by buried under 419s
Fri Apr 26, 2013 12:26 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 26 Apr 2013 08:10:15 -0700
Received: from cl3.wcs.co.th ([203.146.249.221]:57694)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1UVkHt-0002R9-J3
for ; Fri, 26 Apr 2013 08:10:14 -0700
Received: from [127.0.0.1] (port=45329 helo=localhost)
by cl3.wcs.co.th with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1UVkGU-0004lh-TB; Fri, 26 Apr 2013 22:08:46 +0700
Received: from 41.58.17.156 ([41.58.17.156]) by webmail.lhianthai.com
(Horde Framework) with HTTP; Fri, 26 Apr 2013 22:08:45 +0700
Message-ID: <[email protected]>
Date: Fri, 26 Apr 2013 22:08:45 +0700
From: "Peter S. Alvarado" <[email protected]>
To: undisclosed-recipients:;
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.11)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cl3.wcs.co.th
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - globomail.com
X-Get-Message-Sender-Via: cl3.wcs.co.th: authenticated_id: [email protected]
X-Spam-Status: Yes, score=15.1
X-Spam-Score: 151
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Sir, My name is Peter S. Alvarado Deputy Director Financial
Crimes Enforcement Network (FinCEN) New York Branch. We were mandated by
the Office of Presidency United States of America to recall all unclaimed
Cash Consignment Boxes, ATM Cards and Bank Drafts being held in different
Airport in USA due to one reason or the other. This is to officially inform
you that after 4hrs closed door meeting with the international Monetary Department
office in New York USA, we have finally mandated a Bank in Spain to pay your
fund through online Banking and in this regard, you are hereby advice to
contact the paying Bank immediately for immediate transfer of your payment.
[...]
Content analysis details: (15.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
4.0 MONEY_FROM_41 Lots of money from Africa
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.4 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Contact the Payee Bank
Dear Sir,
My name is Peter S. Alvarado Deputy Director Financial Crimes
Enforcement Network (FinCEN) New York Branch. We were mandated by the
Office of Presidency United States of America to recall all unclaimed
Cash Consignment Boxes, ATM Cards and Bank Drafts being held in
different Airport in USA due to one reason or the other. This is to
officially inform you that after 4hrs closed door meeting with the
international Monetary Department office in New York USA, we have
finally mandated a Bank in Spain to pay your fund through online
Banking and in this regard, you are hereby advice to contact the
paying Bank immediately for immediate transfer of your payment.
The payee bank Banco Union in Spain has been mandated to open online
account on your behalf and deposit a part payment of $7.5 Million
Dollars for your onward transfer to any bank of your choice.as
instructed by the International Monetary Department to avoid further
unforeseen circumstance surrounding release of your payment.
So kindly contact the paying Bank immediately with their contact
details written below.
Bank Name; BKUNION BANK SPAIN
The Name Contact Person, Abel Alexandra (Director Online Banking)
Email; [email protected]
Tel; +34-911235355 (Spain)
This is what you will write to the Bank.
Just say that you were directed by International Monetary Department
Office New York United States in Collaboration with Financial Crimes
Enforcement Network (FinCEN) New York Branch to contact the Bank
regarding your payment Ref No: IMF/345900/FinCEN/NYand the Bank will
understand.
Do not forget to quote the Ref Number when you are contacting the bank.
Kindly keep me updated as soon as the contact is made.
Thanks.
Peter S. Alvarado
Deputy Director (FinCEN)
Envelope-to:
Delivery-date: Fri, 26 Apr 2013 08:10:15 -0700
Received: from cl3.wcs.co.th ([203.146.249.221]:57694)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1UVkHt-0002R9-J3
for ; Fri, 26 Apr 2013 08:10:14 -0700
Received: from [127.0.0.1] (port=45329 helo=localhost)
by cl3.wcs.co.th with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1UVkGU-0004lh-TB; Fri, 26 Apr 2013 22:08:46 +0700
Received: from 41.58.17.156 ([41.58.17.156]) by webmail.lhianthai.com
(Horde Framework) with HTTP; Fri, 26 Apr 2013 22:08:45 +0700
Message-ID: <[email protected]>
Date: Fri, 26 Apr 2013 22:08:45 +0700
From: "Peter S. Alvarado" <[email protected]>
To: undisclosed-recipients:;
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.11)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cl3.wcs.co.th
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - globomail.com
X-Get-Message-Sender-Via: cl3.wcs.co.th: authenticated_id: [email protected]
X-Spam-Status: Yes, score=15.1
X-Spam-Score: 151
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Sir, My name is Peter S. Alvarado Deputy Director Financial
Crimes Enforcement Network (FinCEN) New York Branch. We were mandated by
the Office of Presidency United States of America to recall all unclaimed
Cash Consignment Boxes, ATM Cards and Bank Drafts being held in different
Airport in USA due to one reason or the other. This is to officially inform
you that after 4hrs closed door meeting with the international Monetary Department
office in New York USA, we have finally mandated a Bank in Spain to pay your
fund through online Banking and in this regard, you are hereby advice to
contact the paying Bank immediately for immediate transfer of your payment.
[...]
Content analysis details: (15.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
4.0 MONEY_FROM_41 Lots of money from Africa
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.4 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Contact the Payee Bank
Dear Sir,
My name is Peter S. Alvarado Deputy Director Financial Crimes
Enforcement Network (FinCEN) New York Branch. We were mandated by the
Office of Presidency United States of America to recall all unclaimed
Cash Consignment Boxes, ATM Cards and Bank Drafts being held in
different Airport in USA due to one reason or the other. This is to
officially inform you that after 4hrs closed door meeting with the
international Monetary Department office in New York USA, we have
finally mandated a Bank in Spain to pay your fund through online
Banking and in this regard, you are hereby advice to contact the
paying Bank immediately for immediate transfer of your payment.
The payee bank Banco Union in Spain has been mandated to open online
account on your behalf and deposit a part payment of $7.5 Million
Dollars for your onward transfer to any bank of your choice.as
instructed by the International Monetary Department to avoid further
unforeseen circumstance surrounding release of your payment.
So kindly contact the paying Bank immediately with their contact
details written below.
Bank Name; BKUNION BANK SPAIN
The Name Contact Person, Abel Alexandra (Director Online Banking)
Email; [email protected]
Tel; +34-911235355 (Spain)
This is what you will write to the Bank.
Just say that you were directed by International Monetary Department
Office New York United States in Collaboration with Financial Crimes
Enforcement Network (FinCEN) New York Branch to contact the Bank
regarding your payment Ref No: IMF/345900/FinCEN/NYand the Bank will
understand.
Do not forget to quote the Ref Number when you are contacting the bank.
Kindly keep me updated as soon as the contact is made.
Thanks.
Peter S. Alvarado
Deputy Director (FinCEN)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces