Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#388441 by buried under 419s Wed Jun 12, 2019 9:40 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id CHOGCGRPAV1JEQAAjbubUg
for <>; Wed, 12 Jun 2019 12:15:48 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 12 Jun 2019 12:15:48 -0700
Received: from sonic311-24.consmr.mail.gq1.yahoo.com ([98.137.65.205]:42139)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hb8io-00018t-OK
for ; Wed, 12 Jun 2019 12:15:47 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1560366906; bh=ucPESVnGJOINfB14KtBhVXZS+CZnelUJU0SoN5yjTuU=; h=Date:From:Reply-To:Subject:References:From:Subject; b=D3iOC4havd7ON3TZE+ieoZSxJAfbsm/j5HlXVmWH7nzCgWvVhXf0J4rGsI2u+UkiCXMBLBB5b3R8zOcnw7rel0GB79fffsvoxeZR/fH0LgxoO5wwAEFsxZhP23om6bM9/oY8dfGUlCgDf7ZlOlb9JWjyxjC2R9eS9uFMOLXkgRAkA5AZul1AxKD5AFc8QZBO7VBPO+82cYSZiIov3aPg+LtNwdwMLgQvxW7gPg/BQqG5sJ1XQsyWnQbKHIvRbgJX4YmpkdGl3YQKF5B6m+4VvBqLlmVIbxN8ryNLNDvqNd2vOU/5AfdWPW/AJfcNBBxyI8ljNugbirQ+O2ftrNXRWQ==
X-YMail-OSG: azvbapwVM1n66ZkyMBX0xX2B_5vZAx0wNt_y4KZoWDtzAY79cY6rKcvMbS5ctf8
1eKrL_uezV0Hgoz3GylTGjhS0EFd5CIiF8NFTkH3Suk2Zqk8XvwzApkZvmrJ9Czb17oOhjEiPuqn
bxEr8cWyHCvNKw3lX1wjhTWB_pCzecWflID.GwIBIXZyknL9sKrpZjBlDzO.4.93aA88ph3rfBfE
gddhQRUcFvZEmHdkwe1luanvuFY205bMiYuQybQJKD0Fu6hmkkcVaZaEkG9X9h16HhKV5HvpvQFq
y9uunEqaSwnyy7yrmZjzdv_8S9c6gLcTYXpYNtv2PDYb1zKQdqlrZvnL.WIrOwKrgAu_74Gx.6nA
zdyzoao4KVnj8lTL7ggN5BiqJObFuTn.NTDGSr6b9rlcxzGdSc.G9kz1PXIYZ2NvE7fdlt5T7GYt
n5XJz2E5dgXgR0iNBkWm9Ht0HC6VSlnJ4M77soBYMOql8_0ETprpyQQo2gzFZI52cxfy43SnYsfc
O2GRdWk4GugB3QghKwrCuqG2qzXsxs.qu24JKNeytuA34.5nOW.yvuKSil.dDBOtZPvl4ThJI4mr
l9Un3X0Cxvmjxp0hSTit2aRLtdTXw9CKjFpTJuF1usUKrVP9t0If653attBrseOVgrftrRhxRPHb
3bzjV0JBr30BBp8JQ.y3kmUbfe8r8YN_RYOJdCAJLSgNrjg0IKW2R.4DYoEKzvWd8ky1Adz8tsyd
6ubHtwSkwlE0vhDlpXHn1WhEYySQN22P8sRvuGiEDI6RdVc6Mermzg0vNHOJlECI8fuqJ86ike0x
gtse0qAztt9n6E7cP0mfmmUe25M1YqnhQ7Ig3H9mT141Z8JS.TWFxvstJD2jG1glTKmximQSvGB6
8opeDnmM9UV.15d7Z7ZyGssdN0WRPQZq5RH2PLCPFoUo_uriGw1cHWm_SeeS2kMwN60wYzIxSDy4
E1hNL4Nz_myCufdRiNCWri1ocu9ndrElbMrTLD_81usjXLrZz6hCc5IEc5BEy6umubhZmMKkPCos
zUf3VH90cdbmeJHcP3Ow0TIxeo3jqq2C1sD48PWfujGiPM6_MAd6Ihv4sBlWjlkz5HLRb9awp_rj
bHQGaYeG1dj6mTCau_tFpjni8.DwBE5.aBg4QgEiGva9TxKMMa7VcA_GuvHLoKb52OQFh79UnCzn
NLaMgg0Gqan.QLpTTPvtcNTYZ9dwGXBMo.E7eJ0GTSjYV.StU3MK4vfpAOec-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.gq1.yahoo.com with HTTP; Wed, 12 Jun 2019 19:15:06 +0000
Date: Wed, 12 Jun 2019 19:15:02 +0000 (UTC)
From: "Mr.Dave West" <[email protected]>
Reply-To: "Mr.Dave West" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.13837 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
Content-Length: 1560
X-Spam-Status: Yes, score=21.5
X-Spam-Score: 215
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Attn:My Dear Good Friend. The sum of $4.5 million. out of
your over due total sum has been approved for payment through ATM cash card
system after all attempts to pay you through bank, and diplomatic courier
failed. The approved sum has been programmed into the ATM cash card which
will be dispatched to you through your address upon reconfirmation. I have
made several attempts to contact you and this is the 3rd and perhaps the
last email to you in respect to this matter. Meanwhile, I received a power
of attorney from one SUSAN GERRAD from USA purportedly issued by you asking
us to change the fund beneficiary to her name hence we are seeking for your
confirmation as soon as possible. to this end, you should Kindly Re-confirm
these information to me. [...]

Content analysis details: (21.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.2 MONEY_BACK BODY: Money back guarantee
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[98.137.65.205 listed in list.dnswl.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrdavewest09[at]hotmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrdavewest790[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mrdavewest790[at]gmail.com)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.1 MONEY_ATM_CARD Lots of money on an ATM card
1.0 MONEY_FORM Lots of money if you fill out a form
1.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Treat As Urgent

Attn:My Dear Good Friend.

The sum of $4.5 million. out of your over due total sum has been approved for
payment through ATM cash card system after all attempts to pay you through bank, and
diplomatic courier failed. The approved sum has been programmed into the ATM cash
card which will be dispatched to you through your address upon reconfirmation. I
have made several attempts to contact you and this is the 3rd and perhaps the last
email to you in respect to this matter. Meanwhile, I received a power of attorney
from one SUSAN GERRAD from USA purportedly issued by you asking us to change the
fund beneficiary to her name hence we are seeking for your confirmation as soon as
possible. to this end, you should Kindly Re-confirm these information to me.

FULL NAME:-------------------------------
ADDRESS:---------------------------------
COUNTRY:---------------------------------
TELEPHONE:-------------------------------
MOBILE:----------------------------------
ALTERNATIVE EMAIL:-----------------------
YOUR ID OR INTERNATIONAL PASSPORT:-------

NOTE: The actual fees for shipping your ATM card is just $565 nothing more and no
hidden fees of any sort! Upon receipt of payment the delivery officer will ensure
that your package is sent within 24 working hours. Because I am very sure of
everything I am giving you a 100% money back guarantee if you do not receive
payment/package within the next 24hrs after you have made the payment for shipping,


NOTE:If you are not ready to pay for the delivery fee,do not attempt to reply.

Regards

Mr.Dave West

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 132 guests