[email protected] [email protected]

[HillBilly]

First Bank Nig Plc
Address:Samuel Asabia House
35, Marina
Lagos, Nigeria
Swift:ABNGNGLAXXX

Attention: Sir/Madam.

This is to Inform you that ATM Card Number: (5061 0502 3951 9138)
worth US$550,000.00 has been accredited to your favor, you are advise
to contact Rev Larruty Coker on ([email protected]) with the
following information below.

1. Your Full Names.
2. Your Phone and fax number.
3. Your Delivery address where you want the ATM card to be sent to.
4. Your Age, Sex and Occupation.
5. Your Next of Kin.

Regards
Customer Unit
FirstBank Nig Plc



x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; spf=softfail (sender IP is 203.183.90.145) smtp.mailfrom=[email protected]; dkim=none header.d=bigdreamsembroidery.com; x-hmca=none header.id=[email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: FAIL
X-SID-Result: FAIL
Received: from server.nx01.biz ([203.183.90.145]) by COL004-MC6F5.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Fri, 9 Jan 2015 10:48:55 -0800
Received: from vfppp062038105053.dsl.hol.gr ([62.38.105.53]:60348 helo=User)
by server.nx01.biz with esmtpa (Exim 4.82)
(envelope-from <[email protected]>)
id 1Y9ebZ-0005Fd-Da; Sat, 10 Jan 2015 03:48:18 +0900
Reply-To: <[email protected]>
From: "ATM CARD DEPARTMENT"<[email protected]>
Subject: Your Inheritance Funds (09-01-2015)
Date: Fri, 9 Jan 2015 20:54:56 +0200
X-AntiAbuse: Sender Address Domain - bigdreamsembroidery.com
X-Get-Message-Sender-Via: server.nx01.biz: authenticated_id: [email protected]
Bcc:
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 09 Jan 2015 18:48:55.0509 (UTC) FILETIME=[EB89F050:01D02C3C]

* 62.38.105.53 Hellas On Line S.a. Athens Greece

[DreamFighter]

Yes, it is most frustrating and unfortunate that they are using our site's test email as their return-path. Within a 48 hour period we received close to 8000 bouncebacks which we monitored for anyone who had replied to the scammer by clicking reply instead of using the scammers email address. There was only one - a fellow from Bangledesh who shared his personal information and we sent me a separate email to warm him that he had shared his details with a known advance fee fraud scammer.

There is nothing which can be done at this point but for us to be patient as they will eventually change to another address as their return-path. We have suspended the email address and are hoping this will trigger something.

Keep up the great work, ScamWarners!