The world's premier anti internet scam, anti fraud information website 

  • [email protected] Kemi Adeosun

  • 419 scam database with 50,000+ reports. Verify suspicious inheritance emails, lottery wins, and money transfer requests. Names, emails and bank details exposed.
Who are you really talking to? Check their location - InfoSniper
419 scam database with 50,000+ reports. Verify suspicious inheritance emails, lottery wins, and money transfer requests. Names, emails and bank details exposed.
  Been Targeted by This Scam?

Learn how to report a scam to the FBI, FTC, and the right authorities. Been asked to invest in crypto? Read about pig butchering scams. Received a suspicious check? Learn about fake check scams. Not sure if it's real? Use our free Scam Checker Tool.

  by buried under 419s
 
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id kOD/G9Fu41rsEwAAjbubUg
for <>; Fri, 27 Apr 2018 11:41:21 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 27 Apr 2018 11:41:21 -0700
Received: from mail-oln040092069080.outbound.protection.outlook.com ([40.92.69.80]:61656 helo=EUR02-VE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fC8J5-0001Jf-BD
for ; Fri, 27 Apr 2018 11:41:21 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=3MPUyyo/5Yca+cUMYzr7p+rECOtAZYL70RwXUk9d+yg=;
b=G5QL7PHCMG5GeIjLmzYR2YftkKOwKj0miei9rWUgBx0H2bd9NmpeNFIpwy/nwua/Jr0qf8TEq4en1h29+1oJiVlrgDCQsX9OTbetyVubLJ64ynFYGZYtbaO3e55GxrAI3BS9dsZ7JIsoWBVWaZaP9YV9fLOInVMT1byDrKa2u2UK3cGMf6LxiVi+gilbzJm6zh5hZo1a6buBHt+atpyIavmoz4TyS/7aD+c/Cxoke/egH27fTDsJOFGfnmlGOblTdnpGmFOfpwQ0fHWVQ1ix5A5m3f2UBC2EgvpLLJ4YOwfDGRUOHq3xzveuPMpdY4pgXt5DTUPIYtIbrV2K2SpRkA==
Received: from HE1EUR02FT053.eop-EUR02.prod.protection.outlook.com
(10.152.10.60) by HE1EUR02HT132.eop-EUR02.prod.protection.outlook.com
(10.152.11.127) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.696.11; Fri, 27
Apr 2018 18:40:34 +0000
Received: from AM4PR0301MB1970.eurprd03.prod.outlook.com (10.152.10.56) by
HE1EUR02FT053.mail.protection.outlook.com (10.152.11.109) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
15.20.696.11 via Frontend Transport; Fri, 27 Apr 2018 18:40:34 +0000
Received: from AM4PR0301MB1970.eurprd03.prod.outlook.com
([fe80::8834:e751:5026:169f]) by AM4PR0301MB1970.eurprd03.prod.outlook.com
([fe80::8834:e751:5026:169f%5]) with mapi id 15.20.0715.018; Fri, 27 Apr 2018
18:40:34 +0000
From: HABIB BANK <[email protected]>
Thread-Topic: Re-Payment Advice
Thread-Index: AQHT3lc4jt2nWhJXFkab2DURS7ZntQ==
Date: Fri, 27 Apr 2018 18:40:34 +0000
Message-ID: <AM4PR0301MB197088A51EFCA1B9D31A2E16CC8D0@AM4PR0301MB1970.eurprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:9B8055FBBD6602E6DAC24C0168B669AE98DF7AC1D20241D2BFB1CD7EA2CE8704;UpperCasedChecksum:387259F421CC721F535D2802044338A8AF98FA2609F31C5F1C43D7F2DA868C0F;SizeAsReceived:9197;Count:42
x-tmn: [UJ7SHujpVH8m5ECHQC96grjznmFeZ/bJ]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;HE1EUR02HT132;7:wcExoUXvf9HQmlS72n0pZjfsuxY9EbvhXMG1jTeBQABsTInRdiodEQ8mXGJcZ9BQVXPAk2WL73++1hd0l9Yw+I8YlWvFjWImAfAe2m/dZLcWWLz9yxnp8wRORGk+2JgPtFHjv11BXG5keMSufghdfFd43m501b4PaXNx54eVMHNOSq0zznh8InvVjhXmPaCPEa4dQeSw7lNCsjN8tot4F1NHBBHZKCzMWxTrlIaI+CwjYZ8F01PejuOFzQik+T6a
x-incomingheadercount: 42
x-eopattributedmessage: 0
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1601125374)(1603101448)(1701031045);SRVR:HE1EUR02HT132;
x-ms-exchange-slblob-mailprops: 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
x-ms-traffictypediagnostic: HE1EUR02HT132:
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:HE1EUR02HT132;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR02HT132;
x-forefront-prvs: 0655F9F006
x-forefront-antispam-report: SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:HE1EUR02HT132;H:AM4PR0301MB1970.eurprd03.prod.outlook.com;FPR:;SPF:None;LANG:;
x-microsoft-antispam-message-info: MRncYFv/xnSDW3+KbTKKMs1af6QB5QT+SbxqE5dEOn+ClFYxGU8/YDqq77uBRsuRj+/wYDwDlcACx+ugsXiLLdtIW1Zuq5JAQKsrCMGKj1pQD2nQ9Q0yLZ2vTzXfS2lkNxxU8BIiHWh1OWVAkciY6hb3WAFCDp1zPEYjq/TaMsq4ezEJCqd6AbO6UiI9G44u
Content-Type: multipart/alternative;
boundary="_000_AM4PR0301MB197088A51EFCA1B9D31A2E16CC8D0AM4PR0301MB1970_"
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: f061dedd-d598-41f8-7787-08d5ac6e5c9f
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 7181d4b0-87d6-4f4e-ba33-0d3746212cec
X-MS-Exchange-CrossTenant-Network-Message-Id: f061dedd-d598-41f8-7787-08d5ac6e5c9f
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 7181d4b0-87d6-4f4e-ba33-0d3746212cec
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Apr 2018 18:40:34.1997
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT132
X-Spam-Status: Yes, score=8.9
X-Spam-Score: 89
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Our Ref: EOP/FMF/AGF/101X49-1/2018 Sir, In view of the directive
by the president of Federal Republic of Nigeria, to settle all long outstanding
foreign debts, I wish to convey to you that your long outstanding payment
has been irrevocably approved today by my office for immediate release into
your bank account. However, following incessant complaints by our foreign
contractors on the delay of their payment by our Apex Bank, Central Bank
of Nigeria (CBN) after years of successful execution/completion of their contracts,
we have concluded arrangement with Ecobank Ghana Limited The Pan-African
Bank to assist us with the payment of all our long outstanding debts including
yours. [...]

Content analysis details: (8.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.69.80 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (habibhabib1121[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(habibhabib1121[at]hotmail.com)
0.7 HK_SCAM_N3 BODY: No description available.
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Re-Payment Advice

Our Ref: EOP/FMF/AGF/101X49-1/2018


Sir,

In view of the directive by the president of Federal Republic of Nigeria, to settle
all long outstanding foreign debts, I wish to convey to you that your long
outstanding payment has been irrevocably approved today by my office for immediate
release into your bank account. However, following incessant complaints by our
foreign contractors on the delay of their payment by our Apex Bank, Central Bank of
Nigeria (CBN) after years of successful execution/completion of their contracts, we
have concluded arrangement with Ecobank Ghana Limited The Pan-African Bank to assist
us with the payment of all our long outstanding debts including yours.

Therefore, for the avoidance of transferring your fund into a wrong bank account, we
advise you to re-confirm your current receiving bank details to the Remittance
Director of Ecobank Ghana Limited, Mr. Philip Ayew on his official Fax Number:
+233-272-260559 or Email: [email protected] for immediate release of your
fund. He can also be contacted through his direct telephone number: +233-054-7143220

However, our attention has been drawn to the nefarious activities of people
purportedly acting under cover as ministerial officials and financial bodies to
defraud our esteemed contractors/creditors. Therefore, we strongly advise that you
desist from further communication with person(s) claiming to have the mandate to
effect your payment, as our government will not be liable for any loss accruing to
you due to your negligence in adhering to this instruction.

Thanking you for your understanding and cooperation.

Congratulations.

Yours Faithfully,
Kemi Adeosun
Minister for Finance and Economic Planning, Federal Republic of Nigeria.