RSS

Tag Archives: ATM VISA CARD CENTER

“Western Union Department” a.k.a “ATM Card Approval Department” a.k.a “Mr. MIKE BENN” a.k.a “Barrister George Clement” a.k.a “Susan Dawson”

419 SCAM / ADVANCE FEE FRAUD

Dear Customer,

Western Union Office
DR PHILLIP HILLS
Call +229-98745447I want to inform you that we have already sent you $5000.00 US Dollars through Western union as we have been given the mandate to transfer your full over due payment total sum of $7.800.000.00 USD, via western union by the Ministry of Finance.I tried reaching you on phone to give you all the information on phone but I couldn’t get through yesterday,

So I decided to email you the MTCN and sender name so that you can pick up the $5000.00 to enable us send another $5000.00 today as you know we will be sending you $5000.00 only per day. And it was agreed that you will pay the transfer charge sum of $87 before the release of the payment to you.
Please pick up this information and locate any western union around to pick up the $5000.00 and call the Operation Manager DR PHILLIP HILLS because he is the person in charge of your payment, and he can send you another payment today once you contact him,
 
phone line Call +229-98745447
E-mail:weste.office@yahoo.com )
contact him once you picked up the $5000.00 today.
Below is the western union information to pick up the $5000.00; which you will be receiving daily after you sent them their transfer charge of $87 and it will serve as re-confirmation of your payment file in their office.
 
Here is the Senders Information;
1. SENDER NAME:…  charles donald
2. TEST QUESTION :…. How Much ?
3. TEST ANSWER: …….  $5,000.00
4. AMOUNT ……….  $5,000 USD
5.MTCN ….. 6130251864
 
They will be waiting to hear from you with the transfer charge payment of $87 today;

Receiver Name….Mr Chilokwu Sunday
Country —— Benin Republic
Your City —– Cotonou
Your Question —- A
Your Answer —– B
Be advice that $87 transfer charge is compulsory as they told me that is the only money you will pay until you receive your payment completely. Endeavor to E-mail your direct telephone number because you will call once the payment
informations is sent to you,
Regards
Mr. MIKE BENN
Call him immediately you receive this massage +22998745447
western union department.
Yours in service
Mr. MIKE BENN

HEADER:

Return-Path: <good_o@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.217
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG:
X-Originating-IP: [203.188.200.217]
Authentication-Results: mta1028.mail.ac4.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm5-vm1.bullet.mail.tp2.yahoo.com) (203.188.200.217) by mta1028.mail.ac4.yahoo.com with SMTP; Wed, 14 Nov 2012 08:00:54 -0800
Received: from [203.188.200.81] by nm5.bullet.mail.tp2.yahoo.com with NNFMP; 14 Nov 2012 16:00:51 -0000
Received: from [203.209.230.76] by tm2.bullet.mail.tp2.yahoo.com with NNFMP; 14 Nov 2012 16:00:51 -0000
Received: from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 14 Nov 2012 16:00:50 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 871122.62052.bm@omp105.mail.cnb.yahoo.com
Received: (qmail 51301 invoked by uid 60001); 14 Nov 2012 16:00:50 -0000
Nc4OYZWCWjsKyIE8ZTRRgR+ikaqDlMInYg0=;
X-YMail-OSG: tsM3mXgVM1mQukNs9vSWv2B4i6xoWzPHIXnTgZbj5d7LcFY wJ.7t3BuI
Received: from [41.216.50.17] by web92410.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 00:00:49 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352908849.45572.YahooMailClassic@web92410.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 00:00:49 +0800 (CST)
From: “Mr. MIKE BENN” <good_o@yahoo.cn>
Reply-To: weste.office@yahoo.com
Subject: Call him immediately you receive this massage +2 2998745447
+2-2998745447

Mr MIKE BENN <> good_o@yahoo.cn <>  weste.office@yahoo.com

Same scammer, different scam– <atmcardapprovaldpt@hotmail.com>

 [41.216.50.17] by web133005.mail.ir2.yahoo.com

Hello;   ,
This to acknowledge you that your consignment box is diverted into our office here by Mr Maxwell James director Fedex Company, Mr Maxwell James reported to us that you were ask to send $72.00 for the release of the certificates peper that will lead up the box to your destination home address and you refused.
 
Now listen,we want to hear from you to know if you are willing to pay the money or not because we have giving instruction by His Excellency Mr.President Dr Thomas Boni Yayi,that if you refused to send the $72.00 for the release the certificate we should send the consignment box to the CENTRAL BANK OF WEST AFRICAN COTONOU, BENIN REPUBLIC (CBB)
 
And we give you two days today and tomorrow to make the payment with the information gaving to you if you fail to do so do not bother to ask for the payment of (US $3.5Million)again, for your information i am giving you the advice that you should try and make the payment of $72.00 today, immediately the $72.00 is confirm your will receive your(US $3.5Million ) and you will not pay any other money again said by me Barr,George Clement.
 
