“Bank of American”

INHERITANCE SCAM / BANK OF AMERICA PHISHING SCAM – Notice the emails say Bank of AMERICAN and not Bank of AMERICA

The emails below are from the same scammer using different identites including Bank of America – Grey Watson and Fares Noujaim to name a few. (If you type in Bank of America in the search bar to the right you will see many similar scams. However, not all of them are from this scammer but have the same tune, different script. A good majority of them are indeed Grey Watson.

From The Disk of Dr. Grey Watson
Credit/Telex Department
Bank of America New York
Broadway and 53rd Street
1680 Broadway, New York, NY 10019 
TEL:  7168103186
FAX:  7168103100 
Email: info@bankofamerican.com
Email: bankofamericannyusa@yahoo.cn
Website: www.bankofamerica.com

OUR REF: BOA/NY-USA/TTD/998/012
TELEGRAPHIC TRANSFER NOTICE. 

WE ARE HEREBY OFFICIALLY NOTIFY YOU CONCERNING YOUR FUND TELEGRAPHIC TRANSFER THROUGH OUR BANK, BANK OF AMERICA, NEW YORK, TO YOUR BANK ACCOUNT, WHICH HAS BEEN OFFICIALLY APPROVED BY THE MANAGEMENT OF WORLD BANK SWISS (WBS) TO CREDIT THE SUM OF US$18.5 MILLION INTO YOUR BANK ACCOUNT.

NOTE THAT I HAVE STARTED PROCESSING YOUR PAYMENT AND EVERY THING CONCERNING THE IMMEDIATE REMITTANCE OF YOUR FUNDS WILL BE CARRIED OUT WITHIN THE SHORTEST POSSIBLE TIME FROM THE TIME WE RECEIVED YOUR BELOW NEEDED INFORMATION. ALSO BE INFORMED THAT THE GOVERNOR OF BANK IN LONDON (BL) WILL SIGN ON YOUR PAYMENT ADVICE AND A COPY OF THE ADVICE WILL BE SENT TO THE WORLD BANK IN SWISS FOR SOME RECORD PURPOSES. 

MEANWHILE YOUR INFORMATION AND YOUR FULL CONTACT DETAILS WERE RECEIVED FROM OUR RESEARCH MANAGER, BARR. PAUL PETERSON ON YOUR BEHALF TO FRB FOR IMMEDIATE RELEASE OF YOUR FUND. THIS FUND WAS PART OF THE LODGED LATE PRESIDENT SADDAM HUSSEIN OF IRAQ DISCOVERY FUND WITH WORLD BANK OF SWITZERLAND, WHICH THE SWISS BANK HAS DECIDED TO DISTRIBUTE IT GENEROUSLY TO HELP FEW LUCKY INDIVIDUALS AND THE AMERICAN GOVERNMENT IS IN AGREEMENT WITH THE SWISS BANK TO DISTRIBUTE THE FUND TO 700 HUNDRED THOUSAND PEOPLE IN AMERICA, EUROPE AND ASIA IN OTHER TO HELP IMPROVE THEIR BUSINESSES. 

THEREFORE, RECONFIRM THE BELOW INFORMATION ACCURATELY, BECAUSE THIS OFFICE CANNOT AFFORD TO BE HELD LIABLE FOR ANY WRONG TRANSFER OF FUNDS OR LIABLE OF ANY FUND CREDITED INTO AN UNKNOWN ACCOUNT. THESE ARE THE INFORMATION WE NEEDED TO BE RECONFIRMED BY YOU. 

1. YOUR FULL NAME:
2. YOUR DIRECT CELL OR OFFICE PHONE TO REACH YOU:
3. YOUR ADDRESS OF LOCATIONS:
4. YOUR FULL BANK ACCOUNT DETAILS

FINALLY, YOU ARE REQUIRED TO RECONFIRM DIRECTLY TO ME THE ABOVE INFORMATION TO ENABLE ME USE IT TO PROCESS YOUR BILL OF PAYMENT.

