by ampman
Sat Feb 07, 2015 2:21 am
Received: by 10.25.162.145 with SMTP id l139csp160655lfe;
Thu, 15 Jan 2015 17:19:51 -0800 (PST)
X-Received: by 10.68.69.66 with SMTP id c2mr18156629pbu.81.1421371189709;
Thu, 15 Jan 2015 17:19:49 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm1-vm10.bullet.mail.gq1.yahoo.com (nm1-vm10.bullet.mail.gq1.yahoo.com. [98.136.218.89])
by mx.google.com with ESMTPS id gu1si3645857pbd.129.2015.01.15.17.19.48
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Thu, 15 Jan 2015 17:19:49 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 98.136.218.89 as permitted sender) client-ip=98.136.218.89;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.136.218.89 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
Received: from [216.39.60.182] by nm1.bullet.mail.gq1.yahoo.com with NNFMP; 16 Jan 2015 01:19:48 -0000
Received: from [98.137.12.197] by tm18.bullet.mail.gq1.yahoo.com with NNFMP; 16 Jan 2015 01:19:48 -0000
Received: from [127.0.0.1] by omp1005.mail.gq1.yahoo.com with NNFMP; 16 Jan 2015 01:19:48 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 33650 invoked by uid 60001); 16 Jan 2015 01:19:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1421371188; bh=dA/qRDQ22w74V5f3stTkbpTJS+0PecVRHqPyNFKvL3I=; h=Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=AMVy6c/nn7/dkbNoQfQxTGjfjWVMXe2zG7SoFnldEPPb+/t5n+cUXr+soiKzmp6neEdYPTdlnZCa2vJc8HYgh/3odoPSdSCSGl9EQOrLKqRyPfNcX+3rIjbgm2iCe+tsJ9sDBl7XXJmgOF60PDp1X09w1TZgeHcmKN8R5zLZ6Gw=
X-YMail-OSG: lfF4Eh4VM1koGoA4HbclEpYDVAq6VNjIBubVzshWZwT4JQH
E6U0aiwUEZd05ffetyPKBRd58rnnqvGHeo9fLSdf1QnN_Ab.LfrhBkATtkU3
uIpYaFq5MdoWeJ5v.Lyk78fXkHko8oCo7d6INu5W03zz6Y6S7.6CUcpASW_x
tx3q53HejtfEyvN5xxKke6lIYGzF4w40_MyVGyp.1VgcYV.Q5uhfyrHlFHIo
cZO4_CvXO4mtvIeYR12TgdtWeXs5tW1mBtpwl3YOmW2gKgQFUMoxoXNYw2Dm
jLIvn57AMwNbZPrMp0pbCVQxgd9CXWOE9xKVa3_Zd_xghopLYNxw4Zj6svrI
d1BYgU3ud7jMFA48ds6oAR5o_Wf2S9aFtFV1Z8tcCZScZa2hHNkybHvZW97y
tUEn.zamPJMsr3yfLVyW7fso0__tMnR9qKDqJY6i52z.DNdTBziCLPGtUkGL
wSc1hZm0Eg7ZmiHhJwwPz3ba8O6yJxRs9OEwtFOHmBmTRv9_yX3AZFlNaJNx
apLd6V3bpn_r3
Received: from [197.228.70.64] by web163403.mail.gq1.yahoo.com via HTTP; Thu, 15 Jan 2015 17:19:48 PST
X-Rocket-MIMEInfo: 002.001,RGVhciBNci4gVHJhbmgsIA0KDQoNCldlbGwgcmVjZWl2ZWQgeW91ciBsYXN0IGVtYWlsIHdpdGggdGhhbmtzLCB3aGljaCBpbmNsdWRlcyB5b3VyIGluZm9ybWF0aW9uLiBJIG11c3QgYXBvbG9naXplIGZvciBteSBsYXRlIHJlc3BvbnNlLCB3aGljaCB3YXMgZHVlIHRvIHNvbWUgb2ZmaWNpYWwgZW5nYWdlbWVudHMgYW5kIHNlcmllcyBvZiBtZWV0aW5ncyB3aXRoIHRoZSBjb25zdWx0YW50IHdobyB3aWxsIGFzc2lzdCB1cyBpbiB0aGUgcHJvY2VzcyBvZiB0aGUgdHJhbnNmZXIuIEhpcyBuYW1lIGlzIEFkdiABMAEBAQE-
X-Mailer: YahooMailClassic/923 YahooMailWebService/0.8.203.740
Message-ID: <[email protected]>
Date: Thu, 15 Jan 2015 17:19:48 -0800
From: William Moeketsi <[email protected]>
Subject: Re:Kindly confirm
To: XXXXXXXXX
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Dear Mr. XXXXXXX
