LOTTERY SCAM – FBI IMPOSTER – ATM CARD MONEY TRANSFER – FRAUD
CLICK HERE for an earlier post which lists two more emails and headers of Stephen Fred
UPDATED RESPONSE FROM STEPHEN FRED RECEIVED ON 12/27/12 (below) — Also, check all headers, because you’ll notice different IP addresses being used with each email he sends.
12/27/12 EMAIL: Dear Friend
We are writing you to inform you that someone came to our office claiming that he is your Next of Kin and wants to claim your ATM CARD which is in our custody, for he said that you just died of a deadly diseases, we from the Finance House keeping your ATM CARD worth US$3.5 MILLION UNITED STATE DOLLAR can’t just release the ATM CARD to him because we should have received a call from a member of your family or you could have stated this to us since you have failed to pay just the sum of US$180 for the delivery and insurance fee. When he said he wanted to claim your ATM CARD despite your inability to respond back to us and that he was willing to pay the sum of $180USD for the delivery and insurance fee, the Board members were so skeptical about this and has asked me to contact you once again to know if you are still alive and to know if he is trying to steal your money from us.
Do get back to us if you are still there so that we will not foolishly handover your ATM CARD to someone else who claims to be your next of Kin. We will be glad to send you your ATM CARD iF you are still there so that we can arrest this person who says he is from your family.
Your response will make a difference and sort this out. This will be best if you are alive and if you are dead , we want who ever that receives this mail , to have a Rest in peace and we are going to have a change of ownership to the next of Kin.
Regards,
Mr Stephen Fred
_________________________________________________
12/19/12 EMAIL: Dear:
Thanks for emailing us, i pray this email gets to you in good state of mind.
First of all i want you to understand that this email you are about you read is directly from the F.B.I (Federal Bureau of Investigation) Office, so that is why i will appreciate it if you pay attention to what ever in have to say to you.
Am Mr. Stephen Mark the new correspondent delivery officer who is in charge of making sure your funds gets to you right at your door front, and am assuring you that this no scam, this is my profession for the past 25 years.Transferring money to people who are been compensated by the FBI round the world.
If you will like to know! your email address was gotten by the FBI last week after passing out an investigation on a fraudster here in Africa, and your email address was among the emails of those that has been scammed by this heartless fraudster, so after series of meetings has been made with the secretary general of the United Nations Organization and the FBI they have come to a final conclusion to release the sum of$150,000,000,000 MILLION USD to the scammed victims.
