by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id jDsSFbB0eV4UFwEAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 23 Mar 2020 22:47:12 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 23 Mar 2020 22:47:12 -0400
Received: from mail-ot1-f68.google.com ([209.85.210.68]:43484)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jGZaw-000IaG-JL
for ; Mon, 23 Mar 2020 22:47:12 -0400
Received: by mail-ot1-f68.google.com with SMTP id a6so15618716otb.10
for <>; Mon, 23 Mar 2020 19:46:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=X03WD9rESc7tssCg6RdPvZwa0f1ho1iVgW6dseaLZfw=;
b=bXM5TroEGjJrzW0gxe44/iSm2uu5Y5uHJ+f4P3iuvapzTzOGCrBDyq5rFa3zqqB2F/
VmEpDJ69VQKIZZXxBsUesnHe/zWr7KO2JW8YIbWpBDDez16DFfG6j9lOFxpigrZox+uE
LUcR/2W5R5kmAJ9L8NXKMsec1OqTUM3jUIji+lGOjaNjKslAdX5wkPIQyxYqiXXpPokV
FL0kG6lDDEkGjyyNDkUMAkkR26ZQl/bGg0bfXwHi0ufqZN5ZQ2N7KWLVPMbEvy9XhgEI
LrbklivjG3XkG/oSBrMusaGdsFkLcukyqvVjhIEVk5mAOzgELBmVaq1ybEs+rVD8lDtG
ugsg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=X03WD9rESc7tssCg6RdPvZwa0f1ho1iVgW6dseaLZfw=;
b=e/TY/Ho4CEY+x3E/3gqjN3MKfVlHNeTkDCD/7TQBZZqjTEZ4IiNVhxVkI2FpbC+uZS
hTGPSk/If9cMnB64+c92xBU7KWxqgYx9JMoFWpLR7gKh9xhGVE8MNUDzJA+m5d9FdHNJ
eJo8QTsw7p/AmF29UQFmongXDmvdw9QCcemEIMB6GPugMCgOdQVqunELw2vrsNI24mZ3
07X0Buqde2TSP7EdVhvspxLShEI4rU1V5gP6xJwsqcQNyYLushvU73fFO2VNoJtUo70v
ZtJQ/4eFGvhn4het97kbswcohlpwYrjpPWzVelX5QajYXbzoEgx2ueyCdNUCrf+B6vCH
400w==
X-Gm-Message-State: ANhLgQ0GB1vK/j7HCufwQNUV3bQtz2VI+bKRxCqsns9+ADpvHkpd56IU
2BONQukD8Qt3/p+D+PHdnfebYXGqo8TgsB6eJXg=
X-Google-Smtp-Source: ADFU+vtu8yZYNzaE4UR4d1sLAhiYkXIqhEKYJcAdfpMHDdZ5q0cgpoI2BMajxgzW/t8aI7pDFqqgrW4hGzlOKD/X+3w=
X-Received: by 2002:a05:6830
: with SMTP id l12mr19737843otr.234.1585017987318;
Mon, 23 Mar 2020 19:46:27 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: "Polaris Bank Ltd." <[email protected]>
Date: Tue, 24 Mar 2020 03:46:15 +0100
Message-ID: <CAE2MagGs3uCgBtk2C7vskCKtCW2g0t8KpVUAm4fZMdwAL0Rzew@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000018c87005a190c2ef"
Bcc:
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- * Polaris Bank Ltd,* * Address: Afribank Plaza, 14th Floor
51/55 Broad Street, * * Lagos Island, Lagos-Nigeria.* * Email: [email protected]
<[email protected]>* * Website: [...]
Content analysis details: (12.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.68 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.210.68 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[polarisbankng01[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[polarisbankng2020[at]gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[polarisbankng01[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_SCAM No description available.
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
2.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** APPROVED ATM CARD PAYMENT NOTIFICATION.
--00000000000018c87005a190c2ef
Content-Type: text/plain; charset="UTF-8"
--
Polaris Bank Ltd,
Address: Afribank Plaza, 14th Floor 51/55 Broad Street,
Lagos Island, Lagos-Nigeria.
