Adaobi L. Usman [email protected]

Header Analysis Quick Report
Originating IP: 105.112.17.115
Originating ISP: Airtel Networks Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.61.9 with SMTP id l9csp952971lbr;
Fri, 2 Oct 2015 02:16:13 -0700 (PDT)
X-Received: by 10.68.184.162 with SMTP id ev2mr18675627pbc.109.1443777373445;
Fri, 02 Oct 2015 02:16:13 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web100207.mail.kks.yahoo.co.jp (web100207.mail.kks.yahoo.co.jp. [114.111.99.102])
by mx.google.com with SMTP id tg7si15373809pbc.190.2015.10.02.02.16.12
for <<snipped>>;
Fri, 02 Oct 2015 02:16:13 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 114.111.99.102 as permitted sender) client-ip=114.111.99.102;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 114.111.99.102 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: (qmail 2335 invoked by uid 60001); 2 Oct 2015 09:16:11 -0000
DomainKey-Signature: <snipped>
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [105.112.17.115] by web100207.mail.kks.yahoo.co.jp via HTTP; Fri, 02 Oct 2015 18:16:11 JST
X-RocketYMMF: xcabinx0310
X-Mailer: YahooMailWebService/0.8.111_67
X-YMail-JAS: <snipped>
Sender: [email protected]
Date: Fri, 2 Oct 2015 18:16:11 +0900 (JST)
From: CBN OFFICE PAYMENT <[email protected]>
Reply-To: CBN OFFICE PAYMENT <[email protected]>
Subject: GOOD NEWS
To: undisclosed recipients: ;
MIME-Version: 1.0

Attention: Sir,

I am Mrs. Adaobi L. Usman the new Director Foreign Remittance Central Bank of Nigeria (CBN) how are you today, Have you received the part-payment of USD10.5Million, former Finance Minister, Dr. (Mrs) Ngozi Okonjo-Iweala Federal Ministry of Finance and Mr. Mallam Sanusi Lamido Sanusi governor of Central Bank of Nigeria (CBN) called me and told me that the money have been paid to you since last week Friday hence I writing you to know why you have not written or called to notify me.

I hope you know that it is my effort that made it possible for the payment of your fund because I have not relented all this while since I was appointed by the President and Commander in Chief of the Armed Forces of Nigeria, General Muhammadu Buhari to make the appropriation for the payment of Beneficiary, hence including your file.

As soon as you receive this mail, kindly let me know if you have not received your payment which I have already included for payment.

Best regards,

Mrs. Adaobi L. Usman
New Director Foreign Remittance
Central Bank of Nigeria (CBN)

Header Analysis Quick Report
Originating IP: 105.112.16.97
Originating ISP: Airtel Networks Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.61.9 with SMTP id l9csp1512406lbr;
Tue, 6 Oct 2015 02:49:25 -0700 (PDT)
X-Received: by 10.66.141.137 with SMTP id ro9mr45575153pab.41.1444124965450;
Tue, 06 Oct 2015 02:49:25 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web100212.mail.kks.yahoo.co.jp (web100212.mail.kks.yahoo.co.jp. [114.111.99.107])
by mx.google.com with SMTP id yj10si47568058pab.237.2015.10.06.02.49.24
for <<snipped>>;
Tue, 06 Oct 2015 02:49:25 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 114.111.99.107 as permitted sender) client-ip=114.111.99.107;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 114.111.99.107 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: (qmail 27569 invoked by uid 60001); 6 Oct 2015 09:49:23 -0000
DomainKey-Signature: <snipped>
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [105.112.16.97] by web100212.mail.kks.yahoo.co.jp via HTTP; Tue, 06 Oct 2015 18:49:22 JST
X-RocketYMMF: xcabinx0310
X-Mailer: YahooMailWebService/0.8.111_67
X-YMail-JAS: <snipped>
Sender: [email protected]
Date: Tue, 6 Oct 2015 18:49:22 +0900 (JST)
From: CBN OFFICE PAYMENT <[email protected]>
Reply-To: CBN OFFICE PAYMENT <[email protected]>
Subject: CONFIRM YOUR BANKING INFORMATION.
To: undisclosed recipients: ;
MIME-Version: 1.0

Attention: Sir,

I received your mail. Dr. (Mrs) Ngozi Okonjo-Iweala and Mr. Mallam Sanusi Lamido Sanusi told Federal Government of Nigeria that you have received your contract fund, that's why president of Nigeria His Excellency Muhammadu Buhari, GCFR ask me to right a mail if you have receive your contract fund.

