I am a scam victim

Hello to everybody! As a first thing I want to apologize right now for my english, it is not so good.

Two weeks ago I received an e-mail with questions about my property on sale. He/she/they found my e-mail address on one advertisements website and contact me. I told the price and the person was very interested. And here the story began...

I'm very interested, I must buy your property, bla bla bla... He introduced himself as an American soldier in Afghanistan military base and told that he have in his possession 16 million usd. But he deposited this money in a security box by the Red cross agent. He will come in my country to work soon and need someone who can help him to transfer the money in my country. He sent to me his photos, photos of his family and a copy of his passport. Later, when I realized that all is a scam I realized too that on the photos is another victim of scam. Meanwhile, I was very stupid and gave him my personal information and copy of my ID. Then, he sent the box with money in Red cross office in one city not so far from where I live (I know, he didn't sent anything) and now, he aspected that I contact the diplomat to make an accord with him for the delivery. And of course, I have to pay! I search on google the name of the diplomat and found some experience of other people with this diplomat, he asked 15000-25000 usd for diplomat delivery. I didn't contact him and I never will because i realized the plan. I pay all this money and they will disappear, there's no box. And I'll can forget my money.

So, this person will never get money from me but he have my information, my fear is that he will use it to scam other people... How stupid am I???

Welcome to the site.

Well done for working out it was a scam, and please do not say that you are stupid, because you are not, these people are very good at what they do, and they make it seem plausible.

Don't worry about him having your details, just have no more contact and he will move onto someone else.

First of all, no you are not stupid. The scammers prey on peoples good will. The whole story has been invented by the slippery trickster to make it sound real. I won't point out the errors in the above posted story.
re: and gave him my personal information and copy of my ID.
It is unlikely your personal info will be used. The reason they ask is to make the scam sound more believable.
I too have previously given personal info to a scam syndicate several years ago with no adverse effects. I would not worry too much.
If possible, could you publish the scammers email address, a header and name the scammer uses for others to spot when doing a search.

The address is [email protected]

The name used by him is Evans Scottish.

I found the header but is so much information there, can someone tell me what to post?

Yes I must agree the headers do look confusing. You could simply publish the whole header bcause it could have been forged, maybe? I notice the subject uses a gmail address which means cannot be traced. gmail does not show the point of origin I'm sad to say. If there are many X lines within the header, it's been forged.

Damn scammers...

Ok, I'll post all informations about this scam, maybe could help someone else.

E-mail address: [email protected]
Name used by the scammer: Evens Scottish
Header:

Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.66.83.234 as permitted sender) client-ip=10.66.83.234
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.66.83.234 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.66.83.234])
by 10.66.83.234 with SMTP id t10mr526861pay.39.1347986618383 (num_hops = 1);
Tue, 18 Sep 2012 09:43:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=fecIWuT0xlGgkezt+O7+VM1T1kCHeO+6to9+VIsPazw=;
b=nePtLjnA1IgKrHAkeRyKLjeckK8uozLfYRbWpDY3ZCQxQxlX9mrsxr0sSZF532+9lr
efqWkjyWg/DW1MAqKf9kvWWWYW3lhNT+AEoECXJ0GLr9cqxhIAxBjqEpVUSxycuC9lO/
i3jPfVC1HZ2WC4ZjwqdKRj4j2EaZTCCWDpmcPoRt29RSp9B5UoZM1fSYZ6WfY4EM0w3C
vM7BqR4zaia+mpSGcqCfvDlwXg2AkG4pJhdovIB5QCKDlO9G2yDHXmwzdLIBb2e702mM
p949VhkntHY4tbuJjnEBxqreelZi/Z6gRwlvsMmwDQbq4qbILIvdSYYdMX1YTY/DHUjX
GfPg==
MIME-Version: 1.0
Received: by 10.66.83.234 with SMTP id t10mr526861pay.39.1347986618340; Tue,
18 Sep 2012 09:43:38 -0700 (PDT)
Received: by 10.68.221.135 with HTTP; Tue, 18 Sep 2012 09:43:37 -0700 (PDT)
Date: Tue, 18 Sep 2012 17:43:37 +0100
Message-ID: <CAEex9eSCqf5jKdVVPjhwy-H6LtSEcGV51oGJ0=Nbxcnhoi87Hw@mail.gmail.com>
Subject: Re: RED CROSS CONSIGNMENT CARGO TO LONDON.
From: MJ Evens Scottish <[email protected]>
To:
Content-Type: multipart/mixed; boundary=f46d042ef4ef8c594804c9fc974d
Bcc:

--f46d042ef4ef8c594804c9fc974d
Content-Type: multipart/alternative; boundary=f46d042ef4ef8c594304c9fc974b

--f46d042ef4ef8c594304c9fc974b
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

I don't know what all this informations mean, I'm new in this kind of things.

