Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#392855 by buried under 419s Sat Aug 03, 2019 10:29 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id CMYCNJRmRV1OVQAAjbubUg
for <>; Sat, 03 Aug 2019 03:48:52 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 03 Aug 2019 03:48:52 -0700
Received: from mail-io1-f65.google.com ([209.85.166.65]:45697)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1htral-0005fd-QN
for ; Sat, 03 Aug 2019 03:48:52 -0700
Received: by mail-io1-f65.google.com with SMTP id g20so157866335ioc.12
for <>; Sat, 03 Aug 2019 03:48:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Y5RSfm/ASl71b+rOJ+Tz+NxTK6WBb3gm5FO5YDHAgZ8=;
b=DYWLVutNDomHV7CsgctPZn1rQfIRHekSO2cXUFRz0MS3N4bDvZB0vFzWE03DFEs7R4
d425i1spW5g/bBiAQE4S5ycOrRyjnjDZQ097iZ8WnSM5F54J143xr+eGVfCdIZXsncFK
6yQVPRCAr80vVmfLaE1qLpKuHtZ/br3hX1/GEx+gUfsQTHkMwthkDVEuby0APV23drya
jVHrZJuJGFfb05D9Jxueahp+hu7udRkODGoKQ3jvDhXyEUI7qbG3yQJkK53r5h7ACozi
p0A8lVg9b5CSKa2t1QoU1XRBe0IQN0jJucSpYO3TOcaYs3IFhVGucVWB0sHufXhOETwl
pshw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Y5RSfm/ASl71b+rOJ+Tz+NxTK6WBb3gm5FO5YDHAgZ8=;
b=VBn4naL7wuXKp0qSUFcM3c9JFAnaSqehEm5SKrMUQBCvpELIYYQcgldD5IL0RvDgsr
Rfqxu7t9Iy0/R0KspA4tWMEvQMiyak3Z/wGaAYF4403xfVAA0AyIJe6NOZC/Bri0VqQj
TSMAzdyvnOcHOfZoW8CwfrwPPz7coXIeS6S+7rkcz28dPuFLFhNwCj75UTwJYDcznkXf
lRk3IVXBxckmxfDady5JCB9o3MBn4su6I2NXdIIBHPR+XlTrfIEpl0zyYMWZLkGjVgJU
idcZsj6f7UBhgEWCdGrxIU6NiJl9hm1/pT4kRur5zjXCNqMWCekw4+WyVGagk78upx+f
I/Tw==
X-Gm-Message-State: APjAAAUnnZfdzjpOBfQ0b4oeJGg1a4p1h1fVRrAjb7Lq2Ih/2tlu9+wT
zg0h0k9Y7uWdfiAFKX2yfoS7+Os0MP4ySV1KY9o=
X-Google-Smtp-Source: APXvYqzQbOb0EBUmXW5rdirJK7HnZSBysk8FBtfFm/fvGGsoGbz8BupmtL7B0NC1ri0md04/vzXPCsLve1DalUiZI6A=
X-Received: by 2002:a5d:94d7:: with SMTP id y23mr14517193ior.296.1564829291258;
Sat, 03 Aug 2019 03:48:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a92:da8d:0:0:0:0:0 with HTTP; Sat, 3 Aug 2019 03:48:10 -0700 (PDT)
Reply-To: [email protected]
From: "Mrs. Aishah N, Ahmad" <[email protected]>
Date: Sat, 3 Aug 2019 03:48:10 -0700
Message-ID: <[email protected]om>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=12.5
X-Spam-Score: 125
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Central Bank of Nigeria Zaria Street, Garki II, Nigeria -
P.M.B. 0187, Garki, Abuja Tell/Fax:+234-81 35554903 Telex: 23405 REF: FINAL
PAYMENT OF $10.5M Please kindly confirm to us if you have any payment in
Nigeria or London because received today from Mr.James Wilkinson, as your
next of kin, instructing us to effect payment through your new nominated account.
[...]

