Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Sun Aug 19, 2012 1:25 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 19 Aug 2012 09:23:10 -0700
Received: from nm30-vm0.access.bullet.mail.sp2.yahoo.com ([98.139.44.194]:40408)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T38HM-0006RH-DC
for ; Sun, 19 Aug 2012 09:23:10 -0700
Received: from [98.139.44.105] by nm30.access.bullet.mail.sp2.yahoo.com with NNFMP; 19 Aug 2012 16:23:09 -0000
Received: from [98.139.44.80] by tm10.access.bullet.mail.sp2.yahoo.com with NNFMP; 19 Aug 2012 16:23:09 -0000
Received: from [127.0.0.1] by omp1017.access.mail.sp2.yahoo.com with NNFMP; 19 Aug 2012 16:23:09 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 78738 invoked by uid 1000); 19 Aug 2012 16:23:07 -0000
Received: from 124.108.96.86 by rel103.mail.aue.yahoo.com with SMTP; Sun, 19 Aug 2012 09:23:07 -0700
Received: (qmail 990 invoked by uid 60001); 19 Aug 2012 16:23:07 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1345393387; bh=5DPD4wiLDxhhv1B4Nugzye4o3UolR6Z8Zf55rHhgo8U=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=3aLPE9iVrJL4cpBvZoMMTUipo9pdGh97BBJ7tPcEfNwdWQgMZCmCnBepn/AiqnP7+ZKLcD/8F2+IWWNf2XehhE2BfryguU7+XvIsowOwCpbo25T3ECx3pFilW2qyTeaixHVyGlNJAZ/0q0LGUz0jir9gjDs/RoTbaxEWjNufKJ4=
X-YMail-OSG: 2R8oCkcVM1ny31pSHUCo.FGEO64f6mLLRZ0sOLMlouHQs.W
NWRERha0EekZVxBMgwG3QQqc5b5mZIop4r5qRYx3qLWK4SlSSUaANsB92Ihc
qd472.r7TODy66YO1uXP9zilXgZ6DWrSAMLZ.6j_NidLK1W9OtrK1VwiyRM0
gwVoQGpd3N8O48Z3OPFoU3qHLvVxWJhhO9B5igvYjJjG7IzoyWg8iV4rlHp2
1roYTGkeWturgrnfgWRkeq2_Zev4EkcQ9V7UP1VWQ3FSN53HZBgLkb68SCEo
FT00mAGnJP50xbAZsiXlC1WnyzxEFdgRvfxa5OTyK.jxB7gPbSZD73qaP8st
DPdjs0OJE3HZTWMFU0kktmkA4Q.P4zHxh4bebLbmC8Ji4gEdgNN9lQJEmZA7
nUzubzENIM_VnDf42jUE78UIsEqz1YvKXm_scNGUoyDq_oa0ZIB4KSqOr28s
dbGf8z2DJVjq4_NRy6IsoRM1zPpU8K6xNHwFuUJanRONULt9D2tlZpFbXRe5
yvTuXXXx6qDkeXTnUepxzkKFAzOmOHgU6BdEPBCweHa6wd.Yqh7jBs89Y32u
y.f.heI7vndCCkn1c5cFmGx4zf2.d4APicwYw
Received: from [110.77.234.45] by web96003.mail.aue.yahoo.com via HTTP; Mon, 20 Aug 2012 04:23:07 NZST
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Mon, 20 Aug 2012 04:23:07 +1200 (NZST)
From: =?iso-8859-1?Q?Western_Union=AE?= <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-687962752-1890426099-1345393387=:84985"
X-Spam-Status: Yes, score=15.1
X-Spam-Score: 151
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: ATTENTION BENEFICIARY I AM MR EDWIN LARRY THE NEW MANAGER
OF WESTERN UNION PLEASE WE ARE VERY SORRY FOR ALL THE PROBLEM THAT YOU HAVE
PASSED THROUGH BECAUSE OF THIS YOUR BELONG PAYMENT OF WHICH YOU FAILED TILL
NOW, FIRST OF ALL, [...]

Content analysis details: (15.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(royalpako[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.194 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.3 TO_NO_BRKTS_PCNT To: misformatted + percentage
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** THE NEW MANAGER OF WESTERN UNION

---687962752-1890426099-1345393387=:84985
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable



ATTENTION BENEFICIARY I AM MR EDWIN LARRY THE NEW MANAGER OF WESTERN UNION

PLEASE WE ARE VERY SORRY FOR ALL THE PROBLEM THAT YOU HAVE PASSED THROUGH BECAUSE OF THIS YOUR BELONG PAYMENT OF WHICH YOU FAILED TILL NOW, FIRST OF ALL,

I WANT TO INTRODUCE MY SELF TO YOU, MY NAME IS MR EDWIN LARRY, I AM THE NEW ELECTED DIRECTOR GENERAL OF WESTERN UNION OFFICE NIGERIA, I HAVE BEEN CHOSEN LAST WEEK.

I AM WRITING THIS MAIL WITH DEEP SORROW, I SAW YOUR NAME ON OUR FILE YESTERDAY THROUGH MY SEARCHING AS THE ONE OF THE MOST BENEFICIARY WHICH DID NOT RECEIVE YOUR FUND VALUED $950,000.00 USD WHICH SUPPOSES TO BE TRANSFERRING AT THE RATE OF $4,500.00 PER DAY DURING FORMER MANAGER REGIN .

THE REASON I AM EMAILING YOU TODAY IS TO INFORM YOU THAT THE FORMER WESTERN UNION MANAGER HAS BEEN SACKED OUT SINCE LAST WEEK DUE TO HIS ILLEGAL WORK UNGODLY ACT, I AM HERE TO INFORM YOU THAT THE ONLY THING THAT WILL LEAD YOU TO RECEIVE YOUR FUND IS BY TRUSTING ME AND FOLLOW MY DIRECTION.

YOU SENT A LOT OF MONEY TO HIM IN ORDER TO GET YOUR FUND WHICH FAILS. THEREFORE AM TELLING YOU THAT THE REASON YOU DID NOT RECEIVE YOUR FUND IS BECAUSE YOU DID NOT FOLLOW THE DIRECT WAY TO GET YOUR FUND BUT TO EXTORTING MONEY FROM YOU IN VARIOUS QUARTERS. DUE TO THE FORMER MANAGER'S ATTITUDE WE THEREFORE RESOLVE TO SACKED HIM OUT SINCE HE DIDN'T KEEP OUR INSTRUCTION,

SO NOW WE HAVE ARRANGED TO PAY YOU BECAUSE ALL OUR INVESTIGATED CONFIRMED THAT YOU ARE THE RIGHT PERSON TO RECEIVE THIS FUND.

NOTE WE HAVE TWO OPTION OF PAYING YOU, AND YOU ARE THE ONE TO MAKE YOUR CHOICE.
OPTION (1) IS 0UR WESTERN UNION GOLD CARD WHICH YOU WILL WITHDRAW DAILY $4000.00 OPTION (2) RECEIVE DAILY CASH $4500.00 TILL THE TOTAL PAYMENT COMPLETED.

THERE IS ONE CERTIFICATE CALLED (FUND RELEASE ORDER CERTIFICATES) WHICH YOU SUPPOSE TO OBTAIN FROM FEDERAL HIGH COURT SERVICES WHICH WILL NOTICED THAT YOU ARE NOT A BENIN CITIZEN, BUT YOU DID NOT HAVE IT AND THAT IS ONLY WHAT YOU NEEDED NOW.

ACCORDING TO THE INSTRUCTION PASSED TO THIS WESTERN UNION DEPARTMENT FROM THE OFFICE OF THE (FEDERAL HIGH COURT SERVICES) THIS WILL DULY GUARANTEE AND COVER THE MONEY AS BEING LEGITIMATELY ACQUIRED FROM THE BENIN GOVERNMENT.

SO I WANT YOU TO KNOW THAT YOUR FUND OF $950,000.00 USD IS STILL WITH THE FEDERAL GOVERNMENT ACCOUNT BUT IT WILL RELEASE IMMEDIATELY TO THIS WESTERN UNION OFFICE AS SOON AS YOU OBTAIN THE (FUND RELEASE ORDER CERTIFICATES)

ACCORDING TO OUR MESSENGER WHO WENT TO THE FEDERAL MINISTRY OF FINANCE SERVICES OFFICE NIGERIA FOR THE RELEASE ORDER CERTIFICATES HE TOLD US THAT IT WILL COST YOU THE SUM OF $95 ONLY FOR THE OBTAIN OF IT, SO HE TOLD US THAT THEY WILL ISSUE IT WITHIN ONE DAY IF THE FEE WILL BE PAID.

SO RECONFIRM US YOUR FULL ADDRESS WITH THE OPTION EITHER YOU WANT IT GOLD CARD OR DAILY PAYMENT OF $4500 PER DAY.

I WILL BE AWAITING TO HEAR FROM YOU
IMMEDIATELY WITH THE PAYMENT INFORMATION TO
OBTAIN THE FUND RELEASE ORDER CERTIFICATES,

1. RECEIVER NAME : OFORKA CHRISTIAN
2. CITY/COUNTRY : LAGOS NIGERIA
CITY: LAGOS
3. QUESTION : PRESENT YEAR?
4. ANSWER : 2012
5.. AMOUNT : US$95
6. MTCN NUMBER .....
7 .SENDER S NAME ....


I AM HERE GIVING YOU GUARANTEE AND ALSO 100 % PERCENT ASSURANCE THAT THIS IS THE ONLY MONEY YOU WILL PAY AND AFTER YOU PAY IT YOU WILL RECEIVE YOUR FUND IMMEDIATELY
..
I WILL BE WAITING RIGHT TO HAVE THE PAYMENT INFORMATION IN ORDER TO ENABLE US OBTAIN THIS NEEDED CERTIFICATE SOON. EMAIL ME AT ( [email protected] )


REGARDS
MR EDWIN LARRY
THE NEW MANAGER OF WESTERN UNION
TELEPHONE NUMBER +2348026309032

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 13 guests