Richard Malvin - [email protected]

Well, I fell hook line and sinker for this guy until today when he wanted me to send 3300.00 dollars for luggage with cash and gold.....Richard Malvin ...email: [email protected].
Hassan Ali email: [email protected]

Welcome to Scamwarners,

Please post the emails sent to you. Remove your personal information from them prior to posting.

first email

Delivered-To:
Received: by 10.194.35.199 with SMTP id k7csp1063141wjj;
Sat, 24 Sep 2016 14:46:58 -0700 (PDT)
X-Received: by 10.28.31.76 with SMTP id

f73mr7525126wmf.90.1474753618269;
Sat, 24 Sep 2016 14:46:58 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-wm0-x243.google.com (mail-wm0-x243.google.com.

[2a00:1450:400c:c09::243])
by mx.google.com with ESMTPS id

rq15si10938067wjb.112.2016.09.24.14.46.58
for
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256

bits=128/128);
Sat, 24 Sep 2016 14:46:58 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates

2a00:1450:400c:c09::243 as permitted sender) client-

ip=2a00:1450:400c:c09::243;
Authentication-Results: mx.google.com;
dkim=pass [email protected];
spf=pass (google.com: domain of [email protected] designates

2a00:1450:400c:c09::243 as permitted sender)

[email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-wm0-x243.google.com with SMTP id w84so6078377wmg.0
for <>; Sat, 24 Sep 2016 14:46:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:from:date:message-id:subject:to;
bh=dif2UeukAjfUk/xWOHnUjoyYB6aLS10hfw/DkiM4Sz8=;


b=L28KGRBlQND9LsSDklejoDmuVWVto5MExFSf0zLXwLwQR3PUvqRIbA1

IdKPK3PfdpN
+9cCaFthZxTpH3F3CPnC28fu39c7EqIEjiN2aTad09JU2F1sJyS5xs

+LPPG02L4durKw


yNG4hMOfeicBcjhZiOkErxk2A9hhWxhpR4TrYAaqRcM3Mutb/XE4S/2LNQEJ

3HbWqh8j
F0S6x5bO4haqUZ

+qLInMkVutw4IeXLntiz7pRO61NGs6v29gKH67TwGKQY972cXZo+OQ
jony56oWr6DY25lGlC0JOgh3ePc+sZncUs3fDQCNoFZ2NW

+QDLiKbqIIoO+akeT29KNS
wZQQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=dif2UeukAjfUk/xWOHnUjoyYB6aLS10hfw/DkiM4Sz8=;


b=EfyWbU6djlr4U5k41hg5qMnU7sSqIGMfu2SKM5v2M7+qJO6bnKCqaAguI

EDDQOblQ+


cS8eWyesEA6Z3Z635xLqIae5NzC55QICsar9aWMEQ0nehcFcA8odapzEQKNb

m+YTZak5


ii3N5aU1b3ULxAhXoBnPbvwPaYERYMIxEPC3SMTWevwv7w8Xv6hKjx9Lm

v1iQdD3FMVW
n4suKMbWBkEOLpN7y8NptwP

+mlJ8AHMf2ekjZMVRSI6yHxoo9SNQHr/5cUBc3KV+Q31N


vg8KoPSk6yKUkxHM5jCr15hRWrOBVjxpznByizcCfA4VDUkYi1GIy6uzrFJcA

bL0b1Wt
ypEw==
X-Gm-Message-State:

AA6/9Rnd49WCwNhtHtyj9fdOICvSYCjuR/me72njhZc8TaSVZptJ6NhenN6eov

hR5nP2f8X+bRCIzZLZn2aAUA==
X-Received: by 10.28.208.199 with SMTP id

h190mr8838333wmg.17.1474753617833;
Sat, 24 Sep 2016 14:46:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.194.43.3 with HTTP; Sat, 24 Sep 2016 14:46:57 -0700 (PDT)
From: Richard Malvin <[email protected]>
Date: Sat, 24 Sep 2016 17:46:57 -0400
Message-ID:

<[email protected]

ail.com>
Subject: Hi
To:
Content-Type: multipart/alternative;

boundary=94eb2c19434885b287053d47d5b3

--94eb2c19434885b287053d47d5b3
Content-Type: text/plain; charset=UTF-8

Hello dear It's me Richard from POF, i hope you remember me, actually i am
just sending you this short message to make sure i have the right email you
gave me and i will expect a quick reply from you, i willing to know more
about you..Hope to hear from you soon.

