Mrs. Ngozi [email protected]

[Tim Atem]

Header Analysis Quick Report
Originating IP: 196.46.246.178
Originating ISP: Celtel Nigeria Limited T.a Zain
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.98.68 with SMTP id eg4csp1680120lbb;
Mon, 10 Aug 2015 05:35:57 -0700 (PDT)
X-Received: by 10.68.241.230 with SMTP id wl6mr43898293pbc.32.1439210156513;
Mon, 10 Aug 2015 05:35:56 -0700 (PDT)
Return-Path: <[email protected]>
Received: from GWMLNMB (gwmail.descente.co.kr. [117.52.162.138])
by mx.google.com with ESMTP id zg5si32870980pbc.91.2015.08.10.05.35.45;
Mon, 10 Aug 2015 05:35:56 -0700 (PDT)
Received-SPF: neutral (google.com: 117.52.162.138 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=117.52.162.138;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 117.52.162.138 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mail=[email protected]
Message-Id: <55c89aac.05fb440a.8f0b5.ffffa183SMTPIN_ADDED_MISSING@mx.google.com>
Received: from ([196.46.246.178])
by GWMLNMB with ESMTP (MPSMTP/1.0.21) id 1.55C86193.9.1;
Mon, 10 Aug 2015 17:32:51 +0900
Reply-To: <[email protected]>
From: "Central Bank of Nigeria"<[email protected]>
Subject: YOUR CHECK BOOK
Date: Sun, 9 Aug 2015 09:32:45 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Sir,

This is new arrangement which we made Friday by the new president Muhammadu Buhari that you will receive your payment by CHEQUE which will be loaded the amount 4.5million and the balance will be pay by next Year 2016. You will take care of the courier company with the fee of 75usd. Once you are ready, then you notify me so that i can send to you by attachment a copy of your cheque and when the fee of US$75 is paid,i will then send the original copy to you. You payment was issued by cheque because of the numerious scammers all over the world. On the receipt of your cheque copy, you just go to the bank with it and have your money withdrawn.

I need your international passport, your bank name which must be included on the cheque copy, your phone number and your home or office address which should be submitted to the courier company.

Yours in service,

Mrs. Ngozi Ugo
Pay- Master General CBN

[Tim Atem]

Same scam and email from the email address [email protected]

Delivered-To: <snipped>
Received: by 10.112.98.68 with SMTP id eg4csp1364977lbb;
Sun, 9 Aug 2015 15:14:31 -0700 (PDT)
X-Received: by 10.194.110.132 with SMTP id ia4mr27362097wjb.103.1439158471000;
Sun, 09 Aug 2015 15:14:31 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-wi0-x242.google.com (mail-wi0-x242.google.com. [2a00400c:c05::242])
by mx.google.com with ESMTPS id o14si11830423wiw.9.2015.08.09.15.14.30
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 09 Aug 2015 15:14:30 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00400c:c05::242 as permitted sender) client-ip=2a00400c:c05::242;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00400c:c05::242 as permitted sender) smtp.mailfrom=[email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-wi0-x242.google.com with SMTP id xr16so17225500wic.2
for <<snipped>>; Sun, 09 Aug 2015 15:14:30 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.180.85.74 with SMTP id f10mr17931963wiz.45.1439158470529;
Sun, 09 Aug 2015 15:14:30 -0700 (PDT)
Received: by 10.28.139.149 with HTTP; Sun, 9 Aug 2015 15:14:30 -0700 (PDT)
Reply-To: [email protected]
Date: Sun, 9 Aug 2015 15:14:30 -0700
Message-ID: <CAAB1niPMTBPCTsgN1zOgBNKmtvys2Vu9S1Z6F5sTq2AyRZOP=[email protected]>
Subject: CHECK BOOK
From: CENTRAL BANK OF NIGERIA <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=f46d04426f48695ac5051ce8318b
Bcc: <snipped>

Sir,

This is new arrangement which we made Friday by the new president Muhammadu Buhari that you will receive your payment by CHEQUE which will be loaded the amount 4.5million and the balance will be pay by next Year 2016. You will take care of the courier company with the fee of 75usd. Once you are ready, then you notify me so that i can send to you by attachment a copy of your cheque and when the fee of US$75 is paid,i will then send the original copy to you. You payment was issued by cheque because of the numerious scammers all over the world. On the receipt of your cheque copy, you just go to the bank with it and have your money withdrawn.

