Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Koraxbear Fri Oct 01, 2010 12:15 pm
This mail is defo a scam the points are laid out below message and header

I am sorry to encroach into your privacy through this manner; we have a certified cheque
of $300,000.00.00Usd in our custody that belongs to you. This cheque was brought to my
desk last week by a lady who gave us your e-mail address to contact you on the delivery.
We wait your response soonest.

FedEx


Received: from localhost (localhost [127.0.0.1])
by mxen6.enta.net (Postfix) with ESMTP id 6F00723F089
for <(removed)>; Fri, 1 Oct 2010 05:01:51 +0100 (BST)
Received: from mxen6.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 27056-05 for <(removed)>;
Fri, 1 Oct 2010 05:01:48 +0100 (BST)
X-Greylist: delayed 00:07:55 by SQLgrey-1.7.6
Received: from web01.email.alog.com.br (web01.email.alog.com.br [200.219.210.30])
by mxen6.enta.net (Postfix) with ESMTP id 42C5A23F058
for <(removed)>; Fri, 1 Oct 2010 05:01:48 +0100 (BST)
Received: from mail.pncq.org.br (localhost [127.0.0.1])
(Authenticated sender: [email protected])
by web01.email.alog.com.br (Postfix) with ESMTPA id C3FA33802D76;
Fri, 1 Oct 2010 00:53:50 -0300 (BRT)
Received: from 72.254.128.201 (proxying for unknown)
(SquirrelMail authenticated user [email protected])
by mail.pncq.org.br with HTTP;
Fri, 1 Oct 2010 00:53:51 -0300 (BRT)
Message-ID: <[email protected]>
Date: Fri, 1 Oct 2010 00:53:51 -0300 (BRT)
Subject: Notification About Bank Draft ..
From: "FedEx" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.5
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: No, hits=0.999 tagged_above=-999 required=3 tests=BAYES_60=1,
SPF_PASS=-0.001
X-Spam-Level:
X-Brightmail-Tracker: AAAAAhYOsl0WMIIe
X-Brightmail-Tracker: AAAAAA==


1. First off they say they have my e-mail but in the 'to' line it says: 'undisclosed-recipients'
2. FedEx would have logos and some small print at the bottom of every e-mail, this one does not.
3. The amount of cash is in dollars, I'm British so if it was for/by me it would be in pounds.
4. I don't have or are aware that I'm getting this amount of money.
5. FedEx would have their own domain to be sent from and to not 2 free e-mail domains.
Advertisement

by Arnold Fri Oct 01, 2010 1:31 pm
Koraxbear wrote:This mail is defo a scam the points are laid out below message and header

No doubt about it. It's possibly aimed at taking over a victim who's expecting a large amount from another scammer.

by Koraxbear Sat Oct 02, 2010 12:29 pm
did a little reply to this mail (no I didn't give details) and won't do another one but if anyone wants to have a look here it is:

FedEx Nigeria Head Office
70 International Airport Road
Mafoluku, Lagos.abuja
Tel: +2348074684201


ACKNOWLEDGEMENT OF DELIVERY


I am Mr. John Varley the dispatch officer to FedEx Courier Company in West Africa . We are glad to hear from you. Note that we don't know you before; I am only doing my job to contact you to receive your certified cheque of $300,000,00 USD which was brought to my desk last week by a lady named Susan. She gave us your e-mail address to contact you on how to deliver you the certified cheque.

If you should ask me who this lady is, that I cannot answer but due to my observation she was a foreigner in Nigeria and was traveling when she drop the cheque and your e-mail address in my custody to contact you and make sure i deliver it to you.

We have check and confirm the cheque to be valid. We advice you to kindly provide us your details below for shipment:

Your name:
Your Postal Address:
Your contact number and when to contact you:

Make sure the details you provide us is valid because we will not be held responsible for wrong delivery/shipment.

Note: You are to be responsible for the shipping/delivery fees.No C.O.D or deduction..

We look forward to hear from you soonest.


Regards
FedEx
|
Fast. Flexible. Everywhere you need to be. FedEx Home Delivery®.

All rights reserved.© 1995- 2010


This time they replied directly to me rather than a 'undisclosed' amount of people

Return-Path: <[email protected]>
X-Original-To: (removed)
Delivered-To: (removed)
Received: from mxen1.enta.net (mxen1.enta.net [78.33.48.4])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id B46851996A7
for <(removed)>; Sat, 2 Oct 2010 15:20:02 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen1.enta.net (Postfix) with ESMTP id 8BCF0DDBC75
for <(removed)>; Sat, 2 Oct 2010 15:21:26 +0100 (BST)
Received: from mxen1.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 23121-05 for <(removed)>;
Sat, 2 Oct 2010 15:21:24 +0100 (BST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from bay0-omc3-s4.bay0.hotmail.com (bay0-omc3-s4.bay0.hotmail.com [65.54.190.142])
by mxen1.enta.net (Postfix) with ESMTP id 5BB2ADDBC59
for <(removed)>; Sat, 2 Oct 2010 15:21:23 +0100 (BST)
Received: from BAY145-W34 ([65.54.190.189]) by bay0-omc3-s4.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Sat, 2 Oct 2010 07:19:58 -0700
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_8e2ed3a3-3f98-432f-a7f9-5fbb7c8c832e_"
X-Originating-IP: [41.138.185.40]
From: FedEx Courier Service <[email protected]>
To: <(removed)>
Subject: ***SPAM*** Your Check Is In Our Custody...Call For further Instructions
+2348074684201
Date: Sat, 2 Oct 2010 15:19:57 +0100
Importance: Normal
In-Reply-To: <(removed)>
References:
<[email protected]>,
<(removed)>
MIME-Version: 1.0
X-OriginalArrivalTime: 02 Oct 2010 14:19:58.0665 (UTC) FILETIME=[E4D0F390:01CB623C]
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=4.018 tagged_above=-999 required=3
tests=ADVANCE_FEE_2=1.234, ADVANCE_FEE_3=1.432, BAYES_00=-1.199,
HTML_FONT_FACE_BAD=0.884, HTML_MESSAGE=0.001, SARE_FRAUD_X3=1.667,
SPF_PASS=-0.001
X-Spam-Level: ****
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAAhYwb78WMHu3
X-Brightmail-Tracker: AAAAAA==


And they use yet another free e-mail domain

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 15 guests