The director in charges of your BOX will alert the united state bureau and also your state police for the BOX to be deliver to you without any restriction and problem when the fund get to your location area. 
Thanks.  
Barr,George Clement
FROM THE CHIEF GEORGE FEDERAL HIGH COURT OF BENIN

Below is a Nigerian scammer attempting to scam under the same IP address as above. Although it may be another scammer behind the IP, the email is very similar to the many emails the above fraudsters have sent. 

From Ms. Susan Dawson
Return-Path: sonjohn133@yahoo.cn
Received: from 41.216.50.17, Cotonou, Benin, Office Des Poste Et Telecommunications Aka Benin Telecoms Sa
Date: Sat, 10 Nov 2012
From: “Ms. Dawson Susan” <sonjohn133@yahoo.cn>
Reply-To: ccef453@yahoo.com.hk
Subject: U.S Treasury Department’s Office of Foreign Assets Control

From: “Ms. Dawson Susan” <sonjohn133@yahoo.cn>
Reply-To: [ccef453@yahoo.com.hk]
Subject: U.S Treasury Department’s Office of Foreign Assets Control

Attn,
This email is to notify you about the release of your outstanding payment which is truly $15.500.000.00 USD. The New York NY ( USA) scheduled a time frame to settle all foreign debts which includes Contract/Inheritance/ Gambling/ Lottery(Sponsored by Microsoft and National Lottery) and other international loans.News had it that over the past,numerous individual (s) who happen to be impostors (claiming to be individuals, banks and organizations) are claiming to release numerous sums of fund via numerous ways.

With the help of the (OFAC)U.S Treasury Department’s and with the FBI we have noticed that people have being asked to pay outrageous amount of money by these impostors for the transfer of their funds to them. We want you to stop all communication that has to do with these fraudsters who have been requesting unreasonable sums of money from you to release your funds which they do not have access to.

We have received a mandate and instructions from the (OFAC)U.S Treasury Department’s to commence the immediate release of your funds through one of the following payment options stated below depending on your choice:

1. Payment via Automatic Teller Machine (ATM card): This is where you will be sent an Automatic Teller Machine card with Pin also known as ATM card (A Master Card would be issued). Upon receipt of your custom ATM card you will be allowed to withdraw $10,000 per day by default and you are given the option to transfer funds from your ATM card to your bank account.
2. Certified Cashiers Check or Bank Draft: In this case you will be sent a certified bank draft or check signed in your favor which you will deposit in any bank for it to be cleared within 3 to 5 working days at most depending on your bank.
3. Online Banking ( Bank To Bank Transfer) to enable you process this operation, $285 Dollars is Required for opening for an online banking operation, that will enable you get access to your account Online.
Below are few list of tracking numbers you can track from FedEx and UPS website to confirm people like you whom have successfully received their payment safely.
Name : Mrs. Jeannie Michael: FedEx Tracking Number: 794588016471 (http://www.fedex.com/)
Name : Mrs. Vista Rayne Arnold: FedEx Tracking Number: 796925954101 (http://www.fedex.com/

You are advised to select one out of the three options on how you wish to receive your $15.500.000.00 USD, Your Online Banking Acess or ATM card or Check/Bank Draft will be shipped via Courier Shipping Company and would get to you within 2 working days at most.

For international shipping as stated by our company We had to sign contract with Courier for bulk shipping which makes the fees reduce from the actual $520 to $79.00 nothing more and no hidden fees of any sort.
You are advised to contact the Department’s Officer responsible for the shipping of your Check or ATM card with the following information for shipping of your payment Check or ATM card.

Department’s Officer: Ms. Dawson Susan
Email- [ ccef453@yahoo.com.hk ]
The Department’s Officer Ms. Susan Dawson will provide you with instructions on how you are to make payment of the $79.00 only for the shipping of your ATM card or Cashiers Check.

You are to adhere strictly to the instructions above for more information contact the Department’s Officer.
Remember that you are not paying any fees extra no matter what. Once again note that the actual Courier Retail Price: $520 Your Price (Because of our contract signed): is now $79( $79.00 Savings!). 