I need your international passport, your bank name which must be included on the cheque copy, your phone number and your home or office address which should be submitted to the courier company.

Yours in service,

Mrs. Ngozi Ugo
Pay- Master General CBN

[Tim Atem]

Header Analysis Quick Report
Originating IP: 105.112.8.33
Originating ISP: Airtel Networks Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.98.68 with SMTP id eg4csp2538599lbb;
Tue, 11 Aug 2015 14:41:38 -0700 (PDT)
X-Received: by 10.194.20.161 with SMTP id o1mr64700031wje.32.1439329297899;
Tue, 11 Aug 2015 14:41:37 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm11-vm7.bullet.mail.ir2.yahoo.com (nm11-vm7.bullet.mail.ir2.yahoo.com. [212.82.96.168])
by mx.google.com with ESMTPS id l7si6514862wif.65.2015.08.11.14.41.37
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 11 Aug 2015 14:41:37 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 212.82.96.168 as permitted sender) client-ip=212.82.96.168;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 212.82.96.168 as permitted sender) smtp.mailfrom=[email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
Received: from [212.82.98.124] by nm11.bullet.mail.ir2.yahoo.com with NNFMP; 11 Aug 2015 21:41:37 -0000
Received: from [212.82.98.93] by tm17.bullet.mail.ir2.yahoo.com with NNFMP; 11 Aug 2015 21:41:37 -0000
Received: from [127.0.0.1] by omp1030.mail.ir2.yahoo.com with NNFMP; 11 Aug 2015 21:41:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 41740 invoked by uid 60001); 11 Aug 2015 21:41:36 -0000
DKIM-Signature: <snipped>
X-YMail-OSG: <snipped>
Received: from [105.112.8.33] by web171701.mail.ir2.yahoo.com via HTTP; Tue, 11 Aug 2015 22:41:36 BST
X-Rocket-MIMEInfo: <snipped>
X-Mailer: YahooMailBasic/605 YahooMailWebService/0.8.203.812
Message-ID: <[email protected]>
Date: Tue, 11 Aug 2015 22:41:36 +0100
From: CENTRAL BANK OF NIGERIA <[email protected]>
Subject: YOUR CHECK BOOK.
To: undisclosed recipients: ;
MIME-Version: 1.0

Sir,

I received your mail of today. But if you don't want HSBC bank and you want it with your bank CBN will do it for you. Once you send the needed fee, you send the name of you bank.

RECEIVED'S NAME: IGWEZE FRANK CHINEDU
COUNTRY ADDRESS: ABUJA-NIGERIA
TEXT QUESTION: CHECK
ANSWER: BEST

SENDER NAME:
SENDER ADDRESS:
MTCN NUMBER:
AMOUNT: 75USD

Yours in service,

Mrs. Ngozi Ugo
Pay- Master General CBN

[Tim Atem]

from: TELEX/WIRE DEPARTMENT CBN - [email protected]
reply-to: TELEX/WIRE DEPARTMENT CBN - [email protected]

Attention: Sir

Accredited ATM card (CBN/HS/02482/BG) awarded for contract payment of USD$10.5Million USD with card number: 5150 9101 2345 6789 has been allocated in your favor Your Personal Identification Number is 9503. Did you instruct Mrs. Sophia Mason to collect your ATM CARD worth USD$10.5million on your behalf? Get back to this office immediately you receive this message for confirmation and immediate action.

I will advice you confirm the below information immediately and make sure you fill in the information correctly and contact the ATM PAYMENT CENTRE with the below information.

COMPLETE THE FORM BELOW:

(1) Your Full Name: ...........................................
(2) Your Age: .................................................
(3) Marital Status: ...........................................
(4) Your Cell Phone Number: ...................................
(5) Your Fax Number: ..........................................
(6) Your Nationality: .........................................
(7) Your Occupation: .............. ...........................
(8) Sex: ......................................................
(9) Your Religion: ............................................
(10) Your Address: ............................................
(11) Bank Details: ............................................
(12) Account Number: ............................................
(13) Iban Number: ..................................................
(14) Swift Code : ......................................................
(15) Reference N?: ............................................
(16) Identification ( A Copy of your ID)

Yours faithfully,

Mrs. Ngozi M. Chidubem

Telex/Wire Department CBN.

