Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#226614 by buried under 419s Sun Nov 09, 2014 2:18 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 09 Nov 2014 02:45:02 -0800
Received: from outbound.mail10.cp247.net ([89.238.188.163]:51791 helo=mail.mail10.cp247.net)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1XnPzO-0004hj-6a
for ; Sun, 09 Nov 2014 02:45:01 -0800
X-SmarterMail-Authenticated-As: [email protected]
Received: from User (UnknownHost [41.71.173.63]) by mail.mail10.cp247.net with SMTP;
Sun, 9 Nov 2014 10:43:34 +0000
Reply-To: <[email protected]>
From: "Mr. Emmanuel Udoh."<[email protected]>
Date: Sun, 9 Nov 2014 11:43:30 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0055_01C2A9A6.4FF1AF7C"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 141015-2, 10/15/2014), Outbound message
X-Antivirus-Status: Clean
X-Spam-Status: Yes, score=18.5
X-Spam-Score: 185
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Attn: Sir, Kindly view the attached file it contains your
payment information. Emmanuel Udo (CBN) [...]

Content analysis details: (18.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9993]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[89.238.188.163 listed in list.dnswl.org]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(emmaneludoh2012[at]gmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (emmaneludoh2012[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 0.9993]
1.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
0.5 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
1.5 FAKE_REPLY_C FAKE_REPLY_C
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** RE: THE TRUTH OF THE MATTER.

This is a multi-part message in MIME format.

------=_NextPart_000_0055_01C2A9A6.4FF1AF7C
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit

Attn: Sir,
Kindly view the attached file it contains your payment information.
Emmanuel Udo (CBN)

[ Truth of the Matter 1.txt ]

Emmanuel Udoh
Headquarter,
Central Bank of Nigeria.
Nigeria.Deputy Governor (CBN)

Attn: Dear Beneficiary,

RE: THE TRUTH OF THE MATTER.


I do not know if you have asked yourself why each time the release of this fund is approved, all of a sudden, the payment will be stopped or one problem or the other will come up if you have not asked this question or you do not know, this is an opportunity for me to tell
you.

Some time ago, your Nigerian friends, I mean the people that introduced you to the project approached me through my dear wife who work with the Federal Ministry of Finance and requested me to assist them conclude a money transfer deal they had with you.

They requested me to assist them by removing the original contractor's name, company's name and bank particulars from the Central Bank of
Nigeria (CBN) vetting computer and replacing them with your name and bank details in order to make you appear as the rightful beneficiary
of this fund. I agreed on condition that they will pay me US$80,000.00 as soon as your name appears as the beneficiary. I did as agreed and demanded to be paid, but your friends started telling me stories, they even told me you promised to send money to me.

Do you know that up till now, I have not received a single cent from them and I have not set my eyes on any of them.Based on their
attitude, I decided to stop the fund release movement because I cannot be denied of my right in my own office considering the risk as it
might affect my job. Secondly, I know the source of the funds that you did not execute any contract in Nigeria, although I am the only person privileged to know this information and it is a fact. Why I am making this clear to you is that I can see that you are still making efforts in order to conclude this project.

Now I am ready to forget the past. I do not need the money any longer from you but a good compensation from your mind.

I need your assurance that those your colleagues will be totally kept out of this transaction.

I know that none of them is aware of my new approach to you. Stop spending your money unnecessarily to CBN Officers both here and
overseas because you will not receive this money without my hand in it.

I personally did the work at the beginning and only me can perform it. Finally, I need your promise that no official of the Central Bank of Nigeria will be aware of my involvement in this regard because of my position. Now re-assure that you will be willing to compensate me that you will assist my wife to establish a foreign account in your country where my compensation will be lodged.

Also a TT FUND RELEASE APPROVAL DOCUMENTS will be sent to you for endorsement after which we will obtain an (AUTHORIZATION LETTER) from
the office of the president federal republic of Nigeria before the fund remit into your account within 48 hours.

I am a man of my word. If you are ready to conclude this business with me, kindly contact me, so that we can have a chat over this issue once and for all. But if the reverse is the case, do not bother yourself to reach me and forget about this money.

Reconfirm the following below information's:

Bank details:..........
Full names:............
Address:...............
Telephone:.............
Gender:................
Age:...................
Occupation:............

Best regards,
Emmanuel Udoh.
Central Bank of Nigeria.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

#293557 by buried under 419s Mon May 02, 2016 12:47 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 02 May 2016 02:14:02 -0700
Received: from mail-lf0-f68.google.com ([209.85.215.68]:35429)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1ax9vU-00082R-2a
for ; Mon, 02 May 2016 02:14:02 -0700
Received: by mail-lf0-f68.google.com with SMTP id u64so24126285lff.2
for <>; Mon, 02 May 2016 02:36:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to
:content-transfer-encoding;
bh=BKRRlBx1nxy3gy67fjIh+kv9eFyKF88k7fzIe/gXCz0=;
b=DWlCIPuFokM5YVCPClS7+cUXC2BZXS07gfWeFKDZjS8Vl7eoPpSTiM+XM/cX4tGSov
Db3pUhKD9ncZl7QWh8AMkS8opg2+PPlPEBct+LHdBMbxWkHFEIPppdJnqN3XtIZb+X9F
RZv8CK3UUYIsGiZRiCaK/RN4sh0X3NeAu92g2qIr9NQ6Vmmb8wt22tbZk/EyyxZx2UV/
1/vizcHrCT28oh/e2uRZTTIgSQf0kRAQyQWAk0/gY0bz1P6XLLzPsBAAiWWl5w3ZRoAo
k1cm1oM1exqZnlwZ3ctKqVR7spc7nv5Tx7lsLq/KjorZljygE2q2wvGspLkXDd8YVLkQ
4tkg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:reply-to:date:message-id:subject
:from:to:content-transfer-encoding;
bh=BKRRlBx1nxy3gy67fjIh+kv9eFyKF88k7fzIe/gXCz0=;
b=GtPn/7rTpJ09UYY+kS3ZxTFo29LcyL4hlB/PDt2aHq3e6H0GokPxYshVRj+zGZhZBg
ETQpGZwUJUlX/p2LJIKJngK4e97Y/BdC2jKcKf5Ijvs7Fa4EebTU52m9fjLK0nXUkg7f
hyl7RC6NloOHxJpQV3kBQX0KbX9531NcgVhewfq1KC2jGwOGy2FGhHxBAqVtkD60GXgg
klDLSBhvTui0QgM258efh6PuAC4P2iqexrRRVd2McRdYkJKXGUFpXuAs2zLU/S6pLHt2
LpKnvaZcUjxvFuCE3kxlVbybf1749Dz/YB1t2WlGQco0KXhxAT4R3AW4QHR51mmCoxSy
qBgQ==
X-Gm-Message-State: AOPr4FWFa6soKRLqOc/h7KKBCFPt0rjn72YGN1An0o4hXEGSfjXKWHx82/XQHtMq4hPWqLAHcG+IQBI0hsYTwg==
MIME-Version: 1.0
X-Received: by 10.25.17.234 with SMTP id 103mr14301350lfr.145.1462181768661;
Mon, 02 May 2016 02:36:08 -0700 (PDT)
Received: by 10.114.194.231 with HTTP; Mon, 2 May 2016 02:36:08 -0700 (PDT)
Reply-To: [email protected]
Date: Mon, 2 May 2016 10:36:08 +0100
Message-ID: <CAPMorroohCL4B_=Ug1Eas0ba39MJ=SnWGRj2ACiU=JpyGcmN7g@mail.gmail.com>
From: "Mr. Emmanuel Udoh" <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Bcc:
X-Spam-Status: Yes, score=12.4
X-Spam-Score: 124
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: From The Desk of: Mr. Emmanuel Udoh, Director Foreign Operation
Department Central Bank of Nigeria (CBN). Attn: Dear Beneficiary, This is
to inform you that your contract/inheritance funds valued at $15.5m have
been approved to pay you via ATM card. Your ATM card is out and ready to dispatch
to you. For your perusal, attached DHL TRACKING NUMBERS (1593140721 and 1593140990)
are the first batch of ATM card I dispatched to the beneficiaries on the
5th and 7th of April 2016 and it was delivered to the beneficiaries by DHL
COURIER SERVICES AGENT on the 11th of April 2016. You are advice to track
the DHL TRACKING NUMBERS as stated through DHL TRACKING SITE for your conformation.
[...]

Content analysis details: (12.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.215.68 listed in list.dnswl.org]
2.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mr.jackzellman1960[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mr.jackzellman1960[at]gmail.com)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9055]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
1.6 MONEY_ATM_CARD Lots of money on an ATM card
2.6 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.9 AWL AWL: Adjusted score from AWL reputation of From: address
X-Spam-Flag: YES
Subject: ***SPAM*** Notification of Your ATM Card Released.

From The Desk of:
Mr. Emmanuel Udoh,
Director Foreign Operation Department
Central Bank of Nigeria (CBN).

Attn: Dear Beneficiary,

This is to inform you that your contract/inheritance funds valued at
$15.5m have been approved to pay you via ATM card. Your ATM card is
out and ready to dispatch to you. For your perusal, attached DHL
TRACKING NUMBERS (1593140721 and 1593140990) are the first batch of
ATM card I dispatched to the beneficiaries on the 5th and 7th of April
2016 and it was delivered to the beneficiaries by DHL COURIER SERVICES
AGENT on the 11th of April 2016. You are advice to track the DHL
TRACKING NUMBERS as stated through DHL TRACKING SITE for your
conformation.

You are advice to comply immediately you receive this mail to send me
your RECEIVING ADDRESS and $210 COURIER FEE of your ATM CARD to enable
me dispatch your ATM CARD to you first thing tomorrow morning my local
time and send you the DHL TRACKING NUMBER so that you can track your
ATM CARD and know the time it will arrive to your doorstep to enable
you receive it from the DHL AGENT.

Send the $210 courier fee via MONEY GRAM ONLY as we signed contract
with them. Below is the information to send the $210 courier fee via
money gram.

Receiver’s Name: ADELAKUN OLUWATOSIN
Receiver’s Address: LAGOS-NIGERIA
Test Question: BLACK
Answer: WHITE
Amount: $210
MTCN:
Sender’s name: NEEDED.
Senders address NEEDED.

Yours sincerely,

Mr. Emmanuel Udoh.
Director Foreign Operation Dept. (CBN).

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: Bing [Bot], Google [Bot] and 147 guests