by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id ZjzZLPxtuliLKQAAjbubUg
for <>; Fri, 03 Mar 2017 23:34:20 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 03 Mar 2017 23:34:20 -0800
Received: from mail-qk0-f196.google.com ([209.85.220.196]:33245)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1ck4Cl-0002ka-Q7
for ; Fri, 03 Mar 2017 23:34:20 -0800
Received: by mail-qk0-f196.google.com with SMTP id j127so14408650qke.0
for <>; Fri, 03 Mar 2017 23:33:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlemail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=ls4djO6lEKaJv0Bd10kF3p3bOrspF2rPC/74wB+rNmw=;
b=sOASkUbUghxF29Av0VgwOG2KtW+zQePLbfTyrjZ6va1Y1rjjtsj5aQnZvXARJ5P5HT
vHKkUdcp8+I5rQu3/5d2q9V4df2Jpv1Gr9uGpATdLU5eucSbcG22SihBABrjdBuoOnaI
fDIPtaBY7MrWzZ9H+INuWymwFYizM/Yqz2FVsbd6yEkjLbHWTh+gb+bXn2ND25zIN2m9
+MHIdKaRL2YgMeUry/7aerD2hsH29PS1GnX8ZieCnqpvNNsLX4I2d3qq1NU7h56m2wah
zx7x0sa/MG5x+2pfZMoc+BLYJVjDyiEbYOuy3bS0VDlPzs0hkL6EtOCgJcW9tgBR8sMJ
hIlA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id
:subject:to;
bh=ls4djO6lEKaJv0Bd10kF3p3bOrspF2rPC/74wB+rNmw=;
b=HTEUPWzndcp20k4lQjXV5DdI/Okg0beiO4EeOGfhbqLXm+JPxKFnznMS8cZFVg960y
yTkn/vFra+1ob+srUt1Z1fueKRYiIMBq/Bl71uMG/C/M3+4jBTDWQXlPy0eg47/qSxdn
Kwzmr6M0P6+hGzA73OERM+t0L5k/yyqFLrVAc1qjLotP1LgSPx2GsrIFnXNsTXJQ/D41
dGqnAHHoM9YVCDZlV3THCSkHhZqdUpFRxxuSMGitG0jlD1erEpB4EZjaupqRTlIAn/A1
qHMC9xhNx5lJyr3pioAPdCDyMeuGR1JqnljsAJoLXiDCe2J0G+JoT72uSNAniP2F+4xx
ZMyQ==
X-Gm-Message-State: AMke39lw6xU7Ll13ic6Pt6DnFTIfUqkQ1ZtF1EcdOs/+LZJvhStoJl7csfDLSHCtyc6S8vn1iiJGzrb7c2sWcg==
X-Received: by 10.55.166.210 with SMTP id p201mr6381504qke.142.1488612814021;
Fri, 03 Mar 2017 23:33:34 -0800 (PST)
MIME-Version: 1.0
Received: by 10.12.157.197 with HTTP; Fri, 3 Mar 2017 23:33:33 -0800 (PST)
Reply-To: [email protected]
From: "World Bank Group ." <[email protected]>
Date: Sat, 4 Mar 2017 08:33:33 +0100
Message-ID: <CANRzmRjFd710LD_D9BpstF=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary. Re - Change of Funds Ownership. This
is to bring to your notice that the President of Republic of Nigeria,President
Muhammadu Buhari has constituted a 10 man investigative Panel and foreign
Debts reconciliation committee, which I am the Chairman of the presidential
committee saddled with the responsibility to investigate all the banks here
in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC
contract Fund claims unpaid. [...]
Content analysis details: (9.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HK_SCAM_N2 BODY: No description available.
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.220.196 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.220.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(worldbankgroup101[at]googlemail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(nekere2003[at]yahoo.ca)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (worldbankgroup101[at]googlemail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.220.196 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Fund Beneficiary?
Attention: Beneficiary.
Re - Change of Funds Ownership.
