Nigeria Scam

The following are a couple of key communications from a scam woman that calls herself Jonat Nolen <jonatnolen>. Never did "bite" and cut everything off with her in the past week...interesting approach!

From: Jonat Nolen <jonatnolen>
Subject: Re: Hello...........
To: camarorks
Date: Friday, July 18, 2008, 3:08 AM


I've been having a problem with my Dad who i live with but right now due to our differences, i have left the Uk after the death of my Mom in United Kingdom. MY Dad works with Oil Contractors in UK and Africa include some parts of the Asian and American. I work with my father as his personal auditor and we move around for his contracts whereever he is awarded.My first boy friend, Rick Manson, absconded with my dad's money which was kept with me after a completion of a contract in EAST london,UK. When my boy friend got absconded with the undisclosed sum of USdollars, this brought the first brokeup between me and my dad, cos he thought, we have the deal together, but not knowing that I'm an innocent about this. So my dad has been harsh and tough against me about this.Then when I perceived all his behaviors towards me and the bad acts of his newly gotten wife, i decided to leave United State to meet a friend in Lagos in west africa whom have meet during our stay there for a contract with N.N.P.C. I left because my dad have been treating me bad and stopped me from working with him even having any acces to his assets, and i felt no where to go than to leave the states. Now, I'm in need of your help, have gotten the enuogh money to run myself when I get to UT, i want to come over to your end and stay with you for main time, I don't want to live here anymore, you know I'm a foreigner here and it is absolutely danger for me here, so that is why i need your gesture assistance.How i want you to help me? I have some money, which I've gotten from an over invoiced Contract renumeration executed by my dad with some contractors, so I have taken up the money from the contractors, but I'm hiding up from the girl I stayed with here in Porto-Novo, because i might got setup if they know i have such huge amount of money (4.5million$), so for me to be more safe and secure, I put this money in a box and got it locked up with a security code known to me only, and I deposited the box with some of my travelling luggages with a Security and Insurance Company who render private diplomatic delivery service and i told them that the two boxes are my travelling luggage, which I want to send forth to you, then i paid them up their custody and security fee. So, I want the box sent to you while i catch up with you as soon as it is been delivered to you while I pay you up your Rent charge and a reasonable amount for compensation, only 15% of the money in the box to you.Every arrangement for the delivery is kindaperfect, I have obtained customs papers for private freight and there are seals on the box showing that it is a private delivery and check performed, it is free from customs checks, it will be delivered at your door step by the diplomats of the security company, you do not need to burn out to receive it. And the boxes have security codes lockknown to me only, only me can open the boxes, except if I tell anyone the Code, so the Boxes cannot be opened on the Way of delivery to you.Therefore, I want you to contact me as soon as possible, so that you can make the Clearance from the Security Company as the Recipient of my Boxes. And once the box gets, I will be there with you, then we can open the box together or i will tell you the code to open it, so that you can arrange everything properly before my arrival.Like I said, I will pay for your rent and fulfil my 15% promise of the money to you. I will appreciate your trust towards this and hoping to hear from you and to meet you inperson.
Loads Of Love,



From: Jonat Nolen <jonatnolen>
Subject: I will appreciate your trust and help towards this......
To:
Date: Saturday, July 19, 2008, 3:00 PM

I will appreciate your trust and help towards this.The boxes will only take 2-5 days to be deliver to you. Below are my deposit details and the contact of the security company. You can write to the security company and instruct them that you want your fiancee's deposited boxes sent to you. While contacting the company, please do not let them know that the boxes contain money, just tell them that you want your fiancee's deposited travelling luggages sent to you because I only tell them that the boxe are my travelling luggage, which I am sending to you. Then you ask them how much the clearance and the shipment fee would be.

