Mystery Shopper Scam. [email protected]

DEAR PARTNER,
YOU SHOULD HAVE RECEIVED A PACKAGE THROUGH USPS CONTAINING A PAYMENT MEANT FOR THE MYSTERY SHOPPING EVALUATION, MAKE SURE YOU CARRY OUT THE ASSIGNMENT
AS INSTRUCTED AND GET BACK TO ME WITH THE WESTERN UNION DETAILS.

N.B

But there is little problem which you need to resolve.

Debra horch which is the name in the letter that came with the money order you are to sent the western union is unavailable due to official duties, as a result you are required to Change the western union Name get the funds sent to the name below :

NAME: Rachel Candler
Address: 2E Patricia Bldg City: Makati
State: Manila Country: Philippines Zip code 7005

As soon as this is completed kindly email me the mtcn# and other details.

Regards,

Dr Dan . PHD.
ACCOUNTANT GENERAL
916 222 2258


Email header details;

Delivered-To: *removed*@gmail.com
Received: by 10.220.154.201 with SMTP id p9cs55200vcw;
Thu, 19 Jan 2012 10:07:58 -0800 (PST)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.112.82.226 as permitted sender) client-ip=10.112.82.226;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.112.82.226 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.112.82.226])
by 10.112.82.226 with SMTP id l2mr8082082lby.102.1326996475953 (num_hops = 1);
Thu, 19 Jan 2012 10:07:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=qGsX+i0tAPi0CKBFR0GHN0K/EphBAfzETcs2WXy/EdI=;
b=h/z5SAqH1TA8qtbRSd49+EPribTb0jn7PSZSi5i+rP+Xpf7Knsa6nc07LrnSAABpdh
RGYGGfmR6fMFHQ6IS7+QQsh5PJDPPexY3h0oY432TT2eHYlZfcQCvIVBgC2RUm2EmYE6
M09UgRLqVmB5GZZrp4MlnO9HU0Uj3KJDD9oQA=
MIME-Version: 1.0
Received: by 10.112.82.226 with SMTP id l2mr6697441lby.102.1326996475926; Thu,
19 Jan 2012 10:07:55 -0800 (PST)
Received: by 10.152.20.68 with HTTP; Thu, 19 Jan 2012 10:07:55 -0800 (PST)
In-Reply-To: <CAL1Vzx0ioZnSjGE4kvFZNAR7k2rocDSbTMQg9GK-aQx_SWE6Lw@mail.gmail.com>
References: <CAL1Vzx0ioZnSjGE4kvFZNAR7k2rocDSbTMQg9GK-aQx_SWE6Lw@mail.gmail.com>
Date: Thu, 19 Jan 2012 18:07:55 +0000
Message-ID: <CAL1Vzx1nPv-byPbfUco6nLhVxKpe3QzCybUGvHwJGMNOz+te5A@mail.gmail.com>
Subject: New western union details...First Assignment Update Reply Back
From: Mystery Shopper <[email protected]>
To: undisclosed-recipients:;
Bcc: *removed*@gmail.com
Content-Type: multipart/alternative; boundary=f46d0401698990d9ba04b6e5718d

Further scam script plus details on the western union pick up contact.

DEAR PARTNER,

YOU SHOULD HAVE RECEIVED A PACKAGE THROUGH USPS CONTAINING A PAYMENT MEANT FOR THE MYSTERY SHOPPING EVALUATION, I NEED YOU TO FOLLOW THE INSTRUCTIONS IN THE ENVELOPE AND CARRY OUT THE ASSIGNMENT AS INSTRUCTED AND GET BACK TO ME WITH THE WESTERN UNION DETAILS.

PLEASE CONFIRM THE RECEIPT OF THE PACKAGE AND THIS MESSAGE AND SEND ME AN EMAIL

Deduct 100 for yourself and wire the rest to ouraccountant in PHILIPPINES given in the below information for the sole purpose of this survey.

YOU WILL SEND THE FUNDS TO:

NAME: MELANIE HAZEL
ADDRESS: 68 Del Pilar Arquiza Street
CITY: MANILLA
COUNTRY: PHILIPPINES

TAKE NOTE: PLEASE INSTRUCT THE WESTERN UNION RECEPTIONIST OR CONTROLLER TO MAKE SURE THE MONEY IS SENT TO PHILIPPINES IN US DOLLARS CURRENCY.

As soon as this is completed kindly email me the mtcn# and other details.

Regards,

Dr Forster . PHD.
ACCOUNTANT GENERAL


Email header details;

Delivered-To: *removed*@gmail.com
Received: by 10.220.16.204 with SMTP id p12csp85646vca;
Tue, 28 Feb 2012 22:50:01 -0800 (PST)
Received: by 10.14.119.136 with SMTP id n8mr9712046eeh.87.1330498200866;
Tue, 28 Feb 2012 22:50:00 -0800 (PST)
Return-Path: <[email protected]>
Received: from ns1.admin.si (ns1.admin.si. [212.72.103.166])
by mx.google.com with ESMTPS id n9si15118410eef.31.2012.02.28.22.50.00
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 28 Feb 2012 22:50:00 -0800 (PST)
Received-SPF: neutral (google.com: 212.72.103.166 is neither permitted nor denied by domain of [email protected]) client-ip=212.72.103.166;
Authentication-Results: mx.google.com; spf=neutral (google.com: 212.72.103.166 is neither permitted nor denied by domain of [email protected]) [email protected]
Message-Id: <[email protected]>
Received: from ibm1045.dal-ebis.ihost.com ([198.81.193.45]:1502 helo=User)
by ns1.admin.si with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1S2dMM-0004HJ-G1
for *removed*@gmail.com; Wed, 29 Feb 2012 07:49:58 +0100
Reply-To: <[email protected]>
From: "MYSTERY SHOPPER INC"<[email protected]>
Subject: FIRST ASSIGNMENT NOTIFICATION READ AND REPLY
Date: Wed, 29 Feb 2012 00:49:58 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns1.admin.si
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Source:
X-Source-Args:
X-Source-Dir: