RSS

Tag Archives: 172.29.104.4

“Mr. Stephen Fred”

LOTTERY SCAM – FBI IMPOSTER – ATM CARD MONEY TRANSFER – FRAUD

CLICK HERE for an earlier post which lists two more emails and headers of Stephen Fred

UPDATED RESPONSE FROM STEPHEN FRED RECEIVED ON 12/27/12 (below) — Also, check all headers, because you’ll notice different IP addresses being used with each email he sends.

12/27/12 EMAIL: Dear Friend

We are writing you to inform you that someone came to our office claiming that he is your Next of Kin and wants to claim your ATM CARD which is in our custody, for he said that you just died of a deadly diseases, we from the Finance House keeping your ATM CARD worth US$3.5 MILLION UNITED STATE DOLLAR can’t just release the ATM CARD to him because we should have received a call from a member of your family or you could have stated this to us since you have failed to pay just the sum of US$180 for the delivery and insurance fee. When he said he wanted to claim your ATM CARD despite your inability to respond back to us and that he was willing to pay the sum of $180USD for the delivery and insurance fee, the Board members were so skeptical about this and has asked me to contact you once again to know if you are still alive and to know if he is trying to steal your money from us.

Do get back to us if you are still there so that we will not foolishly handover your ATM CARD to someone else who claims to be your next of Kin. We will be glad to send you your ATM CARD iF you are still there so that we can arrest this person who says he is from your family.

Your response will make a difference and sort this out. This will be best if you are alive and if you are dead , we want who ever that receives this mail , to have a Rest in peace and we are going to have a change of ownership to the next of Kin.

Regards,
Mr Stephen Fred

_________________________________________________

12/19/12 EMAIL: Dear:

Thanks for emailing us, i pray this email gets to you in good state of mind.

First of all i want you to understand that this email you are about you read is directly from the F.B.I (Federal Bureau of Investigation) Office, so that is why i will appreciate it if you pay attention to what ever in have to say to you.

Am Mr. Stephen Mark the new correspondent delivery officer who is in charge of making sure your funds gets to you right at your door front, and am assuring you that this no scam, this is my profession for the past 25 years.Transferring money to people who are been compensated by the FBI round the world.

If you will like to know! your email address was gotten by the FBI last week after passing out an investigation on a fraudster here in Africa, and your email address was among the emails of those that has been scammed by this heartless fraudster, so after series of meetings has been made with the secretary general of the United Nations Organization and the FBI they have come to a final conclusion to release the sum of$150,000,000,000 MILLION USD to the scammed victims.

The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes.Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?
ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2016. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks June 2012 you save $285 Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24 hours after the receipt of payment has been confirmed.

You are advised to contact me with the information’s as stated below:

Your full Name..
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

I await your immediate reply so as to move ahead with the delivery of your funds to your door front in the next 24 hours.

Best Regards:
Mr Stephen Mark
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

