by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id UX8IGYFC514AxgAAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 15 Jun 2020 05:42:25 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 15 Jun 2020 05:42:25 -0400
Received: from sonic304-20.consmr.mail.ne1.yahoo.com ([66.163.191.146]:36069)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jkldH-000DAt-4U
for; Mon, 15 Jun 2020 05:42:25 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1592214101; bh=33lkeNn/z/jHYfPgh9S1VQ7bGwOhuP+QztQK7A8DgQo=; h=Date:From:Subject:References:From:Subject; b=RNWfAJHBoJT+FqK1vBwzuhEoaKM7wSWe1Y4tuBTDTT+93Z1S0kbEhy4fRtcyh1WooZb3F86Ja5zNJIaWz6b9okyQj9vhspP58ddWacwmJ7apdJ479DZmD5UeQ4bzgz7C4V5pQvbZ0OE47HOdId3lKHgRVXq6wjSjpWMJlVu7fieH4iahk7fV7oqE7dGhiQZh1VEwd6jwC48XgFIe6E7Jq9anLiJ5/+bcxZXzA63BzJNFyqkBUrd9tFR1NLDtWt2LCjLKzhkz/ppXgfD6Zwlgcy4ykBLVwf+29KIL6g8xFfPThZr4OrV2v+S5VvfDORUyL7dXgutuI811dk2nwmSJxw==
X-YMail-OSG: APXjoLMVM1khDnvozDX0vaO9yfrkkpDW9WumghvTK8mgytUFa9jAGgp7kuNg4ok
O9AGx8sYJVrfFF7GXmNqDYXLW11iDJT5byCaW237K4nB7ydqsdiGs6vWeP2wxzJkPQJTk9zI_KU8
AHM9AJ_DU3BLG6UrOk.THOflhOll6j_ZyZp0ACr84UyFr.F5fvkc9U5mR2aMhxOdx7bBpqZc4vyu
I8rFVJ6CoaD0p_U49FY8xP2sd17.PcXNabIyvQEjUv0hyV8XfZ8cr.bHwbGgjTWUy48JBUWH6ocW
hiI8SwWRlO6gj128FKNQ6.Kze7mIOys8MJZey60FsCU4ltbEJVFDsJlcyCT.x8z7yiMf84Q4ZfIa
lCfhxK41OkWl.a7RNxgbu.3sSmIJH4ygyaZy2RlLqv267zSeuh1WDlZB4EK4Qg1ib1Tm3..BjdZP
nIWyMMUWowYIXz6dnV1q9sQPFssSiSCz3SVAUJSROLICeGDw5R7LXiBi_pN7wt.jzMJu57nxyTO9
847xZUbOKVibrZwxPlsor8qvruXYDNWc5s4hPqyWuUQZGMRUBOCARSqLWw2ZbF8BKs2w3qu51idh
F7FyHOdmbstDspLdTKRCOkroX3gEM.5kF_eU0G7mXgZVQywgBz52DujQbbg0oAzVQSDfwsxwgjtE
6c1zOPS0wlJqJQOf99yzZYFv9BNbnfnv9qLq5BNbBs8LhsbKJnt73kUa3vQGoJqeZwsKalX1LPlH
B2kOh8Hi2nOm0o2toD86ohT.1Ceu1fPZvg3WewUEi2beI7doy.SYKEwxgpfCdtPb1GVSGJ_gCo8m
JkONDtFDDg2KxrH9X37BIwQ5jIczP1QwwWzXaUXuxtMsySP8KWc_cYeoCki0WmZqPLVdIIo0FSHz
Dc7c31FvXRUl1XthQIsdkY9tW9UYcH8puSkvS3Hvyle47UsTz5A0gEZ.JQSDTB9KWaHsEkOUkKGn
XjCn0jyN8b7g6V6x_y8J8WQC.5ilQYSiQCL0sOTXZW4QQQ6SdS5F2UssyXoxDcDxfxnDcO2Wo7yL
dVmhJ_JR9ce2oJcMVM.A7apGbhIMxCUNw4FMKcAqwh5jwqYpxQKccF86wzFLKMFtBq7NYaMqsxIn
e_zOpW0hfLej3mhEO9updPSN9puUkPNqMC9bs.vGw.LAwEzQF3WugDi99c2LpAEznAggjjfKdakU
nVz2iVBoX1SpYUOmBo2T7KkPQgWl71ehOHnx.yu6oaMxnH3qMnKSoA4EpheA77X8GOqJMKuJbrCc
.hFkn3cM5wk7Q_7CvGYkfj_ItXQLnM01YqPEAGAUzgxfMmoDaqFe3uBWJgw1Cxrbkcd2lJz_n
Received: from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.ne1.yahoo.com with HTTP; Mon, 15 Jun 2020 09:41:41 +0000
Date: Mon, 15 Jun 2020 09:41:37 +0000 (UTC)
From: HABIB BANK <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_884318_1395004857.1592214097670"
References: <[email protected]>
X-Mailer: WebService/1.1.16119 YMailNorrin Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
Content-Length: 5686
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: HabibBank AG Zurich Weinbergstrasse59 P.O.Box 303
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 TVD_PH_SEC BODY: Message includes a phrase commonly used in
phishing mails
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[66.163.191.146 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[habibbank7532[at]yahoo.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[habibbank7532[at]yahoo.com]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[66.163.191.146 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
1.7 HK_SCAM No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Memo
------=_Part_884318_1395004857.1592214097670
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
abib Bank AG Zurich
Weinbergstrasse 59
P.O.Box 303
CH 8035 Zurich
Switzerland.