This is to bring to your notice that the President of Republic of
Nigeria,President Muhammadu Buhari has constituted a 10 man
investigative Panel and foreign Debts reconciliation committee, which
I am the Chairman of the presidential committee saddled with the
responsibility to investigate all the banks here in Nigeria, who has
trapped and held beneficiaries Compensation/inheritance/NNPC contract
Fund claims unpaid.
To settle all the Foreign debt after his recent visit & meeting with
the American President Barack Obama of United States and other
officials of the United Nation to enable him give a zero tolerance to
corruption in his regime.I am solely in charge of all foreign
payments. At the commencement of my official responsibility geared
towards payment to foreign beneficiaries. I received a letter that
your unclaimed approved payment by the Central Bank of Nigeria which
has been overdue for payment should now be paid to Lawrence R. Larson
of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A.
In the said letter titled change of beneficiary/ownership. Its clearly
stated that you are dead and that he is your next of kin, it went
further to say you signed a deed and an agreement with Lawrence R.
Larson to become your beneficiary before your untimely death.
Officially arrangement had been concluded for the approved funds
transfer into the account below.
Name of Bank: TEXAS CHAMPION BANK
Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A.
Routing Number: 114914723
Account Number: 909009245
Account Name: Lawrence R. Larson
Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A.
But because of the elaborate global scam, I decided to contact you
first for confirmation before transferring the funds and if after
seven working days, no response is received from you, it will be
assumed that you are dead and as such authorization and approval will
be granted on behalf of Lawrence R. Larson to claim/receive your fund.
But if you are well and alive then confirm this letter and reconfirm
your Information and how you want your said fund to be paid to you
without further delay. Send your responses to me immediately by email.
Below is the information you are expected to re-confirm.
Full Name:
Address:
Nationality:
Sex:
Age:
Date of Birth:
Occupation:
Home Phone No:................. Office Phone No.................... Cell
Phone..................
Driver's license or any copy of Your Identity:
Please feel free to contact me here only for further clarifications
regarding this matter.
Sincerely,
Paul Douglas
Delivered-To:
Received: from
by (Dovecot) with LMTP id ZjzZLPxtuliLKQAAjbubUg
for <>; Fri, 03 Mar 2017 23:34:20 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 03 Mar 2017 23:34:20 -0800
Received: from mail-qk0-f196.google.com ([209.85.220.196]:33245)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1ck4Cl-0002ka-Q7
for ; Fri, 03 Mar 2017 23:34:20 -0800
Received: by mail-qk0-f196.google.com with SMTP id j127so14408650qke.0
for <>; Fri, 03 Mar 2017 23:33:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlemail.com; s=20161025;
h=mime-version:reply-to:from
bh=ls4djO6lEKaJv0Bd10kF3p3bOrspF2rPC/74wB+rNmw=;
b=sOASkUbUghxF29Av0VgwOG2KtW+zQePLbfTyrjZ6va1Y1rjjtsj5aQnZvXARJ5P5HT
vHKkUdcp8+I5rQu3/5d2q9V4df2Jpv1Gr9uGpATdLU5eucSbcG22SihBABrjdBuoOnaI
fDIPtaBY7MrWzZ9H+INuWymwFYizM/Yqz2FVsbd6yEkjLbHWTh+gb+bXn2ND25zIN2m9
+MHIdKaRL2YgMeUry/7aerD2hsH29PS1GnX8ZieCnqpvNNsLX4I2d3qq1NU7h56m2wah
zx7x0sa/MG5x+2pfZMoc+BLYJVjDyiEbYOuy3bS0VDlPzs0hkL6EtOCgJcW9tgBR8sMJ
hIlA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
:subject:to;
bh=ls4djO6lEKaJv0Bd10kF3p3bOrspF2rPC/74wB+rNmw=;
b=HTEUPWzndcp20k4lQjXV5DdI/Okg0beiO4EeOGfhbqLXm+JPxKFnznMS8cZFVg960y
yTkn/vFra+1ob+srUt1Z1fueKRYiIMBq/Bl71uMG/C/M3+4jBTDWQXlPy0eg47/qSxdn
Kwzmr6M0P6+hGzA73OERM+t0L5k/yyqFLrVAc1qjLotP1LgSPx2GsrIFnXNsTXJQ/D41
dGqnAHHoM9YVCDZlV3THCSkHhZqdUpFRxxuSMGitG0jlD1erEpB4EZjaupqRTlIAn/A1
qHMC9xhNx5lJyr3pioAPdCDyMeuGR1JqnljsAJoLXiDCe2J0G+JoT72uSNAniP2F+4xx
ZMyQ==
X-Gm-Message-State: AMke39lw6xU7Ll13ic6Pt6DnFTIfUqkQ1ZtF1EcdOs/+LZJvhStoJl7csfDLSHCtyc6S8vn1iiJGzrb7c2sWcg==
