Here's the last email I received from my scammer. It's a fake forward. he was trying to get me to send money. I googled the name of this person and he's a local doctor from Lesotho and actually opened a (overpriced)medical school in Pretoria without a licence which was closed and he refused to reimburse his students. I'm sure my scammer made up this email address and wrote this message. The writing is very similar to his, only the English is a bit worse. I'm including the headers. It shows him in South Africa where he claims to be. Most of the emails show Nigeria though, when he was claiming to be in South Africa.
From Justin Williams Sun Jul 17 03:57:49 2011
X-Apparently-To: xxxxxxxxxxxxxx via 98.136.165.105; Sun, 17 Jul 2011 03:57:51 -0700
Return-Path: <
[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: sGAS.SQWLDvGGzlSosPZEFXKRypv6YwSOo0Z2uDcsz20Sxil
b6yCAotwWJbMkPMLEsrgTHjigaEJkW9J.oVJjyKJQHNE8C0kxoyIFPNWp5.q
jFLhWqzFQvpYUXhgvgpYwMK.a6PZdt8cMijTArZU.TkOl0DnLA0HC7hiSbJM
i0_RGgBpKqtjxcWCTl_dIGt2K2vXmgn5g6XSFqHkM8_KyzjMgsW8Xb4xVp7g
O3ga_VlUpGMIagMv7mKQRNs9y2htZMCsAcZ3US9y6HbU2KQqmi9RmkfISffk
1efhegQYR.lo6ejHzfq.IHqVIq6RmeZKUaRla4lN0qxtIPVpSfon4uz0Enqg
7rz9RcEAOlgx3IFFzd7P981P..JxlYeRCUXU6HIvGnw9Lyq6zVvfg1qKIQpt
dABNQWOfYEQfYoUlXS.7IfXrWl319zMNQNVvCXnzUGRuCi3w7S3dCHDocrtt
NzPp2MYj0lVrRlfWrHcmiFpb66uvumpArg8XOLzdeQxEbzw.ODEpAWFDLmHI
jCAYrhcqs9TrNxxZDKnoikk7cEPyeewfkbpLjAniqCs3DkZ6JDSJ6FUHFNMF
HwP7BDoW8tKB8bLyq2mwYt9ZvPy.98aQoYq9je7c789aR3FdlgRURXDUvHEi
XSd4E4GnwUDkPPUBhemmJj0BsbT4POQ1xix5nuw1SvTcj5xRAVw2MCKdTzIM
jIIjhcZjYUmEITZCCZNguoNlXp93q8rUWzzUdGaUHuVEpgziVPyCtuZ.6aa5
VIg2cQyZfnwkOOUBNwUliLUbmnOE3RNbOBzBESfCuxp7tpy4TFOWX5TDwNn5
6zD5dQYCmhPunyaiHOjFAOWVZqiqtkP2gGIPNDpsWEN09CfKFKNyVL5yTBl4
MWKRy5KLed1iE5USJ1ZP_drE2VpwV4fbEIyGQ04Jo2qsPU_zMAXa3QXDATzK
f.EUWmTSUpiydkX..upZ_bg64NKAwzeRWhFCoLhdTKo5Z5kdSM7QhqDxU3aQ
pH0TzwRHZwQ2Yv92oC_CF93Sl2fI2gkp5yxIQpZBEUDsGBrhGBcBUbU8OjWC
J.SS72gVsboTJ424OEgR2sRvJpN10Tt7lF32WcBB0MUvkf3cXEMU9vsn8pkZ
vPgqBsqtlypPlFhfixou3m0QBvi0Ss0futv5vV9mpZ0Qq_7nXZijxz.B59YB
KWdd.zhBxX26fP518LXA37gGbkvHNP2rDkUNkyO8Q3MfXul56VYLB0za8SGk
kLsR_1uHNFw9DlY80es..rvDwKFRiMg9XJu6hAU3kIidhA0Ap6w-
X-Originating-IP: [98.139.91.246]
Authentication-Results: mta1072.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm14-vm0.bullet.mail.sp2.yahoo.com) (98.139.91.246)
by mta1072.mail.bf1.yahoo.com with SMTP; Sun, 17 Jul 2011 03:57:50 -0700
Received: from [98.139.91.62] by nm14.bullet.mail.sp2.yahoo.com with NNFMP; 17 Jul 2011 10:57:50 -0000
Received: from [98.139.91.39] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 17 Jul 2011 10:57:49 -0000
Received: from [127.0.0.1] by omp1039.mail.sp2.yahoo.com with NNFMP; 17 Jul 2011 10:57:49 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id:
[email protected]Received: (qmail 27878 invoked by uid 60001); 17 Jul 2011 10:57:49 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310900269; bh=ajx9S/66F7+XpGLPce6zNcKsvJjs3K45s1GOtQwA7P4=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=fM+cE+SC6oKqloZ2LGKBFCXsZfdEZ1fiVy/sOiTRBcgxTF+UmoJ56k/DQwJyqDJLtDqyrGXtzyDJzrP5euz0vAyniInXa1Vw6nNOKJsiiEkito5N2Efb/zitIRLtG03dGDtDsLV/kgKhMkw0JslVRls7zck4Nlh7XgZGq4ActSo=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type;
b=qoQ+3r//dNN2B7v9rieB/P3KcSy4jc0dJ4cHxUpc7FyFStqcTsnY41i84oQ7jliH7q05nP7b0wxhW7cQCu+nO+C5Bi3qC1FDq4JbWdcBlJJ8ghSnkKNp2moZYP++5pbsDF8fIaNjzNrQTxMYQeAdnTlUx6TtNOX+xZyYB0+XFkY=;
X-YMail-OSG: 5RDOAYYVM1nScXD3Yv3_Y.qQ.EZ7ccexOV8y9ROFbVT_Dq2
R6CJYVmJhtGxK3QEcw1RvN_NT8gb_yQJF7N4KSn9EZrykSrDFRkMbdiyg6e6
WsA9mk4NYNjDk.b39pItXcenIz47ECoJnwU3ixJLliAcn2.u1fweVCCNE1t4
BOtfw.UebATnemoZ6GyF91smmkzytLS_PGVQYSOVU8wWfIrqyzU9hd7ph5aq
RMyZwAJesmdu.AIUzGpQ2c1YyEHDLJJCgb4y8sUVQG3naLiIi6w5rOSmTmvS
wOcoRB12DR1.m_KSilDMLLCHYagEg8Bf4wB15W2nx0h_qPnQLvqTjXnSc9IZ
j0m.usee0Lm49EErt0xtTzC0ybvCj_FUO_X3trSICj_bjlNFnBldnI3gZb6R
PAxPgm9tWK.Jt2sREIvANnYnFka7GaLLx.bQ8q2OE06ukSKgkM3XZ1br2nrW
2IR83yFuMusOTFvR9nv3bX0kG
Received: from [41.14.215.40] by web114004.mail.gq1.yahoo.com via HTTP; Sun, 17 Jul 2011 03:57:49 PDT
X-Mailer: YahooMailRC/572 YahooMailWebService/0.8.112.310352
Message-ID: <
[email protected]>
Date: Sun, 17 Jul 2011 03:57:49 -0700 (PDT)
From: Justin Williams <
[email protected]>
Subject: Fw: <
[email protected]>
To: xxxxxxxxxxxxxxxxxx
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-2009504810-1310900269=:27836"
Content-Length: 5109
From: Teboho Bulane <
[email protected]>
To:
[email protected]Sent: Wed, July 13, 2011 12:44:35 PM
Subject: Fw:
[email protected]Hey justin, I arrived Lesotho and the internet was bad and i am also busy cos i can only do some things i come here for soon and come back to SA, Lestho boarder is still free, only that the immg can randonmly select to check few people, also the immigration do sometime check passengers to know if u do not have problem with SA govt before coming to pass thru Lesotho, so u may have to prepare to give them money. I also talk with a guy i know many years ago, he said you may have to give money to the immig when u want to depart because they may want to check u through SA immigration, so if you give them money, they will pass you here and u will not be check/pass by SA immigration again. So he said you should prepare to give them maybe 2500-3000$ with you because you dont know if you will need as much as that. I didnt know if you will do it or not, so i didnt tell him anything and since i dont have all the details from you, i guess that is all i found out for you.. but i will suggest you go with enough money if you are doing it.
If you come here to Lesotho before i come back to SA, please email me, maybe i can be of anyhelp
Thanks
Teboho