by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id cf8rI1Refln+MwAAjbubUg
for <>; Sun, 30 Jul 2017 15:31:48 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 30 Jul 2017 15:31:48 -0700
Received: from mail-oln040092072091.outbound.protection.outlook.com ([40.92.72.91]:33408 helo=EUR03-VE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dbwkR-0003Rv-Fe
for ; Sun, 30 Jul 2017 15:31:48 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=sCGBOCoL210pGI59CcKYQSqo1dAGYjTvePHr3hN2NdY=;
b=RRgovFJcLfUQO/C1Ei+Hpol8W9aL1LTLLZa4rUSd2y9nU3or3qBaIVN8exvGb4rgdHLMC/6SNRwQj59ruRdNdIH6cPISexjJIdeAdgXIvv3CLopZbJFj85zKcouwpmLicFFoLrhkKPsGi0SckDxVd2ELL3CQ40SDI+NiK2qBIlqnvS+WvghZmeJPm8gv4XpngvBxt+iOa3rHgBt84s7LUvCLsQrzU8I7cqUhL0BSNQ3jd7YLAsnf5LMupp0Rqaf6MaH1GY5Tf4uF+1Ni7AWJNlHAe0Y5TYyh9xZWMU/usLaJ24moLMZ7E9s2iwv9vsmq6G4uPTAmhinVbRUiOarM/Q==
Received: from DB5EUR03FT003.eop-EUR03.prod.protection.outlook.com
(10.152.20.57) by DB5EUR03HT034.eop-EUR03.prod.protection.outlook.com
(10.152.21.127) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1282.16; Sun, 30
Jul 2017 22:30:55 +0000
Received: from AM4PR03MB1811.eurprd03.prod.outlook.com (10.152.20.57) by
DB5EUR03FT003.mail.protection.outlook.com (10.152.20.157) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.1282.16 via Frontend Transport; Sun, 30 Jul 2017 22:30:55 +0000
Received: from AM4PR03MB1811.eurprd03.prod.outlook.com
([fe80::f5c6:8bd5:fb23:a1fd]) by AM4PR03MB1811.eurprd03.prod.outlook.com
([fe80::f5c6:8bd5:fb23:a1fd%13]) with mapi id 15.01.1282.023; Sun, 30 Jul
2017 22:30:55 +0000
From: HABIB BANK <[email protected]>
Thread-Topic: Payment Advice.
Thread-Index: AQHTCYOBpnyFiO9u6U2kQaT9efQNbQ==
Date: Sun, 30 Jul 2017 22:30:55 +0000
Message-ID: <AM4PR03MB1811974A03D7352BB94D1FBACCBD0@AM4PR03MB1811.eurprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: yahoo.com; dkim=none (message not signed)
header.d=none;yahoo.com; dmarc=none action=none header.from=hotmail.com;
x-incomingtopheadermarker: OriginalChecksum:6C8BFD8551E73402FB65D127D5C635075BC413EDB2830D7C6624896204A3EE85;UpperCasedChecksum:11D5E2133BF9A27F7939E5BC00AF5EBB6EBE12C56E3DCDC6AD8A6733B5A490D1;SizeAsReceived:9360;Count:41
x-tmn: [a1ALhn3tm494K9ir2I33ZwyEcpb8xmBJ]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;DB5EUR03HT034;7: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
x-incomingheadercount: 41
x-eopattributedmessage: 0
x-forefront-antispam-report: EFV:NLI;SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:DB5EUR03HT034;H:AM4PR03MB1811.eurprd03.prod.outlook.com;FPR:;SPF:None;LANG:en;
x-ms-office365-filtering-correlation-id: c494dc86-d61b-4d06-b680-08d4d79aa4b0
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(300000503095)(300135400095)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322377)(1603101448)(1601125374)(1701031045)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:DB5EUR03HT034;
x-ms-exchange-slblob-mailprops: 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
x-ms-traffictypediagnostic: DB5EUR03HT034:
x-exchange-antispam-report-test: UriScan:(202971688547567);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031);SRVR:DB5EUR03HT034;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:DB5EUR03HT034;
x-forefront-prvs: 0384275935
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
boundary="_000_AM4PR03MB1811974A03D7352BB94D1FBACCBD0AM4PR03MB1811eurp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2017 22:30:55.3141
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR03HT034
X-Spam-Status: Yes, score=7.2
X-Spam-Score: 72
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Our Ref: EOP/FMF/AGF/101X49-1/2017 Good Day In view of the
directive by the president of Federal Republic of Nigeria, to settle all
long outstanding foreign debts, I wish to convey to you that your long outstanding
payment has been irrevocably approved today by my office for immediate release
into your bank account. However, following incessant complaints by our foreign
contractors on the delay of their payment by our Apex Bank, Central Bank
of Nigeria (CBN) after years of successful execution/completion of their contracts,
we have concluded arrangement with Ecobank Ghana Limited The Pan-African
Bank to assist us with the payment of all our long outstanding debts including
yours. [...]
