The world's premier anti internet scam, anti fraud information website 

  • [email protected] & [email protected]

  • 419 scam database with 50,000+ reports. Verify suspicious inheritance emails, lottery wins, and money transfer requests. Names, emails and bank details exposed.
419 scam database with 50,000+ reports. Verify suspicious inheritance emails, lottery wins, and money transfer requests. Names, emails and bank details exposed.
  Been Targeted by This Scam?

Learn how to report a scam to the FBI, FTC, and the right authorities. Been asked to invest in crypto? Read about pig butchering scams. Received a suspicious check? Learn about fake check scams. Not sure if it's real? Use our free Scam Checker Tool.

  by Tim Atem
 
And another stupid scammer who put two scripts in one email.

This one is playing both a recovery scammer using the name Ernest Rodney and the email address [email protected] and he's playing a banker offering to share abandoned money using the name Dr. Salif Musa and the email address [email protected]
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.58.21.50
Originating ISP: Swiftng
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.107.39.129 with SMTP id n123csp951746ion;
Fri, 13 Nov 2015 02:07:57 -0800 (PST)
X-Received: by 10.129.138.4 with SMTP id a4mr20097478ywg.154.1447409277264;
Fri, 13 Nov 2015 02:07:57 -0800 (PST)
Return-Path: <[email protected]>
Received: from if10-mail-fb04-mia.mta.terra.com (if10-mail-fb04-mia.mta.terra.com. [98.142.233.71])
by mx.google.com with ESMTP id h7si13460330ywb.58.2015.11.13.02.07.48;
Fri, 13 Nov 2015 02:07:57 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 98.142.233.71 as permitted sender) client-ip=98.142.233.71;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.142.233.71 as permitted sender) smtp.mailfrom=[email protected]
Received: from mail-smtp05-mia.tpn.terra.com (unknown [10.235.200.48])
by mail-fb04-mia.tpn.terra.com (Postfix) with ESMTP id 195338005BB1;
Fri, 13 Nov 2015 10:07:48 +0000 (UTC)
X-Terra-Karma: -2%
X-Terra-Hash: eb5a6f62148372271779708de321a52f
Received: from localhost (25p.terra.com [208.84.242.168])
(authenticated user hotelnerja!speedylm)
by mail-smtp05-mia.tpn.terra.com (Postfix) with ESMTPA id 529251945;
Fri, 13 Nov 2015 10:07:45 +0000 (UTC)
reply-to: [email protected]
date: Fri, 13 Nov 15 10:07:45 +0000
message-id: <[email protected]>
X-Priority: 3
x-msmail-priority: normal
importance: normal
priority: normal
subject: Please clarify urgently
x-origin: 41.58.21.50
from: "Dr Ernest Rodney" <[email protected]>
content-type: text/html; charset=utf-8
content-transfer-encoding: QUOTED-PRINTABLE
mime-version: 1.0
to:
X-CMAE-Score: 0
Office of the Director
International Credit settlement(Operations),
Foreign Exchange Division,
Central Bank of Nigeria(CBN).
Garki,Abuja-Nigeria.
Our Ref: IRD/CBN/803/725/15.

Attn: Honourable beneficiary,

The Federal Government of Nigeria after swearing in the newly elected
President,MOHAMMADU BUHARI and the new SENATE President of the
Legislative arm of Government has instructed the Accountant General of
the Federation and Debt Management Board to conducted proper
investigation/review on contract settlements where it was discovered
that some contract files were dumped by the past Government without
payment.

You are being contacted because your information was found among the
dumped files as one of the beneficiaries who have not receive their
payment.

This was discovered during the audit conducted by the panel of
Auditors set up by the Presidency to cross-check files and clear all
Debts owed by the Government.However the Auditors after proper checks
and balancing has discovered a left over contract sum of $10.5M
belonging to you which supposed to have been paid to you by one of the
commercial banks here some time ago,hence reported it to our bank for
immediate action.

Our bank has called for reasons for non-payment and was informed that
neither you nor your representative were unable to come up with the
statutory charges required for remittance of fund to you,coupled with
numerous counter claims placed on the same money by your so called
representatives whose applications somehow lacks regular signature.

The Federal High Court Of Justice has signed and approved the release
of fund to you,But there are presently two different interest persons
lobbying for the release of same fund into two different bank accounts
they have submitted on your behalf and we do not know which of these
persons is truly representing you. You are therefore required to
confirm to us in reply to this mail which of the persons is your true
representative, if any.