The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes.Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?
ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2016. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.
Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks June 2012 you save $285 Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24 hours after the receipt of payment has been confirmed.
You are advised to contact me with the information’s as stated below:
Your full Name..
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)
I await your immediate reply so as to move ahead with the delivery of your funds to your door front in the next 24 hours.
Best Regards:
Mr Stephen Mark
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535
12/19/12 HEADER:
Return-Path: <mr.stephenfred@yahoo.dk>
X-YahooFilteredBulk: 77.238.189.196
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: miz.PSkWLDvm8OHiL48MwW7HgCGZcY9wyYfPB0bWgcwKjEva TQwyGMTEfGBukWTJXp6K3_lMdOr8o3lm7TXrmPoc4SYUT3RVw6rGmRAryrmR vzFdPJ7nWMn8LKQrp74PYAgJV4aKVfzqyjt6AWzoohYTZOMagwlgMOTaPzTw rGipFSZ5Eobv4U_GlaNlE_77Ddk6T98GFT9V.aLJnAc0Ph4j3q6vJfarMtOQ NrJ0NJrxpVmlky589fuZQPic.EkeCD30o7kG6qwUIV44GPS5N2hb9u3CnUKO Idl.D9s3x8My32Vjz8f8SthSPf2bIAF159pdZwtc98SBOvRla.GQlOJ_qc1g BVwFqn5SUVXM9a5hmQj.BXKYJuCZuxSquLjVxtHH1rBh9EGqnA09aSKtoHSH bKbHNSkq6SkKdYfbF6ymr7Xg546oVhvmCv37ZGcxagiSNzoXXOrMTZgeQvdn LUhuKcL3GG1fQFdFazm82hezg0qQk7RdFP5xxpsuNTPgXrIUDMpFXjcjiQX. 56SsbW2xWvtdWS4tKKkLwaoVOEBhN8oFDaAjWHad_O77JiouWVwI9UZVRnsb epl8cLnKbZF6ir3kuH5sRj17HH1TFrTI_Yn0ON8OGQMcql6xsFmzGVuDmNVU 9NzXr3WX4wwnq1eIKU7Rlrf0i4MYsNZGO5VNVHNJ_lscTQGsyOd8Qb5ZQn4T 3GuOsvDM_mbrBpHu79D8ihDJ4z9GyDjWZAWAwent8y9HXlBijC8p9BCkVvz9 7bsWQfsNlFjIjrBa_msrlpK1AcwxQ3thkIw8XJ7ZZg7WO9VyRxTxOOVVzkqe quk8zEmWht_j_AFgtqjtBshl1ZBXWvjnUy7EbyyXzurKVIEFwtDGX8PDfX0i nhenxR8A.Cc4Tx6lAc3WrDHC_nhTnCdkdOu4QoHc2YAhQLsnDHrVNu1A5I8s BdFXnu5qPsLugzcNIIcjqcV3jdGpTvem9lKvB.26V8q9QxjHW6kAc7QhiRCj oTNYV1SlvAJcZuT8K8NAnkkB87v1nGfSSlVMpObPRdAUF85rgPEzQxr.WC4v _lVsNv_bFAENAGxZQEUa5peHi9bk3SUoYl839PLfNH42AWyqw.r.uEDGgYgt YVf3htF6YiWLWvMqeK0vFhXSbGSUeNWQejxn4bLX4hKc7dcNPN2X4lxDHV4Z TtgqG4qSWGI0T31Ja328K7tD0tv.6MoNpwNtC7rR_ZYySGuxBSy65pYmhzn7 fD5hzdiIiAums7aVzssL3et4ky6.RBgIHcG4CxHLGTeA6UnT.gF7oZRWMY8b 4efHUmr2._obPGoTIsNZrbXF0k5iLpTUAKgu_6ZfsR_ayUUr8XC.Y7JvnlGf Qj7GhkHo12CIBoSS2qKhAFSH9vHhX0Xx86FPWuv84Dun4Hw-
X-Originating-IP: [77.238.189.196]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm0.bullet.mail.ird.yahoo.com) (77.238.189.196) by mta1299.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:48:41 -0800
Received: from [77.238.189.232] by nm12.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [212.82.108.126] by tm13.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [127.0.0.1] by omp1035.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 955255.21914.bm@omp1035.mail.ird.yahoo.com
