Scams re-targeting those who have already been victimized
by MightyMouse! Wed Jul 28, 2010 12:46 pm
This may not be a new scam, but scam it is and it's new to me: Mrs. Farida Waziri (an actual person, to lend authenticity to the scam) wants me to help fight Internet spamsters and help restore the reputation of Nigeria - the email comes to us from IP address, 62.177.213.246 - Hoofddorp, Netherlands --

Tue, July 27, 2010 7:59:30 PM

Help Stop Internet Fraudsters.
From:
Economic and Financial Crimes Commission <[email protected]>
To:

I humbly believe that you are an educated person coupled with the fact
that you know very much that Fraudsters are everywhere trying to defraud
unsuspecting individuals of their hard earned money.

l am MRS FARIDA WAZIRI. CHAIRMAN Economics and Financial Crimes
Commission (EFCC) OF THE FEDERAL REPUBLIC OF NIGERIA. We came across
your email address while going through the list of people that have
recieved fraudulent mails from Nigerians.

Per-adventure you fell victim to fraudsters[scammers],and we are looking
for evidence from you so that we can get these people and prosecute to
life imprisonment for tarnishing the image of our country and making
the world an unbearable place. Hence,We implore you to take
precautions.In addition, Stop replying any mails you suspect for the
time been.

Your interest will be highly protected and you may be Compensated
financially if you cooperate with us. We understand that some of these
fraudsters claim to be in London England but be rest assured that we
know they are operating from Nigeria. We implore you to assisit us with
this investigation. We may compensate you with $150,000 for all your help.

Thanks.

Your faithfully,

Signed, FARIDA WAZIRI
Chairman, Economic and Financial Crimes Commission


Take care and beware,
MM!
Advertisement

by Arnold Wed Jul 28, 2010 1:01 pm
It's not unusual for scammers to claim to be police, government agencies, etc.
Does the email have another address to reply to? It surely didn't come from [email protected] (Vietnam).

by Michael Wed Jul 28, 2010 1:03 pm
MM, can you provide me the full headers please?

Account inactive - messages are not being monitored
by MightyMouse! Wed Jul 28, 2010 1:44 pm
Arnold:
What you see is what I got, but when I hit, "Reply," I got this: [email protected]

MM!
by Dotti Wed Jul 28, 2010 1:50 pm
I have moved this post to the appropriate forum.

This is simply a variant of the money recovery scam, in which the scammer is looking for victims who have already lost money, and offers a (fake) opportunity to recoup some or all of the money lost (in this case it is in the form of a "reward" but to the victim it is simply a chance to get back what was lost.

Need to post photos? http://scamwarners.com/forum/viewtopic.php?f=28&t=3219
Are you a victim of a romance scam? Read here for advice and FAQ's.
by MightyMouse! Wed Jul 28, 2010 1:54 pm
Michael:

Here it is - I've taken the liberty of expunging the "To" name:

