Fake recovery scam

[Marylinb]

From Roy Kelvin Gred Wed Nov 23 18:19:34 2011
X-Apparently-To: Removed personal information. ~Bubbles via 68.180.198.205; Wed, 23 Nov 2011 18:19:35 -0800
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: _4LbYvkWLDs85OhLGEbI3nSmkKaB7dKw3zWm.9f8cwaLy0MH
<snip>
PSIZCt.DkoQ8b8BATkJPu3DmBncAELclQqEVX1Knw7nx4wfe43Kx6XF4qUhk
AQcqgPdBbLzqrZKkUu3NQvkiTDeZ11AxEXNivdE-
X-Originating-IP: [98.138.91.95]
Authentication-Results: mta1028.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm19-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.95)
by mta1028.mail.sk1.yahoo.com with SMTP; Wed, 23 Nov 2011 18:19:35 -0800
Received: from [98.138.90.52] by nm19.bullet.mail.ne1.yahoo.com with NNFMP; 24 Nov 2011 02:19:34 -0000
Received: from [98.138.89.194] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 24 Nov 2011 02:19:34 -0000
Received: from [127.0.0.1] by omp1052.mail.ne1.yahoo.com with NNFMP; 24 Nov 2011 02:19:34 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 17299 invoked by uid 60001); 24 Nov 2011 02:19:34 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1322101174; bh=ETx3JqELf36fwvZstUZOYeAjfx9RsgHbwyxmYse4ekk=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=43PldRJyohnzE0IdEXkRysWWhgfrqmLwkSGSSWW/al3aqbB3CBRkWT0yaSe1XTrrRsQJG9OVL541De6y6LIIgjtbgYIX534Q+KZi7RA5kMtncL3rNNvRWBWewLIjwKpbabmFKDIlZaqYmJ8SYVM0CRDwkG574f7JulA7kGQ/nU8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=edIN8Qrh2mBIX67g8lExcfiP9Zli2DMxYfCZ2tSC7mQgbtHwkypNT+0vNnFXJyyURAqr/1HBd7A4rqdt64kazdMS4dX+7YFw42ENWlK2m2zq4GzOiXEAY9eZ+jrlNtyaZTLSD+4p90FSI5jyFhgzjycoKinItyLpwvttv6sO8yY=;
X-YMail-OSG: 3jQDSoUVM1ngBFubzlTydlEzLJszHqetOuqPYVvtT5FE_Nz
oKqmcUKNpoleMuaDnUb3oj9iT90XLDsG8BEChv_gtJ5aj9qybkm_zICeQWma
.QxoTXPcltJBZdhiD_o5._PL1.hTbg.tC4di8UfFkukg20Fqo.a16UliLIEu
q.x9R995A2R7V9azAsVG6iZNpI2iAF.IpgtV_23zjyPXJ6N3GCh.lxrj5EPU
9ZRGnpHJnwUuxsek7lEBG64NbRzlgDksyEsBWRPJSf6WkxbHWgjKqyuiqa26
NQbb3L7PLE.nMZ6YzAh_3l5HGUH.mruUWqFBVM4bjdk5kvS5r7ue5ajQKaCT
.GnFOGN6gLVxRVkmPxrlJAsPI4myBFAPA1dtFbrCrZUPSLY6dm1DVi_wumne
T1scBNIEc2pu.HJhwn_JKej3sngxhBrUU
Received: from [175.143.251.35] by web122315.mail.ne1.yahoo.com via HTTP; Wed, 23 Nov 2011 18:19:34 PST
X-Mailer: YahooMailWebService/0.8.115.325013
References: <[email protected]>
Message-ID: <[email protected]>
Date: Wed, 23 Nov 2011 18:19:34 -0800 (PST)
From: Roy Kelvin Gred <[email protected]>
Reply-To: Roy Kelvin Gred <[email protected]>
Subject: Re: hello....
To: Removed personal information. ~Bubbles
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="912912765-1409907645-1322101174=:17249"
Content-Length: 21240


Step 1: Fill your local bank information
Step 2: Request to send a bank wire in the amount of RM 150,935.00
Step 3:
Sending bank wire to:

Contact Details

Full Names:
Occupation:
Date of Birth:
Age:
Sex:
Address:
Mobile Phone only:
Telephone only: NIll


Bank Details
Name On Bank Account:
Bank Name:
Bank Address:
Bank City, State, Zip and Country:
SWIFT Code:
Routing/ABA Number:
Account Number:

This man claimed he is from Germany working as Interpol and had recover my lost. Asking for my details....with this form...

[jolly_roger]

Hi Marylinb. The individual sending that email must be a magician too. Saying their located in Germany but the e-mail has originated out of Malaysia.
The mail appears to be originated from the computer with IP address 175.143.251.35
Contact information of the ISP for the above IP address is, [email protected]
EMRAN AHMED KAMAL Telekom Malaysia Jalan Pantai Baru, Kuala Lumpur. MALAYSIA
So yes, it is fake.

[Marylinb]

Thanks....i knew it...now, whoever ask for money online r definitely SCAMMER....i'm glad I found this site last 2 days...

[jolly_roger]

That is correct Marylinb, you have summed it up correctly. Anyone from a so called internet dating type of site asking for money to be sent via wu or moneygram is fraudulant. Sending money through those institutions is a brilliant idea but scammers give it a bad name and do it for the wrong reasons.
And, any company asking payment by way of wu or mg should also be viewed with a high amount of suspicion.
Be very cautious with paypal etc too.