or telephone communications/contacts
with forthwith. And you are also encouraged to report the person to us
immediately. We are the only legitimate and genuine office assigned
with the obligation to getting your payment from Africa.
Please resubmit your personal information as requested below to enable
us ship your ATM DEBIT CARD to you.
Data required:
YOUR NAME IN FULL:
CONTACT ADDRESS (OFFICE OR HOME):
TELEPHONE# (MOBILE & HOME):
YOUR JOB & JOB TITLE:
DATE OF BIRTH:
COPY OF YOUR ID:
We expect your reply as soon as possible.
Thank you for your anticipated response.
Yours humbly,
Jerome Marcus.
Director, Federal Bureau of Investigation - F.B.I
WEST AFRICAN/SAHEL REGION Annex,
Cotonou BENIN REPUBLIC.
Tel: +1 (202) 677 3984
( [email protected] )
Delivered-To:
Received: from
by with LMTP id UN86O4MzwltlBAAAjbubUg
for <>; Sat, 13 Oct 2018 11:03:47 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 13 Oct 2018 11:03:47 -0700
Received: from mail-qk1-f196.google.com ([209.85.222.196]:34087)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gBOGN-0000Hr-6F
for ; Sat, 13 Oct 2018 11:03:47 -0700
Received: by mail-qk1-f196.google.com with SMTP id p6-v6so9606210qkg.1
for <>; Sat, 13 Oct 2018 11:03:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;bh=5fcljvh3J7Zf4qEnOun9sCfdtxuSgKjMjtTxWme9RuM=;
b=AEYo+XucLBW3LJAsz6aKzcjFKstFtTeeYYXW/spDydXExncgrWGkpPI53m5EgcFr5j
GoDEtgrcZjYUjvIRStvwgB0/ilv+y4l+BxmxhlOe1fz1eurp9kevvLpKr2L6qUi3Nutg
zNSoAL8BjkeRFkUwPJ+LcWalsX23akvK8XTVq+AiL2gtT4mYF4kgZgdCs1Up6aeI4rNu
O0ThkggbweEzXkwaIgURmru46+2UZff3V1/1fTY+9oRoU+m5uFkBtTcxs5OzizO556Z6
hCSh4kDy753JWvhLJFnFH1aBt7wHgOP9qVmenOhREXRF15zcuVxN0oDG2nIPcDO1913f
52Cg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id:subject:to;
bh=5fcljvh3J7Zf4qEnOun9sCfdtxuSgKjMjtTxWme9RuM=;
b=sbc1TnNkkAQIE80gC9L3eG86rUt1oMK2MsQsOEHQtnmnbyzEf2vDDqCba5Y5I/WCMI
ZbZhQ+dDT1eYHbhe5msL9orQ7Op/JhjxNDVomlmuFCO2vwjdwIpPrYoRT38IMgqcj9tm
LyXPE3ebmG18w6lKCU4JDu3F6lTu3Ss/aVyRYrl0TOOR/jHrP8jF7XbtbLeKXfnQdqSx
h+AEfgHqdzTdqyAa/evhOdR5HYP46O5PGgqui0P7FaECI6pCkFJ447T5BHoiWuAaRMKP
O3Hb/sTZX1Azwmz8mheAAtCheFp5jKmr4A4rFthpYDflkxOxBIEpPXbG8qEivEkSNxua
IfDA==
X-Gm-Message-State: ABuFfogge/eUegLs+lqmvWWsa5AFkUPSyDr46iik0IpfQ8RFusOcCxut
sYMy1j+Lm6bPe0DSGXFBtHdx+tp9uXkYQTmB/f+qo3kk
X-Google-Smtp-Source: ACcGV61pGTxYFDhKDQB3l950KavbBhFrVLAMz1Mg4MHuKiCCe/ZrfOKS4a/WMaUlgdKjbEIz00/0tTwtiT7gh21AQAc=
X-Received: by 2002:a37
: with SMTP id q20-v6mr10423411qkh.248.1539453782001;Sat, 13 Oct 2018 11:03:02 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a0c:a105:0:0:0:0:0 with HTTP; Sat, 13 Oct 2018 11:02:58
-0700 (PDT)
Reply-To: [email protected]
From: Jerome Marcus <[email protected]>
Date: Sat, 13 Oct 2018 19:02:58 +0100
Message-ID: <CAP8UTqFjUjRgrYyBp_XRUp_w8wTKtBPz+QihgsCM-YMF3Bdq-g@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=15.2
X-Spam-Score: 152
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FEDERAL BUREAU OF INVESTIGATION - F.B.I WEST AFRICA/SAHEL
REGION DIRECTORATE, Foreign Operation Annex, Cotonou, BENIN REPUBLIC. Tel
Call/SMS: +1 (202) 677 3984 To: beneficiary, This is to bring to your notice
that we have attempted for the 10th record time contacting you on this email
account and on your phone number as provided to us by the US Ambassador to
African Union. In all the attempts you neither replied to our 10th previous
email sent to you nor give us a call back by phone. [...]
Content analysis details: (15.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.196 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(inlandrevenueunitedstate1[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (inlandrevenueunitedstate1[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FBI_SPOOF Claims to be FBI, but not from FBI domain
0.0 FBI_MONEY The FBI wants to give you lots of money?
0.0 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** FEDERAL BUREAU OF INVESTIGATION - F.B.I
FEDERAL BUREAU OF INVESTIGATION - F.B.I
WEST AFRICA/SAHEL REGION DIRECTORATE,
Foreign Operation Annex,
Cotonou, BENIN REPUBLIC.
Tel Call/SMS: +1 (202) 677 3984
To: beneficiary,
This is to bring to your notice that we have attempted for the 10th
record time contacting you on this email account and on your phone
number as provided to us by the US Ambassador to African Union. In all
the attempts you neither replied to our 10th previous email sent to
you nor give us a call back by phone.
Be informed that this is our last attempt to contact you for the
compensation payment of your overdue rightful entitlement totaling
US$15.8Million made available by the joint efforts of Federal
Governments of Nigeria, Ghana, Burkina Faso, Benin Republic and Kenya.
This is a compensation entitlement agreed upon and being fulfilled by
the African Union as agreed and mandated upon the above mentioned
African governments in the last General Assembly meeting in February,
2018.You are by this notice to resubmit your correct and accurate data so
that the ATM DEBIT CARD loaded with the US$15.8Million will be shipped
to you through Airmail without further delay.The US$15.8Million
compensation payment is already loaded in an ATM DEBIT CARD with the
PIN CODE as 0819.
This is to further educate you that whoever that asks you or is asking
you for ATM CARD Pin Code fees(payment) is a fraud and you should
immediately discontinue any email or telephone communications/contacts
with forthwith. And you are also encouraged to report the person to us
immediately. We are the only legitimate and genuine office assigned
with the obligation to getting your payment from Africa.
Please resubmit your personal information as requested below to enable
us ship your ATM DEBIT CARD to you.
Data required:
YOUR NAME IN FULL:
CONTACT ADDRESS (OFFICE OR HOME):
TELEPHONE# (MOBILE & HOME):
YOUR JOB & JOB TITLE:
DATE OF BIRTH:
COPY OF YOUR ID:
We expect your reply as soon as possible.
Thank you for your anticipated response.
Yours humbly,
Jerome Marcus.
Director, Federal Bureau of Investigation - F.B.I
WEST AFRICAN/SAHEL REGION Annex,
Cotonou BENIN REPUBLIC.
Tel: +1 (202) 677 3984
( [email protected] )
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