12/19/12 HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
X-YahooFilteredBulk: 77.238.189.196
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: miz.PSkWLDvm8OHiL48MwW7HgCGZcY9wyYfPB0bWgcwKjEva TQwyGMTEfGBukWTJXp6K3_lMdOr8o3lm7TXrmPoc4SYUT3RVw6rGmRAryrmR vzFdPJ7nWMn8LKQrp74PYAgJV4aKVfzqyjt6AWzoohYTZOMagwlgMOTaPzTw rGipFSZ5Eobv4U_GlaNlE_77Ddk6T98GFT9V.aLJnAc0Ph4j3q6vJfarMtOQ NrJ0NJrxpVmlky589fuZQPic.EkeCD30o7kG6qwUIV44GPS5N2hb9u3CnUKO Idl.D9s3x8My32Vjz8f8SthSPf2bIAF159pdZwtc98SBOvRla.GQlOJ_qc1g BVwFqn5SUVXM9a5hmQj.BXKYJuCZuxSquLjVxtHH1rBh9EGqnA09aSKtoHSH bKbHNSkq6SkKdYfbF6ymr7Xg546oVhvmCv37ZGcxagiSNzoXXOrMTZgeQvdn LUhuKcL3GG1fQFdFazm82hezg0qQk7RdFP5xxpsuNTPgXrIUDMpFXjcjiQX. 56SsbW2xWvtdWS4tKKkLwaoVOEBhN8oFDaAjWHad_O77JiouWVwI9UZVRnsb epl8cLnKbZF6ir3kuH5sRj17HH1TFrTI_Yn0ON8OGQMcql6xsFmzGVuDmNVU 9NzXr3WX4wwnq1eIKU7Rlrf0i4MYsNZGO5VNVHNJ_lscTQGsyOd8Qb5ZQn4T 3GuOsvDM_mbrBpHu79D8ihDJ4z9GyDjWZAWAwent8y9HXlBijC8p9BCkVvz9 7bsWQfsNlFjIjrBa_msrlpK1AcwxQ3thkIw8XJ7ZZg7WO9VyRxTxOOVVzkqe quk8zEmWht_j_AFgtqjtBshl1ZBXWvjnUy7EbyyXzurKVIEFwtDGX8PDfX0i nhenxR8A.Cc4Tx6lAc3WrDHC_nhTnCdkdOu4QoHc2YAhQLsnDHrVNu1A5I8s BdFXnu5qPsLugzcNIIcjqcV3jdGpTvem9lKvB.26V8q9QxjHW6kAc7QhiRCj oTNYV1SlvAJcZuT8K8NAnkkB87v1nGfSSlVMpObPRdAUF85rgPEzQxr.WC4v _lVsNv_bFAENAGxZQEUa5peHi9bk3SUoYl839PLfNH42AWyqw.r.uEDGgYgt YVf3htF6YiWLWvMqeK0vFhXSbGSUeNWQejxn4bLX4hKc7dcNPN2X4lxDHV4Z TtgqG4qSWGI0T31Ja328K7tD0tv.6MoNpwNtC7rR_ZYySGuxBSy65pYmhzn7 fD5hzdiIiAums7aVzssL3et4ky6.RBgIHcG4CxHLGTeA6UnT.gF7oZRWMY8b 4efHUmr2._obPGoTIsNZrbXF0k5iLpTUAKgu_6ZfsR_ayUUr8XC.Y7JvnlGf Qj7GhkHo12CIBoSS2qKhAFSH9vHhX0Xx86FPWuv84Dun4Hw-
X-Originating-IP: [77.238.189.196]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm0.bullet.mail.ird.yahoo.com) (77.238.189.196) by mta1299.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:48:41 -0800
Received: from [77.238.189.232] by nm12.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [212.82.108.126] by tm13.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [127.0.0.1] by omp1035.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 955255.21914.bm@omp1035.mail.ird.yahoo.com
Received: (qmail 872 invoked by uid 60001); 18 Dec 2012 19:48:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355860117; bh=8wr5+nuRl/ns3gTGRezUcxkLMAwD+/aKdXnRIi6o6TY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6oJFhfa3p393I0xyrjhWQkUUjMFtdPImK5K243mP8aw2j2Ggo3ikcPl1+eRnjxs7VpIY5Mz0F5DSU0EE/k/BweIBKvdlUq2Lri6CqF4vqu2RlNRlEilW5g8O1z5wLje7bh7lo9Al99Bl2UQ+o+5LRnSqsydSUBCepF1X9HSMiX4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=cxaqwhvwCd3wwPtAVfKDnME1KkqzhntFJbBJXbDovmDNwyaVmX+FfJ2NhERfEIIpGd4n8o4ciZPL7kvjkyGgXsmTH1riWPjOmGcRURgnnscU5QMg64kJTobNnMXFiA8qhYFfLrHWgNE6qkx0mpKBiGQCJ6+MIiFbgBmp2v1SV7s=;
X-YMail-OSG: BjMYFAMVM1mnis_308ZVtMLR8Q8RKjoBERe2MAKplDV68cK RggpmS3_GIfS.MlTnm3NSn4KH2I7R1Pw8szBwplBfRNwRJe8f9qo0KvFmbIa XNyfXRa3a.3CF_.LzUvsypRymwmrvV2iaeh_kvvwQpu6zyZ1XZ6FIsJfkpYg TLvlzNdVM3ET7UUGV.zw8Qp8J.Toaem6Caq3aLMS.eA.BQfMs0UJTlPt6wUd mQRAWgRagh1QXMK1QVys_1Xj1NJ.bhuSPOXPhUTRSuN37VSXzysseRAnOvEq v9pWabsobdmSltAtLZbMm2NBz9OQMCID1e8Prxaa.vZQLIckB8OdFabnmGqG cPs.6D04GXE_gwrx2SRP3lTHI2TZFEOmJKHiPu0fRVZ0Iwyo0drq_UXofLZi CeWryBPYEBpAIZSPRIVnfB_TfD74keU.3FCnK.xFQiVraI7XdRsQxC9ffPg- –
Received: from [87.248.115.210] by web171905.mail.ir2.yahoo.com via HTTP; Tue, 18 Dec 2012 19:48:37 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar> <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>
Message-ID: <1355860117.783.YahooMailNeo@web171905.mail.ir2.yahoo.com>
Date: Tue, 18 Dec 2012 19:48:37 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
In-Reply-To: <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 87.248.115.210 — 77.238.189.196  mr.stephenfred@yahoo.dk Stephen Fred also sends out scam mail under: vikhadd068@aol.com – albanesi@dmghost.dmg-hosting.com.ar – 64.12.227.42 – 172.29.96.160 – 172.29.104.4 – 200.58.125.17

_____________________________________-

12/27/12 HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) bSB5b3UgdGhhdCBzb21lb25lIGNhbWUgdG8gb3VyIG9mZmljZSBjbGFpbWlu ZyB0aGF0IGhlIGlzIHlvdXIgTmV4dCBvZiBLaW4gYW5kIHdhbnRzIHRvIGNs YWltIHlvdXIgQVRNIENBUkQgd2hpY2ggaXMgaW4gb3VyIGN1c3RvZHksIGZv ciBoZSBzYWlkIHRoYXQgeW91IGp1c3QgZGllZCBvZiBhIGRlYWRseSBkaXNl YXNlcywgd2UgZnJvbSB0aGUgRmluYW5jZSBIb3VzZSBrZWVwaQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzk-
X-YMailISG: L0eJ1l0WLDsrmzhsNc4ma_ZTXhvmHQ2AKw1S.hbjK7f0cFYW 9CyYcBU7kl_AGjll0mshaAP10b6HHWwmyr9NHIlVfiz7naOArbwf87HAw5k3 9ZezwwxiQSn4Lh.0FELX.Gv7N9cLWGfm7FzsbwAHegFAuQ0MKWAVoejRLT4h Mva1W4NkDaUXxkm7lo6wQpYGPnrh1K29QdN7hMvxGaW3l828rdEa8u7R8tSF P4hN0LiGmfNFwx6QzZuEf6A2NwhmTwMxG9LGWort8xV0_dR.OhnQJhmjuBsc 9oIinp2hK1fR6VBZJthF5_gO2Ec_LX4HyhlnJbJtts4p8lgQTMe7REbczek3 JiKVpW7iC3Dl0cJmqyvbbaKQv_d6aYyCdG44SAiKQgTmIL6Q7kOxmbX5E9oX VHkWJ_n0X.iXcwGRTEKSP3N9Db.XTjTantv3oyhi4UKKjHCgO9L3K48vqx.y lykB.B__.iVEcJGgz2YelmZhbBJNrlsIo7PxJEUxWEzxTZXrAZwV5WM1ED12 7in.6D0uDbboS5zNAKWDInTs4lGmB48ZR_SPDK_.8iJUyJcPBLptswWDIfVy SG3KXeDQEq_gRLrZJQu.GvdtTETqw6J9MoijRpq50_OqvaiigEPjEVGea1.i 2NV5sTGYsiQuUkTJ0EwtBLKGaOcnFciopJ6uqRPA06N_bjwNg6bwirsb0.Pw TyM8CwA3kUeNU0ZAsAcZzlcdl56wTn12drIQyW0n7OP7S0lSvMdiuaGC_j4a NxJSv42fKw4LYMQO5OIPzV78fRppt9C0BSUplNoqZVt8Izbpi88gTHeIPbBd Zyb2SDqGMH9jiwZ5bWrrFCbgYSwl3tQfxosaZFrdf0OIQo901XDPItNnBGln b1o9tF_x8WLFMysnHJKkFaC0Duf0SBaJm4aHuia8YORRHroLa5yXpeLS6y59 WEFMio5sBul0wafKisJEVvqNHjXqzbAzfaehELW1CGdGkLU24xPfHgSA8vxA eqXvjzr7To3C8EkjD5lUYc3NBvtTlqALkVn68dQdQsag6x7JLFNcdac7JGMv oNECu157ZIvAfMtLBOV0OvC9nLIefLT0g_J8jUItQ32lvNCyl.D_2YSwpccJ AcP9rORLXX_lWEayqQq_5nrNbRCCqVtfXVRUQQYwP1bRTvXisvVzpPt1c73S 3bqDK_hTagtrLh9ePwchtdyyMd6EzPV4QOu3aFqkRTm57XswMGOlt7oqZhqk wio.Ss9vFlZffudcNSzbJyVIkseXhkuln9rOZe0MJ14LXV3wBx49OW5XVvPX AIb6lHsnsSEfOQ_EyOiYrvmr6M.zA9MjVNS6ciGoAjDICt35c..p9yBcEx3C IJWyVUBwpr9ahbKgag9UyARGPO52F2gQuE1UmZTpda31lkajMG.ABKRPfA9O 75Kr9w–
X-Originating-IP: [77.238.189.68]
Authentication-Results: mta1014.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ird.yahoo.com) (77.238.189.68) by mta1014.mail.ac4.yahoo.com with SMTP; Thu, 27 Dec 2012 14:37:06 -0800