[Tim Atem]

from: TELEX/WIRE DEPARTMENT CBN - [email protected]
reply-to: TELEX/WIRE DEPARTMENT CBN - [email protected]

Attention: Sir

Accredited ATM card (CBN/HS/02482/BG) awarded for contract payment of USD$10.5Million USD with card number: 5150 9101 2345 6789 has been allocated in your favor Your Personal Identification Number is 9503. Did you instruct Mrs. Sophia Mason to collect your ATM CARD worth USD$10.5million on your behalf? Get back to this office immediately you receive this message for confirmation and immediate action.

I will advice you confirm the below information immediately and make sure you fill in the information correctly and contact the ATM PAYMENT CENTRE with the below information.

COMPLETE THE FORM BELOW:

(1) Your Full Name: ...........................................
(2) Your Age: .................................................
(3) Marital Status: ...........................................
(4) Your Cell Phone Number: ...................................
(5) Your Fax Number: ..........................................
(6) Your Nationality: .........................................
(7) Your Occupation: .............. ...........................
(8) Sex: ......................................................
(9) Your Religion: ............................................
(10) Your Address: ............................................
(11) Bank Details: ............................................
(12) Account Number: ............................................
(13) Iban Number: ..................................................
(14) Swift Code : ......................................................
(15) Reference N?: ............................................
(16) Identification ( A Copy of your ID)

Yours faithfully,

Mrs. Ngozi M. Chidubem

Telex/Wire Department CBN.

[Tim Atem]

from: TELEX/WIRE DEPARTMENT CBN - [email protected]
reply-to: TELEX/WIRE DEPARTMENT CBN - [email protected]

Attention: Sir

I received your mail and well understood. We have already arrested Mrs. Sophia Mason and Mr. Musa M. Usman who told her to come and claim your fund (US$10.5million) to EFCC Economic and Financial Crimes Commission this morning, you know that Mr. Musa M. Usman have already work with CBN in 2011 as Pay-master General Central Bank of Nigeria (CBN) the formal Nigeria president Goodluck Jonathan sack him in year 2013 because of him want to scam contractor and the contractor come down to Nigeria. Mr. Musa M. Usman give all the necessary documents to Mrs. Sophia Mason so she can claim your ATM card, But we thank God that we know everything in-time.

Meanwhile, Federal Government of Nigeria have introduced a new rule and regulation that all contractor's will follow our law that nobody will stop or ask you for any documents or any certificates before you receive your ATM card. So if you are interested I will order my secretary to make arrangement how to send your ATM card to received address. You will choose the bank which you are using in your country and you want ATM card to be, so my secretary will arrange it immediate to enable me send it to you without any more delay. But note that you will send 155.00 dollars to my secretary to enable him get your stamp duty for your ATM card, so nobody will stop it or need some poof from you as the rightful beneficiary of this fund (Ten Million Five Hundred Thousand Dollars only). If you are interested try to get back to me immediate receive this mail.

You know that we need confirm you as the rightful beneficiary and your information which I have with me now, so before you send any for stamp duty we need to confirm everything first before anything.

Yours faithfully,

Mrs. Ngozi M. Chidubem
Telex/Wire Department CBN

Converted to text with OCR

FEDERAL GOVERNMENT OF NIGERIA
FEDERAL MINISTRY OF FINANCE
Headquarters, Ahmadu Bello Way, Central Business District
P.M.BOX 41, Garki, Abuja, Nigeria

13 September 2016

FUND PAYMENT AUTHORIZATION UNIT

FROM THE OFFICE OF THE MINISTER OF FINANCE

ATTENTION: HONORABLE CONTRACTOR

CLEAR SOURCE OF FUNDS

This clean report is written in line with a Pact reached between the Government of Nigeria,
United States Government, British Government and United Nations to checkmate global
movement of funds, consignments, packages and prevention of Money Laundering, Drug
Trafficking, Terrorism etc.

The Clear Report Policy is issue to cover the parcel on delivery to the beneficiary address.
Be notify that this certificate confirmed the Parcel Clean and Cleared from any illicit activities or
funding of terrorism Network.

The origin of this Parcel is therefore in compliance with Anti-Money Laundering Policies as set
foth by Federal Government to Enforce Economic and Trade Sanctions based Financial Action
Task Force (FATF) and we therefore confirm that the Parcel and its content are clean, cleared
unencumbered and derved from Non-Criminal Activities.

In accordance with the rules and regulations concerning the prevention of Money Laundering, the
following information may be supplied to cargo logistics for the purpose of confirmation.

Yours faithfully

Sign
Dr. Adamu Isa, Director
Foreign Operations

Sign
Mrs. Jumoke Oluwajoke Peters
Fiduciary Agent

Sign
Mrs. Kemi Adeosun
Finance Minister
Federal Ministry of Finance

FUND RELEASE ORDER

Converted to text with OCR

THE PRESIDENT
FEDERAL REPUBLIC OF NIGERIA
ASO ROCK VILLA, ABUJA FCT
NIGERIA

Our Ref: PRE/ABJ/OFFAPPY/2016
Date: 13/09/2016

TO: DIRECTOR, INTERNATIONAL REMITTANCE FOREIGN OPERATIONS
DEPARTMENT, LAGOS NIGERIA

Dear Sir,

MANDATE LETTER

By the power conferred on me as the President, Federal Republic of Nigeria under section 10(b),
paragraph iv of the Nigeria Constitution as ammended, I hereby mandate your honourable to disburse
all foreign payment pending to its beneficiary accordingly.

Payment should be effected upon beneficiary's claim compliance with all statutory obligation as enshrined
in the Nigeria Constitution.

Ensure that you update this office immediately payment are made.

APPROVED

Muhammadu Buhari
President, Federal Republic of Nigeria

[Tim Atem]

from: TELEX/WIRE DEPARTMENT CBN - [email protected]
reply-to: TELEX/WIRE DEPARTMENT CBN - [email protected]

Attention: Sir

I need to tell you that without your international passport your ATM card will not send to your received address, the order come from Federal Government of Nigeria that all contractor who executed any contract with Nigeria government will be confirm as rightful beneficiary of the fund that's why we ask you to forward us your international passport to enable check with the one we have. So that I will confirm everything to Nigeria government that you are not a scam.

Yours faithfully,

Mrs. Ngozi M. Chidubem

Telex/Wire Department CBN

[Tim Atem]

from: TELEX/WIRE DEPARTMENT CBN - [email protected]
reply-to: TELEX/WIRE DEPARTMENT CBN - [email protected]

Attention: Sir

I have received your messages and well understood. Yes Federal Government of Nigeria have confirm you this morning as rightful beneficiary of (Ten Million Five Hundred Thousand Dollars only), why Mr. Musa M. Usman formal Pay-master General Central Bank of Nigeria (CBN) who work with Nigeria government before know your information. Because you are sending your contact information to scam's that's why all fake contractors know your information, please try to be careful and know who you are sending your contact information to. You know that there are many scam's in the world and we know that you are looking for your contract fund which you did not receive for many year's ago. I am very happy that Federal Government of Nigeria has approved to pay your contract fund to you, which you executed for many year's ago because bad government we had before. Do you know this woman before Mrs. Sophia Mason we need to know.

Meanwhile, I have already told my secretary to make arrangement how to send your ATM card to your home address which we receive and as I ask you before try to choose the bank which you want ATM card in your country there many bank's the one you are choose we want, so that my secretary will arrange it to enable him send it immediate to receive address with our government courier service to avoid any agency or government stop your ATM card. But know that you will send the needed fee which I told before to my secretary to enable him get stamp duty for your ATM card before sending the card to you call me +234-801-1458-1979 for more information.

Payment Instruction. You can use MONEY GRAM or RIA MONEY to send the fee 150.00 dollars for the stamp duty. Please don't use western union to send the money, because there many scam's working with them.

Received Name: KENNEDY EZENWA
Country Name: NIGERIA
City Name: ABUJA
Answer: STOP
Question: CAREFUL
Sender name:..............
Sender address:..............
Country name:................
MTCN NO:.....................

Immediately they receive the fee, the document will be forwarded to your email and then you send the documents to us for presentation, after sending the money through kindly make available the payment reference number and SENDERS name.

Yours faithfully,

Mrs. Ngozi M. Chidubem
Telex/Wire Department CBN

The same fake driver's license posted above was attached to this email, too.

[Tim Atem]

from: Central Bank of Nigeria - [email protected]
reply-to: Central Bank of Nigeria - [email protected]

Sir,

Thank you for your messages. We are very sorry that we thing that you have receive your fund according to ALH. Ahmed Idris, FCNA Accountant-General of the Federation Federal Republic Of Nigeria who told us that you have already receive your fund that's why I contacted that you have receive your fund and I have already confirm from you that your payment have not receive from you. I need to tell you why you didn't receive your contract fund, because you didn't follow CBN instruction that's why you didn't receive your contract fund. I need to tell you the truth if you to receive your fund from CBN I will get all your transfer documents and all your contract certificates to enable once I transfer your fund sum agency will come and STOP your payment.