Below is the information where to send the $79.00 to them.
Name of the receiver ………… John Udezuo
Country ……………. Benin Republic
City …………… Cotonou
Test Question ……….. Who is Son?
Test Answer ………………. Jesus
Amount ………………. $79.00 Only

 
Leave a comment

Posted by on 11/25/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“FBI OFFICE”

WARNING – INHERITANCE SCAM – ATM CARD FRAUD – NIGERIAN SCAMMER

ATTENTION: THIS SCAMMER’S IP IS BLACKLISTED AND IS CONSIDERED 100% MALICIOUS ON A SCALE FROM 1-100 – – If you’ve received a email/contact and put their IP, email address, host, etc and got brought to this post then you’re dealing with a scammer/phisher One of the anti-spam websites warning against this IP address is Spamhaus

EMAIL: Show Details
Attn please,
This message is coming to you from FBI office here, We are writing this mail to inform you that your (Inheritance winning awarded funds of $1.5million) has been totally converted into a ATM Master card and it’s to be delivered to your address via courier service, Be inform that the courier delivery company will deliver the card with all the manual and instruction both with PIN code to access the Card upon receipt. It’s the best option to receive this amount since every attempt failed, therefore you will need to contact the Barrister that helped in re-claiming the check back and converted it into an ATM visa card with his address below:

Barrister Necter Polimars
Email: barristernecter@yahoo.fr
Phone: +229-98651731

Send him your current address where the check should be delivered to and remember to indicate the Reg:code of ATM-0034 to him when making contact with him. Please also choose the courier service you would like to deliver the Card Post office is also working but could take the card much time to get to you.

Please endeavor to inform us once you have received the ATM Card.

Sincere regards
Robert S. Mueller
FBI Monitoring Team Service

HEADER:

Return-Path: <offilcefile1905@superposta.com>
X-YahooFilteredBulk: 203.188.201.151
Received-SPF: fail (domain of superposta.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG: ezBF7kAWLDtzu.6WTiJebVEzmQUIcG_PNd1CwpI.7FK_4hEN Zny7zbsYgSrvRNEkKNAHyjYIgbXGVFrTSy5c9pyJLJT.I2rbeu56O.55aNRc EQ4OjPa65stTyuXMWPdmbc2Jchn20MKDdUhbt5XnuXvouwATkklv.if4Srwf PhgPk6NBUSLZVJfqBHUhuwGMHUb_GfrNTpQsO.6RIv6rP_BimD0cQ0sROi15 H3py5nbXAc.b_y9E7OCFREZrAT3GEMeHuzInLPwjPODQ7PFjnt8wP97VPfLP C3D6i4CW_Q9zsBV5HRucchEEUqIWMBzzTuLi6zi_ltdXIdLGccljYIUkibmP Ed6kSsw6JvdOn8x62zffgS3BLW6CK4UJ2WrxTzHnGsLVxdxZBcThqC8CcB.n 3tmyMvUm028RDYEH6y5spoHom3ZCQydyZ8aZ6a2CdE5op4jpI2fdBhU7ZyZN Dqdib4ZxEPlV37MS9RCDeUqBndpsXjq39haZEpSj.pWiwS_jeQggSyiCfzLA Du8yPKoCdbgkqs4xpA6z1bLRYqSSeiMETFaBAYVfqIhhHnCuGnRdSjKKcRfa QSyPrDLSrtpTgCxTxf8Wmlv5r9qoSzqTBs8y3639xGJz_TaqCvv2WGK2d0eL _2p6QjsaA6XBRYyI1olJHaBZnBshmo67FuoNCPeg2JBFZC9bJuLhNahvSF4K d9N2c5ipVC9pAsSeyKG_PiKl4ql1Y7q3l7f5IfZhlPgbTIJmn2Yxc78Fs.7b MF1ui8Dgn7t3rQehQiKwWpFk0q7WCC0IWZAAoZgM1h6Q.FP6orLyiR.Exv8D RiD.Oc4IbsY5WKoCy8ZMH.q.4LpS2Pyom.ERBABavo2ov5JSoNDBVWW6ss0t ySPJiqvMCEULgheeKtHOlWD1UGNWn5g77TqNnx8dnYwLT_Y2ONb0zrgj4.Qe TLuVJ7nQYutC4IN2EKxquWdtY9lDDBNt3EYmZ0jwRErSqsr1dKjHBzBUdu_s _0O.oK5IqEYhs8zBOHcckO_uJSRW.SQmfbTZF069RPGOwEu5ckgWIGwo
X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”176961417-1892065883-1353149033=:34956″
Content-Length: 14962

This list below shows many bad IP addresses (sending out spam, virsus, scam, phishing, fraud, etc) that are being used by web92408.mail.cnh.yahoo.com 41.223.248.98 <– The IP/Host at this IP is being used by scammers sending out 419 scams