Received: from [77.238.189.230] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [212.82.108.112] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [127.0.0.1] by omp1021.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 965884.6310.bm@omp1021.mail.ird.yahoo.com
Received: (qmail 43155 invoked by uid 60001); 27 Dec 2012 22:37:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1356647823; bh=1SbVX8ahIFjSZR3xschcHhVMo6cKx+s+O0qsgJDfn88=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=ku28W2L4rzibEW8KJtxQ8GYY3RM9A2ysRyCDI2Gln9rf6xXk1lWOnKtbTMIIJazEsPbkuoYGbW5QhPyb8stsKii95Pitv0qXFms/i/j3yu6f20ZJk1yqJYZFu8o4FHUd/rIZOrSxXgO0hP0Tv0Z0ohOWTbhm6KDmDemVNqUgwOE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=SwE6kjNZXtdDz4oisXUvfUkWuvKIwQMtTjCPaUvGZX1g+a1kloixYRBnYnLpM10PHrqlXbp5P0n/Q2fnRYk8ADDaUInNU0wJw5TF7LxaejP592OppJq8wF4GzljgrEKqR4d/FwgPUcycDjnS/pJ9NWMfoCNj1KQaXv0nnjMn3aE=;
X-YMail-OSG: a7CZw8EVM1nb9WgP6LjiWSeVEjNQvjeH9d6HH4HQwVNgho2 Yo454QVEoYdNFuzr.uK.l3dR3Cv.Dsa8amnGZAj6ylZn9ciNvp.JGiOuMA7O kMzUr2COJi5oHfEhJxsNrnx3l67pCUj0kES.IcUPALk66ryXMPiPelATHZjW jheZwLOczwYgem_oZGZkyfJwUyo54l8hkyLUvt4BJ.Linr5MnYn80kleDkbf x72B5ccMKFq.hc4SMdXR1tjKas2_SlDVr4gflKAbKC8PZy7gtgYi_QCSTJSn sbBawKc1HjL.YEEtHJ8tbpi6gNjrqAgc7lPL3QeJctjTZR6G.3FH3TOPgPFn DUQovSsYQbJDEiEZXrLOScPlRVX_gjEW.73r5k7Mwt8RS1Bh6fZB1JvsxGd_ 7D9fNBLRoecCPHV6kyertDGeUXXUPI4ScTmPDrLXwFuzNM5uGL8t3Osvfrw- –
Received: from [41.138.184.157] by web171905.mail.ir2.yahoo.com via HTTP; Thu, 27 Dec 2012 22:37:03 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356647823.42332.YahooMailClassic@web171905.mail.ir2.yahoo.com>
Date: Thu, 27 Dec 2012 22:37:03 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: SEASONS GREETINGS——-PLEASE GET BACK TO US IMMEDIATELY!
Content-Type: multipart/alternative; boundary=”1200650283-1721883567-1356647823=:42332″

41.138.184.157 >< 77.238.189.68

Advertisements
 
Leave a comment

Posted by on 12/19/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

ATM CARD MONEY TRANSFER & COUNTERFEIT CHECK SCAM – NIGERIAN 419 SCAMMER

There are two email’s and two headers below. The first email and header was published on scammer419 Yesterday 12/17/12 – the second was published today (12/18/12) — Same scammer using different addresses and IP addresses.

EMAIL #1 –

TO: 4thekids1234@gmail.com, jlpurtee1218@yahoo.com, lschum6@aol.com, vikhadd068@aol.com, childcare4yours@gmail.com, jessicaspitler@hotmail.com, monkeyforthezoo@yahoo.com, angelinahudak@gmail.com, bruces_lil_sis@yahoo.com, pmiller140@woh.rr.com, chelli4dottogo@yahoo.com, shannonschapiro@yahoo.com mschutt5@woh.rr.com, phillips.april@ymail.com, ticktockclocking@gmail.com, aprilsplayhouse@att.net, lrichards7@cfl.rr.com, rosa8485@gmail.com, mommyme0107@yahoo.com, armstrongcare1@yahoo.com, albart@bellsouth.net, new.horizons322@att.net, thebestsweep@yahoo.com, missalisha08@ymail.com, dezy2224@yahoo.com, morgragedanielle@yahoo.com, joanna.sweet@hotmail.com, adenelly@aol.com, pratherjck3@aol.com, camillephlps@yahoo.com, cs09jedq@yahoo.com, baby_pmpn@yahoo.com, kmiller182@cfl.rr.com, kayladaniels90@yahoo.com, lisaconradi@gmail.com, confidence07011996@live.com, poncallinfo@gmail.com, myfamof3@gmail.com, kjg36@comcast.net, missrosesdaycare@yahoo.com, cooljet6@yahoo.com, anged98@yahoo.com, cowboydad75@gmail.com, crawbox08@gmail.com, sacpr210@yahoo.com, khusfelt1991@yahoo.com, dskupien@delawaresafetycouncil.org, primaryyears@aol.com, kidz1st@gmail.com, bonclaude1@aol.com, millerv25@gmail.com, krosieone@aol.com, poohcc07@aol.com, ironhilldaycare1@yahoo.com, bangelique95@gmail.com, truruler@yahoo.com, denisedr54@comcast.net, sromasko@verizon.net, portiabusaitis@gmail.com, portiabusaitis@comcast.net, dawnschafferman@comcast.net, elevatedplaceslearningcenter@gmail.com, gerlacht00@comcast.net, melissalee1209@hotmail.com, valdave@comcast.net, rgoo135623@aol.com, baybeesteps@msn.com, rhino_07@comcast.net, mseekids@yahoo.com, faithshouse@live.com, jeanneflynn59@gmail.com, rachel_vigil@yahoo.com, gspederson55@q.com, ptrcgzmn@yahoo.com, thomasjohn1088@gmail.com, earlybirddaycare@gmail.com, sabrinareiman@yahoo.com, letmcg@ymail.com, brandon.carson25@yahoo.com, christinamauro23@msn.com, katielewnard123@hotmail.com, porkyexposed@yahoo.com, mgfbower07@gmail.com, lonniejbeard@hotmail.com, aklittle0102@aol.com, jennywarn@live.com, leyadewey122@gmail.com, neen062964@hotmail.com, info@need-a-nanny.com, dork_britt@yahoo.com, tinytots80123@yahoo.com, caycestaubin@yahoo.com, ivana331@gmail.com, tstots@hotmail.com, bballvarsitygirl@gmail.com, alwaysforhim2@gmail.com, degutii@msn.com, tiffjowilliams@gmail.com, patriciacallan@msn.com

FROM: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>

SUBJECT: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: Federal Bureau of Investigation Anti-Terrorist And Monitory Crime Division. Federal Bureau Of Investigation. J.Edgar.Hoover Building Washington Dc Customers Service Hours / Monday To Saturday Office Hours Monday to Saturday: Dear Beneficiary, Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3days ago. It is obvious that you have not received your fund which is to the tune of $3.5Million due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?

ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2015. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks Dec 2012 you save $285

Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24hrs after the receipt of payment has been confirmed.

Note: Everything has been taken care of by the Federal Government of Nigeria, The United Nation and also the FBI and including taxes, custom paper and clearance duty so all you will ever need to pay is $180.

DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $420 but because UPS have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $420 to $180 nothing more and no hidden fees of any sort!