Meanwhile, I will get all your transfer documents and all your contract certificates before I make transfer to your bank. If you are ready to follow our CBN proceed I will make sure that you receive your fund before Wednesday next week, but Nigeria government already give us new rarule how to transfer your fund to your bank before your fund will be transfer you will pay for C.O.T code and before you pay for the transfer code I will first get all the documents and certificates. So that I will send it to you before I transfer your fund, if you need to work with me try to follow my instruction so that you will receive your fund before Wednesday next week as I told you before. But if you don't want try to forget the transaction because scam's.

please reconfirm me with your banking details and telephone number to enable CBN confirm fund payment is very urgent that you answer me now.

BANK NAME:
RECEIVED NAME:
ACCOUNT NO:
SWIFT / BIC CODE:
BRANCH:
BANK ADDRESS:
COUNTRY:
HOME ADDRESS:
YOUR WORKING ID:
YOUR INTERNATIONAL PASSPORT:
YOUR PHONE NUMBER:

Best Regards,

Mr.Frank Chukwu
Director Foreign Remittance {CBN}

[Tim Atem]

from: Central Bank of Nigeria - [email protected]
reply-to: Central Bank of Nigeria - [email protected]

Sir,

Am not understand you, please if you are not ready to receive your contract payment try to let me know and if you are not the rightful beneficiary of (Ten Million Five Hundred Thousand Dollars only) try to let me know. So that I will send messages to Federal Government of Nigeria that you are not the beneficiary, as I told you before I will not transfer your fund without you get all your transfer documents and certificates I didn't ask you for any money for the transfer documents and certificates. The only payment you will make is COT code US$450.00.

So if you are interested try to forward me all your banking information and your phone number.

Best Regards,

Mr.Frank Chukwu
Director Foreign Remittance {CBN}

[Tim Atem]

from: Central Bank of Nigeria - [email protected]
reply-to: Central Bank of Nigeria - [email protected]

Sir,

I want to confirm if you have receive your fund 10.5million into your bank account, if you have not receive it try to confirm that to me now. Because we don't have time for this year again that's why we need to know.

Best Regards,

Mr.Frank Chukwu
Director Foreign Remittance {CBN}

[Tim Atem]

from: OFFICE CBN - [email protected]
reply-to: OFFICE CBN - [email protected]

Attention: Sir

Federal Government of Nigeria has approved your contract fund this morning, if you are interested to receive your fund as my government order you will follow our instruction that you will pay for open na online bank to avoid any agency again stop your fund once we transfer it. Once we open account with your name the transfer will be online transfer bank to bank online transfer no agency will see it, if you are instruction forward me all your banking information and your telephone number.

I am waiting for your urgent reply.

Best Regards,

Mr. Frank Chukwu
Director Foreign Remittance {CBN}

[Tim Atem]

from: CBN OFFICE - [email protected]
reply-to: CBN OFFICE - [email protected]

Sir,

We have new arrangement, how to send your fund to you. Are you ready to receive your payment by CHEQUE or ATM card amount 3.5million, so that you will pay for the insurance fee 55usd to enable me send you by courier company. If you are interested try to get back to me and forward me your full name and your address.

Yours in service,

Mrs. Ngozi Ugo
Pay- Master General CBN

[Tim Atem]

from: CBN OFFICE - [email protected]
reply-to: CBN OFFICE - [email protected]

Sir,

Thank you for your mail and well noted. We have know the one you choose for your payment to enable me make the arrangement how to send you the one you choose to your home address, Meanwhile, I have already told my secretary to make arrangement how to send your Passive to your home address which we has already conclude this morning.

As I told you before Federal Government of Nigeria agree that you will pay insurance fee 55usd, so that your Passivel will be send to you without any more delay and the amount you will receive is 3.5million. You can use MONEY GRAM or RIA MONEY to send the fee 55.00 dollars for the insurance. Please do not use western Union to send the money, because there are many scams’ working with them. Once I receive the money your original CHEQUE or ATM card will send to you immediate to your address.

Received Name: PETER CHINEDU
Country Name: NIGERIA
City Name: ABUJA
Answer: MY
Question: PASSUAL
Sender name: ..............
Sender address: ..............
Country name: ................
MTCN NO: .....................

Immediately they receive the fee, the Passive will be forwarded to your address and then you send the documents to us for presentation, after Send the money through.

Yours in service,

Mrs. Ngozi Ugo
Pay- Master General CBN