Am I being scamed

I have been chatting to this guy for about 3months now. He has told me he is an US Soldier in afghanistan. I have checked all of the email headers that he has sent me and they are all coming from poland. He has told me that he has applied for leave himself and is waitng on a reply for it. The help will be greatful here is the header from one of the emails.

From Wed Mar 7 08:30:55 2012
X-Apparently-To: via 98.138.88.168; Wed, 07 Mar 2012 08:31:03 -0800
Return-Path: Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
d2FzIHlvdXIgbmlnaHQ_IEhvcGUgeW91cmUgZmluZSBhbmQgY29vbCBnb3Qg
YWxsIHlvdXIgZW1haWxzIHRoYW5rcyBmb3Igd3JpdGluZyBhbmQgZm9yIHNo
b3dpbmcgaG93IG11Y2ggeW91IGNhcmUsIEkgYW0gc28gc29ycnkgaGF2ZW50
IGJlZW4gd3JpdGluZyB5b3UgaGF2ZSBiZWVuIGJ1c3kgd29ya2luZyBhbmQg
dGhpbmtpbmcgYWJvdXQgeW91LCBJdHMgb2theSBmb3IgeW91IAEwAQEBAQ--
X-YMailISG: PFmmmFgWLDsVJMqf7F5w.oKLlfPTQWFato7w7pYW451kgQm8
.wdY46iuOglx0c48xyfHkQeQhIcRcLlidSOHzemeBOEf_hBNWmXIKopHKAdS
4Vbajh_HOd.LPWRMKubW.ybt_z0NxzvnuXFbH1Om1zg9YFvZ1JH50XCthdhM
x1AEPZgRlAGtoat7vTr2xsAvdETTg48Skk.vQun6sUbvT7DwUZyD05BomCEJ
2FXyqkDrqowwfTE9WkHc.JIo.iA0k43lqtBkm2JlpY4l5Sy2qq4gDtbSPZf1
tdPQDg0weEwiVq75uvCqk.mFNTHXEAls9jKbTNmTcuTdUQYPDByKITz3P9fe
b8kRxjl6DHjQd4s9jepvm5mywJpCcxKA706Dxc80OVszmEJPH2O19gtQ098.
lgb_.Q3GRAcwYdi7IP0Vy_U_pOgY9jyv9.hvAvUtZFn8k0_sm74k6sBPjGpU
MGaSynWHE_eGybBYAmRv3B53bdpIuaA4tMpCLHx6d6nbFlfF0A8yipEZ1E6D
TSk2jmv.MuIYPPZBkU0yeEXFr9go3GiH.BsuzbEh0AMjOdD548IbcCyIDHd0
3x9rgCZqa99y6LFr0qG5E8twm7iarQcbKWAPUce7hkouCm8D3hMwK6QLCWxa
M.M1uUEBaO6pa81vF39TOux0mj7MzebqcnTBfxpZ_0G.7N26ausORwdW17HS
EpEKEcMvi_dxDaFAdgFwYtwgNu4uQELz4m5MQ2G1JEMzP5YnkAsHeUrntHW4
7wlBVipsB.duZrUJM4SQ2hVo2f0joZfqiTZC_2NeMbjrm6AeSs6y74Tb5qsn
py1Zp6xw9tbxgUmGD_5MeZK44czp.Jd4tRdkoiXLIpblYLmOHxvJf8A15h0A
.OLLChhv9sm0MECwYhiHn5YrnYWHGBFwXBvZsc1tFk2HKQiFZih2o2Wlprdq
F_AlS72bvoYSDjTDUmrsJTcfKDKjF9uurqJB0nDHrJMWXyhq8a11LhLWHCGf
hHyMsc8EOkrqfBKaJhK5dnc_kUaJ5E5f3bKwKvjFKK00tE.UGri.VeexcUaC
zjRvqF3krbSe3MILY.0K3JqbY1Jc8mei2nHXKvO7.714Kc_BRDPl6xDcoWC0
1sK9aaw1nJqet6.kWdFi8BXeTSZhSzRwELUyF32Xy.94KvzhclbOV6_Ibqq2
MXa5ha0-
X-Originating-IP: [98.139.91.198]
Authentication-Results: mta1196.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm10-vm0.bullet.mail.sp2.yahoo.com) (98.139.91.198)
by mta1196.mail.sk1.yahoo.com with SMTP; Wed, 07 Mar 2012 08:31:03 -0800
Received: from [98.139.91.63] by nm10.bullet.mail.sp2.yahoo.com with NNFMP; 07 Mar 2012 16:31:03 -0000
Received: from [98.139.91.57] by tm3.bullet.mail.sp2.yahoo.com with NNFMP; 07 Mar 2012 16:31:02 -0000
Received: from [127.0.0.1] by omp1057.mail.sp2.yahoo.com with NNFMP; 07 Mar 2012 16:30:55 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 32915 invoked by uid 60001); 7 Mar 2012 16:30:55 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1331137855; bh=7VnF/c/U9l9aS6iU7Qo0lWr4krSHENWvZ+eg1Wan8fg=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=wNr2710PxxIQHc80Fr3ox61v8Y77J1iOgb3ezucHcVZXu2bu9EB8f6aVMuSHdMy/t4TqC3K1k7mBARK14RkMSGjCmRcftJPh3V3YEwTqrnkzKGFHvq1yM7v4aGyyIa3f1KyvBIdRqh9NPTmlIs1PEC6/s87xfdJ4NCmTXpB9sIc=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=gcJp3H+9l3X5DGCL7D/mZ+CpoKFWKLvcHZgDAGeSgniw9JhJ4tdoMHRguwCQdQ+2owsEGXJ9vtBS8IDZggft+wLMoLb0DhY3PYHgH/U14OM5pDuux3bcCFdM7Gbl6ZK6urxRwanjT1dF+RyQhl9U2mlsC6PNF32v0g+wckk1iHI=;
X-YMail-OSG: jtqgOwoVM1ktKzthENAgDG0Vodd5bV_DdV4RgIGkTEoqPtP
G2nbcn6Bmy9lN6LqmWX7Vz_bpFgbryhH8Qu_PBBcUaIyvGvp9ERBsZ2fVbAp
EvaPTLcjrUfahLcP93TaJPticVPNxhMDoBqhZ__O_bav7EjFbEr4ybdBRwJj
TE9kPEvlWJ.CRNmR.RD6kcSfi62PN_MbXTrmkSAFZc4QVKuqnEk2HNcXWr5q
FqyKhMWlRgnwcU9l3d030jWQE2_txVSwjFK9N3cphHmCs0P18kMYBfYxZ0k4
q.xK.MGYIeKGCLf5rXVeGDbmeN3j_LM8ET55Ew6D9vRnZ7hlt4tjQP7z6JNj
BojqsyRXUQ71YxFGYFW_t3XNR0_BB4bIBm68CrYKRP8x.3DDIW2OymZ1m9LX
EssjU_nc98eLG
Received: from [153.19.226.208] by web114506.mail.gq1.yahoo.com via HTTP; Wed, 07 Mar 2012 08:30:55 PST
X-Mailer: YahooMailWebService/0.8.116.338427
References: <[email protected]>
Message-ID: <[email protected]>
Date: Wed, 7 Mar 2012 08:30:55 -0800 (PST)
From: Reply-To: Subject: Things I want to know about you
To: Removed personal information. ~Bubbles
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-2111936219-551577196-1331137855=:26925"
Content-Length: 5613