Content analysis details: (12.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.166.65 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paymentofficedetails1271[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(paymentoffice337[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (paymentofficedetails1271[at]gmail.com)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 HK_SCAM No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Sir,


Central Bank of Nigeria
Zaria Street, Garki II, Nigeria - P.M.B. 0187, Garki, Abuja
Tell/Fax:+234-81 35554903
Telex: 23405


REF: FINAL PAYMENT OF $10.5M



Please kindly confirm to us if you have any payment in Nigeria or
London because received today from Mr.James Wilkinson, as your next of
kin, instructing us to effect payment through your new nominated
account.

BANQUE NATIONAL DE CANADA
540 1ST STREET IBERVILLE
QUEBEC, CANADA.
A/NO 20-181-51 TRANSIT: 04431006


Expectably, your payment will be released to your new account within
48 hours of receiving your confirmation. We shall at the same time be
sending to you, the receipt including your telex copy for onward
confirmation of your fund from our bank. This is a follow upon the
resolution reached by the WORLD BANK and IMF to intervene in the
situation and release all impending inheritance funds in this
bank,yours inclusive.


We have made effort to reach you on the telephone number presented
also by your next of kin but we are unable. Hence, we decided to reach
you via your email address. You are therefore advised,to confirm to
this office immediately you receive this letter before the transfer
would be made.

Thank you for your anticipated cooperation


Waiting for your soonest response.
Mrs. Aishah N, Ahmad
Deputy Governor,

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

#404718 by buried under 419s Fri Feb 14, 2020 9:39 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id hhu6KhGrRl6PtwEAibB4EA
(envelope-from <[email protected]>)
for <>; Fri, 14 Feb 2020 09:13:37 -0500
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 14 Feb 2020 09:13:37 -0500
Received: from sonic309-13.consmr.mail.bf2.yahoo.com ([74.6.129.123]:37843)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1j2biq-000TGS-W5
for ; Fri, 14 Feb 2020 09:13:37 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1581689575; bh=Yy3EhcfpblSRz+25mUdgla3Q48J/o1Lt2WU1iowH+QM=; h=Date:From:Reply-To:Subject:References:From:Subject; b=cMmLShYer4lTVdDcR0i/L08GIqahGzEYU+ISVjBbZtOY1X3gx/DdxC93rMJ0X/2sJgq0CUV5cAzLdtAqT8rBR6l0Nin/dSDWTo+dxVecH01o48GMBMyKo5Te9D2EAMHCSU5KzKSA2UGCWPNT1P1FnrxhGrLuPtMXIaJ3p93vuKROOE/vm9BKv2wlYWClmSz4WvuaOy+Lne7zFHxM1eWGlT/vwtk5O3CrQn7erBk+2KiyZ0HDh4lzYddtr+zOXfpUIaR9dQaYea8bv0xZ2hbHKOpncQNbqTM6kvq+maUGBx1BX5Xt+T8ENFB6+ZE/KwAONQIdYtJBQ1khNmp5O9+lIQ==
X-YMail-OSG: HTZfeJYVM1lcW281oaknYmejb617_zibrjD95IPGRNjD7gzAuJtsNtTdnoujBlu
ibvdwcSrrEuNpVYryh5nLUBNCCLE2hg9NC4H.u9_0rL7dvmqkfVqacKmx_CqjL5S55SGYZV_5j2I
ZWZ3tODkUoSV7_7wmaOiYzfiRrji9SGQ0DjKJ2NlH1Mx4BTDy2iNxui7Huls8AznSXswsYMVXPlB
A58PACNq_wml9qmDDtko59Ih0HglwEk3rKe82.4UPYC8c5hSGcXE4VqvJI.SCvEAgmfaOUQGnvxs
Ko8a7i.8m7KxBP12E66dQFd.iYOSTQvjIJpRuaTaevyXRg4nIdx3hBgSkexENZdIZjFU.eVEo_23
k84dsUFFaPC414qIlsOhO46whWiPHOpFZy44Ak5WJ86H97xmT5N1Wr7h1sD6F.3RvlyNnoFKbtRM
R8NPldm0_8hNESVDN8EBxBzTTOpdm1P7z7_vDh8HWKC_tu0iQLEffnmWDfP0L90BO9hFHyw.ojwe
bXiMyU6L0nb.2k48FfIcIjw0UQWGf3GDTUCQQmTP_Tik1gLPTjjiu7aQfAAHnjiy_MH_y8rCDnfu
mbSaEZq48YfxgzR0LN_XeMZsSFo77DcaWRer6C3TlYdpvp4JuOshwq_rlbNoFOFyatSkj9acB_1S
Hp5UkHf4AShg4bCaqOuuRM8cIvBnHZmwb0a36Pk9CpB04jrcil.WoxhBDmK7kD3WMpCFLtTzEnad
TfCMv9VMPgPIL4h4eF7aj_dAr0WkXaMYSI2hs06d_fMAXP7c_7vRadLCc0RrUkgYm4OemfSNrisz
6mC4Rn8iZGcMQclzAXrSWberV3bHhOF7rjLmpseTcF5JJPa0.cwTBgcP3wzOnM3HcC7Sfjt7f48U
IxmvCd6cYau.XndOndKs4LzniSxZIhhysoRLJzuRVgOhDZ16lupYyxPCXlJBejrNt6GYqpr5pc7.
ajdgUuzb0oY2N0xwO0vh7gFqdM3Fyr6.S74cZAXvqVSZx8ar.cbMvzTo.Cb_7p1UkWObQgoPOszE
h3L7J6oq8tM23Y_VRNU59CB.yGFzlbGzR9BbbDpSnicX57j3bnlfPt72qr6aEDyLq_cuItqwGocB
Tk6ML4UBXtsJy3.xYCKHU1BmuBwFoDnPFoIgEaSG8HDsEtxsXcj9C.n_JPwkjOnAtgaRKI5lIWMV
8ubWycXYz6Oug.BR3_SMD71oL4TTBJfxM5LfQFw0SJP0nri0HCt6rWVl4cQ4YzkXL41hTJrHAMpW
dDFYa0CtDEuDliYUCmKqWqMdVV726NMGQ0b1731RiCAGOZe4d8L_BEwc3opEPaa3ac3x_8fzrwrb
mzinQ58wt1a1gpnaufQ--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.bf2.yahoo.com with HTTP; Fri, 14 Feb 2020 14:12:55 +0000
Date: Fri, 14 Feb 2020 14:12:52 +0000 (UTC)
From: "Mr. Samuel Bwalya" <[email protected]>
Reply-To: [email protected]
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.15199 YMailNodin Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 Firefox/52.0
Content-Length: 526
X-Spam-Status: Yes, score=12.3
X-Spam-Score: 123
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir, After our meeting held today based on your funds,
the management want to bring to your notice that we are making a special
arrangement to bring your said fund by cash through diplomatic Immunity to
yo [...]
Content analysis details: (12.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[74.6.129.123 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[paymentoffice337[at]yahoo.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[paymentoffice337[at]yahoo.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[paymentoffice337[at]yahoo.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
1.5 MALFORMED_FREEMAIL Bad headers on message from free email
service
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
X-Spam-Flag: YES
Subject: ***SPAM*** Hello,