And I also want to post his "generous" offer:


-------Original message-------

From: MJ Evens Scottish
Date: 10.9.2012 5:41:56
To:
Object: RE: I am very much interested in buying your property?

Hello My Dear,

Thanks for your response to my request

It seems to me that you are a very sincere person and I want to use this medium to inform you that I will buy your property at your last given price, I must buy. I have option at your good price. Please kindly remove the photo from the site after the business proposal I will make use of it when I come visiting you. And you will make a very GOOD PROFIT.

Let me introduce my Humble-self to you, I am a Major with the United Nations troop in Afghanistan, on war against terrorism. Based on the United States legislative and executive decision for withdrawing troops from Afghanistan by end of this year, I have been deployed to come and work in your country military base soonest. Our mission is to help beef up terrorist targeted states, mostly the United States and the European Union on the war against terrorism.

On the other hand I want to inform you that I have in my possession the sum of (16.2 million US.D) Which I got from crude oil deal here in Iraq / Afghanistan. I deposited this money with a Red Cross Security Company by informing him that we are making contact for the real owner of the consignment funds. And it is under my power to approve whoever that comes forth for the consignment.

I want to invest the money in your country as soon as I am deployed in your country for a good business, anyway you will advice me on that since I am not a business person. I cannot move this money to the United States because I will be in your country for about 3years, so I need someone I could trust to channel this funds & If you accept, I will be smuggle to transfer the money to you where you can go for the pickup or you can agree with the diplomat base on how he can help to deliver the consignment to you.

I am a uniformed person; I cannot be parading with such an amount, so I need to present someone to stand as the recipient. I am an American and an intelligence officer and for that, I have a 100% authentic means of transferring the consignment to Europe, I just need your acceptance and all will be done.

Please if you are interested and capable in this deal, I will give to you the complete details that you need for us to carry out this deal successfully, I decided to find someone that is real, not an imaginary,

Where we are now we can only communicate through our military communication facilities, which is secured so nobody can monitor our emails, then I can explain in details to you, I only reach you through email, because our calls might be monitored, but I have to be sure of whom I am dealing with Please send me your personal mobile number, if you are interested, so I can call you for further Inquiry when I am out of our military network, am writing from a fresh email account. So if you are not interested do not reply to this email and please delete this message and if there is no response to my mail box after 3days I will then search for someone else.

I wait for your contact details so we can go on. I will give to you 30% of the sum and 70% is for me. I hope I am been fair on this deal, Get back to me with your full information:

YOUR FULL NAME.....................................

YOUR FULL ADDRESS....................

YOUR DIRECT TELEPHONE NUMBER........

SEX ….. / AGE………….

Occupation……………………………

I wait for your contact details so we can go on.


Regards,

MJ.Evens Scottish

Afghanistan Military Base

Yes. The header is indeed looking sus. Where it says mr.google.com is not quite correct. The important part is your post is out there as a warning to other potential targets. Hopefully everyone will read your post and not get their fingers burnt.

I did't contact the diplomat but he contacted me, I just saw his e-mail in spam map. His name is Edward Ansah. I hope this will help too! Because this name helped me to find out that all is a scam.

I'm going to post the e-mail address of this fake diplomat and the header, he is using yahoo.

