Bank of England [email protected]

Header Analysis Quick Report
Originating IP: 41.203.69.6
Originating ISP: Globacom Ltd
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.83 with SMTP id t80csp1182748ioe;
Sun, 19 Apr 2015 16:48:49 -0700 (PDT)
X-Received: by 10.236.7.81 with SMTP id 57mr7404627yho.72.1429487329520;
Sun, 19 Apr 2015 16:48:49 -0700 (PDT)
Return-Path: <[email protected]>
Received: from morrishillbaptist.org (remote.morrishillbaptist.org. [184.174.166.80])
by mx.google.com with ESMTP id l145si9574200yke.132.2015.04.19.16.48.44;
Sun, 19 Apr 2015 16:48:49 -0700 (PDT)
Received-SPF: fail (google.com: domain of [email protected] does not designate 184.174.166.80 as permitted sender) client-ip=184.174.166.80;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of [email protected] does not designate 184.174.166.80 as permitted sender) [email protected]
Received: from User ([41.203.69.6]) by morrishillbaptist.org with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 18 Feb 2015 11:50:36 -0500
Reply-To: <[email protected]>
From: "Bank of England"<[email protected]>
Subject: VICTIMS FROM THE SCAMMERS?
Date: Tue, 17 Feb 2015 17:49:08 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 18 Feb 2015 16:50:36.0959 (UTC) FILETIME=[04FF2AF0:01D04B9B]

BANK OF ENGLAND
Threadneedle streetLondonec2r 8ah
Phone:+447017606053 Fax: +447010047594

Our Ref: BEUK/DEU/UNN/IND/001/15

Attn: Beneficiary,

I am Dr Francis Johnson Director Director Foreign Remittance BANK OF ENGLAND, there is presently a counter claims on your funds by one MRS. CHERIE VANSICKLE, who is presently trying to make us believe that you are dead and even explained that you entered into an agreement with her while in the sick bed, to help you in receiving your approved Scam victim Compensation fund awarded to you by the UNITED-NATION In conjunction with the Prime Minister. So here comes the big question.

Are you dead or still alive? And Did you by any reason signed such agreement in favor of (MRS. CHERIE VANSICKLE). Thereby making her the current beneficiary with her following Bank account details:

ACC NAME: MRS. CHERIE VANSICKLE,
BANK/NAME: GREEATER IOWA CREDIT UNION
BANK ADDRESS: LEDD E, 30TH DES MOINES, IOWA 50317 USA,
ACCOUNT/NUMBER: 000369505.
ROUTING/273972583,

We shall proceed to issue all payments details to the said MRS. CHERIE VANSICKLE, if we do not hear from you within the next five Bank working days from today. All the necessary arrangements regarding your contract payment has been finalized and i was then given the authority to notify you of the latest development. You also have to note that you will pay before this fund will be release into your account and if you are not ready to settle the bill, then you have to quit this transaction in time.

Thanks for your understanding and cooperation.

My Sincere Regards,

Mrs. Anna John
Director Foreign Remittance
Bank of England

From the same email address [email protected] and phone numbers:
Phone: +44-7017606053
Fax: +44-7010047594
Another phone: +44-7031946520

Header Analysis Quick Report
Originating IP: 196.46.246.181
Originating ISP: Celtel Nigeria Limited T.a Zain
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.143.18 with SMTP id r18csp1311496iod;
Tue, 14 Jul 2015 10:55:12 -0700 (PDT)
X-Received: by 10.194.157.165 with SMTP id wn5mr19668136wjb.69.1436896512430;
Tue, 14 Jul 2015 10:55:12 -0700 (PDT)
Return-Path: <[email protected]>
Received: from correo.hipatia-fuhem.es ([83.61.2.214])
by mx.google.com with ESMTP id cd18si20724108wib.106.2015.07.14.10.55.04;
Tue, 14 Jul 2015 10:55:12 -0700 (PDT)
Received-SPF: fail (google.com: domain of [email protected] does not designate 83.61.2.214 as permitted sender) client-ip=83.61.2.214;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of [email protected] does not designate 83.61.2.214 as permitted sender) [email protected]
Received: from localhost (localhost [127.0.0.1])
by correo.hipatia-fuhem.es (Postfix) with ESMTP id 9C1B0B60DA;
Tue, 14 Jul 2015 20:06:44 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at correo-srv.hipatia-fuhem.es
Received: from correo.hipatia-fuhem.es ([127.0.0.1])
by localhost (correo-srv.hipatia-fuhem.es [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Yn777Sk0tk1I; Tue, 14 Jul 2015 20:06:44 +0200 (CEST)
Received: from User (unknown [196.46.246.181])
(Authenticated sender: [email protected])
by correo.hipatia-fuhem.es (Postfix) with ESMTPA id 07937B614A;
Tue, 14 Jul 2015 20:06:25 +0200 (CEST)
Reply-To: <[email protected]>
From: "BANK OF ENGLAND"<[email protected]>
Subject: SCAMMERS VICTIMS FROM <snipped>.
Date: Mon, 13 Jul 2015 18:55:06 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;

BANK OF ENGLAND
Threadneedle streetLondonec2r 8ah
Phone:+447017606053 Fax: +447010047594

Our Ref: U-K/DEU/UNN/001/15

Attn: Sir,

I am Mrs. Stella Johnson Director International Remittance Bank of England, there is presently a counter claims on your funds by one <snipped>, who is presently trying to make us believe that you are dead and even explained that you entered into an agreement with her while in the sick bed, to help you in receiving your approved Scam victim Compensation fund awarded to you by the UNITED-NATION In conjunction with the Prime Minister. So here comes the big question.

Are you dead or still alive? And did you by any reason signed such agreement in favor of (<snipped>). Thereby making her the current beneficiary with her following Bank account details:

<snipped>
AMOUNT: USD 10.500, 000.00

We shall proceed to issue all payments details to the said <snipped>, if we do not hear from you within the next five Bank working days from today. All the necessary arrangements regarding your contract payment has been finalized and i was then given the authority to notify you of the latest development. You also have to note that you will pay before this fund will be release into your account and if you are not ready to settle the bill, then you have to quit this transaction in time.

Thanks for your understanding and cooperation. Please make sure that you call me today +447031946520.

Goodluck.

Mrs. Stella Johnson
Director International Remittance
Bank of England

Using the same name and email address [email protected]

from: BANK OF ENGLAND <[email protected]>
reply-to: [email protected]
BANK OF ENGLAND
Phone:+44-7017606053 Fax: +44-7010047594

Header Analysis Quick Report
Originating IP: 105.112.8.33
Originating ISP: Airtel Networks Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.26.75 with SMTP id j11csp572993lbg;
Sat, 25 Jul 2015 07:17:40 -0700 (PDT)
X-Received: by 10.180.198.52 with SMTP id iz20mr7014248wic.77.1437833860200;
Sat, 25 Jul 2015 07:17:40 -0700 (PDT)
Return-Path: <[email protected]>
Received: from omp1023.mail.ir2.yahoo.com (omp1023.mail.ir2.yahoo.com. [212.82.98.86])
by mx.google.com with ESMTPS id iz2si1564664wic.101.2015.07.25.07.17.38
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 25 Jul 2015 07:17:40 -0700 (PDT)
Received-SPF: neutral (google.com: 212.82.98.86 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=212.82.98.86;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 212.82.98.86 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.co.uk
Received: (qmail 76604 invoked by uid 1000); 25 Jul 2015 14:17:38 -0000
Received: (qmail 90715 invoked by uid 60001); 25 Jul 2015 14:17:37 -0000
DKIM-Signature: <snipped>
X-YMail-OSG: <snipped>
Received: from [105.112.8.33] by web172406.mail.ir2.yahoo.com via HTTP; Sat, 25 Jul 2015 15:17:36 BST
X-Rocket-MIMEInfo: <snipped>
X-Mailer: YahooMailBasic/582 YahooMailWebService/0.8.203.802
Message-ID: <[email protected]>
Date: Sat, 25 Jul 2015 15:17:36 +0100
From: BANK OF ENGLAND <[email protected]>
Reply-To: [email protected]
Subject: MAKE SURE THAT YOU FILL THE FORM.
To: undisclosed recipients: ;
MIME-Version: 1.0

BANK OF ENGLAND
Threadneedle streetLondonec2r 8ah
Phone:+447017606053 Fax: +447010047594

Our Ref: BEUK/DEU/UNN/IND/001/15

Attn: Sir,

I have not been able to contact you all these while because we have been trying to investigate on this MRS. CHERIE VANSICKLE who claimed to be your relative. After contacting you, we have then found out that she just want to claim your hard earned fund and he have been sent to FBI where she will be punished according to the law but you have to be very careful with whatsoever you are doing and how you expose your account details to people. Try and go through the attached form which i will send to you and fill it very carefully before sending it back to me. If you are willing to follow up with my instructions, then be ready to receive your fund by Friday next week.

We need all your personal information, telephone number, bank details and your international passport because MRS. CHERIE VANSICKLE is here and have been claiming that you are dead and that you gave her the right and order to claim your fund before your death. After all this on-going investigations, we finally concluded that she is here to claim what doesn't rightfully belongs to her, we are going to deal with her in our own way here in London. We have also sent message across to the FBI and INTER-POL to carry on the investigations on MRS. CHERIE VANSICKLE. We are trying to follow things accordingly but if you know that you are not ready to clear this charges after this whole investigations, then you can forget about this transaction and we will know fully well that you are also not the rightful beneficiary of this fund. Send your mobile number to me because I will like to call and explain things to you in full.

Thanks for your understanding and cooperation. For more informations, you can reach me through this number +447031946520.

Goodluck.

Mrs. Stella Johnson
Director International Remittance

Bank of England

As a side note - I've not replied to a single one of these emails, but they continue to send these to me. I just wanted to show how these scammers will harass a victim to try and convince them that the funds are there.

Header Analysis Quick Report
Originating IP: 105.112.22.94
Originating ISP: Airtel Networks Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.61.9 with SMTP id l9csp135925lbr;
Sat, 12 Sep 2015 03:45:32 -0700 (PDT)
X-Received: by 10.107.154.213 with SMTP id c204mr10062766ioe.80.1442054732369;
Sat, 12 Sep 2015 03:45:32 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm46.bullet.mail.ne1.yahoo.com (nm46.bullet.mail.ne1.yahoo.com. [98.138.120.53])
by mx.google.com with ESMTPS id y16si1975533igg.11.2015.09.12.03.45.31
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Sat, 12 Sep 2015 03:45:32 -0700 (PDT)
Received-SPF: neutral (google.com: 98.138.120.53 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.138.120.53;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 98.138.120.53 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.co.uk
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm46.bullet.mail.ne1.yahoo.com with NNFMP; 12 Sep 2015 10:45:30 -0000
Received: from [98.138.101.130] by nm46.bullet.mail.ne1.yahoo.com with NNFMP; 12 Sep 2015 10:42:47 -0000
Received: from [212.82.98.48] by tm18.bullet.mail.ne1.yahoo.com with NNFMP; 12 Sep 2015 10:42:47 -0000
Received: from [212.82.98.68] by tm1.bullet.mail.ir2.yahoo.com with NNFMP; 12 Sep 2015 10:42:47 -0000
Received: from [127.0.0.1] by omp1005.mail.ir2.yahoo.com with NNFMP; 12 Sep 2015 10:42:47 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 83115 invoked by uid 60001); 12 Sep 2015 10:42:47 -0000
X-YMail-OSG: <snipped>
Received: from [105.112.22.94] by web172406.mail.ir2.yahoo.com via HTTP; Sat, 12 Sep 2015 11:42:47 BST
X-Rocket-MIMEInfo: <snipped>
X-Mailer: YahooMailBasic/654 YahooMailWebService/0.8.203.813
Message-ID: <[email protected]>
Date: Sat, 12 Sep 2015 11:42:47 +0100
From: BANK OF ENGLAND <[email protected]>
Reply-To: [email protected]
Subject: Re: URGENT REPLY NEEDED
To: undisclosed recipients: ;
MIME-Version: 1.0

Attn: Sir,

We receive your mail and well noted. I have concluded with diplomat that you will open the consignment box and clearing the charges at your country airport, but you will send the money 120pounds to enable send the key before the diplomat arrive in country.

Below are the details which you are going to use to send the fee via Western Union or Money-Gram. Once I receive the money I will immediately send key to you before the diplomat arrive.

RECEIVED NAME: JEFFREY BENSON
LOCATION: LONDON-UK

Thanks for your understanding and cooperation.

Good luck.

Mrs. Stella Johnson
Director International Remittance
Bank of England