To effect the release of your fund valued at $3.5Million us dollars you are advised to contact our correspondent in Africa the delivery officer Mr Stephen Fred with the information below, Name:Mr Stephen Fred Email:mr.stephenfred@yahoo.dk You are advised to contact him with the information’s as stated below:

Your full Name.. Your Address:….. Home/Cell Phone:…….. Preferred Payment Method (ATM / Cashier Check)

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for shipping. And make sure that you keep the receipt of the $180payment that you made because that is the prove you will show to the delivery team when they arrive at your door step with your package of delivery

Yours sincerely, Miss Donna Gwen FEDERAL BUREAU OF INVESTIGATION UNITED STATES DEPARTMENT OF JUSTICE WASHINGTON, D.C. 20535

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with Mr Stephen Fred of the ATM CARD CENTER who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.

HEADER:

Return-Path: <albanesi@dmghost.dmg-hosting.com.ar>
X-YahooFilteredBulk: 200.58.125.17
Received-SPF: none (domain of dmghost.dmg-hosting.com.ar does not designate permitted sender hosts)
X-YMailISG: G4vRLFYWLDtBXE2mxgWetbgPe68s2c_J4Sy1u3QrHo_wMTq2 7ltguaR_7OqUckxfw_6vp2Lr1Jg7Eu.nS2bLDg6fo4oYGP7MTDSxe12a7pKp vDuNtWg442ZrtozAbb4qwjv9yjVKzjc3q6SUJC3ROeRuYcRhx4ZTHNEwa9dJ RRunFvOz3W.7zc.2.2cpeXIR1pV74p_qpVqC3m7H8mdBoPRVTOHo4yAvFEyq HBGagGWmoRoWFUM6WeZcFGLRRd9yG4M2adkg0pGcbx9auO2ojmtRX.d4awpI tNrecy67Vucu5czgWkng.ADegJxE6eNLDqWhXtM8r1A7O_E267YruDaoRxO6 _sIUXJPaS8LB26kJPkafbJgK7Q9bXgF9ll5Efh6DIfA71GiZ_BFxWhGrotmy _KZxe6vxBpdwxzK0Rxlr8WrNY0QZMLOp0hD28W3sC.84e3mVvDE1o89.CZ5h 9jg8M2nfaP2qu3nHGA54gPG1P9JZx9oasJlLQdjhkEP6ND1NMGwvMf48kGMY 3mnmKiJxTzCRP42tdS7Y8Ho32JKgSZ3qE_UtRHNqJnXY6nt4cEAR35W0rrKt Rxajt4Z12QQVP6ynOi0a9qX6gOBgqHI0ImNxtkZaeznZBDB94jKQgd6rsgsf F.xd9S3BVrxw5c_tcsF2ZfpH5vlPphmuFtr.6wHtqPTbo1WcAAW3TzAVQgd5 P1qNkbouaz9T_2LDTBLWIumE0eZYfRwlzjApSWZq5xN7T443jat0wR.gnq8Y dJGDz8sxqmnuHdASS5COEyfmLADo5GME9Hr1nFYnYoUc9gMY6EgDUlovdax2 JWSXg640Sl6p_WEGbvRpunnYfKhxouArjEiZxy2c4lMKAGhYcq0JrGub358H ai9FMNMHAkRnf4b18ttxSIYK5obMdAtyW.Vw4jaqgXYO540R_KQljdv7peAg k9p124LIGZdkN7S_XKaNsg3O.ey154tsrBwhl14kTdz57ZxzNc7niAYFQF1V VUTONPpN4iNZT_t8.LcVzBcHhSjrqoWJ2SMpE28MH6cyiV8IsUDbddT1YIcM iZAV58stob2h.JyLctYJZ.g5G.VYjJubKffjKBTkHbCYZ1wNzGE8sWDDIJwo eRX04Jtt4F13ZI2AARhKdrG8DAr2NSIhIUoWXKs.qbgWrQgZleThlG8O6OOT G1avOrcRyDcNaaQxG32I
X-Originating-IP: [200.58.125.17]
Authentication-Results: mta1317.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dmghost.dmg-hosting.com.ar) (200.58.125.17) by mta1317.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:44:35 -0800
Received: from albanesi by dmghost.dmg-hosting.com.ar with local (Exim 4.71) (envelope-from <albanesi@dmghost.dmg-hosting.com.ar>) id 1Tkafo-0004nX-Uf; Mon, 17 Dec 2012 10:24:00 -0300