Email: [email protected]
Website: https://www.polarisbanklimited.com
APPROVED ATM CARD PAYMENT NOTIFICATION.
Dear esteemed beneficiary,
Following the failure of banks and other financial institutions and agencies to release your part payment USD$5.5 Million overdue inheritance/Contract and compensation fund payment, the Federal Ministry of finance has directed the US,Polaris Bank Ltd, to device a means of paying all beneficiaries,including you.
The best and most efficient way of doing this, we have discovered,is by processing and sending your ATM card. This has been adjudged the best and most effective way of paying beneficiaries without any stoppages as the various banks have experienced using the wire transfer mode of payment, requiring series of transfer documents which costs quite a lot of money.
We are therefore processing your ATM card, which will be ready in few days time and shall be sent to you along with the brochure to guide you on how to use the card. The card shall be loaded with your part payment.
On receipt of the ATM card, you will be able to make withdrawals,not exceeding $20,000 per day, but the limit of withdrawal shall be expanded after one week, whereby you can withdraw more than $20,000 per day until the amount loaded in the card is exhausted. The second card shall then be processed with the remaining half of your fund.
You are therefore, requested to reconfirm to us if this mode of payment is OK.by you as well as your address where you will be on hand to receive the package containing your card and sign off the register that will come along with the delivery courier,confirming that you have received your card because it is a very sensitive document that cannot be received by proxy.
MEANWHILE,
(1) YOUR FULL NAME
(2) CONTACT ADDRESS:
(3) DIRECT TELEPHONE NUMBER:
(5) HOME ADDRESS:
(6) YOUR STATE OF ORIGIN AND COUNTRY.
(7) AMOUNT:
(8) A COPY OF YOUR PASSPORT,
Get back to me as soon as you receive this email so that the processing of your card can be completed and sent to you. Also reach me with your telephone number for faster communication.
Thanking you,
MR.TOKUNBO ABIRU.
GROUP MANAGING DIRECTOR/CEO
POLARIS BANK LIMITED.
SECURITY TEL:+2348026589916
Delivered-To:
Received: from
by with LMTP
id jDsSFbB0eV4UFwEAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 23 Mar 2020 22:47:12 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 23 Mar 2020 22:47:12 -0400
Received: from mail-ot1-f68.google.com ([209.85.210.68]:43484)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jGZaw-000IaG-JL
for ; Mon, 23 Mar 2020 22:47:12 -0400
Received: by mail-ot1-f68.google.com with SMTP id a6so15618716otb.10
for <>; Mon, 23 Mar 2020 19:46:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;bh=X03WD9rESc7tssCg6RdPvZwa0f1ho1iVgW6dseaLZfw=;
b=bXM5TroEGjJrzW0gxe44/iSm2uu5Y5uHJ+f4P3iuvapzTzOGCrBDyq5rFa3zqqB2F/
VmEpDJ69VQKIZZXxBsUesnHe/zWr7KO2JW8YIbWpBDDez16DFfG6j9lOFxpigrZox+uE
LUcR/2W5R5kmAJ9L8NXKMsec1OqTUM3jUIji+lGOjaNjKslAdX5wkPIQyxYqiXXpPokV
FL0kG6lDDEkGjyyNDkUMAkkR26ZQl/bGg0bfXwHi0ufqZN5ZQ2N7KWLVPMbEvy9XhgEI
LrbklivjG3XkG/oSBrMusaGdsFkLcukyqvVjhIEVk5mAOzgELBmVaq1ybEs+rVD8lDtG
ugsg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id:subject:to;
bh=X03WD9rESc7tssCg6RdPvZwa0f1ho1iVgW6dseaLZfw=;
b=e/TY/Ho4CEY+x3E/3gqjN3MKfVlHNeTkDCD/7TQBZZqjTEZ4IiNVhxVkI2FpbC+uZS
hTGPSk/If9cMnB64+c92xBU7KWxqgYx9JMoFWpLR7gKh9xhGVE8MNUDzJA+m5d9FdHNJ
eJo8QTsw7p/AmF29UQFmongXDmvdw9QCcemEIMB6GPugMCgOdQVqunELw2vrsNI24mZ3
07X0Buqde2TSP7EdVhvspxLShEI4rU1V5gP6xJwsqcQNyYLushvU73fFO2VNoJtUo70v
ZtJQ/4eFGvhn4het97kbswcohlpwYrjpPWzVelX5QajYXbzoEgx2ueyCdNUCrf+B6vCH
400w==
X-Gm-Message-State: ANhLgQ0GB1vK/j7HCufwQNUV3bQtz2VI+bKRxCqsns9+ADpvHkpd56IU
2BONQukD8Qt3/p+D+PHdnfebYXGqo8TgsB6eJXg=
X-Google-Smtp-Source: ADFU+vtu8yZYNzaE4UR4d1sLAhiYkXIqhEKYJcAdfpMHDdZ5q0cgpoI2BMajxgzW/t8aI7pDFqqgrW4hGzlOKD/X+3w=
X-Received: by 2002:a05:6830
: with SMTP id l12mr19737843otr.234.1585017987318;Mon, 23 Mar 2020 19:46:27 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: "Polaris Bank Ltd." <[email protected]>
Date: Tue, 24 Mar 2020 03:46:15 +0100
Message-ID: <CAE2MagGs3uCgBtk2C7vskCKtCW2g0t8KpVUAm4fZMdwAL0Rzew@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000018c87005a190c2ef"
Bcc:
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- * Polaris Bank Ltd,* * Address: Afribank Plaza, 14th Floor
51/55 Broad Street, * * Lagos Island, Lagos-Nigeria.* * Email: [email protected]
<[email protected]>* * Website: [...]
Content analysis details: (12.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.68 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.210.68 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[polarisbankng01[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[polarisbankng2020[at]gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[polarisbankng01[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_SCAM No description available.
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
2.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** APPROVED ATM CARD PAYMENT NOTIFICATION.
--00000000000018c87005a190c2ef
Content-Type: text/plain; charset="UTF-8"
--
Polaris Bank Ltd,
Address: Afribank Plaza, 14th Floor 51/55 Broad Street,
Lagos Island, Lagos-Nigeria.
Email: [email protected]
Website: https://www.polarisbanklimited.com
APPROVED ATM CARD PAYMENT NOTIFICATION.
Dear esteemed beneficiary,
Following the failure of banks and other financial institutions and agencies to release your part payment USD$5.5 Million overdue inheritance/Contract and compensation fund payment, the Federal Ministry of finance has directed the US,Polaris Bank Ltd, to device a means of paying all beneficiaries,including you.
The best and most efficient way of doing this, we have discovered,is by processing and sending your ATM card. This has been adjudged the best and most effective way of paying beneficiaries without any stoppages as the various banks have experienced using the wire transfer mode of payment, requiring series of transfer documents which costs quite a lot of money.
We are therefore processing your ATM card, which will be ready in few days time and shall be sent to you along with the brochure to guide you on how to use the card. The card shall be loaded with your part payment.
On receipt of the ATM card, you will be able to make withdrawals,not exceeding $20,000 per day, but the limit of withdrawal shall be expanded after one week, whereby you can withdraw more than $20,000 per day until the amount loaded in the card is exhausted. The second card shall then be processed with the remaining half of your fund.
You are therefore, requested to reconfirm to us if this mode of payment is OK.by you as well as your address where you will be on hand to receive the package containing your card and sign off the register that will come along with the delivery courier,confirming that you have received your card because it is a very sensitive document that cannot be received by proxy.
MEANWHILE,
(1) YOUR FULL NAME
(2) CONTACT ADDRESS:
(3) DIRECT TELEPHONE NUMBER:
(5) HOME ADDRESS:
(6) YOUR STATE OF ORIGIN AND COUNTRY.
(7) AMOUNT:
(8) A COPY OF YOUR PASSPORT,
Get back to me as soon as you receive this email so that the processing of your card can be completed and sent to you. Also reach me with your telephone number for faster communication.
Thanking you,
MR.TOKUNBO ABIRU.
GROUP MANAGING DIRECTOR/CEO
POLARIS BANK LIMITED.
SECURITY TEL:+2348026589916
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