But please if you have receive your contract fund, try to let me know. Because Mr. president need to confirm Firstly that you have not receive your contract fund, Dr. (Mrs) Ngozi Okonjo-Iweala and Mr. Mallam Sanusi Lamido Sanusi which divert your fund to there personel account. But if you are sure that you didn't receive your contract kindly forward your Banking information and international passport copy for me to confirm it, before the transfer of your fund.

Best regards,

Mrs. Adaobi L. Usman
New Director Foreign Remittance
Central Bank of Nigeria (CBN)

Header Analysis Quick Report
Originating IP: 105.112.19.42
Originating ISP: Airtel Networks Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.61.9 with SMTP id l9csp120340lbr;
Mon, 12 Oct 2015 04:10:59 -0700 (PDT)
X-Received: by 10.68.98.34 with SMTP id ef2mr33883111pbb.45.1444648259027;
Mon, 12 Oct 2015 04:10:59 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web100213.mail.kks.yahoo.co.jp (web100213.mail.kks.yahoo.co.jp. [114.111.99.108])
by mx.google.com with SMTP id mt2si25242981pbb.114.2015.10.12.04.10.57
for <<snipped>>;
Mon, 12 Oct 2015 04:10:59 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 114.111.99.108 as permitted sender) client-ip=114.111.99.108;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 114.111.99.108 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: (qmail 14446 invoked by uid 60001); 12 Oct 2015 11:10:56 -0000
DomainKey-Signature: <snipped>
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [105.112.19.42] by web100213.mail.kks.yahoo.co.jp via HTTP; Mon, 12 Oct 2015 20:10:55 JST
X-RocketYMMF: xcabinx0310
X-Mailer: YahooMailWebService/0.8.111_67
X-YMail-JAS: <snipped>
Sender: [email protected]
Date: Mon, 12 Oct 2015 20:10:55 +0900 (JST)
From: OFFICE BANK CBN <[email protected]>
Reply-To: OFFICE BANK CBN <[email protected]>
Subject: ORDER FROM MR. PRESIDENT.
To: undisclosed recipients: ;
MIME-Version: 1.0

Attention: Sir,

I received your mail. We just concluded meeting this morning with Mr. president Federal Republic of Nigeria Muhammadu Buhari and he instructed us that we shouldn't hesitate to follow the due process as he has instructed us, that every contractor most personally sign his contract documents.

Because we observe that some people in collaboration with some dubious politician,banks and government officials have been diverting contractors fund or collecting money from contractor, in other to help them get there contract fund and one of the primary objective of the Mr. president is to sanitize such unlawful act and make sure that every contractor receive his payment without hustle Or any extra charges or been disturb when transferring contractors fund by any authority such as IMF OR United nation.And that's the reason why he has put a special logistic delivery company in charge of the delivering of any documents regarding any contract payment.

So,I urge you to follow all instructions and make the payment us$970 to enable Mr. president to sign the documents after it will be deliver at your doorstep,for you to carefully go through it before signing the documents to avoid any mistake which will cost you another charges if there's any mistake. So,if your ready contact me to forward the payment details which you will use to deposit the documents delivery charges,to enable us process and transfer your payment immediately.

Best regards,

Mrs. Adaobi L. Usman
New Director Foreign Remittance
Central Bank of Nigeria (CBN)

They're using a new email address [email protected]

Header Analysis Quick Report
Originating IP: 105.112.17.127
Originating ISP: Airtel Networks Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.61.9 with SMTP id l9csp425519lbr;
Wed, 14 Oct 2015 05:04:43 -0700 (PDT)
X-Received: by 10.50.66.141 with SMTP id f13mr3188901igt.51.1444824283016;
Wed, 14 Oct 2015 05:04:43 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm39-vm5.bullet.mail.ne1.yahoo.com (nm39-vm5.bullet.mail.ne1.yahoo.com. [98.138.229.165])
by mx.google.com with ESMTPS id h75si6794560iod.111.2015.10.14.05.04.42
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Wed, 14 Oct 2015 05:04:42 -0700 (PDT)
Received-SPF: neutral (google.com: 98.138.229.165 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.138.229.165;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 98.138.229.165 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.co.uk
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm39.bullet.mail.ne1.yahoo.com with NNFMP; 14 Oct 2015 12:04:41 -0000
Received: from [98.138.101.129] by nm39.bullet.mail.ne1.yahoo.com with NNFMP; 14 Oct 2015 12:01:41 -0000
Received: from [212.82.98.58] by tm17.bullet.mail.ne1.yahoo.com with NNFMP; 14 Oct 2015 12:01:41 -0000
Received: from [212.82.98.112] by tm11.bullet.mail.ir2.yahoo.com with NNFMP; 14 Oct 2015 12:01:40 -0000
Received: from [127.0.0.1] by omp1049.mail.ir2.yahoo.com with NNFMP; 14 Oct 2015 12:01:40 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 39879 invoked by uid 60001); 14 Oct 2015 12:01:40 -0000
X-YMail-OSG: <snipped>
Received: from [105.112.17.127] by web171906.mail.ir2.yahoo.com via HTTP; Wed, 14 Oct 2015 13:01:40 BST
X-Rocket-MIMEInfo: <snipped>
X-Mailer: YahooMailBasic/797 YahooMailWebService/0.8.203.817
Message-ID: <[email protected]>
Date: Wed, 14 Oct 2015 13:01:40 +0100
From: CENTRAL BANK OF NIGERIA <[email protected]>
Subject: YOUR ORIGINAL TRANSFER DOCUMENTS.
To: undisclosed recipients: ;
MIME-Version: 1.0

Attention: Sir,

I received your mail. Your contract documents is already sign by Federal Government of Nigeria yesterday, so I am sending you the information you will use to deposit the amount. But yesterday Mr. president General Muhammadu Buhari told me that you need to pay 450usd if you are not ready to come to Nigeria, I initially told you that the total amount is 950usd for the insurance and delivery, but the Mr President to take up the bill for the insurance so all you need to do now is to pay for the delivery of form 450usd for the delivery and including the your address where this documents will be send to and the Mr president is doing all this to make sure that every contractor received his fund immediately.Use the information below to pay the fee using money-gram.

NAME: ANEKWE CHINONSO
ADDRESS: ABUJA-NIGERIA
TEXT QUESTION: BETTER
ANSWER: BEST

Best regards,

Mrs. Adaobi L. Usman
New Director Foreign Remittance
Central Bank of Nigeria (CBN)

Delivered-To: <snipped>
Received: by 10.112.61.9 with SMTP id l9csp437066lbr;
Thu, 15 Oct 2015 00:27:49 -0700 (PDT)
X-Received: by 10.50.73.39 with SMTP id i7mr16232215igv.88.1444894069678;
Thu, 15 Oct 2015 00:27:49 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm40-vm2.bullet.mail.ne1.yahoo.com (nm40-vm2.bullet.mail.ne1.yahoo.com. [98.138.229.178])
by mx.google.com with ESMTPS id t10si10448952igr.54.2015.10.15.00.27.49
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Thu, 15 Oct 2015 00:27:49 -0700 (PDT)
Received-SPF: neutral (google.com: 98.138.229.178 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.138.229.178;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 98.138.229.178 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.co.uk
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm40.bullet.mail.ne1.yahoo.com with NNFMP; 15 Oct 2015 07:27:49 -0000
Received: from [98.138.226.177] by nm40.bullet.mail.ne1.yahoo.com with NNFMP; 15 Oct 2015 07:25:07 -0000
Received: from [212.82.98.55] by tm12.bullet.mail.ne1.yahoo.com with NNFMP; 15 Oct 2015 07:25:07 -0000
Received: from [212.82.98.73] by tm8.bullet.mail.ir2.yahoo.com with NNFMP; 15 Oct 2015 07:25:07 -0000
Received: from [127.0.0.1] by omp1010.mail.ir2.yahoo.com with NNFMP; 15 Oct 2015 07:25:07 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 88343 invoked by uid 60001); 15 Oct 2015 07:25:07 -0000
X-YMail-OSG: <snipped>
Received: from [105.112.18.131] by web171901.mail.ir2.yahoo.com via HTTP; Thu, 15 Oct 2015 08:25:07 BST
X-Rocket-MIMEInfo: <snipped>
X-Mailer: YahooMailBasic/797 YahooMailWebService/0.8.203.817
Message-ID: <[email protected]>
Date: Thu, 15 Oct 2015 08:25:07 +0100
From: CENTRAL BANK OF NIGERIA <[email protected]>
Subject: URGENT REPLY NEEDED
To: undisclosed recipients: ;
MIME-Version: 1.0