Date: Mon, 17 Dec 2012 10:24:00 -0300
Message-Id: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar>
To: 4thekids1234@gmail.com,jlpurtee1218@yahoo.com,lschum6@aol.com,vikhadd068@aol.com,childcare4yours@gmail.com,jessicaspitler@hotmail.com,monkeyforthezoo@yahoo.com,angelinahudak@gmail.com,bruces_lil_sis@yahoo.com,pmiller140@woh.rr.com,chelli4dottogo@yahoo.com,shannonschapiro@yahoo.com,mschutt5@woh.rr.com,phillips.april@ymail.com,ticktockclocking@gmail.com,aprilsplayhouse@att.net,lrichards7@cfl.rr.com,rosa8485@gmail.com,mommyme0107@yahoo.com,armstrongcare1@yahoo.com,albart@bellsouth.net,new.horizons322@att.net,thebestsweep@yahoo.com,missalisha08@ymail.com,dezy2224@yahoo.com,morgragedanielle@yahoo.com,joanna.sweet@hotmail.com,adenelly@aol.com,pratherjck3@aol.com,camillephlps@yahoo.com,cs09jedq@yahoo.com,baby_pmpn@yahoo.com,kmiller182@cfl.rr.com,kayladaniels90@yahoo.com,lisaconradi@gmail.com,confidence07011996@live.com,poncallinfo@gmail.com,myfamof3@gmail.com,kjg36@comcast.net,missrosesdaycare@yahoo.com,cooljet6@yahoo.com,anged98@yahoo.com,cowboydad75@gmail.com,crawbox08@gmail.com,sacpr210@yahoo.com,khusfelt1991@yahoo.com,dskupien@delawaresafetycouncil.org,primaryyears@aol.com,kidz1st@gmail.com,bonclaude1@aol.com,millerv25@gmail.com,krosieone@aol.com,poohcc07@aol.com,ironhilldaycare1@yahoo.com,bangelique95@gmail.com,truruler@yahoo.com,denisedr54@comcast.net,sromasko@verizon.net,portiabusaitis@gmail.com,portiabusaitis@comcast.net,dawnschafferman@comcast.net,elevatedplaceslearningcenter@gmail.com,gerlacht00@comcast.net,melissalee1209@hotmail.com,valdave@comcast.net,rgoo135623@aol.com,baybeesteps@msn.com,rhino_07@comcast.net,mseekids@yahoo.com,faithshouse@live.com,jeanneflynn59@gmail.com,rachel_vigil@yahoo.com,gspederson55@q.com,ptrcgzmn@yahoo.com,thomasjohn1088@gmail.com,earlybirddaycare@gmail.com,sabrinareiman@yahoo.com,letmcg@ymail.com,brandon.carson25@yahoo.com,christinamauro23@msn.com,katielewnard123@hotmail.com,porkyexposed@yahoo.com,mgfbower07@gmail.com,lonniejbeard@hotmail.com,aklittle0102@aol.com,jennywarn@live.com,leyadewey122@gmail.com,neen062964@hotmail.com,info@need-a-nanny.com,dork_britt@yahoo.com,tinytots80123@yahoo.com,caycestaubin@yahoo.com,ivana331@gmail.com,tstots@hotmail.com,bballvarsitygirl@gmail.com,alwaysforhim2@gmail.com,degutii@msn.com,tiffjowilliams@gmail.com,patriciacallan@msn.com
Subject: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
From: Mr. Stephen Fred <mr.stephenfred@yahoo.dk>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – dmghost.dmg-hosting.com.ar
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [826 825] / [502 502]
X-AntiAbuse: Sender Address Domain – dmghost.dmg-hosting.com.ar albanesi@dmghost.dmg-hosting.com.ar