In order to establish he is real, he would have to show he can both send emails from that address and receive emails at it. So if he hasn't sent an email to you from that address, and he has not received an email from you at that address, then there is no evidence the address actually exists, or if it does, that it belongs to him. It is important that it go both ways because headers can be forged.

The headers concern me, specifically the NNFMP I see in that header. NNFMP is a little understood yahoo mail protocol that, according to yahoo, means the headers were forged. While it's not always the case, these headers are most often associated with scammers and spammers. When you see NNFMP, the IP information is typically unreliable.

I can't say right now with certainty whether this is a scammer, but there is certainly a distinct possibility that this is. The actual writing from some of the letters would be helpful to make a determination.

Welcome to ScamWarners cazarat. From the little you have posted about what you have been told, it looks like a typical scam. To know better, please post up more of the messages you have received from the scammer, that will let us help you better.

If your "gut" (intuition) is telling you it is a scammer, your gut is correct in most cases.

Scammers come from all over. Some use proxys to look like they are coming from a different location. That may be what is happening here. Please do post up more of the messages you have received.

Actual military personnel don't have time to sit around and send emails and chat online. They have a job to do, especially in a war zone.

I see I was "ninjaed" my Dotti!

Hi cazarat. The e-mail header appears normal except for one small fault, which may or may not matter. One other aspect you will notice is the NNFMP after the 2nd, 3rd and 4th Received: from line. If the individual tells you it's a soldier in Afghanistan, it seems strange the emails originate from Poland?
I do not wish to be a wet blanket, but please take care. If there is any other info you can add, please do because it will help to clarify.

the clincher will come when he asks for money to fly home. Real military personnel won't do this (they will never need to). at this point you can say with absolute confidence that he is a dirty thief. With that said it looks dubious anyway, so don't give him any personal information or send him money for any reason.
If he sends you pictures of himself, reverse search them through Tineye or Google Images and see where else they crop up on the web. They may well be stolen.

this is the first message he sent me through myspace.


Hello, how are you doing? you are looking beautiful! and very angelic to look at....i cant even imagine what you are looking for on this site..... and you seem like a nice and responsible woman.. I am here for a serious relationship but would like to start as friends..for how long have you been single and what kinda relationship are you seeking? and I really hope we are here for the same motive and i would like us to get to know each other better.. i have no kid and i have never been married..and presently i am in Afghanistan cause i was deployed here months ago..i just hope that does not piss you off. Pls check my profile and drop me an email as i might not get to come on this site...due to situations here...hope u can understand? Also your prayers will be highly appreciated.

The writing alone tells me that you are dealing with an African scammer, not an American soldier.