[email protected]

The header:


Return-Path: <[email protected]>
Received: from nm21-vm7.bullet.mail.ird.yahoo.com (nm21-vm7.bullet.mail.ird.yahoo.com. [212.82.109.247])
by mx.google.com with SMTP id o16si32399730wiw.25.2012.09.18.22.34.09;
Tue, 18 Sep 2012 22:34:10 -0700 (PDT)
Received-SPF: neutral (google.com: 212.82.109.247 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=212.82.109.247;
Authentication-Results: mx.google.com; spf=neutral (google.com: 212.82.109.247 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]; dkim=pass (test mode) [email protected]
Received: from [77.238.189.54] by nm21.bullet.mail.ird.yahoo.com with NNFMP; 19 Sep 2012 05:34:09 -0000
Received: from [212.82.108.241] by tm7.bullet.mail.ird.yahoo.com with NNFMP; 19 Sep 2012 05:34:09 -0000
Received: from [127.0.0.1] by omp1006.mail.ird.yahoo.com with NNFMP; 19 Sep 2012 05:34:09 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 83988 invoked by uid 60001); 19 Sep 2012 05:34:09 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1348032849; bh=0uPLBS3a4BCkt814W8/2uFBrxkgT7UF3IxBjDelObg4=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=qx1PqVTiO9ovjH4CEqIiRONbuTPE0OzausAfwMc16e0z82Tbi1p/exxnA2s/WXdKoKY8tLC2tR1kTo1Ngz2Z9NTOGSsdw/43tFiNs3JqaC5GjVbrlLqD78A7dy4jtZ7c19/nF63j2QS3GOOUm44pG2Vcnjt4yzHHEecKLztwbDQ=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.co.uk;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type;
b=CS0P4yWbiZT/DtlJzFHV52b8B4PI4v9E6FRc1G6D7hBIBS8dRkE5hwyhhwPk/3yCvghIg/EjAqIJOw1Oh4ewlEcoi9hatuHpmI6S3HA0y/qEgUctYPOqhhvpT21CHrTQLQXF6HcRZfH+yaVsJseNByzqh4S589dh7LX+o51pppY=;
X-YMail-OSG: 844xP6IVM1kIJWZEkqPDfPSx8aKi5ilg9TKMUv9XiMG9JPn
ZCrXMJ4qulO4JauCdc2VVa.IOa2KYuHs0VPqplC5IitHub77e8GlC1xBsH.j
ugaEueLuUes6LFzs12uu4MbVrVbLa00oLc9h2FyY9tsqjjdD.H_W07WQgH9Q
MDqz0dUePi1TmzCZWzQ.O93rNaa72RJpfqQ1g4L9SbO5De4vZRq.lQb72HI6
B2jztxQbpw_RAA7.5eV8pwJrqWq2SOON9lSHmsL5JgY8puOUCqsm6WZBCLYp
gSkJLlX.btGncVEXLCdClTu1Gq.uWERhq2X7XlXt70iIuvKEmuPs179BjXKP
eAtXpJOHhCQWo7eZRT8SsuqC9dWCzI_FnbU2Yw6KN6rnVyrQybwI45t.11oc
6ats-
Received: from [198.144.105.185] by web133106.mail.ir2.yahoo.com via HTTP; Wed, 19 Sep 2012 06:34:09 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Wed, 19 Sep 2012 06:34:09 +0100 (BST)
From: Dip Ansah Edward <[email protected]>
Subject: =?utf-8?B?UmU6IEF0dGVudGlvbjogRGFuaWVsYSBSYWRlxaFpxIcgQ2FsbCBtZSBmb3Ig?=
=?utf-8?B?YmV0dGVyIG9yYWwgYnJpZWZpbmc=?=
To:
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1437147565-2082193559-1348032849=:62433"

---1437147565-2082193559-1348032849=:62433
Content-Type: multipart/alternative; boundary="-1437147565-212522843-1348032849=:62433"

---1437147565-212522843-1348032849=:62433
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Can I find out where the mail come from?

The relevant IP address is 198.144.105.185. It came from some ISP called Giglinx in California. It may be a computer infected with malware, or the scammer may be there, but he's pretty clearly not a diplomat in Afghanistan or the UK.

Of course he is not a diplomat...
As a last thing I just post a photo of the passport that I received. Find it here: viewtopic.php?f=28&t=53843

I hope all this will help someone in the future!

I forgot to post "diplomat's" phone numbers, so:
Edward Ansah +447011174385 +447587810199
Maybe this will help too.

The phone number beginning +44701 is a redirect used by the scammer to pretend to be in England.

I know now, in the last days I read a lot about scams and scammers. But the numbers could help someone, I hope!

The scammer using the name edward ansah has clearly been linked to a 419 type scam from mid-2010.