Dear Sir,

After our meeting held today based on your funds, the management want to bring to your notice that we are making a special arrangement to bring your said fund by cash through diplomatic Immunity to your country home. Further details of this arrangement will be given to you once you acknowledged this idea.

Thank you for your anticipated cooperation


Waiting for your soonest response.

Mr. Samuel Bwalya
Envoy, UN Compensation Unit Nigeria
Plot 617/618 Central Area District, Diplomatic Zone,Abuja, FCT, Nigeria

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
#410027 by FishyMails Sat May 09, 2020 7:07 pm
Reply-to: [email protected]
From: "Mr. Samuel Bwalya" <[email protected]>
Date: Sat, 09 May 2020 09:57:47 +0000
Subject: Hello,

Dear Sir,

After our meeting held today based on your funds, the management want to bring to your notice that we are making a special arrangement to bring your said fund by cash through diplomatic Immunity to your country home. Further details of this arrangement will be given to you once you acknowledged this idea.

Thank you for your anticipated cooperation


Waiting for your soonest response.

Mr. Samuel Bwalya
Envoy, UN Compensation Unit Nigeria
Plot 617/618 Central Area District, Diplomatic Zone,Abuja, FCT, Nigeria

Important: Any email messages I have posted here are scams. Don't reply to these messages or click on any links. Please do not tell these criminals that their messages are posted here.

Who is online

Users browsing this forum: Google [Bot] and 32 guests