Attention: Sir,

I received your mail. I have said what I know in this transaction, I have to follow my president order to avoid me making the same mistake which my formal colleagues the governor of CBN made that have cost a lot of damages to our government.To be frank with you, your contract fund has already been sign, so I urge you to immediately send the fee 450usd to enable us send the documents to you which you've to sign and alert us that you've sign it. So, we can transfer your contract fund immediately without any authorities disturbing you in any way.And I urge you to be fast about this because there's nothing i can do again rather to follow the order of new President whereby his system of governance is different with that of the past ..

Please once you send the money make sure that you forward me your home or office address where I can send you the contract document which you will sign and let me know before your fund will be transfer.

NAME: ANEKWE CHINONSO
ADDRESS: ABUJA-NIGERIA
TEXT QUESTION: BETTER
ANSWER: BEST

Best regards,

Mrs. Adaobi L. Usman
New Director Foreign Remittance
Central Bank of Nigeria (CBN)

From the same email address [email protected] with a different reply-to email address [email protected]

Delivered-To: <snipped>
Received: by 10.112.134.9 with SMTP id pg9csp1582799lbb;
Mon, 23 Nov 2015 21:25:36 -0800 (PST)
X-Received: by 10.66.240.4 with SMTP id vw4mr40496747pac.9.1448342736839;
Mon, 23 Nov 2015 21:25:36 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm30-vm4.bullet.mail.sg3.yahoo.com (nm30-vm4.bullet.mail.sg3.yahoo.com. [106.10.151.179])
by mx.google.com with ESMTPS id v6si24465690pfa.249.2015.11.23.21.25.34
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 23 Nov 2015 21:25:36 -0800 (PST)
Received-SPF: neutral (google.com: 106.10.151.179 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=106.10.151.179;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 106.10.151.179 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.com.ph
DKIM-Signature: <snipped>
Received: from [106.10.166.114] by nm30.bullet.mail.sg3.yahoo.com with NNFMP; 24 Nov 2015 05:25:23 -0000
Received: from [106.10.151.186] by tm3.bullet.mail.sg3.yahoo.com with NNFMP; 24 Nov 2015 05:25:23 -0000
Received: from [127.0.0.1] by omp1012.mail.sg3.yahoo.com with NNFMP; 24 Nov 2015 05:25:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 106.10.196.181; Tue, 24 Nov 2015 05:25:22 +0000
Date: Tue, 24 Nov 2015 05:25:22 +0000 (UTC)
From: CENTRAL BANK OF NIGERIA <[email protected]>
Reply-To: CENTRAL BANK OF NIGERIA <[email protected]>
Message-ID: <[email protected]>
Subject: SWIFT TRANSFERRED.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <2112838437.7899483.1448342722609.JavaMail.yahoo.ref@mail.yahoo.com>

Attn: Sir,

Good morning, your fund have already transfer on Friday morning. Please once you receive your fund into your bank account try to let me know.

Please reconfirm your account, because I have transferred your fund on Friday last week.

BANK NAME: HSBC BANK- AMERICA
BANK ADDRESS: WOODBOURNE HALL, PO BOX 916, ROAD TOWN, TORTOLA, BRITISH VIRGIN ISLANDS
ACCOUNT NO: 850488877236
SWIFT CODE: HKBCCATT
ACCOUNT NAME: JOPHINE LOPEZ

Best Regards,

Mrs. Anna M. K. Kenneth
Director of Credit Control and Monitoring Unit

Central Bank of Nigeria

The same email also came from [email protected]

Delivered-To: <snipped>
Received: by 10.112.134.9 with SMTP id pg9csp1608212lbb;
Mon, 23 Nov 2015 22:39:40 -0800 (PST)
X-Received: by 10.50.65.74 with SMTP id v10mr16282832igs.61.1448347180144;
Mon, 23 Nov 2015 22:39:40 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm44.bullet.mail.ne1.yahoo.com (nm44.bullet.mail.ne1.yahoo.com. [98.138.120.51])
by mx.google.com with ESMTPS id y20si1064101igr.26.2015.11.23.22.39.39
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 23 Nov 2015 22:39:40 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 98.138.120.51 as permitted sender) client-ip=98.138.120.51;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.138.120.51 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm44.bullet.mail.ne1.yahoo.com with NNFMP; 24 Nov 2015 06:39:38 -0000
Received: from [98.138.100.103] by nm44.bullet.mail.ne1.yahoo.com with NNFMP; 24 Nov 2015 06:36:38 -0000
Received: from [98.138.89.160] by tm102.bullet.mail.ne1.yahoo.com with NNFMP; 24 Nov 2015 06:36:38 -0000
Received: from [127.0.0.1] by omp1016.mail.ne1.yahoo.com with NNFMP; 24 Nov 2015 06:36:38 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 98.138.105.254; Tue, 24 Nov 2015 06:36:38 +0000
Date: Tue, 24 Nov 2015 06:36:37 +0000 (UTC)
From: CENTRAL BANK OF NIGERIA <[email protected]>
Reply-To: CENTRAL BANK OF NIGERIA <[email protected]>
Message-ID: <[email protected]>
Subject: SWIFT TRANSFERRED.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <642759743.7992786.1448346997763.JavaMail.yahoo.ref@mail.yahoo.com>
Content-Length: 575

Attn: Sir,

Good morning, your fund have already transfer on Friday morning. Please once you receive your fund into your bank account try to let me know.

Please reconfirm your account, because I have transferred your fund on Friday last week.

BANK NAME: HSBC BANK- AMERICA
BANK ADDRESS: WOODBOURNE HALL, PO BOX 916, ROAD TOWN, TORTOLA, BRITISH VIRGIN ISLANDS
ACCOUNT NO: 850488877236
SWIFT CODE: HKBCCATT
ACCOUNT NAME: JOPHINE LOPEZ

Best Regards,

Mrs. Anna M. K. Kenneth
Director of Credit Control and Monitoring Unit

Central Bank of Nigeria

Header Analysis Quick Report
Originating IP: 105.112.33.147
Originating ISP: Airtel Networks Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.172.39 with SMTP id az7csp730865lbc;
Mon, 4 Jan 2016 05:09:27 -0800 (PST)
X-Received: by 10.112.25.103 with SMTP id b7mr30057018lbg.11.1451912967692;
Mon, 04 Jan 2016 05:09:27 -0800 (PST)
Return-Path: <[email protected]>
Received: from mxs.primocollect.com.ua (mxs.primocollect.com.ua. [91.206.30.120])
by mx.google.com with ESMTPS id rt10si29920691lbb.46.2016.01.04.05.09.26
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 04 Jan 2016 05:09:27 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 91.206.30.120 as permitted sender) client-ip=91.206.30.120;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 91.206.30.120 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=primocollect.com.ua
Message-Id: <[email protected]>
Received: from [105.112.33.147] (helo=User)
by mxs.primocollect.com.ua with esmtpa (Exim 4.80.1 (FreeBSD))
(envelope-from <[email protected]>)
id 1aG4WD-000Gaa-NY; Mon, 04 Jan 2016 14:45:50 +0200
Reply-To: <[email protected]>
From: "CENTRAL BANK OF NIGERIA"<[email protected]>
Subject: Re: HAPPY NEW YEAR.
Date: Mon, 4 Jan 2016 13:27:55 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Attention: Sir

Thank you for your mail and well understood and Happy New Year. Federal government of Nigeria have giving me order this morning that if you are not ready to comply with there instruction to get contractor's Identity card today or tomorrow your payment will be cancel that you are not the rightful beneficiary of this fund. I ask you again if you have the contractor's Identity card make sure that you send it to me to enable your fund transfer immediately to your account, if you didn't have it try to send the needed fee today. So your fund will be know cancel by the Federal government of Nigeria on Wednesday. Please try to know that Federal government of Nigeria are not forceing you to pay, if you know that you exectue contract with Federal government of Nigeria send the contractor's Identity card or the fee US$380 as rightful beneficiary.

NAME: KENNETH EJIOBI
ADDRESS: ABUJA, NIGERIA
TEXT QUESTION: ID
ANSWER: CARD
AMOUNT: US$380

Best regards,

Mr. Anthony Adeiza Adaba
Director Foreign Remittance (CBN)

from: CBN OFFICE - [email protected]
reply-to: CBN OFFICE - [email protected]
phone number: +234-9057605921

Dear Sir,

I received your mail. I have already finish everything how to transfer your contract fund, because we made a mistake to transfer your 10.5million to wrong account which we received from Mr. Wade D. Wiltzen who claimed that is the contract and is not we called the fund back to CBN yesterday morning. Mr. Wade D. Wiltzen who we think that is the rightful beneficiary (Ten Million Five Hundred Thousand Dollars only) is a fake. Make sure that you forward me all your banking information for the transfer to avoid mistake again.

BANK NAME:
RECEIVED NAME:
ACCOUNT NO:
SWIFT / BIC CODE:
BRANCH:
BANK ADDRESS:
COUNTRY:
HOME ADDRESS:
YOUR WORKING ID.
PHONE NUMBER:
YOUR INTERNATIONAL PASSPORT

For more information try to call my office number +234-905-760-5921, please we don’t want any delay for this transaction. You are not sending any money to Nigeria before you receive your fund, but please if you are not ready try to forget it.

I am waiting for your urgent reply.

Best regards,

Mr.Frank Chukwu
Director Foreign Remittance {CBN}

from: CBN OFFICE - [email protected]
reply-to: CBN OFFICE - [email protected]

Sir,

Thank you for your messages. Once you confirm your fund 10.5million into your bank account on Monday, try to let me know and make sure that you send me your mobile number for confirmation of your fund.

Best Regards,

Mr.Frank Chukwu
Director Foreign Remittance {CBN}

from: CBN OFFICE - [email protected]
reply-to: CBN OFFICE - [email protected]

Dear Sir,

Thank you for your mail. I am very surprise to heard that you didn't receive your payment by now, we just receive mail from International Monetary Fund by 5:34pm that your payment stop by them for sum certificates which I don't about. Please if you have the certificates make sure that you send it to them, so that your fund will be release immediately into your account. I know IMF very well, because I have problem with them last five months ago for transfer. If you have the certificates try to send it to them by tomorrow and update me.

Tell the IMF that you are the original beneficiary of Ten Million Five Hundred Thousand Dollars only which you execute the contract with Federal Government of Nigeria, I have already tell my government that transfer which I did the beneficiary didn't receive any fund or if you have a good lawyer try to send him/her to the IMF office to sort it with them. I need to know the truth now if you have the certificates which IMF need from try to let me know, but you don't have it tell me now or call me +2349057605921. I need you reply urgently.

I am waiting for your urgent reply.

Best regards,

Mr.Frank Chukwu
Director Foreign Remittance {CBN}

Email from the fake IMF:

from: Carla Grasso - [email protected]

INTERNATIONAL MONITORING FUND
Room 3–106, 700 19th Street NW
Washington, DC 20431
YOUR company logo should be shown here!

Dear Sir,

Following the report from our security department regarding the transferred of fund to your account, we acted quickly by putting a stop order to the move.

The measure was essential due to non-compliance to all the necessary requirement before such amount of money is transferred. We hereby advice you to contact your facilitator for necessary compliance.we assured you that once those conditions are met, we will not waste time in lifting the ban.

you can see the full reason in the attached copy.

Sincerely Yours

Mrs. Carla Grasso
IMF Deputy Managing Director

Converted to text with OCR converter:

INTERNATIONAL MONETARY FUND
In Conjuction with the United Nations Monetary Unit
World Bank, Paris & London Clubs.
WIMBORNE BRANCH, SECTION 122B LTD 11BL 5 111, WALL STREET, NEW-YORK
Our Ref: IMF/UN/US/UK/956-16

To: CENTRAL BANK OF NIGERIA

Date: 8 August 2016

RE: IMMEDIATE STOP ORDER ON TELEGRAPHIC TRANSFER OF US$10.500,000.00.

We hereby give an immediate Stop Order on the above mentioned amount, the claim was stopped due to breach of Ilcontractual agreement between the Contractor and the Host Community. According to THE INTERNATIONAL I MONETARY FUND (IMF) with UNITED NATIONS here in United States of America/London, any fund that is clear for ecological damages must not be permitted for transfer to the beneficiary nominated account.

The said payment after due investigation was transfer from CENTRAL BANK OF NIGERIA country to the agreement made by the contractor and the host community and this is against the International Monetary Fund (IMF), United Nations and World Bank Financial Regulation, guiding against fund transfer Globally, which also contravenes section 3 iArticle 56B of the 1999 I.M.F on foreign payment allied matter.

