IS TOBY BEYER A SCAM??

Hi guys,

I was sent an email from a man claiming his name is Toby Beyer from a site called http://www.aupair.com about being an au pair in Germany and something doesn't feel right so I thought Id post the email header information and email here to get your guys opinion on it. I've read the other au pair scams on this site and I think its great that you guys are here to protect people from being scammed.

here is the last email this person sent:

Thanks for your email,
I will like you to be our aupair, but for the document, i can send you something,You will have to talk to my Lawyer, I will write an Invitation letter including my passport page and Utility bills including my bank statement to back you up for coming, But also You will have to send some certain information to the lawyer, I will contact him and I will tell him to send you an email or I will give him your email too so that you can contact him,
I cannot pay for all of your cost fare to come here, But i will cover upto 85% of it which is fair i think
?, The last Au Pair we higher, didn't come after We have paid for all for him,it was disappointing, I only hoping yours will be different
You will be paid 1,580 Euro a Month.
I am not working right now, so I am doing everything for the children, Taking care of them...
You should ask me anything you wanna know about my family.
You can go to school to learn about the Language, and I can assure you that you will be treated like a family,

my children are very talkative ,they ask a lot of questions, they wanna know everything in a minutes
Ask me anything else you need Ok

You will be staying in the house, there is Cottage at the back of the house, with a room and sitting room....
It has a Tv,a wifi connection , a computer, a bed, a sofa.....

Here is the email Address to for the Lawyer, contact him, [email protected]
His name Richard Kasim Amir

I told him about you, His waiting to hear from you
Hope you are having a lovely weekend?
Toby

here is the message header information:

Delivered-To: gmail.com
Received: by 10.42.18.132 with SMTP id x4csp232684ica;
Wed, 11 Apr 2012 03:32:07 -0700 (PDT)
Received: by 10.50.193.131 with SMTP id ho3mr1443885igc.55.1334140326853;
Wed, 11 Apr 2012 03:32:06 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm10-vm0.bullet.mail.ne1.yahoo.com (nm10-vm0.bullet.mail.ne1.yahoo.com. [98.138.91.72])
by mx.google.com with SMTP id bh3si13049403igc.1.2012.04.11.03.32.06;
Wed, 11 Apr 2012 03:32:06 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.91.72 as permitted sender) client-ip=98.138.91.72;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.91.72 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from [98.138.90.51] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 11 Apr 2012 10:32:06 -0000
Received: from [98.138.88.237] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 11 Apr 2012 10:32:06 -0000
Received: from [127.0.0.1] by omp1037.mail.ne1.yahoo.com with NNFMP; 11 Apr 2012 10:32:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 61427 invoked by uid 60001); 11 Apr 2012 10:32:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1334140326; bh=6EjZ6jkTNp2GRCfABZjb8V7isXiiA3zsfM2OUldGQIM=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=AwOFGivRqo3XtINpuatwuT76NE5bum5klnjtX1/6bfx0p609SXHRmECPAwHBKct45+eOUozzDOB3wSAjjglhHebZe+PrcpVsORd+8g40Sq+NnE2fnco4oxr9mUifYD6vInIbonH2k2zAU4dFaQSh/fDzpCGXFzwBHg93RHhxWPM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=v6dDvpHqBMlwfihrrXvyZyKgvMxA8yxleGbt9wB5cYzvQcJSL+2hbZa1v4KLbsmfkFscNpLPaomjCEvhi/N413RXa78spdGksWuyX2jXvEA4zdXXpyM3gUf9dXKJU0my1nkC3kyMZ2+xP+qWaf4LwPYpM7kPf96M1V86oHEOcqc=;
X-YMail-OSG: IIaXpUAVM1nz2KNJLRfe5vwqSdrjoOjVza9LeFjG37I55C7
XKcnhv9QQP9Px4ZHGVzYg_81Iin3qG.mpXW8mUaE.skRYISgCtl20aOPgd8h
OBZRSIMp9UioT50G7oa7ARXTZmESSEC9z1Apa9XEcS1.KyxIplDLbqZOH1jM
CNPBBtoBMl1cXq_rhqlswXmMNwgqTeyQdB_onzA5qosH9eWEyGIIoY.H6dkZ
4bgF_ur4TjEUARiPBOaAp21cShvj9tklnezrAX56Q3OlX_KwPlmH3WPOJQlJ
jdKos90Nmb9SrXDAHoSxPWtqv.kzfYkKyB4FHOMwEvm4lyPbBhmDnQUEMgmM
HSWUzhPrBwYYWvDenucu.CixrQ7e5LfhVHIs1FB6Y_XHgcEjY1h2ZFw4RIsM
CSqeFkxiCankYfL8VAwqmNA0C87YloFb8HAYUjU6gAJFSqc2s._T_mhCC_Zh
dgFxP1n63raTSg4vzHhmDbQqcCwOy4fxDexpQd1LU0gXELlv_oymYSMSCo6S
q96aoclM-
Received: from [41.16.68.81] by web121903.mail.ne1.yahoo.com via HTTP; Wed, 11 Apr 2012 03:32:06 PDT
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Wed, 11 Apr 2012 03:32:06 -0700 (PDT)
From: Toby H <[email protected]>
Subject: Re: Au Pair Needed
To: XXXXX XXXXXXX <[email protected]>
In-Reply-To: <CAD8++zOqTkMJRtoFUPrGrE32th3ydzUSkSFJkukrfkvXJEG2Rg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="541675452-1224456826-1334140326=:19636"

--541675452-1224456826-1334140326=:19636
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

It's a scam.

The 85% is a dead giveaway. The scammer wants you to contact his "lawyer" who will instruct you to send money (most likely the "other 15%"). In reality, there is no job, and the only money that would change hands is yours. The English mistakes are typical of an African, which is consistent with this particular scam format.

[AlanJones]

Another giveaway is that if you check the IP address to see where the email originated from, it comes back as

Header Analysis Quick Report
Originating IP: 41.16.68.81
Originating ISP: Vodacom
City: Pretoria
Country of Origin: South Africa
* For a complete report on this email header goto ipTRACKERonline

And just a small addition. There are two things wrong with the header. One of them being the NNFMP that is visible after the Received: from lines. That is usually an indication of a suspect e-mail. Your best course of action is to simply cease all forms of dialogue with the very naughty Toby.