Deposit Details
Deposit Number: OISA-POL-0669-PRVT3450
Sort/Clearance Code: OISA/576-45/MP56 33
Deposit Certificate #: OISA 33 94 07
Consignment Description: 2 Travelling Boxes
Depositor: Miss Jonat Nolen
Contact of Security Company

Company:GAPSON INTERNATIONAL SECURITY AGENT
Contact Person: Mr Elvis Thomas (Custodian Manager)
Contact Email: [email protected]

As soon as you contact the security company, kindly get in touch with me. I will as well send an acknowledgment email to the company to attestate to your request to have the boxes shipped to you in the State. You can give them the delivery information while writing to them.
Keep in touch.
Jonat.

(I hope her pictures made it in this one!)

Hi and welcome to Scamwarners,

Thank you for posting that scam email.

A friend once dealt with a scammer who used that exact format, that one went by the name Linda Lopez and used a different security company name, I think Guaranty Security but it was a long time and many scammers ago so I cant be sure.

If you check your earlier emails I expect there will be this line "I like going to beaches in my bikinin" it will go on and again this is by memory I like movies concerts and taste a little coffe from a small window.

The fee back then was about $3,000 but with inflation and all perhaps the fees are higher now.

I have posted here about a scammer using the name Yeseller Johnson whos script bears a remarkable resemblance to that of Linda lopez although the part that you have posted is different in some aspects to that of Yesseller.

BTW if you would like to Click Here you can see that there are many hits on that exact line and they are all related to scams.

Please post as much as you can in regards to the scammer including the full email address and headers if you can, those details will give a potential victim more things to search for and find a result, I just did a search on the username and came up with nothing (within a few days it will pick up this thread) so the more information you can provide the better.

Thanks again for posting

Thanks for the inputs "Ralph". Per your request, the only Subject lines used are what I posted, just so you know.

As for this person's email address, it's [email protected], for some reason this web site deleted the at Yahoo dot com, not sure why though. She contacted my using my Yahoo address, though I have no idea how she got it.

I do have many other communications from her, mostly chit-chat, all leading up to the point of this scam, to have me contact the person and pay some fee to get the bags with the money in them sent to me.

One point, she did try to call me after one conversation we had, the number was 708-326-9159. I did a search on that number and could only trace it to the Chicago area...maybe this may help knowing the number, not sure so here it is anyways.

As soon as this site will allow pictures, I do have (3) of this very pretty young woman, though most likely not the person I was talking to...we all know these scammers use pictures of other people, at least most of the time from my experiences! I didn't want to go through the trouble of setting up some url location to post them, FYI!

I hope this helps. If there's anything else you see I could add of value, please let me know and I'll do what I can. My only objective in all this is to hopefully help some other person from making the mistake of sending any cash to these idiots!

Camarorks

Camarorks, by "headers" Ralph meant the tracking of the route your scammer's email went through to reach you. You can display them in Yahoo by clicking on "Show headers" at the bottom right of the email body. The IP numbers that show in the headers will tell us where the email originated from.

Thanks Titania for clarifying...here's what I came up with;

Return-Path: <jonatnolen>
Authentication-Results: mta683.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok)
Received: from 68.142.207.48 (HELO n29.bullet.mail.mud.yahoo.com) (68.142.207.48) by mta683.mail.mud.yahoo.com with SMTP; Mon, 21 Jul 2008 07:24:37 -0700
Received: from [68.142.200.227] by n29.bullet.mail.mud.yahoo.com with NNFMP; 21 Jul 2008 14:24:04 -0000
Received: from [76.13.13.25] by t8.bullet.mud.yahoo.com with NNFMP; 21 Jul 2008 14:24:04 -0000
Received: from [76.13.10.165] by t4.bullet.mail.ac4.yahoo.com with NNFMP; 21 Jul 2008 14:24:04 -0000
Received: from [127.0.0.1] by omp106.mail.ac4.yahoo.com with NNFMP; 21 Jul 2008 14:24:04 -0000
Received: (qmail 53725 invoked by uid 60001); 21 Jul 2008 14:24:04 -0000
Domain key deleted to prevent blowout - SP
Received: from [86.62.25.114] by web59705.mail.ac4.yahoo.com via HTTP; Mon, 21 Jul 2008 07:24:04 PDT
Date: Mon, 21 Jul 2008 07:24:04 -0700 (PDT)
From: This sender is DomainKeys verified
Jonat Nolen <jonatnolen>
View contact details
Reply-To: [email protected]
Subject: Re: Hello...........