YOURS FAITHFULLY, 

DR. GREY WATSON DIRECTOR
CREDIT / TELEX DEPT. 
BANK OF AMERICA , NY. USA

………………………………………………………………………………………………………………………….
This message contains confidential information and is intended for the december 2012 beneficiaries, if you are not the beneficiaries you should not disseminate, distribute, print or copy this e-mail. Please notify Bank of America, NY immediately by e-mail if you have received this e-mail in error and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secured or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Neither BOA NY nor the sender BOA Management accepts liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version

HEADER:

Return-Path: <secretary.accounts@morison.co.ke>
X-YahooFilteredBulk: 62.8.88.13
Received-SPF: none (domain of morison.co.ke does not designate permitted sender hosts)
X-YMailISG: dAJ3GzwWLDtjejOaTaQCbve6GBOw.LMAuzwYZdrcRmqjPDTc Em9m49CJl.jtBNgmduroPWHdjbbYFmx.oJ.XwjsAgl.kdvBJS6KAiyUjN0Fc _tS.PNqHsVLr0J4EKHdF3TMuT2TVm4EiImDWxlPI9nj3tS._ROZMWKqrxjwz DOPXpAwZ_68301vYzFTh_m8ui5L1LPuYjMgCNjeESpQBT5WfxqrgRFkUAInP byXj0f6sgbwe2nR.rx3YCTgb99JRuj4BBjBgAop4UIuF1ie9ITSryuKLH5vv l6ILb.j08HTmcqxld4MiiSYTYbTHCZVuL0KNRaoNRYDotlBSpC5xZCjtNd9I jP9zHPQzoavKjcQ05o.nets4d9hobsjvfnTUfn3GPubEAN4C1A_Zwh.ma94h MJwhj7a5XHOnzQ8gUDKUKNzUV1YCO5kpBHTffn6CX_QnJyDPf.Be190E98RM vYy83Hbnl0UTVRhNcRbR_eDUpdHGVsuGdpXXHtxgDmp3kd1wVjWP7Js0IZfv 7ToFCjCPZhytXUzffwjsUN4o93HxKsx_fZgJnVen8msz4IV1uxzLfBmi6kem .JiEqID0Q9JG8ss8vcln9KjqGp4kIppoZMLDH8DJvFolHVD8ZXIXnRRbumUn A853EbQ8LQIv.9O6lrfreUKLu1tBGgBh8V9n8ynGx7A2wE84MttGHWjTa00y UGv6WzipM1I0zbDwOypEOHMFDmFkIM1MuRoIGahyQAWw4K3H.pH81mkIqclg IarWC47lIsZsrUT.PktmibC8.l9xF0v4Ot0ChKVkXWK20kLL4J.dSNued7Bn 5BrmNdgxQ7WfA7CxAE0_JpCopo8j7DJoOSPt618zkeQ0XsSizYDUittU6e2Z WwJbzTo6GExRSZWusCbSa4rRW.sDRTttJ_4uHMJvXO.8ZVYaUsVC._vSoOuM sI5Q6y0yWDWar.7aJfpQunmM8iasAVcjyMva1kdIKBZ57blDNpzeXxYKszMq Gp2zg4VEGdyKtoTsZdHoDb9A2mm1pNGoBnAS6DOkZEJdRlJ8cEtsccdcOR9M