Well received your last email with thanks, which includes your information. I must apologize for my late response, which was due to some official engagements and series of meetings with the consultant who will assist us in the process of the transfer. His name is Adv Sam Gumede and he is a financial attorney. His involvement will give legal credence to the process of the transfer. I discussed and finalized with him; he agreed to work with you in actualizing the successful conclusion of the transfer.......
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
William Moeketsi <[email protected]> is the scam baiter and Sam Gumede is the so-called attorney doing the real scam using a website he set up recently http://www.samgumedeattorneys.com/att.htm
If asked if any fee is involved, Sam Gumede would say "most fees have been paid up front" and "initial bank deposit is but a hundred dollars or so" and ask the scam victim to book the flight ticket and hotel reservation for Johannesburg. Then a "funds transfer approval" from South Africa Reserve bank coming from [email protected] signed by Mr. T CACHATIA, director of foreign operations will be sent to the scammed. Of course SARB domaine name is https://www.resbank.co.za and the approval letter is a fake.
Then Sam Gemede will at last mentioned a fee of $11,000+ required for the transfer to be sent to him.
You can guess the rest of the scam playbook. If the scammed ever sent the fee money, it's all lost.
Thu, 15 Jan 2015 17:19:51 -0800 (PST)
X-Received: by 10.68.69.66 with SMTP id c2mr18156629pbu.81.1421371189709;
Thu, 15 Jan 2015 17:19:49 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm1-vm10.bullet.mail.gq1.yahoo.com (nm1-vm10.bullet.mail.gq1.yahoo.com. [98.136.218.89])
by mx.google.com with ESMTPS id gu1si3645857pbd.129.2015.01.15.17.19.48
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Thu, 15 Jan 2015 17:19:49 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 98.136.218.89 as permitted sender) client-ip=98.136.218.89;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.136.218.89 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
Received: from [216.39.60.182] by nm1.bullet.mail.gq1.yahoo.com with NNFMP; 16 Jan 2015 01:19:48 -0000
Received: from [98.137.12.197] by tm18.bullet.mail.gq1.yahoo.com with NNFMP; 16 Jan 2015 01:19:48 -0000
Received: from [127.0.0.1] by omp1005.mail.gq1.yahoo.com with NNFMP; 16 Jan 2015 01:19:48 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 33650 invoked by uid 60001); 16 Jan 2015 01:19:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1421371188; bh=dA/qRDQ22w74V5f3stTkbpTJS+0PecVRHqPyNFKvL3I=; h=Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=AMVy6c/nn7/dkbNoQfQxTGjfjWVMXe2zG7SoFnldEPPb+/t5n+cUXr+soiKzmp6neEdYPTdlnZCa2vJc8HYgh/3odoPSdSCSGl9EQOrLKqRyPfNcX+3rIjbgm2iCe+tsJ9sDBl7XXJmgOF60PDp1X09w1TZgeHcmKN8R5zLZ6Gw=
X-YMail-OSG: lfF4Eh4VM1koGoA4HbclEpYDVAq6VNjIBubVzshWZwT4JQH
E6U0aiwUEZd05ffetyPKBRd58rnnqvGHeo9fLSdf1QnN_Ab.LfrhBkATtkU3
uIpYaFq5MdoWeJ5v.Lyk78fXkHko8oCo7d6INu5W03zz6Y6S7.6CUcpASW_x
tx3q53HejtfEyvN5xxKke6lIYGzF4w40_MyVGyp.1VgcYV.Q5uhfyrHlFHIo
cZO4_CvXO4mtvIeYR12TgdtWeXs5tW1mBtpwl3YOmW2gKgQFUMoxoXNYw2Dm
jLIvn57AMwNbZPrMp0pbCVQxgd9CXWOE9xKVa3_Zd_xghopLYNxw4Zj6svrI
d1BYgU3ud7jMFA48ds6oAR5o_Wf2S9aFtFV1Z8tcCZScZa2hHNkybHvZW97y
tUEn.zamPJMsr3yfLVyW7fso0__tMnR9qKDqJY6i52z.DNdTBziCLPGtUkGL
wSc1hZm0Eg7ZmiHhJwwPz3ba8O6yJxRs9OEwtFOHmBmTRv9_yX3AZFlNaJNx
apLd6V3bpn_r3
Received: from [197.228.70.64] by web163403.mail.gq1.yahoo.com via HTTP; Thu, 15 Jan 2015 17:19:48 PST
X-Rocket-MIMEInfo: 002.001,RGVhciBNci4gVHJhbmgsIA0KDQoNCldlbGwgcmVjZWl2ZWQgeW91ciBsYXN0IGVtYWlsIHdpdGggdGhhbmtzLCB3aGljaCBpbmNsdWRlcyB5b3VyIGluZm9ybWF0aW9uLiBJIG11c3QgYXBvbG9naXplIGZvciBteSBsYXRlIHJlc3BvbnNlLCB3aGljaCB3YXMgZHVlIHRvIHNvbWUgb2ZmaWNpYWwgZW5nYWdlbWVudHMgYW5kIHNlcmllcyBvZiBtZWV0aW5ncyB3aXRoIHRoZSBjb25zdWx0YW50IHdobyB3aWxsIGFzc2lzdCB1cyBpbiB0aGUgcHJvY2VzcyBvZiB0aGUgdHJhbnNmZXIuIEhpcyBuYW1lIGlzIEFkdiABMAEBAQE-
X-Mailer: YahooMailClassic/923 YahooMailWebService/0.8.203.740
Message-ID: <[email protected]>
Date: Thu, 15 Jan 2015 17:19:48 -0800
From: William Moeketsi <[email protected]>
Subject: Re:Kindly confirm
To: XXXXXXXXX
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Dear Mr. XXXXXXX
Well received your last email with thanks, which includes your information. I must apologize for my late response, which was due to some official engagements and series of meetings with the consultant who will assist us in the process of the transfer. His name is Adv Sam Gumede and he is a financial attorney. His involvement will give legal credence to the process of the transfer. I discussed and finalized with him; he agreed to work with you in actualizing the successful conclusion of the transfer.......
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
William Moeketsi <[email protected]> is the scam baiter and Sam Gumede is the so-called attorney doing the real scam using a website he set up recently http://www.samgumedeattorneys.com/att.htm
If asked if any fee is involved, Sam Gumede would say "most fees have been paid up front" and "initial bank deposit is but a hundred dollars or so" and ask the scam victim to book the flight ticket and hotel reservation for Johannesburg. Then a "funds transfer approval" from South Africa Reserve bank coming from [email protected] signed by Mr. T CACHATIA, director of foreign operations will be sent to the scammed. Of course SARB domaine name is https://www.resbank.co.za and the approval letter is a fake.
Then Sam Gemede will at last mentioned a fee of $11,000+ required for the transfer to be sent to him.
You can guess the rest of the scam playbook. If the scammed ever sent the fee money, it's all lost.