Received: (qmail 872 invoked by uid 60001); 18 Dec 2012 19:48:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355860117; bh=8wr5+nuRl/ns3gTGRezUcxkLMAwD+/aKdXnRIi6o6TY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6oJFhfa3p393I0xyrjhWQkUUjMFtdPImK5K243mP8aw2j2Ggo3ikcPl1+eRnjxs7VpIY5Mz0F5DSU0EE/k/BweIBKvdlUq2Lri6CqF4vqu2RlNRlEilW5g8O1z5wLje7bh7lo9Al99Bl2UQ+o+5LRnSqsydSUBCepF1X9HSMiX4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=cxaqwhvwCd3wwPtAVfKDnME1KkqzhntFJbBJXbDovmDNwyaVmX+FfJ2NhERfEIIpGd4n8o4ciZPL7kvjkyGgXsmTH1riWPjOmGcRURgnnscU5QMg64kJTobNnMXFiA8qhYFfLrHWgNE6qkx0mpKBiGQCJ6+MIiFbgBmp2v1SV7s=;
X-YMail-OSG: BjMYFAMVM1mnis_308ZVtMLR8Q8RKjoBERe2MAKplDV68cK RggpmS3_GIfS.MlTnm3NSn4KH2I7R1Pw8szBwplBfRNwRJe8f9qo0KvFmbIa XNyfXRa3a.3CF_.LzUvsypRymwmrvV2iaeh_kvvwQpu6zyZ1XZ6FIsJfkpYg TLvlzNdVM3ET7UUGV.zw8Qp8J.Toaem6Caq3aLMS.eA.BQfMs0UJTlPt6wUd mQRAWgRagh1QXMK1QVys_1Xj1NJ.bhuSPOXPhUTRSuN37VSXzysseRAnOvEq v9pWabsobdmSltAtLZbMm2NBz9OQMCID1e8Prxaa.vZQLIckB8OdFabnmGqG cPs.6D04GXE_gwrx2SRP3lTHI2TZFEOmJKHiPu0fRVZ0Iwyo0drq_UXofLZi CeWryBPYEBpAIZSPRIVnfB_TfD74keU.3FCnK.xFQiVraI7XdRsQxC9ffPg- –
Received: from [87.248.115.210] by web171905.mail.ir2.yahoo.com via HTTP; Tue, 18 Dec 2012 19:48:37 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar> <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>
Message-ID: <1355860117.783.YahooMailNeo@web171905.mail.ir2.yahoo.com>
Date: Tue, 18 Dec 2012 19:48:37 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
In-Reply-To: <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>
“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 87.248.115.210 — 77.238.189.196 mr.stephenfred@yahoo.dk Stephen Fred also sends out scam mail under: vikhadd068@aol.com – albanesi@dmghost.dmg-hosting.com.ar – 64.12.227.42 – 172.29.96.160 – 172.29.104.4 – 200.58.125.17
_____________________________________-
12/27/12 HEADER:
Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) bSB5b3UgdGhhdCBzb21lb25lIGNhbWUgdG8gb3VyIG9mZmljZSBjbGFpbWlu ZyB0aGF0IGhlIGlzIHlvdXIgTmV4dCBvZiBLaW4gYW5kIHdhbnRzIHRvIGNs YWltIHlvdXIgQVRNIENBUkQgd2hpY2ggaXMgaW4gb3VyIGN1c3RvZHksIGZv ciBoZSBzYWlkIHRoYXQgeW91IGp1c3QgZGllZCBvZiBhIGRlYWRseSBkaXNl YXNlcywgd2UgZnJvbSB0aGUgRmluYW5jZSBIb3VzZSBrZWVwaQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzk-
X-YMailISG: L0eJ1l0WLDsrmzhsNc4ma_ZTXhvmHQ2AKw1S.hbjK7f0cFYW 9CyYcBU7kl_AGjll0mshaAP10b6HHWwmyr9NHIlVfiz7naOArbwf87HAw5k3 9ZezwwxiQSn4Lh.0FELX.Gv7N9cLWGfm7FzsbwAHegFAuQ0MKWAVoejRLT4h Mva1W4NkDaUXxkm7lo6wQpYGPnrh1K29QdN7hMvxGaW3l828rdEa8u7R8tSF P4hN0LiGmfNFwx6QzZuEf6A2NwhmTwMxG9LGWort8xV0_dR.OhnQJhmjuBsc 9oIinp2hK1fR6VBZJthF5_gO2Ec_LX4HyhlnJbJtts4p8lgQTMe7REbczek3 JiKVpW7iC3Dl0cJmqyvbbaKQv_d6aYyCdG44SAiKQgTmIL6Q7kOxmbX5E9oX VHkWJ_n0X.iXcwGRTEKSP3N9Db.XTjTantv3oyhi4UKKjHCgO9L3K48vqx.y lykB.B__.iVEcJGgz2YelmZhbBJNrlsIo7PxJEUxWEzxTZXrAZwV5WM1ED12 7in.6D0uDbboS5zNAKWDInTs4lGmB48ZR_SPDK_.8iJUyJcPBLptswWDIfVy SG3KXeDQEq_gRLrZJQu.GvdtTETqw6J9MoijRpq50_OqvaiigEPjEVGea1.i 