--94eb2c19434885b287053d47d5b3
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><span style=3D"font-size:12.8px">Hello dear It&#39;s me Ri=
chard from POF, i hope you remember me, actually i am just sending you this=
short message to make sure i have the right email you gave me and i will e=
xpect a quick reply from you, i willing to know more about you..Hope to hea=
r from you soon.</span><br></div>

--94eb2c19434885b287053d47d5b3--

second email

Delivered-To:
Received: by 10.140.92.235 with SMTP id b98csp265806qge;
Tue, 25 Oct 2016 22:58:57 -0700 (PDT)
X-Received: by 10.129.97.69 with SMTP id v66mr354775ywb.216.1477461537655;
Tue, 25 Oct 2016 22:58:57 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mout-xforward.gmx.com (mout-xforward.gmx.com. [82.165.159.130])
by mx.google.com with ESMTPS id x16si159299ybi.248.2016.10.25.22.58.57
for <
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 25 Oct 2016 22:58:57 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 82.165.159.130 as permitted sender) client-ip=82.165.159.130;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 82.165.159.130 as permitted sender) [email protected]
Received: from [41.66.208.171] by 3capp-mailcom-lxa14.server.lan (via HTTP); Wed, 26 Oct 2016 07:58:56 +0200
MIME-Version: 1.0
Message-ID: <trinity-6b65e0d6-2b7f-45d0-aa8a-9486bbd75037-1477461536384@3capp-mailcom-lxa14>
From: hassan ali <[email protected]>

Subject: Hello Madam
Content-Type: text/html; charset=UTF-8
Date: Wed, 26 Oct 2016 07:58:56 +0200
Importance: normal
Sensitivity: Normal
In-Reply-To: <CAGJp9TDze97S5_9yCjJ2ZrjhVmWdzDg09d-E+QeVDHr3GS8mmg@mail.gmail.com>
References: <CAGJp9TAfOVLz-TPexPpUJigy90C+aFGiL-EHwJmz7OzLi5Oftw@mail.gmail.com>, <CAGJp9TDze97S5_9yCjJ2ZrjhVmWdzDg09d-E+QeVDHr3GS8mmg@mail.gmail.com>
X-UI-Message-Type: mail
X-Priority: 3
X-Provags-ID: V03:K0:668HtTQlxeW8OGLOaLgTSI9Mm23CQ2X9+0dBabTb+4X sSjUL78WN7gCKAv7dV74M+sCFQU807IAHX3N8X3KrOuhGOJ80r MYFK9zZZ2FYv6OXm+Z0jh/gCoZUN7FSI/IVrU1WnWzb2AaSXCw jbqQJ0eUvb15+xoWNeTRJsUlRmHjW/8WAVKBh9LQCDw7LE6zIf CMq590PPH3z6P6Degz19Cz2tG8tN6dnHGBD0gt6m0p9c2YRIFb NN8DEEVGeY5H+BGOtyZgKBT6+TjajHuYUC2w6iruHH+A+kAEau wHmURpmxCF8QjTWWIjRHuyB05ed
X-UI-Out-Filterresults: junk:10;V01:K0:eze1bsxji1s=:Xr9mBaW89ONLSkYf5UK//9E9 Vz8x7TC7NMkA53qbtaRGev5f5XpA/Uj+CEQm4DE+8ew1sa92XtiU8mt3eC8SBRPJajLktZ/8L MInCsKMfwD5kTTg8kxjsFWz3Lv6SsoK1r2MO3HHglG2+ZCwmyCjLcmLR/wXOYGZSWIIXJruX1 zK/RMsho3i3mMow/Iqwu2ZWigHwseEu2wPZBeEkqj0o9TOfieU5CCXu7o0pwvn9RT7cw+SGcq HOFLErlXhp4oa0o9+mjzVsJagGnARRN+na/mL2NvPfqhWVO2brC7nWgVP8zX5E8ypOkZyRBcy Eo8teICQAlUfWpV7v0TMP1GU8vInvYEY5E6EK64a1K1NLdPX+Kl7nz9cWzCjgLK01z8dbY76S tj7/16qVxtKP+TrFpgJ+oqOVwIv+2jS1yvAYTMJn9W+QdTzSuU3gCR7bxkyB/F+Ztom3TQhAQ WqEOZ5LiQVUMO5flA6uXX3k/WSyNs17Lg4ryJKU+S0YzDHOhHs8VpcHBNjfwlcRRfUOPRNH9r jOByEI9I4mtR7SKPywKblhdxv9j+SP7Y85/p+LLZ4oVqvlmkSlwIpPQlibCY9iKRwt1ExJH7M UC++kPXNvdI=