HBZ/CBGH/RCM/0020
Sir,
We hereby confirm the receipt of Bank of Ghana remittance advice by order of Government of Ghana in your favour. However, the order/advice could not be effected due to the non-disclosure of your Security Payment Code Number (SPCN), which is the sole security/claim on your fund. Therefore, the order to pay you has been placed on hold by our telex department.
In order to facilitate speedy payment of this fund into your account, you are strongly advised to contact Mr. William Ofori, Director International remittance Department Bank of Ghana on telephone #: 233- 551953218 or email: [email protected] for the issuance of your Security Payment Code Number (SPCN). Be informed that this hold on your payment advice expires within seven (7) working days from the day of receipt of this message, after which Bank of Ghana would recall the fund if no contact is immediately established.
Kindly expedite action, as credit to your account cannot be given unless the Security Payment Code Number (SPCN) to your fund is forwarded to us by you as the beneficiary of the said fund.
We count on your co-operation and understanding.
Yours faithfully,
Sandy Oritz, Jr.
Senior Executive Officer (SEO).
Habib Bank AG Zurich
Delivered-To:
Received: from
by with LMTP
id UX8IGYFC514AxgAAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 15 Jun 2020 05:42:25 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 15 Jun 2020 05:42:25 -0400
Received: from sonic304-20.consmr.mail.ne1.yahoo.com ([66.163.191.146]:36069)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jkldH-000DAt-4U
for; Mon, 15 Jun 2020 05:42:25 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1592214101; bh=33lkeNn/z/jHYfPgh9S1VQ7bGwOhuP+QztQK7A8DgQo=; h=Date:From:Subject:References:From:Subject; b=RNWfAJHBoJT+FqK1vBwzuhEoaKM7wSWe1Y4tuBTDTT+93Z1S0kbEhy4fRtcyh1WooZb3F86Ja5zNJIaWz6b9okyQj9vhspP58ddWacwmJ7apdJ479DZmD5UeQ4bzgz7C4V5pQvbZ0OE47HOdId3lKHgRVXq6wjSjpWMJlVu7fieH4iahk7fV7oqE7dGhiQZh1VEwd6jwC48XgFIe6E7Jq9anLiJ5/+bcxZXzA63BzJNFyqkBUrd9tFR1NLDtWt2LCjLKzhkz/ppXgfD6Zwlgcy4ykBLVwf+29KIL6g8xFfPThZr4OrV2v+S5VvfDORUyL7dXgutuI811dk2nwmSJxw==
X-YMail-OSG: APXjoLMVM1khDnvozDX0vaO9yfrkkpDW9WumghvTK8mgytUFa9jAGgp7kuNg4ok
O9AGx8sYJVrfFF7GXmNqDYXLW11iDJT5byCaW237K4nB7ydqsdiGs6vWeP2wxzJkPQJTk9zI_KU8
AHM9AJ_DU3BLG6UrOk.THOflhOll6j_ZyZp0ACr84UyFr.F5fvkc9U5mR2aMhxOdx7bBpqZc4vyu
I8rFVJ6CoaD0p_U49FY8xP2sd17.PcXNabIyvQEjUv0hyV8XfZ8cr.bHwbGgjTWUy48JBUWH6ocW
hiI8SwWRlO6gj128FKNQ6.Kze7mIOys8MJZey60FsCU4ltbEJVFDsJlcyCT.x8z7yiMf84Q4ZfIa
lCfhxK41OkWl.a7RNxgbu.3sSmIJH4ygyaZy2RlLqv267zSeuh1WDlZB4EK4Qg1ib1Tm3..BjdZP
nIWyMMUWowYIXz6dnV1q9sQPFssSiSCz3SVAUJSROLICeGDw5R7LXiBi_pN7wt.jzMJu57nxyTO9
847xZUbOKVibrZwxPlsor8qvruXYDNWc5s4hPqyWuUQZGMRUBOCARSqLWw2ZbF8BKs2w3qu51idh
F7FyHOdmbstDspLdTKRCOkroX3gEM.5kF_eU0G7mXgZVQywgBz52DujQbbg0oAzVQSDfwsxwgjtE
6c1zOPS0wlJqJQOf99yzZYFv9BNbnfnv9qLq5BNbBs8LhsbKJnt73kUa3vQGoJqeZwsKalX1LPlH
B2kOh8Hi2nOm0o2toD86ohT.1Ceu1fPZvg3WewUEi2beI7doy.SYKEwxgpfCdtPb1GVSGJ_gCo8m
JkONDtFDDg2KxrH9X37BIwQ5jIczP1QwwWzXaUXuxtMsySP8KWc_cYeoCki0WmZqPLVdIIo0FSHz
