Mrs. Rose Yes [email protected] [email protected]

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.138.90.70
Originating ISP: Etisalat Benin
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.233.223.131 with SMTP id t125csp231531qkf;
Fri, 9 Oct 2015 15:52:47 -0700 (PDT)
X-Received: by 10.68.96.1 with SMTP id do1mr17698963pbb.37.1444431167157;
Fri, 09 Oct 2015 15:52:47 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web101207.mail.kks.yahoo.co.jp (web101207.mail.kks.yahoo.co.jp. [183.79.100.211])
by mx.google.com with SMTP id xv7si5773713pab.155.2015.10.09.15.52.46
for <<snipped>>;
Fri, 09 Oct 2015 15:52:47 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 183.79.100.211 as permitted sender) client-ip=183.79.100.211;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 183.79.100.211 as permitted sender) smtp.mailfrom=[email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: (qmail 89648 invoked by uid 60001); 9 Oct 2015 22:52:45 -0000
DomainKey-Signature: <snipped>
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [41.138.90.70] by web101207.mail.kks.yahoo.co.jp via HTTP; Sat, 10 Oct 2015 07:52:44 JST
X-RocketYMMF: youtan_2010
X-Mailer: YahooMailWebService/0.8.111_67
X-YMail-JAS: <snipped>
Sender: [email protected]
Date: Sat, 10 Oct 2015 07:52:44 +0900 (JST)
From: MRS ROSE YES <[email protected]>
Reply-To: MRS ROSE YES <[email protected]>
Subject: YOUR FUND OF $850,000.00 DEPOSITED IN WESTERN UNION.
To: undisclosed recipients: ;
MIME-Version: 1.0

FROM THE WESTERN UNION HEAD OFFICE DEPARTMENT
REPUBLIC OF BENIN. FINAL RELEASE YOUR MTCN? Send Money Worldwide
Our Ref:WUMT0XX2/987 YOUR FULL RESPECT,

YOUR FUND OF $850,000.00 DEPOSITED IN WESTERN UNION.

I'am Assistant Manager Western Union Branch Cotonou (Bank of Africa Benin SA) Benin Republic,
My Name Is Mrs Jessica Milford, I am writing to you this morning to inform you that Our
General manager just passed away last week(((Died))).And all the files/documents was handed over
to me on Monday morning which is October 5th 2015,Luckily i went through all the files and found out that you have incomplete
transfer in our custody,

AFTER THE MONEY HAVE BEEN TRANSFERRED CORRECTLY TO YOUR ADDRESS WE WILL MAIL YOU THE PAYMENT
INFORMATION'S YOU NEED TO PICK UP YOUR MONEY IN ANY WESTERN UNION AROUND YOUR LOCATION
CORRECTLY BECAUSE THE ONE THAT IS HERE IS NOT CORRECT BECAUSE WE HAVE NOT RECEIVED OUR $35.00
USD ONLY TRANSFERRING CHARGE FOR YOUR $4,000.00 USD.

REASON WHY WE NEED YOU TO SEND US THE $35.00 USD IS THAT WE TRIED TO DEDUCT THE TRANSFERRING
FEE OUT FROM YOUR FUND BUT THE MINISTER ADMINISTRATOR TRUST FUND OF BENIN REPUBLIC TOLD US THAT
NO ONE HAS RIGHT OVER YOUR FUND AS IT HAVE BEEN SIGNED AND STAMPED THAT NO MONEY SHOULD BE
DEDUCTED UNTIL IT GETS TO YOUR HANDS TO AVOID STEALING SOME OF THE FUNDS.
INFORMATION OF WESTERN UNION,

FINALLY URGENT SEND US THE $35.00 USD TO ENABLE US PROCEED ON YOUR PAYMENT IMMEDIATELY RIGHT.
BELOW IS OUR ACCOUNT'S INFORMATION FOR YOU TO SEND THE $35.00 USD
THROUGH WESTERN UNION MONEY TRANSFER BEEN OUR TRANSFERRING CHARGE FOR
YOUR $4000.00 USD,

RECEIVER:........Nicks Ofor
COUNTRY........ BENIN REPUBLIC
CITY:COTONOU
QUESTION: GOD
ANSWER....... ABLE
SENDERS NAME.....
MTCN............
AMOUNT:.....$35.00, USD

YOUR URGENT RESPOND IS HIGHLY NEEDED .

WAITING TO HEAR FROM YOU AS SOON AS YOU RECEIVE THIS MESSAGE TO QUICKEN THE PROCESS OF THE
RELEASING YOUR PAYMENT TO YOU TODAY.

THEN CONTACT US WITH YOUR FULL INFORMATION.
Assistant Manager DIRECTOR GENERAL MRS. ROSE YES

[Tim Atem]

Using the same email address [email protected]

Header Analysis Quick Report
Originating IP: 41.138.90.66
Originating ISP: Etisalat Benin
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.233.223.131 with SMTP id t125csp649599qkf;
Thu, 15 Oct 2015 07:42:09 -0700 (PDT)
X-Received: by 10.68.137.202 with SMTP id qk10mr10493531pbb.30.1444920129651;
Thu, 15 Oct 2015 07:42:09 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web101214.mail.kks.yahoo.co.jp (web101214.mail.kks.yahoo.co.jp. [183.79.100.218])
by mx.google.com with SMTP id oo9si22056979pac.212.2015.10.15.07.42.08
for <<snipped>>;
Thu, 15 Oct 2015 07:42:09 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 183.79.100.218 as permitted sender) client-ip=183.79.100.218;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 183.79.100.218 as permitted sender) smtp.mailfrom=[email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: (qmail 63242 invoked by uid 60001); 15 Oct 2015 14:42:06 -0000
DomainKey-Signature: <snipped>
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [41.138.90.66] by web101214.mail.kks.yahoo.co.jp via HTTP; Thu, 15 Oct 2015 23:42:05 JST
X-RocketYMMF: youtan_2010
X-Mailer: YahooMailWebService/0.8.111_67
X-YMail-JAS: <snipped>
Sender: [email protected]
Date: Thu, 15 Oct 2015 23:42:05 +0900 (JST)
From: "Mrs.Rose Daniel" <[email protected]>
Reply-To: "Mrs.Rose Daniel" <[email protected]>
Subject: I am here by apologizing for the delayed of your $50,000.00 Fifty
To: undisclosed recipients: ;
MIME-Version: 1.0

From the desk of Mrs. Rose Daniel.