2NV5sTGYsiQuUkTJ0EwtBLKGaOcnFciopJ6uqRPA06N_bjwNg6bwirsb0.Pw TyM8CwA3kUeNU0ZAsAcZzlcdl56wTn12drIQyW0n7OP7S0lSvMdiuaGC_j4a NxJSv42fKw4LYMQO5OIPzV78fRppt9C0BSUplNoqZVt8Izbpi88gTHeIPbBd Zyb2SDqGMH9jiwZ5bWrrFCbgYSwl3tQfxosaZFrdf0OIQo901XDPItNnBGln b1o9tF_x8WLFMysnHJKkFaC0Duf0SBaJm4aHuia8YORRHroLa5yXpeLS6y59 WEFMio5sBul0wafKisJEVvqNHjXqzbAzfaehELW1CGdGkLU24xPfHgSA8vxA eqXvjzr7To3C8EkjD5lUYc3NBvtTlqALkVn68dQdQsag6x7JLFNcdac7JGMv oNECu157ZIvAfMtLBOV0OvC9nLIefLT0g_J8jUItQ32lvNCyl.D_2YSwpccJ AcP9rORLXX_lWEayqQq_5nrNbRCCqVtfXVRUQQYwP1bRTvXisvVzpPt1c73S 3bqDK_hTagtrLh9ePwchtdyyMd6EzPV4QOu3aFqkRTm57XswMGOlt7oqZhqk wio.Ss9vFlZffudcNSzbJyVIkseXhkuln9rOZe0MJ14LXV3wBx49OW5XVvPX AIb6lHsnsSEfOQ_EyOiYrvmr6M.zA9MjVNS6ciGoAjDICt35c..p9yBcEx3C IJWyVUBwpr9ahbKgag9UyARGPO52F2gQuE1UmZTpda31lkajMG.ABKRPfA9O 75Kr9w–
X-Originating-IP: [77.238.189.68]
Authentication-Results: mta1014.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ird.yahoo.com) (77.238.189.68) by mta1014.mail.ac4.yahoo.com with SMTP; Thu, 27 Dec 2012 14:37:06 -0800
Received: from [77.238.189.230] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [212.82.108.112] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [127.0.0.1] by omp1021.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 965884.6310.bm@omp1021.mail.ird.yahoo.com
Received: (qmail 43155 invoked by uid 60001); 27 Dec 2012 22:37:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1356647823; bh=1SbVX8ahIFjSZR3xschcHhVMo6cKx+s+O0qsgJDfn88=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=ku28W2L4rzibEW8KJtxQ8GYY3RM9A2ysRyCDI2Gln9rf6xXk1lWOnKtbTMIIJazEsPbkuoYGbW5QhPyb8stsKii95Pitv0qXFms/i/j3yu6f20ZJk1yqJYZFu8o4FHUd/rIZOrSxXgO0hP0Tv0Z0ohOWTbhm6KDmDemVNqUgwOE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=SwE6kjNZXtdDz4oisXUvfUkWuvKIwQMtTjCPaUvGZX1g+a1kloixYRBnYnLpM10PHrqlXbp5P0n/Q2fnRYk8ADDaUInNU0wJw5TF7LxaejP592OppJq8wF4GzljgrEKqR4d/FwgPUcycDjnS/pJ9NWMfoCNj1KQaXv0nnjMn3aE=;
X-YMail-OSG: a7CZw8EVM1nb9WgP6LjiWSeVEjNQvjeH9d6HH4HQwVNgho2 Yo454QVEoYdNFuzr.uK.l3dR3Cv.Dsa8amnGZAj6ylZn9ciNvp.JGiOuMA7O kMzUr2COJi5oHfEhJxsNrnx3l67pCUj0kES.IcUPALk66ryXMPiPelATHZjW jheZwLOczwYgem_oZGZkyfJwUyo54l8hkyLUvt4BJ.Linr5MnYn80kleDkbf x72B5ccMKFq.hc4SMdXR1tjKas2_SlDVr4gflKAbKC8PZy7gtgYi_QCSTJSn sbBawKc1HjL.YEEtHJ8tbpi6gNjrqAgc7lPL3QeJctjTZR6G.3FH3TOPgPFn DUQovSsYQbJDEiEZXrLOScPlRVX_gjEW.73r5k7Mwt8RS1Bh6fZB1JvsxGd_ 7D9fNBLRoecCPHV6kyertDGeUXXUPI4ScTmPDrLXwFuzNM5uGL8t3Osvfrw- –
Received: from [41.138.184.157] by web171905.mail.ir2.yahoo.com via HTTP; Thu, 27 Dec 2012 22:37:03 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356647823.42332.YahooMailClassic@web171905.mail.ir2.yahoo.com>
Date: Thu, 27 Dec 2012 22:37:03 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: SEASONS GREETINGS——-PLEASE GET BACK TO US IMMEDIATELY!
Content-Type: multipart/alternative; boundary=”1200650283-1721883567-1356647823=:42332″
41.138.184.157 >< 77.238.189.68
Scammer's Exposed 