Mr. Stephen Green [email protected]

First contact

Received: by 10.43.53.70 with SMTP id vp6cs28662icb;
Fri, 12 Aug 2011 04:43:35 -0700 (PDT)
Received: from mr.google.com ([10.236.176.105])
by 10.236.176.105 with SMTP id a69mr3484297yhm.125.1313149415223 (num_hops = 1);
Fri, 12 Aug 2011 04:43:35 -0700 (PDT)
Received: by 10.236.176.105 with SMTP id a69mr2538786yhm.125.1313149413289;
Fri, 12 Aug 2011 04:43:33 -0700 (PDT)
Return-Path: mailto:<[email protected]>
Received: from nkrumah.web4africa.net (nkrumah.web4africa.net [69.167.177.156])
by mx.google.com with ESMTPS id m3si8960368icx.121.2011.08.12.04.43.31
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 12 Aug 2011 04:43:32 -0700 (PDT)
Received-SPF: neutral (google.com: 69.167.177.156 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=69.167.177.156;
Authentication-Results: mx.google.com; spf=neutral (google.com: 69.167.177.156 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost ([127.0.0.1]:57171 helo=hsbcdirect.cz.cc)
by nkrumah.web4africa.net with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Qrq9A-000291-Nq
for [email protected]; Fri, 12 Aug 2011 11:43:30 +0000
Received: from 82.128.83.253 ([82.128.83.253])
(SquirrelMail authenticated user [email protected])
by hsbcdirect.cz.cc with HTTP;
Fri, 12 Aug 2011 11:43:30 -0000
Message-ID: <[email protected]>
In-Reply-To:
<CAJZN5EN21eaeepZeruQ0b2PZ-diNNYx9pARykS75JS0JPpDoVQ@mail.gmail.com>
References: <[email protected]>
<CAJZN5EOsAnOV5ByddUWb87muYwkKkOCLdmDciWAYPq9hWeW4vA@mail.gmail.com>
<[email protected]>
<CAJZN5EN21eaeepZeruQ0b2PZ-diNNYx9pARykS75JS0JPpDoVQ@mail.gmail.com>
Date: Fri, 12 Aug 2011 11:43:30 -0000
Subject: Your check
From: "HSBC BANK PLC" <[email protected]>
To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="----=_20110812114328_99963"
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - nkrumah.web4africa.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - hsbcdirect.cz.cc
X-Source:
X-Source-Args:
X-Source-Dir:

------=_20110812114328_99963
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit



From: HSBC BANK PLC <[email protected]>
Date: 2011/8/12
Subject: Your check
To: [email protected]


Dear Sir,

As directed by the FBI and British High Commission your check of two million four hundred and fifty thousand US dollars ($2,450,000.00) has been drawn to its equivalent in Euro, to the tune of one million eight hundred and sixty thousand (1,860,000.00 Euros). A copy is attached for your perusal.

The check will be cashed in any international bank in dollars in countries outside the European Union. Your ID, delivery address and phone number are required along with the fee to facilitate your check delivery. We have clarified the British High Commission and the FBI of the conditions surrounding this check and thus it is expected to be delivered within one week with a 2/3 day delivery period.

Mr. Stephen Green.
CEO HSBC.
H.S.B.C
8 Canada Square Canary Wharf.
London, E14 5H.
Hotline. +44 7924441750

Second email from a very frustrated scammer:

2011/7/26 HSBC BANK PLC <[email protected]>
Are you deaf and blind as you are not responding to the content of our mail but with irrelevant response? Just the same responses the BHC forwarded to us. We have no time to waste on irresponsible fellow and will not delay to cancel your payment if you are not ready to follow directives.
Mr. Green.

Note: The scammer is pretending to have sent you his first email by mistake. He is hoping that you will be greedy enough to steal from the person „this email was supposed to be sent to“. - Mr. Green is scamming from Nigeria.