<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">Hello </span></span></span></span></em></div>

<div>&nbsp;</div>

<div>&nbsp;</div>

<div><em>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I am&nbsp; Mr Hassan. I was assigned by officer Richard whom is currently serving in the US Army to delivery a Luggage to you I will like you to please fill in this form to enhence me to deliver the luggage safe to your destination with all due respect my greeting to Him out there i wrote him some few email He never replied me and that bad because I encounter some problems here which need to be solved as soon as possible to make things easy for You and I .... please fill the form below </em></div>

<div>&nbsp;</div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">&nbsp;</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">Full name:.................</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">&nbsp;</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">Address:......................</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">&nbsp;</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">Cell Phone :......................</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">&nbsp;</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">Home Phone:..................</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">&nbsp;</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">nearest airport:...............</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">&nbsp;</span></span></span></span></em></div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">waiting for your kindly reply am currently here in London ( UK ) as i took a transit please fill in the form&nbsp; i will get back to you as soon as possible . I have been&nbsp; waiting your email since i left yesterday .. </span></span></span></span></em></div>

<div>&nbsp;</div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">Thank you </span></span></span></span></em></div>

<div>&nbsp;</div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">Best Regards </span></span></span></span></em></div>

<div>&nbsp;</div>

<div><em><span style="font-family: Verdana;"><span style="font-size: 12.0px;"><span style="font-family: Verdana;"><span style="font-size: 12.0px;">Hassan </span></span></span></span></em></div>

<div>&nbsp;</div></div></body></html>


email asking for money

Delivered-To:
Received: by 10.140.92.235 with SMTP id b98csp272932qge;
Tue, 25 Oct 2016 23:20:53 -0700 (PDT)
X-Received: by 10.129.80.68 with SMTP id e65mr406646ywb.111.1477462853920;
Tue, 25 Oct 2016 23:20:53 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mout-xforward.gmx.com (mout-xforward.gmx.com. [82.165.159.131])
by mx.google.com with ESMTPS id k13si209737ybf.16.2016.10.25.23.20.53
for
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 25 Oct 2016 23:20:53 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 82.165.159.131 as permitted sender) client-ip=82.165.159.131;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 82.165.159.131 as permitted sender) [email protected]
Received: from [41.66.208.171] by 3capp-mailcom-lxa14.server.lan (via HTTP); Wed, 26 Oct 2016 08:20:52 +0200
MIME-Version: 1.0
Message-ID: <trinity-3fd73355-14be-4892-a524-0a0d4605c1b9-1477462852608@3capp-mailcom-lxa14>
From: hassan ali <[email protected]>