Dc7c31FvXRUl1XthQIsdkY9tW9UYcH8puSkvS3Hvyle47UsTz5A0gEZ.JQSDTB9KWaHsEkOUkKGn
XjCn0jyN8b7g6V6x_y8J8WQC.5ilQYSiQCL0sOTXZW4QQQ6SdS5F2UssyXoxDcDxfxnDcO2Wo7yL
dVmhJ_JR9ce2oJcMVM.A7apGbhIMxCUNw4FMKcAqwh5jwqYpxQKccF86wzFLKMFtBq7NYaMqsxIn
e_zOpW0hfLej3mhEO9updPSN9puUkPNqMC9bs.vGw.LAwEzQF3WugDi99c2LpAEznAggjjfKdakU
nVz2iVBoX1SpYUOmBo2T7KkPQgWl71ehOHnx.yu6oaMxnH3qMnKSoA4EpheA77X8GOqJMKuJbrCc
.hFkn3cM5wk7Q_7CvGYkfj_ItXQLnM01YqPEAGAUzgxfMmoDaqFe3uBWJgw1Cxrbkcd2lJz_n
Received: from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.ne1.yahoo.com with HTTP; Mon, 15 Jun 2020 09:41:41 +0000
Date: Mon, 15 Jun 2020 09:41:37 +0000 (UTC)
From: HABIB BANK <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_884318_1395004857.1592214097670"
References: <[email protected]>
X-Mailer: WebService/1.1.16119 YMailNorrin Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
Content-Length: 5686
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: HabibBank AG Zurich Weinbergstrasse59 P.O.Box 303
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 TVD_PH_SEC BODY: Message includes a phrase commonly used in
phishing mails
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[66.163.191.146 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[habibbank7532[at]yahoo.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[habibbank7532[at]yahoo.com]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[66.163.191.146 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
1.7 HK_SCAM No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Memo
------=_Part_884318_1395004857.1592214097670
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
abib Bank AG Zurich
Weinbergstrasse 59
P.O.Box 303
CH 8035 Zurich
Switzerland.
HBZ/CBGH/RCM/0020
Sir,
We hereby confirm the receipt of Bank of Ghana remittance advice by order of Government of Ghana in your favour. However, the order/advice could not be effected due to the non-disclosure of your Security Payment Code Number (SPCN), which is the sole security/claim on your fund. Therefore, the order to pay you has been placed on hold by our telex department.
In order to facilitate speedy payment of this fund into your account, you are strongly advised to contact Mr. William Ofori, Director International remittance Department Bank of Ghana on telephone #: 233- 551953218 or email: [email protected] for the issuance of your Security Payment Code Number (SPCN). Be informed that this hold on your payment advice expires within seven (7) working days from the day of receipt of this message, after which Bank of Ghana would recall the fund if no contact is immediately established.
Kindly expedite action, as credit to your account cannot be given unless the Security Payment Code Number (SPCN) to your fund is forwarded to us by you as the beneficiary of the said fund.
We count on your co-operation and understanding.
Yours faithfully,
Sandy Oritz, Jr.
Senior Executive Officer (SEO).
Habib Bank AG Zurich
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