Sorry, I didn't keep the other one in Yahoo, I sent(forward) the rest to my home email address where I use Outlook. Hope this helps...

86.62.25.114 AE UNITED ARAB EMIRATES - - AE-DIGITALSKYS

I'm not an IP expert, but that looks like it might be a satellite?

edited because my brain moves marginally faster than my fingers type.

Nice searching and good advice Titania

Yes, it is most likely a satelite providor

The other interesting thing is what a search on that IP will show, you could do it yourself for practice but I have done it for you if you would like to Click Here

Ip address can provide another avenue for seeing if your new love is genuine, of course it is not conclusive but that particular location (presumably and internet cafe in Africa) is where many scam emails come from.

Edit

Click here for a more direct result

Thank you both Titania and Ralph for all the research and inputs. I have a couple more going as I type, so I'll be back...this site is nothing but Outstanding! I'll be saving all the emails in Yahoo that I suspect, basically all of them outside my area. Just for kicks, here's another one that I just ended two days ago.

Return-Path: <ericcambell2009>
Authentication-Results: mta453.mail.re4.yahoo.com from=yahoo.com; domainkeys=fail (bad sig)
Received: from 98.136.44.37 (HELO n61.bullet.mail.sp1.yahoo.com) (98.136.44.37) by mta453.mail.re4.yahoo.com with SMTP; Fri, 01 Aug 2008 12:29:14 -0700
Received: from [216.252.122.217] by n61.bullet.mail.sp1.yahoo.com with NNFMP; 01 Aug 2008 19:29:00 -0000
Received: from [69.147.84.114] by t2.bullet.sp1.yahoo.com with NNFMP; 01 Aug 2008 19:29:00 -0000
Received: from [127.0.0.1] by omp203.mail.sp1.yahoo.com with NNFMP; 01 Aug 2008 19:29:00 -0000
Received: (qmail 3147 invoked by uid 60001); 1 Aug 2008 19:29:00 -0000
Domain key deleted to prevent blowout - SP
Received: from [82.128.4.121] by web46103.mail.sp1.yahoo.com via HTTP; Fri, 01 Aug 2008 12:28:59 PDT
Date: Fri, 1 Aug 2008 12:28:59 -0700 (PDT)
From:
Eric Cambell <ericcambell2009>
Add sender to Contacts
Reply-To: [email protected]
Subject: Erica from Passionhunt.com

Interesting on this one is "she" IM'd me and told me to use [email protected] (and gmail.com with everything the same) instead of the [email protected] that I got the email from. At first I thought I was getting some prank from some guy, but "she" sent pictures as well, all but one I don't think I can post on this site, if you get my meaning. If this one turns out coming from overseas, then that will really be confirmation...she said she was from Fort Riley, Kansas! And of course after talking for a while, wanted cash sent to her for a plane ticket, wouldn't accept me sending her a check to her home, which wasn't going to happen any way!

If either of you have a good site to go to to check IP addresses, please let me know that as well...I'd like to get some "practice"....I'm intrigued with all this!

Thanks again...

Well Ralph and Holly, I got interested in the IP searching, so Googled it and I believe I found this last one originated in Nigeria, if I did my search right. [82.128.4.121] is the one that showed Nigeria, again if I did this correctly. When you have the time, I'd appreciate any and all feed-back...thanks.

Always happy to help out.

By the sound of it you would find This thread very interesting.

It is posted at our sister site www.419eater.com over there they bait the scammers to waste their time and keep them from real victims, a by-product of the baits they perform is to get information on scammers.

The link I provided will teach you how to spot a scammer, how to communicate with them safely and a range of other things you will most likely find interesting.

The the 6th post down you will also see information on IP addresses and in particular the header analysis tool used and recommended by most scamwarners.


Edit
Camarorks,
Just rereading some of your posts and in particular

but "she" sent pictures as well, all but one I don't think I can post on this site, if you get my meaning

You can get my email address from below my post to forward those pictures to me, obviously just to check out if I recognise the picture or the origin. Almost all scammers are in fact male and will, usually use pictures stolen from modelling sites, this is not always the case, some scammers in partiicular from russia do have access to the girl used in the photo and can provide specific pictures to prove they are real.

By the sound of it, that girl will turn out to be from Romania and require fees for translation (I could check the header to find out but wanted to leave it for you for educational purposes), the semi naked pics of extremely attractive girls in heels and make up are normally the translation scammers. of course my assumption is based purely on past experience and may not be true in this case.

I have had those photos forwarded and had a very quick glance, (I promise) and they look like model pics picked up from a soft porn site, i have not done any research just yet as i am at work but I will see if i can find some more information on that girl.

From the information I have seen I would be confident enough to say its a scammer but I can not offer any proof at this stage.

Given a little more time to study those pictures and do some google searches I am fairly certain I can find something.

Oh and please all, keep your minds clean, my interest in those pictures is purely professional

The bit I did find interesting is that her email begins with a heavy dose of religion, it is extremely well written and shows few charactistic hallmarks of the scammers we normally deal with.

I have to believe that scammers are getting much better scripts and getting much smarter in their approach to stealing money via the internet, and hope this trend is shortlived

I guess it is natural selection of the script world. With scammers coming from almost every nation, it was only a matter of time before one of them was literate or had a friend that was.

I hope a de-education campaign isn't out of the question.

Newd,

It was most likely the best written script I have ever seen, and i see plenty of love scripts. it was so good I am a little hesitant to post it for fear of it being picked up by a scammer. I might make it available for some warners to decide its fate.

Camarorks,

I haven't replied to your email as from work I dont have great access to send emails from it but yes, those photos can be posted however 2 suitably placed dots on each photo would be appreciated by some of our visitors.

If you need photo posting instructions I believe they are in that information guide I gave you a link to.

Basically sign up for free to photobucket and follow the prompts, you can also edit in photobucket as well to place those dots,

If there are dots placed it makes it unnecessary but a general rule is to write used by scammer on these photos before posting publicly.

Oh and yes, your IP search would be correct, feel free to post your findings and details of chats here but unless you have used none of your own real details then dont post the chatlog here, talk about it by all means as you did in the email to me but keep any of your own details out of your post.



Camarorks will be telling you that I was wrong on the transaltion scam hunch but correct on the romance scammer theory

I do like that we are able to teach our visitors about scams, this visitor is now analysing his own headers to find out about scammers, well done all and thanks for taking note of our advice Camarorks

She change her info.Hello Babe,

I will appreciate your trust and help towards this. The boxes will only take 2-5 days to be deliver to you. Below are my deposit details and the contact of the security company. You ca write to the security company and instruct them that you want your fiancee's deposited boxes sent to you While contacting the company, please do not let them know that the boxes contain money, just tell them that you want your fiancee's deposited travelling luggages sent to you because I only tell them that the boxes are my travelling luggage, which I am sending to you. Then you ask them how much the clearance and the shipment fee would be.



Deposit Details..

Deposit Number: OISA-POL-0669-PRVT3450
Sort/Clearance Code: OISA/576-45/MP56 33
Deposit Certificate #: OISA 33 94 07
Consignment Description: 2 Travelling Boxes
Depositor: Miss Liz Hudgell
Contact of Security Company
Company:GAPSON INTERNATIONAL SECURITY AGENCy
Contact Person: Mr Elvis Thomas (Custodian Manager)
Contact Email: [email protected]

As soon as you contact the security company, kindly get in touch with me. I will as well send an acknowledgment email to the company to attestate to your request to have the boxes shipped to you. You can give them the delivery information while writing to them. Keep in touch. Loads Of

Love,

Liz her full name is Liz Hudgell so look out for this one.You know i just can't stand Nigeria anymore lol.It dont work on me cause i am not gready [email protected] gave it away.

Welcome here, and thanks for posting this The truth. Old scripts get recycled over and over again. This probably is a different scammer who found or payd for this script and uses it now.