Subject: Hello Madam
Content-Type: text/html; charset=UTF-8
Date: Wed, 26 Oct 2016 08:20:52 +0200
Importance: normal
Sensitivity: Normal
In-Reply-To: <CAGJp9TAWTtrj81-3G-BjkysystG6UsXX-BUOFt3jP56Y4nEhjQ@mail.gmail.com>
References: <CAGJp9TAfOVLz-TPexPpUJigy90C+aFGiL-EHwJmz7OzLi5Oftw@mail.gmail.com> <CAGJp9TDze97S5_9yCjJ2ZrjhVmWdzDg09d-E+QeVDHr3GS8mmg@mail.gmail.com> <trinity-6b65e0d6-2b7f-45d0-aa8a-9486bbd75037-1477461536384@3capp-mailcom-lxa14> <CAGJp9TBhN=DaBODh+dGP0xg5NGpB4pUjd0ALiEpsO_bGz37Sng@mail.gmail.com> <CAGJp9TASXsLNFO1cdp4j110zfPswi61Js1fjW1wV_is5F67GAQ@mail.gmail.com>, <CAGJp9TAWTtrj81-3G-BjkysystG6UsXX-BUOFt3jP56Y4nEhjQ@mail.gmail.com>
X-UI-Message-Type: mail
X-Priority: 3
X-Provags-ID: V03:K0:ikDOkUSRqE92Vuu/Z77EG/Hhp6Q1EW8vjjYJ1+xVz0p AIz+uG6BqPHicwyQ6Hnn2Vu1IZG4vyL+UthtbjUcEQC5tQd7IE 5T1MFd/OcaiZWtMrAt4XK0pcy+QmTpEwESr+vU813tImq4vRrE rTJ4CpK9C00kNMiqk0NXsv9ifoCBjQLL+6fJ9yvhRJSrL4+B3l a9PY3GAo6aafA7VapjhNpP0fcaFBd4LVe9ztIrCEv4syeVna0C JNKQzcU/mmU019lAHw120eWec6PLHxEvWfzS5uwH4WQqd3ECxF K/sLQngjq6pxzwhnTUWoWUtNn9I
X-UI-Out-Filterresults: junk:10;V01:K0:YxT/3UMkFoI=:DazNqar54jwq6ri064Wd8uXM MJK7IvqUNJRbLwKfTjVpiFuDlxQ0VgzUMgXkZF4veM41UDVncC+o2lYG/qnEPSfl5V1XsYmFL A7a6vBb/ZllRe0t4uxavLuJLK8joHNKPYgP6uzKnYcMPqKIfu6ATDpdQqMXppaHYR6BlQWenj aQiMFK3w6MTVwOOgBN8231uzZhYWxyHBWnKK/1jIB/68qe2PTU9hNx1p2ZC6HMGTX271rjbHH bIPUGtuOaHlvfstLyxRIoF23sLudbgccO92nsKDVoDXN7dN9ivstJUrJWMXrnY6KhK+uFZxj0 Makbfv/Aq/f2cd74e5nTj7BHtEDjmcdMyN3BEWZ7Q9Fwn7jO457UJwtGsg7TyqlxtG9BqeRDi hdxOB0S+wl8bDPYZ9JNavehEXATJsf2izZpIdrKqrIH99UyCBGwj6KMvq0qKaE2Epvb2nxsQ5 NsTjrPjPblGp4OSmy2vcVNGwHvWu1C188w82mo/cjZkEyYf8k26dgGhypWA9FBG8desucy1Jf tEA+TuQfuehoRW/GpzG+7baCe/WnNgh7Qp0Jkqm/bmtTKQ8HuW44r7UnbvkieALXaRPKxTtrm mtOLRL062Vk=

<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div><em>Hello </em></div>

<div>&nbsp;</div>

<div><em>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Well the problem is that i have been checked and got everything successful . but i have been ask to make a renew of the stamps on the luggage and have to add up more stamps to have a successful trip to your destination without any further stoppage this is very important and urgent&nbsp; . the cost of the stamps is 3.300 USD&nbsp; i only have 800 left with me&nbsp; so i will need you and Office Richard to get me this funds as soon as possible .</em></div>

<div>&nbsp;</div>

<div><em>Thank you</em></div>

<div>&nbsp;</div>

<div><em>Best Regards</em></div>

<div>&nbsp;</div>

<div><em>Hassan </em></div></div></body></html>

We no longer need the email headers.

You can now copy and paste the emails.

here are three of the emails... one from Richard, and two from the delivery man.

Richard Malvin <[email protected]>



Hello dear It's me Richard from POF, i hope you remember me, actually i am just sending you this short message to make sure i have the right email you gave me and i will expect a quick reply from you, i willing to know more about you..Hope to hear from you soon.

hassan ali

to me
I am Mr Hassan. I was assigned by officer Richard whom is currently serving in the US Army to delivery a Luggage to you I will like you to please fill in this form to enhence me to deliver the luggage safe to your destination with all due respect my greeting to Him out there i wrote him some few email He never replied me and that bad because I encounter some problems here which need to be solved as soon as possible to make things easy for You and I .... please fill the form below


Full name:.................

Address:......................

Cell Phone :......................

Home Phone:..................

nearest airport:...............

waiting for your kindly reply am currently here in London ( UK ) as i took a transit please fill in the form i will get back to you as soon as possible . I have been waiting your email since i left yesterday ..

Thank you
Best Regards

hassan ali



Well the problem is that i have been checked and got everything successful . but i have been ask to make a renew of the stamps on the luggage and have to add up more stamps to have a successful trip to your destination without any further stoppage this is very important and urgent . the cost of the stamps is 3.300 USD i only have 800 left with me so i will need you and Office Richard to get me this funds as soon as possible .

Thank you.

Stop all contact with all parties. The scammer is playing all roles.

The scammers writing is West African.

The writing and the IP address agree that he is West African, specifically Ghanaian.

How do you determine from the writing that the scammer is West African/Ghanaian?

The email headers show that the scammer is in Ghana.