Mr. Stephen Fred <mr.stephenfred@yahoo.dk> <albanesi@dmghost.dmg-hosting.com.ar> mr.stephenfred@yahoo.dk

__________________________________________

EMAIL #2 –

TO: deleted@yahoo.com

FROM: “vikhadd068@aol.com” <vikhadd068@aol.com>

SUBJECT: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: http://oabfranca.org.br/entrance.php NOTE: I DID NOT CLICK THE LINK AS I DONT CLICK ANY LINKS/FILES RECEIVED FROM SCAM EMAILS.

HEADER:

Return-Path: <>
Received-SPF: none (domain of imb-m01.mx.aol.com does not designate permitted sender hosts) AQEBAQ–
X-YMailISG: fG83VQIWLDuwe8ej5n0IaROXvxrlzu18BJ2irW7rRnkNUMiR 0Ctsgto2LNAskyV2Q6ixNssLOsmnFDVOBVCrL.Ma4HX.zvoh5.y.Me6a47y1 Y.s4vBi98z.8nCoiFrNhF8AthsY6JNRIP0mO3NwL6he8knCzy63JqA9qhhqY FQRl4qMLiHM902WJNFvAOn.XvAyS6gBl90P7phn5AwFtzDAnWp7SjQKS8yd9 2cqKCaMlnKRjdDDXjb2Q70KZ_PcWA5mIrPPIPxX4lk8JBJe._gcgSX6kzAYp 4YvvqU7x6K6snhfvbJKtaMeaXIjmTDn.pLJ6GEKwthBTc3K6CzQF1pPdkRRD yra8kG4Jxtlb_RaSjcjAXw5qpiHxnBAx3Oek1rLM84NqcWLvSV3nRFriYeYV nhI5BWjm8wwT3AcOsJUwm97do1.YsTka4wRMCVD6cqiCuU2jAKvwx1uDI2.b RoFUQReDBAjwqAAHPZLlkdarxo05P1Uwq5jHR99zLNJlOjaSRiMEUe0PS9zs QDsD3ljuWathFexCSe6PKWbyt3x4XQhQYjJ8mtq3elH0LdNeIuahbPv6S4G8 hueVJ.bJ9cI2b2jYCsk1qnouy2MQDdlL5VbiPxDCWp7AsBes8Nb4BepjQsVR w2UcWs9.Sy1V065valQ1_avr4y87pRQOmtt5dWEaxIAO8bWhK4iCTfcE1cJY 20x8ZehazHdzyZAVwjK95yH6Y0LghsrH75EbuSGscuYeXfnXpPOU0lHJOYpM Smn8XIi4jgWio99h4HL5hAKWRirLVLu_X5PDmHnYDie5ONFtGejBROGsblcC rl9jhZH6AJlOWZyqVTRM5Ppp3S6YCnbXEAxRydb6MzVMCUdDrES1gAdSYuc_ i5b5UqWEyedgNzG5O1cUaG9VQQWVQd26QYIhUn1LH8p5cF1d4w9e3Y7VQQ8N MYYqmESf9lsGNdZFCRFIMXXUdD5OQpzT7199rPh0OAQ6e5FssdlgeHW5u8Oe Qm9rwYEstTmh6VWIAnHdJLj59EuoMNynb0YBxAks2F6YXhwIzblZ4az3IDAf 3UW5o76BBwQ424rwxaewfRAxh33BT18DwtTa_1U0vcIPi7ooZSfLIzHxatMM tdMmB1yNMhgNeqj41iMGVgytMBZI7HV5OTRdtnMQsAoEFr2MQitM8bjxFQ4k VUhdeQ30xHi1UVWyJwl9l8xmrHA-
X-Originating-IP: [64.12.227.42]
Authentication-Results: mta1395.mail.mud.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO imb-m01.mx.aol.com) (64.12.227.42) by mta1395.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 23:38:11 -0800
Received: from mtain-mf12.r1000.mx.aol.com (mtain-mf12.r1000.mx.aol.com [172.29.96.160]) by imb-m01.mx.aol.com (AOL Mail Bouncer) with ESMTP id B186A382B708 for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Received: from core-mic004a.r1000.mail.aol.com (core-mic004.r1000.mail.aol.com [172.29.104.4]) by mtain-mf12.r1000.mx.aol.com (Partner Internet Inbound) with ESMTP id 9ADBB3800008A for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Date: Tue, 18 Dec 2012 02:35:08 -0500 (EST)
From: vikhadd068@aol.com
Message-ID: <52151792.8536.1355816108626.JavaMail.zimbra@core-mic004.r1000.mail.aol.com>
In-Reply-To: <1355816106.93122.YahooMailClassic@web161004.mail.bf1.yahoo.com>
Subject: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Auto-Submitted: auto-replied (aol; away)
Precedence: bulk
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:335928000:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60a050d01cac1b64
X-AOL-IP: 172.29.104.4

64.12.227.42 — 172.29.96.160 — 172.29.104.4

 
1 Comment

Posted by on 12/18/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: