Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#419160 by buried under 419s Tue Oct 27, 2020 7:06 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id gKqOEWigmF/pMwAAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 27 Oct 2020 22:34:16 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 27 Oct 2020 22:34:16 +0000
Received: from mail-lf1-f65.google.com ([209.85.167.65]:35024)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kXXXj-0003Rn-4R
for ; Tue, 27 Oct 2020 22:34:16 +0000
Received: by mail-lf1-f65.google.com with SMTP id f9so3574789lfq.2
for <>; Tue, 27 Oct 2020 15:33:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=emEChS+JTxZ8JeIhmOZz/c6cuvmGPGM0xOfNFFH9/UM=;
b=qEXZxs/BulThGpu2CueFG0zDuShzFmNGBsmJ7HNVQKDrjhPhihPEF/ZOMGqGIKcyC5
9ak4WiGHjdFX2SsbUMpNNOIfV4tcrmloAl7PaKEpOfYd/V4Qcn5Eput1V3rDEPJRFEJV
aSALZayGJrmKlAXxNGDSDm7/dJSft25/yEdm9eElBlq0DMzS/nFSaOy/SuZRApBxSG+N
rHteeo87wv7C+qh3LHumVBqvMklba3zdWL1MKSSPErG3qR+kjicgCSJyV8K/UWixHbi/
q6UXlnAC8IxZkEMXkrj7OuP3yvy5HitXEJPmHC5FA4fUpNAJA2luAb47ZAAhxL9CLxiQ
cLog==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=emEChS+JTxZ8JeIhmOZz/c6cuvmGPGM0xOfNFFH9/UM=;
b=ncKoaR6j64TMEI5y/egTUSvcnT1Y6ZgjcWdrdlPb7uVCmsVHVdi6i19eE5RX9osmjW
bM46V2viaVNpMWqJR/HhfWgDyZrCnlgzG1/dPN2dCFOvA3oZg5CIMpGmkwLe/yitA/sK
gDUuHLCS0U1Q1HT69k5elajmV4Wz0JURYOYRqXnJSP2PCiGNmN35LuIG6VyQ9Y6rk5u0
6bKkCJ5qhzf9szQ74uPN4cjhFvnHQoGiZUBpooSZUFMDR2l7WlTz5+uyfdyNbkVVSOzy
YZlLH+UwDYD39X30eIQIAsf2JQ85AoDolRuDMySNoLTIr9EM3DpgNXKZzDP48gvj0B0R
Rqwg==
X-Gm-Message-State: AOAM531JvmHylfelCT1SJnO8FphKqdVqxLWpdzBZNCUg26g7wcIaZ29D
fSrd6k0crK8VlYZ9IKWw+wQXTJGk9PqSmorWCp0=
X-Google-Smtp-Source: ABdhPJyT8guwg9A2DiIDMzL02BqrPM8pBw5aojJT8wuTtIPX3JlUhC5QqK9XzUQCJqgkgW5p79bwnsm3JWwFJnLzVKs=
X-Received: by 2002:a05:6512:6c3:: with SMTP id u3mr1774727lff.9.1603838012838;
Tue, 27 Oct 2020 15:33:32 -0700 (PDT)
MIME-Version: 1.0
From: mark edward <[email protected]>
Date: Tue, 27 Oct 2020 15:33:42 -0700
Message-ID: <CAPe1rpDvQ8hxsAK45OdqgDsdb-Xom+fdmZQgJOWPTtHXxG44qA@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000085d1205b2aea368"
Bcc:
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Customer, We have received an official letter regarding
the Release of your Approved Fund of US$50 Million Dollars payment. To make
everything fast and easy we decided to pay you through an Online Bank Account
with our Bank or through our ATM Swift Card Payment System, we can also pay
you by Key Tested Telex (K.T.T) Wire T [...]
Content analysis details: (11.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[boaamerica222[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[boaamerica222[at]gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 LOTS_OF_MONEY Huge... sums of money
2.8 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.5 MONEY_FORM Lots of money if you fill out a form
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** OVER DUE PAYMENT APPROVAL

--000000000000085d1205b2aea368
Content-Type: text/plain; charset="UTF-8"


Dear Customer,

We have received an official letter regarding the Release of your
Approved Fund of US$50 Million Dollars payment.

To make everything fast and easy we decided to pay you through an
Online Bank Account with our Bank or through our ATM Swift Card
Payment System, we can also pay you by Key Tested Telex (K.T.T) Wire
Transfer through Bank to Bank Account (Swift System)

This is to enable you receive your Fund conveniently into any
nominated Bank Account of your choice in your country. Kindly get back
to me for more details.

Login details or ATM Swift Card and instructions on how to use your
ATM Swift Card / access your Online Account and effect transfers to
your designate Bank account by yourself will be emailed to you, you
are required to provide the following information for further opening
of a non-residential Online Bank Account or your Swift ATM Card on
your behalf today.

Personal Information
(1) Full Names:
(2) Complete Address:
(2) Nationality:
(3) Passport No: or National ID Card NO.:
(4) Direct Phone Number:
(5) Contact Email Address:
(6) Preferred Currency For Account:
(7) Occupation:

Yours Faithfully,
Mr. Mark Edward
Foreign Payment Dept

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot], Google Adsense [Bot], Majestic-12 [Bot] and 86 guests