sFASc9p6T.2_TU.gnxicjOw2hbloTVhSWGHccDFkP3bxnO5ZoK3GkqP2iJFt UK6b35or_MADZz5fZCXbr8ubnN1PYhYhU787ebWlQbEJ8eQX2nuxiHyxWtrJ NoHzHUIRVMKsLFFt8MEWmTMFe8g3yAjrXvbsDDJiKdKzAgv79rha.rrKn_nA fcOP6aSVIyQjw1vUg88NQitk_t.IcDMem1SXi2CambR.hPj9dVjgHzjnfYAz 4A6tmtOKR0LM1nnCRu83YzAuV9WLkQw0pRZOJlK7cZAvqEND2iKp0uOGuQTh 46RytrYMPsJQAnibh58oYaNH5lmtn6ToIzX2TmmSYrFuHjaIkh9tPfVJL.ER kNZfgjabfeYF0cFgNunZvnHjaMFhOBbbSSzFFtCtmH9Sii2b2EM5H0i0cWS. DhAo23uPbHskj6rk0OtUAEbY4tihGjekny8Az5OwpAReegY1AJuPNJJZ.iaQ qheLCoJtSjuha5uNPh_O_5ThEzSwJRNIo7yQ4tVFi5CbR0X6Z31OXsGrzIBk 81QviSGwtqnSiS3MxPh8f_Aww0Oil0Bz.jipFHjrv4EzHDNVm7_9STIv_ZH8 7EAm._bzKuJsqQB97sXv5dHhbvMw.LrtyB.8dJFXUhGjK62W3A8a3recZGa4 oD5cTAaZ0fHfxOLbmu_Qt0zr2dSMVTzGq3ZHYXThtrawZVkTjyl.BLmEwkI-
X-Originating-IP: [62.8.88.13]
Authentication-Results: mta1305.mail.gq1.yahoo.com from=morison.co.ke; domainkeys=neutral (no sig); from=morison.co.ke; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO zmta02.wananchi.com) (62.8.88.13) by mta1305.mail.gq1.yahoo.com with SMTP; Fri, 14 Dec 2012 00:46:10 -0800
Received: from localhost (localhost.localdomain [127.0.0.1]) by zmta02.wananchi.com (Postfix) with ESMTP id D7CB361842F; Fri, 14 Dec 2012 11:45:57 +0300 (EAT)
X-Virus-Scanned: amavisd-new at zmta02.wananchi.com
Received: from zmta02.wananchi.com ([127.0.0.1]) by localhost (zmta02.wananchi.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id We7kgZR8DEVQ; Fri, 14 Dec 2012 11:45:57 +0300 (EAT)
Received: from zmbs01.wananchi.com (zmbs01.wananchi.com [62.8.88.2]) by zmta02.wananchi.com (Postfix) with ESMTP id 293DC61844A; Fri, 14 Dec 2012 11:45:57 +0300 (EAT)
Date: Fri, 14 Dec 2012 11:45:57 +0300 (EAT)
From: “BANK OF AMERICA , NY. USA” <secretary.accounts@morison.co.ke>
Reply-To: “BANK OF AMERICA , NY. USA” <bankofamericannyusa@yahoo.cn>
Message-ID: <14541484.217940.1355474757065.JavaMail.root@zmbs01.wananchi.com>
Subject: DR. GREY WATSON
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Mailer: Zimbra 6.0.10_GA_2692 (zclient/6.0.10_GA_2692)