You are also advised to be wary of anybody that promises to help you
get your money. You do not need any special assistance to receive this
money, especially now that the Presidency has restated and resolved
the problems you had in the past thereby advised strict adherence to
mode of payment as stipulated in the Anti Corruption Bill (ACB)Section
103 of Debt settlement Law which protects the right of beneficiaries.

There is no incredible and unofficial methods of payment in this case.
The system of settling debts in Nigeria is the same as in your country
and anywhere in the world,therefore your funds will rightly and
directly be transferred to you with ease.So we oblige you to please
suspend any legal action you have considered taking against the
CBN,Diplomat or the Government of Nigeria for deviating from the
normal payment procedure which has caused you a lot in the past.

Answer the following questions to enable us facilitate your payment
process and have your funds released to you:

1. Is the two different account details attached to your payment file yours ?
2. What problem are you actually having in receiving your money ?
3. Do you owe any Bank,company, persons,or group of persons in Nigeria ?.

Kindly respond quickly by answering the above questions to enable us
carry on the operations immediately as this development has caused
lots of discrepancies/doubt hence I decided to contact you directly to
avoid wrong payment.

I apologize for any inconvenience the delay might have caused you in
the past,and pledge to do everything within my capacity to
successfully actualize the release of your fund to you within 48
banking hour after the receipt of your response to this letter.

You are finally warned to stop further communication with any persons
contacting you on this matter to avoid further complications.
Contact me immediately with your current details for proper clarification.
N.B: Attach copy of your Identification.Respond to [email protected]

Yours faithfully,
Ernest Rodney


Hi friend

I am a banker in ADB BANK. I want to transfer an abandoned sum of
USD15.6Million to your Bank account. 40/percent will be your share.

No risk involved but keeps it as secret. Contact me for more details.
Please reply me through my alternative email id only ([email protected])
for confidential reasons.


Yours
Dr Salif Musa
  by Tim Atem
 
They're using the phone number +234-8180706298
Delivered-To: <snipped>
Received: by 10.27.202.130 with SMTP id a124csp1409816wlg;
Wed, 18 Nov 2015 09:11:24 -0800 (PST)
X-Received: by 10.50.7.70 with SMTP id h6mr3841293iga.63.1447866684789;
Wed, 18 Nov 2015 09:11:24 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm7-vm6.bullet.mail.ne1.yahoo.com (nm7-vm6.bullet.mail.ne1.yahoo.com. [98.138.91.100])
by mx.google.com with ESMTPS id p18si6078974ioi.196.2015.11.18.09.11.24
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Wed, 18 Nov 2015 09:11:24 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 98.138.91.100 as permitted sender) client-ip=98.138.91.100;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.138.91.100 as permitted sender) smtp.mailfrom=[email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [98.138.101.132] by nm7.bullet.mail.ne1.yahoo.com with NNFMP; 18 Nov 2015 17:11:24 -0000
Received: from [98.138.226.167] by tm20.bullet.mail.ne1.yahoo.com with NNFMP; 18 Nov 2015 17:11:24 -0000
Received: from [127.0.0.1] by omp1068.mail.ne1.yahoo.com with NNFMP; 18 Nov 2015 17:11:24 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 98.138.105.254; Wed, 18 Nov 2015 17:11:23 +0000
Date: Wed, 18 Nov 2015 17:11:04 +0000 (UTC)
From: Ernest Rodney <[email protected]>
Reply-To: Ernest Rodney <[email protected]>
To: <<snipped>>
Message-ID: <[email protected]>
Subject: Re: Please clarify urgently
MIME-Version: 1.0
Attn: Honorable beneficiary,

In acknowledgment of your email response to us, we have understood from your message as follows.

1.You did not authorize any person or group of person(s) to represent and and also the two different account details attached to your payment file are not yours.

2.You are not owing any Bank,company, persons,or group of persons in Nigeria.

We have commenced investigations this morning to find out the source of the fake account information and we have started processing your payment to avoid further complications. As we have received your identifications, we have applied to the federal Ministry of finance for a Foreign Exchange Allocation to enable us perfect the payment. Meanwhile our legal department has commenced the payment reconciliation and harmonization due to the false accounts that was forwarded to us claiming to be in your authorization.

However you are requested to send to us immediately the following for a perfect procedures.

1.Your full name
2.address
3.Bank account details where you wish to receive this funds.
4. You cell/direct telephone numbers.

These vital information will enable us proceed. Again you will be required to travel down to Nigeria to sign the vital payment release documents but if by any reason you cannot be able to make it, you can authorize us to appoint an attorney here on your behalf to represent you in signing the documents.

I am giving you a promise that with your co-operation and understanding, your funds will be transferred to you as soon as the processes is completed. You can call me on my direct line below as soon as you receive this email for further clarifications.

Thanks for your co-operation while we serve you better.

Yours truly,
Dr Ernest Rodney
Foreign Remittance
Central Bank Of Nigeria
Direct Tel: +234-8180706298
  by Tim Atem
 
Delivered-To: <snipped>
Received: by 10.27.131.86 with SMTP id f83csp421766wld;
Fri, 20 Nov 2015 02:37:31 -0800 (PST)
X-Received: by 10.50.50.204 with SMTP id e12mr1125776igo.31.1448015851328;
Fri, 20 Nov 2015 02:37:31 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm29-vm3.bullet.mail.ne1.yahoo.com (nm29-vm3.bullet.mail.ne1.yahoo.com. [98.138.91.159])
by mx.google.com with ESMTPS id i131si1430332iof.208.2015.11.20.02.37.30
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 20 Nov 2015 02:37:31 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 98.138.91.159 as permitted sender) client-ip=98.138.91.159;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.138.91.159 as permitted sender) smtp.mailfrom=[email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [98.138.100.115] by nm29.bullet.mail.ne1.yahoo.com with NNFMP; 20 Nov 2015 10:37:30 -0000
Received: from [98.138.87.11] by tm106.bullet.mail.ne1.yahoo.com with NNFMP; 20 Nov 2015 10:37:30 -0000
Received: from [127.0.0.1] by omp1011.mail.ne1.yahoo.com with NNFMP; 20 Nov 2015 10:37:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 98.138.101.170; Fri, 20 Nov 2015 10:37:29 +0000
Date: Fri, 20 Nov 2015 10:37:29 +0000 (UTC)
From: Ernest Rodney <[email protected]>
Reply-To: Ernest Rodney <[email protected]>
To: <<snipped>>
Message-ID: <[email protected]>
Subject: Re: Please clarify urgently
MIME-Version: 1.0
Office of the Director
International Credit settlement(Operations),
Foreign Exchange Division,
Central Bank of Nigeria(CBN).
Garki,Abuja-Nigeria.
Our Ref: IRD/CBN/803/725/15.

Attn: Honorable beneficiary,

Thanks for your prompt response. What is needed from you to complete this funds transfer are as follows

1.Your full name
2.address
3.Bank account details where you wish to receive this funds.
4. You cell/direct telephone numbers.

Also you should bear in mind that all the necessary legal documents that will facilitate the transfer has to be secured from various international and local agencies to avoid breaching any IMF/UN laws on international funds transfer. Then i will make sure that the payment approval documents here are also procured. I know this will still cost some expenses but you should note whatever you spend so that as soon as the funds arrives your account/destination, you have to deduct it before disbursement. One thing i want to you to assure me is confidentiality of this transaction. It is very important that we keep the secrete of this transaction within us as you have confided in me to let me know you don't own any funds here. Please this is purposely to protect my job as a civil servant.

I need your response urgently

Yours truly,
Dr Ernest Rodney
Foreign Remittance
Central Bank Of Nigeria
Direct Tel: +234-8180706298
  by Tim Atem
 
Dr. Ernest's fake lawyer:

Delivered-To: <snipped>
Received: by 10.27.131.86 with SMTP id f83csp1858121wld;
Tue, 24 Nov 2015 03:40:59 -0800 (PST)
X-Received: by 10.112.158.98 with SMTP id wt2mr13277020lbb.33.1448365259736;
Tue, 24 Nov 2015 03:40:59 -0800 (PST)
Return-Path: <[email protected]>
Received: from forward4h.mail.yandex.net (forward4h.mail.yandex.net. [84.201.186.22])
by mx.google.com with ESMTP id pe2si11904275lbc.148.2015.11.24.03.40.59
for <<snipped>>;
Tue, 24 Nov 2015 03:40:59 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 84.201.186.22 as permitted sender) client-ip=84.201.186.22;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 84.201.186.22 as permitted sender) smtp.mailfrom=[email protected];
dkim=pass [email protected]
Received: from web23h.yandex.ru (web23h.yandex.ru [84.201.187.157])
by forward4h.mail.yandex.net (Yandex) with ESMTP id 405AC1B2082B
for <<snipped>>; Tue, 24 Nov 2015 14:40:59 +0300 (MSK)
Received: from 127.0.0.1 (localhost [127.0.0.1])
by web23h.yandex.ru (Yandex) with ESMTP id B399FE62A45;
Tue, 24 Nov 2015 14:40:58 +0300 (MSK)
DKIM-Signature: <snipped>
Received: by web23h.yandex.ru with HTTP;
Tue, 24 Nov 2015 14:40:58 +0300
From: Patrick Williams <[email protected]>
Envelope-From: [email protected]
To: <snipped>
Subject: FROM BARR.PATRICK WILLIAMS (SAN)
MIME-Version: 1.0
Message-Id: <[email protected]>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Tue, 24 Nov 2015 12:40:58 +0100
PATRICK WILLIAMS & CO
Addr. No 25 Bode Thomas Surulere
Lagos State Nigeria

Dear Client

I am Barrister Patrick Williams (SAN). I am contacting you on the instruction of Dr Ernest Rodney of the Central bank of Nigeria regarding documentations for the immediate release of your funds. I also wish to inform you that paper work will cost you $650.00 which you are required to send through western union money transfer with the information below

Receiver Name: Mike Ime
Location: Lagos Nigeria
Text Question: Color
Answer: Green
Amount: $650.00
Sender Name.........
MTCN...............

As soon as we receive the said fee, the document will be processed from the Federal High court here in Nigeria and be submitted to the bank for an immediate transfer. I sincerely appreciate the opportunity to work with you.Remember there shall be a charge for my legal services but we shall discuss that in due course and it can be payed as soon as you receive your funds. There shall be a promissory note from you on this regards.

Looking forward to hear from you soonest.

Regards
Patrick Williams Esq
For:Patrick Williams & co.
  by Tim Atem
 
Delivered-To: <snipped>
Received: by 10.27.131.86 with SMTP id f83csp563991wld;
Wed, 9 Dec 2015 04:40:13 -0800 (PST)
X-Received: by 10.50.97.42 with SMTP id dx10mr16215436igb.37.1449664813570;
Wed, 09 Dec 2015 04:40:13 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm33-vm5.bullet.mail.ne1.yahoo.com (nm33-vm5.bullet.mail.ne1.yahoo.com. [98.138.229.69])
by mx.google.com with ESMTPS id h8si7272440igq.102.2015.12.09.04.40.13
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Wed, 09 Dec 2015 04:40:13 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 98.138.229.69 as permitted sender) client-ip=98.138.229.69;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.138.229.69 as permitted sender) smtp.mailfrom=[email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm33.bullet.mail.ne1.yahoo.com with NNFMP; 09 Dec 2015 12:40:12 -0000
Received: from [98.138.101.128] by nm33.bullet.mail.ne1.yahoo.com with NNFMP; 09 Dec 2015 12:37:21 -0000
Received: from [98.138.89.250] by tm16.bullet.mail.ne1.yahoo.com with NNFMP; 09 Dec 2015 12:37:20 -0000
Received: from [127.0.0.1] by omp1042.mail.ne1.yahoo.com with NNFMP; 09 Dec 2015 12:37:20 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 98.138.105.192; Wed, 09 Dec 2015 12:37:20 +0000
Date: Wed, 9 Dec 2015 12:37:19 +0000 (UTC)
From: Ernest Rodney <[email protected]>
Reply-To: Ernest Rodney <[email protected]>
To: "<snipped>" <<snipped>>
Message-ID: <[email protected]>
Subject: FOREX ALLOCATION PAPER
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_592215_488378031.1449664639962"
References: <2046275269.592216.1449664639963.JavaMail.yahoo.ref@mail.yahoo.com>
Office of the Director
International Credit settlement(Operations),
Foreign Exchange Division,
Central Bank of Nigeria(CBN).
Garki,Abuja-Nigeria.
Our Ref: IRD/CBN/803/725/15.

Attn:

My dear good Friend i crave your indulgence to please consider this beneficial transaction which we started in good faith and i am very surprised how you abandoned me half way after i must have gone very far into this transaction which i have 100% faith that would have uplifted I and you. I cannot do it alone without the partnership of a foreigner and more importantly i observe that trust and confidence which is in you and had the faith that we will end it well in mutual understanding and trust. Perhaps, i would know if you have been deceived by some enemies of progress but i want you to understand that this opportunity comes from God once in ones life time. Why not give this a trial. I attach below a copy of the Forex allocation paper from the Federal Ministry of Finance which i secured then and i made it known to you.

I wonder why you want to desert me after all these effort. If sending the money to the lawyer is a problem then he can give you an account where you can transfer it as he told me that you are not conversant with western union. Let us finalize this transaction as this funds will help me because very soon i will be retired so that i can make some investment in your country with my own part of the funds. Please help as you have started it and i will be very glad.i am waiting for your response.

Yours truly,
Dr Ernest Rodney
Foreign Remittance
Central Bank Of Nigeria
Direct Tel: +234-8180706298

Image