I am here by apologizing for the delayed of your $50,000.00 Fifty
Thousand United State Dollars because I travelled out of country since
and have been in Paris-France all this while; I just came back 2 days
ago.

However I asked Mr. Frank Mark about your funds and he told me that
you did not get the fund till this date. I asked him why and he
explained to me that you couldn't be able to pay the required fee
needed to start releasing your payments. I ask him why they requested
such huge amount from you instead of $35 I instructed him before I
traveled.

Right now the only amount you have to send to my (Secretary CHRIS NWA) is only $35 for the activation of your Western Union VAT File
paper, to entitle you receiving your daily payments till done?

The $35 should be sending to below:

Receiver:::::CHRIS NWA
Country: Benin Republic
Question: Urgent
Answer: Today
Amount: $35
Mtcn:::
Sender name:

Be advice that after this very $35, therefore will be none payment
from you again than your daily confirming payment of $5,000 till the
whole $50,000.00 is completed.

My word and order to the western union Manager Director is that you
should pay only bet $35 no more no less. Therefore if anybody ask you
for any additional payment after you paying $35, kindly report to me
because the person has cross line of my orders.

Please I'm real sorry for the inconveniences this delayed might cause to you.
Thanks:
Mrs.Rose Daniel

[Tim Atem]

Using the same email address [email protected]

Header Analysis Quick Report
Originating IP: 31.173.74.73
Originating ISP: Pjsc Megafon
City: Moscow
Country of Origin: Russian Federation
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.55.209.196 with SMTP id o65csp421503qkl;
Fri, 20 Nov 2015 02:54:17 -0800 (PST)
X-Received: by 10.28.132.9 with SMTP id g9mr1757006wmd.0.1448016857193;
Fri, 20 Nov 2015 02:54:17 -0800 (PST)
Return-Path: <[email protected]>
Received: from smtp303.alice.it (smtp303.alice.it. [82.57.200.119])
by mx.google.com with ESMTP id 17si3262154wmk.116.2015.11.20.02.54.16;
Fri, 20 Nov 2015 02:54:17 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 82.57.200.119 as permitted sender) client-ip=82.57.200.119;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of [email protected] designates 82.57.200.119 as permitted sender) smtp.mailfrom=[email protected]
Received: from feu11-alice (82.57.204.66) by smtp303.alice.it (8.6.060.43)
id 564C595700464DAE; Fri, 20 Nov 2015 11:54:16 +0100
Received: from (31.173.74.73) by wmlight.rossoalice.alice.it; Fri, 20 Nov 2015 11:54:16 +0100
Message-ID: <[email protected]>
Date: Fri, 20 Nov 2015 11:54:16 +0100 (CET)
From: "Mrs.Chinyere Madu" <[email protected]>
Reply-To: [email protected]
Subject: FOREIGN OPERATION MANAGER FEDERAL MINISTRY OF FINANCE
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Originating-IP: 31.173.74.73

FOREIGN OPERATION MANAGER FEDERAL MINISTRY OF FINANCE
NATIONAL HOUSE OF ASSEMBLY COMPLEX
SENATE HOUSE - UPPER CHAMBERS WUSE DISTRICT, COTONOU BENIN
EMAIL([email protected])

OUR REF: FGN /SNT/STB

I have to inform you again that we are not playing over this matter
that we have sent to you several times, I know my reason for the
continuous sending of this notification to you, the fact is that you
can't seem to trust any one again over this payment For what you have
been in cantered in many months ago, but I want you to be assured that
you will received your funds THROUGH THE HELP OF THIS OFFICE.I cannot
scam you for $39. The bank processing of your payment which is BANK OF
AFRICA (B.O.A), requested the processing fee of $39 .The requested $39
is clearly written to you before, I did not invent the bill to defraud
you of $39 it is an official bank payment processing fee, and the good
part of this is that you will never ever be disturbed again over any
kind of payment.

This is final and the forms from there becomes effective once we
submit your payment application processing fee and pay the form fee of
$39 I don't want you to loose this fund this time because you may
never get another such good opportunity, the federal government is
keen and very determined to pay your overdue debts, this is not a
fluke, I would not want you to loose this fund out of ignorance, I
will send you all the documents as soon as bank payment processing fee
is paid, you have to trust me, you will get your fund, find a way to
get $39 you will not loose it, instead it will bring your financial
breakthrough, find the money and send it to our bursary.

The reason why am sending you this email is because i want you to
receive your USD$800,000.00 immediately, we are trying to round up for
this payment program.

Here Is the Payment Information through Western Union money transfer
or Money Gram money transfer, finally my advice to you is not to
abandon this transaction because of the requirement of ($39)

Receivers Name:::FRANK ONU
Address: COTONOU BENIN REPUBLIC
Test Question: WHEN
Answer: NOW
MTCN________________

Send all the details of the MTCN direct to this email.Furthermore I am
waiting for the payment details in your next urgent reply
Yours in service


Mrs.Chinyere Madu