In view of the above development, with full apology to the Management and Governing Board Of CENTRAL BANK OF NIGERIA,we wish to remind you of the consequence of transferring such huge sum of money outside the country without complying fully with the above regulation and Foreign Payment Financial Law and procedures irrespective of source of fund. The beneficiary must procure the ECOLOGICAL DAMAGES CERTIFICATE, MONEY LAUNDERING tCERTIFICATE, CONTRACT AWARD CERTIFICATE and TAX CLEARANCE CERTIFICATE- this will cost 4,450 Pounds (Four 1Thousand Four Hunderd Fifty Pounds Only). This mandatory obligation will duly guarantee and cover the transferred payment that has been legitimately acquired by the beneficiary of the fund. Be notify that the above subject matter as it relates to International Monitoring statutory financial guideline is non negotiable as the fund is ready to be transferred out of CENTRAL BANK OF NIGERIA.

Further investigation revealed that the above beneficiary has officially fulfill other obligation in respect of the above subject matter. Upon satisfactory evidence of the settlement of this mandatory fee, we shall be compelled to lift the STOP ORDER placed on your Irrevocable Fund Transfer for immediate release to your bank account.

Bear with us as your earliest response to this important matter will enable us lift the STOP ORDER placed on your transferred fund.

Thank you for your co-operation

Carla Grasso
Deputy Managing Director

STOP ORDER

from: Carla Grasso - [email protected]

INTERNATIONAL MONITORING FUND
Room 3–106, 700 19th Street NW
Washington, DC 20431
YOUR company logo should be shown here!

Dear Sir,

If you don't want to send the four certificates which we needed from you as the original beneficiary of 10.5million and you don't want to pay the amount 4,450 pounds (Four Thousand Four Hundred and fifty pounds Only) to enable your fund release to your account as the beneficiary, but if you don't want to follow our instruction and forward all the certificates which we needed from you. We received mail from His Excellency Muhammadu Buhari president of Federal Republic of Nigeria this morning and we told him that once you are the rightful beneficiary of the fund and you executed contract with Federal Government of Nigeria you have the certificates, the certificates will be send to us by you soon. We give you more three day to provide certificates as beneficiary or release the fund to charity organization.

Ecological Damages Certificate
Money Laundering certificate
Contract Award certificate
Tax Clearance Certificate

Sincerely Yours

Mrs. Carla Grasso
IMF Deputy Managing Director

They've got a new email address, [email protected]

from: Central Bank of Nigeria - [email protected]
reply-to: Central Bank of Nigeria - [email protected]

Sir,

Thank you for your messages. I just coming back from office of Babatunde Raji Fashola the Federal Minister of Power, Works about the certificates which I have already concluded everything with him, our president have contact with IMF this morning why your fund stop. Meanwhile if you don't have the certificates try to let me know, so that I will answer Babatunde Raji Fashola that you don't have it to enable him obtain certificates and give to Abubakar Malami Minister of Justice & Attorney-General to sign it.

But I didn't ask him how much the certificates will be cast you, anyway Mr. Babatunde Raji Fashola is my very good friend from school, I need to trust very well and know you. if you don't want try to let me know now and forward me all your information which I ask you. Please don't delay me. How many certificates IMF need from you and the name of certificates tell me.

Your full name:
Your address:

Best Regards,

Mr.Frank Chukwu
Director Foreign Remittance {CBN}

from: Central Bank of Nigeria - [email protected]
reply-to: Central Bank of Nigeria - [email protected]

Sir,

Thank you for your messages. I have already made the arrangement how to get the three certificates which IMF needed from you, as I told you before that I will help you to get the certificates to enable IMF don't cancel your payment or send your payment to charity organization that's why I needed the money 320pounds from you. But I don't want you to let anybody know that I help you with sum amount, if you are ready to send the money US$320 you can use this information by MoneyGram International Inc and send the money.

RECEIVED NAME: ANTHONY NWAKACHA
RECEIVED ADDRESS: ABUJA-NIGERIA
ANSWER: 1234
QUESTION: 1234

SENDER NAME:
SENDER ADDRESS:
MTCN NO:

Please try to reconfirm me your banking information again, that once will get the three certificates and send it to you. You will forward immediate to them so that your fund will be release to your bank account without any more delay again.