The world's premier anti internet scam, anti fraud information website 

  • Mr. David Burrel [email protected]

  • 419 scam database with 50,000+ reports. Verify suspicious inheritance emails, lottery wins, and money transfer requests. Names, emails and bank details exposed.
Who are you really talking to? Check their location - InfoSniper
419 scam database with 50,000+ reports. Verify suspicious inheritance emails, lottery wins, and money transfer requests. Names, emails and bank details exposed.
  Been Targeted by This Scam?

Learn how to report a scam to the FBI, FTC, and the right authorities. Been asked to invest in crypto? Read about pig butchering scams. Received a suspicious check? Learn about fake check scams. Not sure if it's real? Use our free Scam Checker Tool.

  by Tim Atem
 
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.216.50.54
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.107.170.86 with SMTP id t83csp865633ioe;
Thu, 25 Jun 2015 17:10:37 -0700 (PDT)
X-Received: by 10.66.119.239 with SMTP id kx15mr97506132pab.156.1435277436990;
Thu, 25 Jun 2015 17:10:36 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mbkd0238.ocn.ad.jp (mbkd0238.ocn.ad.jp. [153.149.233.39])
by mx.google.com with ESMTP id do1si47492013pdb.32.2015.06.25.17.10.31;
Thu, 25 Jun 2015 17:10:36 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 153.149.233.39 as permitted sender) client-ip=153.149.233.39;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 153.149.233.39 as permitted sender) smtp.mail=[email protected]
Received: from mf-smf-ucb005.ocn.ad.jp (mf-smf-ucb005.ocn.ad.jp [153.149.231.4])
by mbkd0238.ocn.ad.jp (Postfix) with ESMTP id B8CC8800C38;
Fri, 26 Jun 2015 09:10:30 +0900 (JST)
Received: from mv-osn-hcb006.ocn.ad.jp (mv-osn-hcb006.ocn.ad.jp [60.37.51.254])
by mf-smf-ucb005.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id t5Q0ATDc048749;
Fri, 26 Jun 2015 09:10:29 +0900
Received: from mzcstore172.ocn.ad.jp (mv-osn-hcb006 [60.37.51.254])
by mv-osn-hcb006.ocn.ad.jp (Postfix) with ESMTP id 5003A30833D;
Fri, 26 Jun 2015 09:10:27 +0900 (JST)
Date: Fri, 26 Jun 2015 09:10:24 +0900 (JST)
From: MR MIKE <[email protected]>
Reply-To: MR MIKE <[email protected]>
Message-ID: <[email protected]>
Subject: ATTENTION
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [41.216.50.54]
To: undisclosed-recipients:;
ATTENTION

We want to inform you that your payment of $4000 has been sent today through
western Union and I want you to contact MR.David Burrel immediately with his
email address email ([email protected]) and here is
western union information to pick up your first payment $4000.00.usd today .
The money is available for pick up by receiver (you) if you check on our website
but you can not cash it due to its restriction from our head office for security reason
because it has stayed over the programmed time as we have been trying to reach
you for some days now but it has not been fruitful. Hence, the transaction was blocked
for security reason to prevent hackers from having access to it.

HERE IS THE INFORMATION OF THE ONE WE SENT TODAY TO YOU BUT IT WILL
REMAIN ON HELD UNTIL YOU SEND US OUR TRANSFER CHARGES OF $105 BEFORE
WE CAN RELEASE IT TO YOU SO YOU CAN TRACK IT WITH OUR
Irrespective of the fact that it displays available for pick up when you track it, a clause
was placed on it for security reasons until we are sure you are available. Therefore you
can not cash it in any of our office due to the restriction from our head office which was
a security measure because the money have been on air for three days now and maybe at
risk. Hence, the mtcn has to be reactivated to enable you start cashing your fund from any
western union office in your city, vicinity, state. Etc. The reactivation of the MTCN will
cost you only $105 Once this is paid, our head office would release the fund on hold
so can start cashing your fund. To confirm this, please log on to
(http://wumt.westernunion.com/asp/orderS ... try=global)
and enter the sender’s info and mtcn below and click check status to see the availability
of the transfer.and all your total funds is $5.8MILLON USD

WESTERN UNION MONEY TRANSFER
Sender’s Fist name: HERVe
Sender’s Last Name: ADJENIA
Money Transfer Control Number
Question: Who Is Great
Answer: God
Amount: $4000.00USD
(MTCN) : 382-785-0242

FINALLY UPDATE US WITH THE $105. USD TO ENABLE US PROCEED ON YOUR PAYMENT
IMMEDIATELY, BELOW IS THE INFORMATION YOU WILL USE TO REMIT THE $105. USD
VIA WESTERN UNION MONEY TRANSFER BEEN OUR TRANSFERRING CHARGE FOR
YOUR $4000.00 USD.
1.RECEIVER NAME:……… emmanuel uzo
2.COUNTRY:………………...BENIN REPUBLIC
3.CITY :…………………..COTONOU
4.TEST QUESTION:…………A
5.TEST ANSWER:…………..B
6.AMOUNT:………………$105. USD
7.SENDER NAME……..
8.MTCN……

YOUR URGENT RESPOND IS HIGHLY NEEDED.
With due respect please get back to me urgently after tracking the transaction online so I can
instruct you on how to send the $105. to us for the reactivation of the MTCN for the pick up of you
first $4000 to be picked up today.

CONTACT EMAIL ([email protected])
Best Regards
  by Tim Atem
 
Using the same email address [email protected]

from: MR MIKE <[email protected]>
to:
date: Sun, Jul 12, 2015 at 2:39 PM
subject: Re: ATTENTION

The website www.wutransfer-confirmation.bg.tf is in the process of being reported for fraud.
Delivered-To: <snipped>
Received: by 10.202.199.78 with SMTP id x75csp622666oif;
Sun, 12 Jul 2015 12:39:26 -0700 (PDT)
X-Received: by 10.194.184.140 with SMTP id eu12mr59342071wjc.78.1436729965585;
Sun, 12 Jul 2015 12:39:25 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-wg0-x244.google.com (mail-wg0-x244.google.com. [2a00:1450:400c:c00::244])
by mx.google.com with ESMTPS id gu8si8200436wib.92.2015.07.12.12.39.24
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 12 Jul 2015 12:39:25 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:400c:c00::244 as permitted sender) client-ip=2a00:1450:400c:c00::244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:400c:c00::244 as permitted sender) smtp.mail=[email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-wg0-x244.google.com with SMTP id k9so10285815wgf.1
for <<snipped>>; Sun, 12 Jul 2015 12:39:24 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.180.9.168 with SMTP id a8mr16490654wib.77.1436729964744;
Sun, 12 Jul 2015 12:39:24 -0700 (PDT)
Received: by 10.27.89.76 with HTTP; Sun, 12 Jul 2015 12:39:24 -0700 (PDT)
In-Reply-To: <CABvzxd4KzA6uBvFPVd9jjEbwWCdbg6WmWGZTeVrcKQRCVX4C3Q@mail.gmail.com>
References: <snipped>
Date: Sun, 12 Jul 2015 12:39:24 -0700
Message-ID: <CADxaUHPKpFFvzBa6dZTazQf3V8smyDvBoBefjcKBHEQhxkfTuA@mail.gmail.com>
Subject: Re: ATTENTION
From: MR MIKE <[email protected]>
To: <<snipped>>
Dear Western Union Customer!!

We the management of Western Union Indonesia Branch wish to inform you that
approved $4,500 has been sent succesful this morning,you can view your
payment online by clicking the link below and Login your email account.

Click here to view your first payment of $4,500 online:
( wutransfer-confirmation.bg.tf )

Just click on the above link and Login accurately to view your payment
online.

Sincerely
Mr JOHN AKA
From Western Union
Canada
  by Tim Atem
 
And another one from [email protected]
Delivered-To: <snipped>
Received: by 10.202.199.208 with SMTP id x199csp666487oif;
Sat, 4 Jul 2015 09:47:42 -0700 (PDT)
X-Received: by 10.180.11.174 with SMTP id r14mr38867007wib.72.1436028462480;
Sat, 04 Jul 2015 09:47:42 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-wi0-x231.google.com (mail-wi0-x231.google.com. [2a00:1450:400c:c05::231])
by mx.google.com with ESMTPS id fu6si36322915wic.110.2015.07.04.09.47.41
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 04 Jul 2015 09:47:42 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:400c:c05::231 as permitted sender) client-ip=2a00:1450:400c:c05::231;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:400c:c05::231 as permitted sender) smtp.mail=[email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-wi0-x231.google.com with SMTP id a1so177541874wig.0
for <<snipped>>; Sat, 04 Jul 2015 09:47:41 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.180.73.145 with SMTP id l17mr38824610wiv.39.1436028461481;
Sat, 04 Jul 2015 09:47:41 -0700 (PDT)
Received: by 10.27.62.196 with HTTP; Sat, 4 Jul 2015 09:47:41 -0700 (PDT)
Date: Sat, 4 Jul 2015 09:47:41 -0700
Message-ID: <CADxaUHNdxSZydfyzBBeUTo2OLy37d+BTv+rW1+cetKwvP8YBWg@mail.gmail.com>
Subject: Hear is the payment information to you
From: MR MIKE <[email protected]>
To: <<snipped>>
I want to inform you that everything is okay now your payment is available for pick up but you cannot pick it up because of the needed fee of 150usd once you send the money you will pick up your payment at the western union you send the money okay

Hear is the payment information to you

https://wumt.westernunion.com/asp/order ... try=global

Sender information

sender First Name: SAM
sender Last Name: ATU
Money Transfer Control Number MTCN: 2107570018
Question: Who Is Great
Answer: God
Amount:USD $5,000.00 USD

you will use to pick up your daily $5,000.00 in your country.

Receiver's Name: samuel
LAST NAME: luke
Country; BENIN REPUBLIC
City; Cotonou
Text Question: WHEN?
Text Answer: NOW
Amount: $150Dollars Only.
SENDER NAME::::::::::::::::::::::?
MTCN:::::::::::::::::::::::::: ?