X-Received: by 10.55.166.210 with SMTP id p201mr6381504qke.142.1488612814021;
Fri, 03 Mar 2017 23:33:34 -0800 (PST)
MIME-Version: 1.0
Received: by 10.12.157.197 with HTTP; Fri, 3 Mar 2017 23:33:33 -0800 (PST)
Reply-To: [email protected]
From: "World Bank Group ." <[email protected]>
Date: Sat, 4 Mar 2017 08:33:33 +0100
Message-ID: <CANRzmRjFd710LD_D9BpstF=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary. Re - Change of Funds Ownership. This
is to bring to your notice that the President of Republic of Nigeria,President
Muhammadu Buhari has constituted a 10 man investigative Panel and foreign
Debts reconciliation committee, which I am the Chairman of the presidential
committee saddled with the responsibility to investigate all the banks here
in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC
contract Fund claims unpaid. [...]
Content analysis details: (9.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HK_SCAM_N2 BODY: No description available.
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.220.196 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.220.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(worldbankgroup101[at]googlemail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(nekere2003[at]yahoo.ca)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (worldbankgroup101[at]googlemail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.220.196 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Fund Beneficiary?
Attention: Beneficiary.
Re - Change of Funds Ownership.
This is to bring to your notice that the President of Republic of
Nigeria,President Muhammadu Buhari has constituted a 10 man
investigative Panel and foreign Debts reconciliation committee, which
I am the Chairman of the presidential committee saddled with the
responsibility to investigate all the banks here in Nigeria, who has
trapped and held beneficiaries Compensation/inheritance/NNPC contract
Fund claims unpaid.
To settle all the Foreign debt after his recent visit & meeting with
the American President Barack Obama of United States and other
officials of the United Nation to enable him give a zero tolerance to
corruption in his regime.I am solely in charge of all foreign
payments. At the commencement of my official responsibility geared
towards payment to foreign beneficiaries. I received a letter that
your unclaimed approved payment by the Central Bank of Nigeria which
has been overdue for payment should now be paid to Lawrence R. Larson
of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A.
In the said letter titled change of beneficiary/ownership. Its clearly
stated that you are dead and that he is your next of kin, it went
further to say you signed a deed and an agreement with Lawrence R.
Larson to become your beneficiary before your untimely death.
Officially arrangement had been concluded for the approved funds
transfer into the account below.
Name of Bank: TEXAS CHAMPION BANK
Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A.
Routing Number: 114914723
Account Number: 909009245
Account Name: Lawrence R. Larson
Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A.
But because of the elaborate global scam, I decided to contact you
first for confirmation before transferring the funds and if after
seven working days, no response is received from you, it will be
assumed that you are dead and as such authorization and approval will
be granted on behalf of Lawrence R. Larson to claim/receive your fund.
But if you are well and alive then confirm this letter and reconfirm
your Information and how you want your said fund to be paid to you
without further delay. Send your responses to me immediately by email.
Below is the information you are expected to re-confirm.
Full Name:
Address:
Nationality:
Sex:
Age:
Date of Birth:
Occupation:
Home Phone No:................. Office Phone No.................... Cell
Phone..................
Driver's license or any copy of Your Identity:
Please feel free to contact me here only for further clarifications
regarding this matter.
Sincerely,
Paul Douglas
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