From Economic and Financial Crimes Commission Wed Jul 28 00:59:30 2010
X-Apparently-To: [email protected] via 98.136.167.114; Tue, 27 Jul 2010 18:06:19 -0700
Return-Path: <[email protected]>
X-YahooFilteredBulk: 203.162.130.79
Received-SPF: none (mta1082.mail.ac4.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG: ax0CHkUcZAqxcjf7k7ZbuaChwfNElmC3wLhtCnqwAzAfYkO4
2c06_FkNj2hBTIXYM1IX2oSj.E3SSPebn6fLaus86DC5FSYIpyyubaFLxYjs
RRe1CwDQ.Od40m9blm7Rg7FKoUmPQ7uLzdSQjZhC8nefiordUNtaFpKOFgMY
7L5wYW8CPH81DlMtII.pfAoPs3WCm3kW4J2WCSakBNBBrdkMq4f1UVeCgs6N
utPKunFAFgVmQ.SVPb7g3Xwp0dw_hCG7PG4jaDyTkDFGprg8M9uDHmdOgse8
terp8ULwJYeM_nGB0RyPeOn9N8NGdVL.KTc_vx1.t8pW5ErLA0s1NGXLJGqA
oqkRmKF1DQ8rT8wJlXc5_polHXuG.Bqx_PAdFxbrWluLYAMw160OpowbOzdV
v1byq8IF2YNsWF1WI2VQyZwSZnUJBdnh63UwJHxd6RWywyAqYCYmBPLlelM_
ngTAqbxNS.STtHZnGfqzpbwjG1alRmMk1EKSWROge7HNtnShA5q3E1DBLRi6
06QZ9XNc8cz3WdeL09r6NSE7L9FCecUyIQTGL.TAAY3lLE3Vu41nrP56OxUc
wrhWrzChyMnh8B6RmUchVbLw341wVHyNQo3NooF4.ZiMiNbZJKNaS_ddld_.
tiazUPsm2iKE9lAZNruASY.Etn1DS3x4p1za2cKQFdu.qrhg_Ccb.bj9EMjR
qbD.v3KEfuIytpNnnRM7NhIRDuPW.ab9yjkAjjlsMtgw5OI5vS8TDsdB35oE
wfyyFjjKz5N0_GxEIQ1rh9eF3EooBKQxRfK_zaTm1cqWc5pQoUVMA.Z4Hr8y
TNba.zHi8ZNhTGL.ZqODUr2hn7nsKbW33iPbeaKZ1trLHz_yMj4ZBHq9LtJb
0eN914dOd_w3Hs84WJXfBk8IPyTWHKwAsGSbWU9zXu6Rj3q1Tp_ZRSN238s0
Ct5MSJgFV.42HvRxAtRiCUOSqUhAJ0xw5JPb3_bNS2yc6G7GGxfjk1BDY3sh
Ic8_nlddzJRRMWswkv5_4SmMBrkNaFEepU_jw3RnCLf3d7Z3tQYwkiDkVfba
38ri_nMtZvyx4PPlxyuQXMnpvBUoxkhEzXGuNvcH.TH9klwd.lTWEF4PCWqR
gTd_OOR.SzJmfmBD710zukLQ6tm5KCy7NH81Z6SjULCBx_vkK4C6FaaBfwNl
2655uQLECPzrAGLcuut.HTh8RBk.ayDL6tEGkX89_o6xFcsu30exXb2yJqDb
yBqE26w0xdY9EFBMOq0JWF8YXn9TRwsAEKcKmSflf2pnVRJhAYriOXeb6DCj
KP63eBYtAQ--
X-Originating-IP: [203.162.130.79]
Authentication-Results: mta1082.mail.ac4.yahoo.com from=vnpt.com.vn; domainkeys=neutral (no sig); from=vnpt.com.vn; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.vnpt.vn) (203.162.130.79)
by mta1082.mail.ac4.yahoo.com with SMTP; Tue, 27 Jul 2010 18:06:18 -0700
Received: from ex-hub01.vnpt.vn (10.1.3.5) by ex-edge02.vnpt.vn (10.1.2.51)
with Microsoft SMTP Server (TLS) id 8.1.436.0; Wed, 28 Jul 2010 07:58:55
+0700
Received: from User (62.177.213.246) by mail.vnpt.vn (10.1.3.10) with
Microsoft SMTP Server id 8.1.358.0; Wed, 28 Jul 2010 07:58:48 +0700
Reply-To: <[email protected]>
From: Economic and Financial Crimes Commission <[email protected]>
Subject: Help Stop Internet Fraudsters.
Date: Wed, 28 Jul 2010 02:59:30 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
Return-Path: <[email protected]>
Content-Length: 1276


MM!
Last edited by MightyMouse! on Wed Jul 28, 2010 3:21 pm, edited 3 times in total.
by MightyMouse! Wed Jul 28, 2010 1:59 pm
Dotti - I don't see that as being the case, but as you will --

MM!
by Jillian Wed Jul 28, 2010 2:15 pm
Thanks for posting this, MM.

This is the part that shows it is sent to target previous victims with a fake recovery compensation.

Per-adventure you fell victim to fraudsters[scammers],and we are looking
for evidence from you so that we can get these people and prosecute to
life imprisonment for tarnishing the image of our country and making
the world an unbearable place

Have you sent a payment to a scammer with Western Union and now realize it's a scam? If the payment has not been picked up, you can cancel it immediately! 1-800-448-1492

Follow ScamWarners on Twitter: http://twitter.com/ScamWarners

Who is online

Users browsing this forum: ClaudeBot and 5 guests