investigation on behalf of"AIB Group

This email came from John O'Donnell ([email protected])

Greetings to you,
Please read this letter with an open heart as it will be of great benefit to you. Recently we are conducting a standard process investigation on behalf of"AIB Group" This investigation involves a customer who made an investment with "AIB Group” the Private Banking arm of Allied Irish Bank. The client died intestate and designated no heir over his Investments with my bank.

I contacted you independently of our investigation and I am prepared to place you in a position to instruct my bank to release the deposit to you as the rightful inheritor. I would have secretly transferred the fund out of my bank myself, but that would draw a straight line to me. Ironically you as a foreigner stand a better chance to easily surpass as the next of kin to the deposit. Since you share the same last name with the deceased customer, it will be easy for you to claim the fund without any hitch.

This transaction is free from money laundry and its 100% risk free. It will be executed under a legitimate arrangement that will protect you from any breach of the law. Upon receiving the fund we shall share the proceeds 50% each. There is a reward for this project and it is a task worth undertaking. If you are vested interesting give me a positive signer and I will initiate this process towards a swift conclusion However, if my offer is of no appeal to you delete this message and forget I ever contacted you. I am a family man and this is an opportunity to provide them with new opportunities. Please do not betray my confidence. If we can be of one accord, we should plan a meeting soon.

Kind regards,
Mr. John O'Donnell
Group Finance Director
Allied Irish Bank Group; Dublin .

The interesting thing here is that the scammer says he is in Dublin, yet the header tells us otherwise, this email came from 41.19.104.175 South Africa (Pretoria)

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9Ng==
X-Message-Status: n:0
X-SID-PRA: John O'Donnell <[email protected]>
X-Message-Info: removed domain key
Received: from postoffice.vnamd.local ([207.168.120.175]) by col0-mc2-f38.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 10 Aug 2009 06:07:46 -0700
Received: from User ([41.19.104.175]) by postoffice.vnamd.local with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 10 Aug 2009 09:03:44 -0400
Reply-To: <[email protected]>
From: "John O'Donnell"<[email protected]>
Subject: Re: Message
Date: Mon, 10 Aug 2009 14:07:40 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 10 Aug 2009 13:03:44.0468 (UTC) FILETIME=[FDB66140:01CA19BA]