Content analysis details: (7.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.72.91 listed in list.dnswl.org]
-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)
[40.92.72.91 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(habibhabib1121[at]hotmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (habibhabib1121[at]hotmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_REMOTE_IMAGE Message contains an external image
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Advice
Our Ref: EOP/FMF/AGF/101X49-1/2017
Good Day
In view of the directive by the president of Federal Republic of Nigeria, to settle
all long outstanding foreign debts, I wish to convey to you that your long
outstanding payment has been irrevocably approved today by my office for immediate
release into your bank account. However, following incessant complaints by our
foreign contractors on the delay of their payment by our Apex Bank, Central Bank of
Nigeria (CBN) after years of successful execution/completion of their contracts, we
have concluded arrangement with Ecobank Ghana Limited The Pan-African Bank to assist
us with the payment of all our long outstanding debts including yours.
Therefore, for the avoidance of transferring your fund into a wrong bank account, we
advise you to re-confirm your current receiving bank details to the Remittance
Director of Ecobank Ghana Limited, Mr. Philip Ayew on his official Fax Number:
+233-272-260559 or Email: [email protected] for immediate release of your
fund. He can also be contacted through his direct telephone number: +233-054-7143220
However, our attention has been drawn to the nefarious activities of people
purportedly acting under cover as ministerial officials and financial bodies to
defraud our esteemed contractors/creditors. Therefore, we strongly advise that you
desist from further communication with person(s) claiming to have the mandate to
effect your payment, as our government will not be liable for any loss accruing to
you due to your negligence in adhering to this instruction.
Thanking you for your understanding and cooperation.
Congratulations.
Yours Faithfully,
Kemi Adeosun
Minister for Finance and Economic Planning, Federal Republic of Nigeria.
Delivered-To:
Received: from
by (Dovecot) with LMTP id cf8rI1Refln+MwAAjbubUg
for <>; Sun, 30 Jul 2017 15:31:48 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 30 Jul 2017 15:31:48 -0700
Received: from mail-oln040092072091.outbound.protection.outlook.com ([40.92.72.91]:33408 helo=EUR03-VE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dbwkR-0003Rv-Fe
for ; Sun, 30 Jul 2017 15:31:48 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=sCGBOCoL210pGI59CcKYQSqo1dAGYjTvePHr3hN2NdY=;
b=RRgovFJcLfUQO/C1Ei+Hpol8W9aL1LTLLZa4rUSd2y9nU3or3qBaIVN8exvGb4rgdHLMC/6SNRwQj59ruRdNdIH6cPISexjJIdeAdgXIvv3CLopZbJFj85zKcouwpmLicFFoLrhkKPsGi0SckDxVd2ELL3CQ40SDI+NiK2qBIlqnvS+WvghZmeJPm8gv4XpngvBxt+iOa3rHgBt84s7LUvCLsQrzU8I7cqUhL0BSNQ3jd7YLAsnf5LMupp0Rqaf6MaH1GY5Tf4uF+1Ni7AWJNlHAe0Y5TYyh9xZWMU/usLaJ24moLMZ7E9s2iwv9vsmq6G4uPTAmhinVbRUiOarM/Q==
Received: from DB5EUR03FT003.eop-EUR03.prod.protection.outlook.com
(10.152.20.57) by DB5EUR03HT034.eop-EUR03.prod.protection.outlook.com
(10.152.21.127) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1282.16; Sun, 30
Jul 2017 22:30:55 +0000
Received: from AM4PR03MB1811.eurprd03.prod.outlook.com (10.152.20.57) by
DB5EUR03FT003.mail.protection.outlook.com (10.152.20.157) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.1282.16 via Frontend Transport; Sun, 30 Jul 2017 22:30:55 +0000
Received: from AM4PR03MB1811.eurprd03.prod.outlook.com
([fe80::f5c6:8bd5:fb23:a1fd]) by AM4PR03MB1811.eurprd03.prod.outlook.com
([fe80::f5c6:8bd5:fb23:a1fd%13]) with mapi id 15.01.1282.023; Sun, 30 Jul
2017 22:30:55 +0000
From: HABIB BANK <[email protected]>
Thread-Topic: Payment Advice.
Thread-Index: AQHTCYOBpnyFiO9u6U2kQaT9efQNbQ==
Date: Sun, 30 Jul 2017 22:30:55 +0000
Message-ID: <AM4PR03MB1811974A03D7352BB94D1FBACCBD0@AM4PR03MB1811.eurprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: yahoo.com; dkim=none (message not signed)
header.d=none;yahoo.com; dmarc=none action=none header.from=hotmail.com;
x-incomingtopheadermarker: OriginalChecksum:6C8BFD8551E73402FB65D127D5C635075BC413EDB2830D7C6624896204A3EE85;UpperCasedChecksum:11D5E2133BF9A27F7939E5BC00AF5EBB6EBE12C56E3DCDC6AD8A6733B5A490D1;SizeAsReceived:9360;Count:41
x-tmn: [a1ALhn3tm494K9ir2I33ZwyEcpb8xmBJ]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;DB5EUR03HT034;7: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
x-incomingheadercount: 41
x-eopattributedmessage: 0
x-forefront-antispam-report: EFV:NLI;SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:DB5EUR03HT034;H:AM4PR03MB1811.eurprd03.prod.outlook.com;FPR:;SPF:None;LANG:en;
x-ms-office365-filtering-correlation-id: c494dc86-d61b-4d06-b680-08d4d79aa4b0
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(300000503095)(300135400095)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322377)(1603101448)(1601125374)(1701031045)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:DB5EUR03HT034;
x-ms-exchange-slblob-mailprops: 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
x-ms-traffictypediagnostic: DB5EUR03HT034:
x-exchange-antispam-report-test: UriScan:(202971688547567);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031);SRVR:DB5EUR03HT034;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:DB5EUR03HT034;
x-forefront-prvs: 0384275935
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
boundary="_000_AM4PR03MB1811974A03D7352BB94D1FBACCBD0AM4PR03MB1811eurp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2017 22:30:55.3141
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR03HT034
X-Spam-Status: Yes, score=7.2
X-Spam-Score: 72
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Our Ref: EOP/FMF/AGF/101X49-1/2017 Good Day In view of the
directive by the president of Federal Republic of Nigeria, to settle all
long outstanding foreign debts, I wish to convey to you that your long outstanding
payment has been irrevocably approved today by my office for immediate release
into your bank account. However, following incessant complaints by our foreign
contractors on the delay of their payment by our Apex Bank, Central Bank
of Nigeria (CBN) after years of successful execution/completion of their contracts,
we have concluded arrangement with Ecobank Ghana Limited The Pan-African
Bank to assist us with the payment of all our long outstanding debts including
yours. [...]
Content analysis details: (7.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.72.91 listed in list.dnswl.org]
-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)
[40.92.72.91 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(habibhabib1121[at]hotmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (habibhabib1121[at]hotmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_REMOTE_IMAGE Message contains an external image
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Advice
Our Ref: EOP/FMF/AGF/101X49-1/2017
Good Day
In view of the directive by the president of Federal Republic of Nigeria, to settle
all long outstanding foreign debts, I wish to convey to you that your long
outstanding payment has been irrevocably approved today by my office for immediate
release into your bank account. However, following incessant complaints by our
foreign contractors on the delay of their payment by our Apex Bank, Central Bank of
Nigeria (CBN) after years of successful execution/completion of their contracts, we
have concluded arrangement with Ecobank Ghana Limited The Pan-African Bank to assist
us with the payment of all our long outstanding debts including yours.
Therefore, for the avoidance of transferring your fund into a wrong bank account, we
advise you to re-confirm your current receiving bank details to the Remittance
Director of Ecobank Ghana Limited, Mr. Philip Ayew on his official Fax Number:
+233-272-260559 or Email: [email protected] for immediate release of your
fund. He can also be contacted through his direct telephone number: +233-054-7143220
However, our attention has been drawn to the nefarious activities of people
purportedly acting under cover as ministerial officials and financial bodies to
defraud our esteemed contractors/creditors. Therefore, we strongly advise that you
desist from further communication with person(s) claiming to have the mandate to
effect your payment, as our government will not be liable for any loss accruing to
you due to your negligence in adhering to this instruction.
Thanking you for your understanding and cooperation.
Congratulations.
Yours Faithfully,
Kemi Adeosun
Minister for Finance and Economic Planning, Federal Republic of Nigeria.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