“BANK OF AMERICA , NY. USA” <secretary.accounts@morison.co.ke> REPLY-ADDRESS:  <bankofamericannyusa@yahoo.cn> (LMAO, CN? ISN’T THAT A CANADIAN ADDRESS? ALSO YAHOO IS A FREE EMAIL SERVER AND BANK OF AMERICA (NOT ‘AMERICAN’) WOULD HAVE AN ACTUAL DOMAIN)

RETURN-PATH: secretary.accounts@morison.co.ke

X-YAHOO-FILTER-BULK: 62.8.88.13

PHONE +7168103186
FAX: 7168103100

____________________________________________

Same scammer sent October, 2012 email which read:

Subject: From The Desk of: Mr. Fares D. Noujaim.

EMAIL: From The Desk of: Mr. Fares D. Noujaim.
Bank of America
Credit / Telex Department.
Branch Offices New York
1680 Broadway, New York ,
NY 10019 , USA.
Email: newyorkbankofamerica@yahoo.cn
Attn: The Beneficiary,
TELEGRAPHIC TRANSFER NOTICE.

Message : Payment Notification.

We are hereby officially notify you concerning your fund telegraphic Transfer through our bank, Bank of America, New York, to your bank account, which has been officially approved by the management of World Bank Swiss (WBS) to credit the sum of US$18.5 Million into your bank account.

Note that I have started processing your payment and every thing concerning the immediate remittance of your funds will be carried out within the shortest possible time from the time we received your? Below needed information.

Also be informed that the Governor of Bank in London (BL) will sign on your payment advice and a copy of the advice will be sent to the World Bank in Swiss for some record purposes. Meanwhile your information and your full contact details were received from our research manager, Barr. Paul Peterson on your behalf to FRB for immediate release of your fund.

This fund was part of the lodged Late President Saddam Hussein of Iraq discovery fund with World Bank of Switzerland, which the Swiss Bank has decided to distribute it generously to help few lucky individuals and the American Government is in agreement with the Swiss Bank to distribute the fund to 700 hundred thousand people in America, Europe & Asia in other to help improve their businesses.

Therefore, reconfirm the aforesaid information accurately, because this office cannot afford to be held liable for any wrong
transfer of funds or liable of any fund credited into an unknown account.

These are the information we needed to be reconfirmed by you.

1.Your Full Bank Account Details,
2 your credit card informations
3.Your Direct Cell or office phone to reach you
4.Your address of locations
5.Your full name
6. Your age and current occupation
7. Attach copy of your identification

Finally, you are required to reconfirm directly to me the above information to enable me use it to process your bill of payment.

Your quick response shall be mostly appreciated; all your response should be directed through our alternative email address for the immediate attention of the credit control department.

Yours Faithfully,
Mr. Fares D. Noujaim.
Vice Chairman, Director, Credit /Telex Department

HEADER:

Return-Path: <red4x4tj@yahoo.com>
X-YahooFilteredBulk: 98.138.91.133
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: ogG_RmkWLDsdJzdaLD5TVzasVyw0jkyXljV09emY4wthK8R4 VUt2KW0yLJJwMRY_WJ8uWA2_UGptyqA0qPx2RVx.Nk4q0Z8Q9dzILrvsvuCT 2mdtr8peRuvvKdsy3GZe.kuA1K6nmnd5NcV.9gtEFfdb7LGVJ7aVOTEC3Fuo x850QLD9kOsUv.a79OR295NokLwGmADoV7hO5RW606.L39LzkmIIHwEh9A3H pqCOg22DXkvjKq7kEoZJ62bUMuCcM5n8AWyc0A02Xu4EzmJ2d0RyTLqbZuUV Gqhk8eKadFeZf2oWPhlnWgWPPnuGkX1m2kPjwkVf40tVOLnHqegowVaQ85Oj 1O.BGbnqHAPhjDO2h3q03IG1Sc3FcExdSuWgThaM7R3F4YUz_lmHzz2p9Jtk nEU15SUGqH0h964ueZQj.T2JlIXJqOl.uIRttYKzsFbcQFUXp6F1RLI3chvp xDLybpxU_1B3yZyWeUItZKwfp_1yrOcCL2IN4tFvKXmzOatICuZKuNMfwvGy dFVB8mN_XriEopPJXXyViFHVtxwSHgX81xCtIE8cTjkaDMtP.5aze7FfRPxG vEs55IE_uCzIwfo2.U2WD6CGkj.Ai9lkMF6RDHCrTf93D9EdDAuTItBYjymx 4G8RpmEPHksvL8otufPSLBK1sRI_dEqa2KFOJejYgLo9de6JjRKYm.UL1StM dahqqB8aJ63Bxtj2pDhH3z17VpHK5YbtkEcAZGTF1LR1PHeKrUlESBZ.ZboI wXoCSZWbQQEO1x.EDSnBOiA0yHM3aVvmTvisCjSbgWf3PUWaFsc6CgpzaS8R y6O3Rz5LBxq1QOLVsr0Cdx4ZxJ4GqZ9re._KLch1JRQLsAY6hz5kq8cZxWY2 J8oxgOf17HS.TASBo_9dRsTB8nm1gy.cwqY9t1SS6eN_VpQ3Fu9t0d07EZEY ffKLK12JkcNJWu8.zO_8I3oFubtNVRgrToReJd4MzY_mWSG6wU2tPZCTg29A Mj.UoD37EcIwI7prtHvYqBuVAWmzyUpkpbTTapFS7fCBxZ2TuxX6fe5F6F0B ehYMYerwSXeC8bCxuYlqS6j7E8PbHjE6i6O2ctJ3Dgdk6m7j2a6QepRcnNF2 ZCLa2WxBrmany60jm3xtAhMPJlrsI81_4cVjfeHUjcy7zYA-
X-Originating-IP: [98.138.91.133]
Authentication-Results: mta1086.mail.ac4.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm3-vm3.bullet.mail.ne1.yahoo.com) (98.138.91.133) by mta1086.mail.ac4.yahoo.com with SMTP; Thu, 18 Oct 2012 13:55:18 -0700
Received: from [98.138.226.176] by nm3.bullet.mail.ne1.yahoo.com with NNFMP; 18 Oct 2012 20:51:26 -0000
Received: from [98.138.89.164] by tm11.bullet.mail.ne1.yahoo.com with NNFMP; 18 Oct 2012 20:51:26 -0000
Received: from [127.0.0.1] by omp1020.mail.ne1.yahoo.com with NNFMP; 18 Oct 2012 20:51:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 645622.25315.bm@omp1020.mail.ne1.yahoo.com
Received: (qmail 63701 invoked by uid 60001); 18 Oct 2012 20:51:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1350593486; bh=yBtnjaiWeYOE5RQ50I+Jxj3iBql9iXGu7yfN9Fcevbk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=HCsRMRtBcDJMkXGyyL0JSscsIwfb5UBc0d/M1nbihtz5vvAGuHYto0Azu0CmPa+Anwki2qGHIF9AAwmeqq9fPEJ7NyoJWkGE6voaSnQfzZ6yd+vk3b71hChJXsJ7pGdKM3/dUDj1a94IwcZ8tQkQNqXEf5fKxXga3Ha/H3eoyVw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=DhCGl7ZC8W3mIO+A57e82UYLmd7E98KSEZqnYZpY0CGWD4x2xQSsKvCosVDSlthnxLJPJlUlHOWdPJGwCpQTvsJQzifqR3FkavmSdliqa+w2KJh6vu051bRPgUBtnX26NMCzqP1F4SHb86iI3xBZVXs2YQovd2s/yXk+LAiGQ3Q=;
X-YMail-OSG: HzHu1ZIVM1knnTpp_zcq7im3uitXq85xgd_su5Gus9BHHeo eY4TRDVkz
Received: from [41.206.84.120] by web121706.mail.ne1.yahoo.com via HTTP; Thu, 18 Oct 2012 13:51:26 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1350593486.57723.YahooMailClassic@web121706.mail.ne1.yahoo.com>
Date: Thu, 18 Oct 2012 13:51:26 -0700 (PDT)
From: Bank of America <red4x4tj@yahoo.com>
Reply-To: newyorkbankofamerica@yahoo.cn
Subject: From The Desk of: Mr. Fares D. Noujaim.

41.206.84.120

FROM: “Bank of America” <red4x4tj@yahoo.com> red4x4tj@yahoo.com

newyorkbankofamerica@yahoo.com

_____________________

RECEIVED-IP: 62.8.88.2 by zmbs01.wananchi.com

Other scam addresses who’ve sent mail using the same receiving IP information

62.8.65.11 aptilo.wananchi.com

41.212.2.11 by plato.wananchi.com
2 Blocked in:
bl.spamcop.net
sbl.spamhaus.org
Poor

41.212.18.30 by wananchi.com
Blocked in:
pbl.spamhaus.org
Poor
41.212.32.10
eng.wananchi.com
Blocked in:
pbl.spamhaus.org
Poor