210.169.153.71 SOFTBANK TELECO ODN.NE.JP JP 5% 95% 2% 98%
200.13.169.3 AMNET DATOS EL AMNETSAL.C SV 49% 51% 46% 54%
203.115.0.14 INTERNET SERVIC RADIUS1.SL LK 13% 87% 25% 75%
202.147.75.21 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 38% 62%
202.147.75.25 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 39% 61%
116.50.64.53 WAN NETWORK FOR IN 59% 41% 61% 39%
213.210.218.169 SERVICES COMPAN NESMA.NET. SA 65% 35% 68% 32%
85.95.235.101 INETMAR INTERNE TR 6% 94% 4% 96%
124.74.42.242 CHINANET SHANGH JWS.COM CN 51% 49% 63% 37%
217.146.183.251 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.227 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.253 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.233 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.88 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.114 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.225 YAHOO! EUROPE YAHOO.COM UK 36% 64% 60% 40%
217.146.183.243 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.235 YAHOO! EUROPE YAHOO.COM UK 36% 64% 61% 39%
217.146.183.92 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.229 YAHOO! EUROPE YAHOO.COM UK 35% 65% 58% 42%
217.146.183.112 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.247 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%
217.146.183.239 YAHOO! EUROPE YAHOO.COM UK 36% 64% 57% 43%
217.146.183.249 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.231 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%

barristernecter@yahoo.fr

From  41.223.248.96 – web92408.mail.cnh.yahoo.com — Cotonou – BENIN – BJ — 

Reverse DNS: 203.209.250.172 – web92408.mail.cnh.yahoo.com  — IP address originates from China and has a score of 50/100 which means approx half of the activity is BAD

From: Jonathon Finn <mooretudepo33@livedoor.net>
Subject: Ermaessigte Preise fuer Top Armbanduhkopien
From: Kelvin Richardson <pricesajebi29@lunatico.it>
Subject: Genaue Kopien von Schweizer Armbanduhren
From: Leo Grady <bakerlixiru48@cerviaambiente.it>
Subject: Top Chronometer zum ermaessigten Preis
From: Adrian Childers <perezbuxuva66@hotelclocchiatti.it
Subject: Ideale Kopien von Schweizer Zeitmessern
From: Shirley Stroud <robertssacoly93@texsaca.it>
Subject: Dieselbe hohe Qualitaet vom Edelzubehoer guenstige
From: Amy Christopher <hughesbumoco27@cooparche.com>
Subject: Sommerpreise fuers edel aussehendes Zubehoer
From: Sophia Walden <phillipsjimome53@pgelettroimpianti.
Subject: Teuer aussehendes Zubehoer zum ermaessigten Preis
Associated Harvesters for IP – 41.223.248.48
75.125.18.178 | H
70.85.113.242 | H
208.66.195.2 | H
70.85.172.170 | H
74.53.249.34 | HW
74.86.249.98 | H
74.53.243.18 | HC
74.86.209.74 | H
218.186.13.1 | H
75.125.47.162 | HSDW
67.19.250.26 | H
91.190.94.246 | HSD
216.40.222.98 | H
81.195.121.253 | HSDC
Sent From 41.223.248.96 – SOURCE: Project Honey Pot
From:  Customer Service – upsaccountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From: Logistics UPS  accountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From:  Express – upsdelivercompanyb@ups.com
Subject: Re: End of Aug. Statmeent required
From: WendyDillahunt@mailusers.make-tracks.com
Subject: Re: End of Aug. Statmeent required
From: LinkedIn Email Confirmation – emailconfirm@linkedin
Subject: Re: FW: End of Aug. Statement Required
From: Customer Support ups  upsdeliveryservices@ups.com
Subject: Re: FW: End of Aug. Stat. required
From:  accounting@graco.dhbit.ca
Subject: Re: FW: End of Aug. Stat. required
From: Sook Ritchie via LinkedIn – member@linkedin.com
Subject: Re: changelog UPD.
From:  accounting@mail420.minnesotageeks.com
Subject: RE: MAYRA – Copies of Policies.
From: Marisol Friend via LinkedIn – member@linkedin.com
Subject: RE: CARMAN – Copies of Policies.
From:  raccounting@mail2.mounted.net
Subject: RE: MEGHANN – Copies of Policies.
From: DarwinZarling@hotmail.com
Subject: Re: Security update for banking accounts.
From:  DIONNE ROBERTSON – ROBERTSONpmjgDIONNE@hotmail.co
Subject: Your tax return appeal is declined.
From:  IsmaelLAKEEQFFK2B@aol.com
Subject: IRS notification of your tax appeal status.
From: “MYUPS” <ups-shippingagency@ups.com>
Subject: Re: Fwd: Scan from a Hewlett-Packard ScanJet #575
From: UPS <customerdesk_upsdeliveryservices@ups.com>
Subject: Don’t forget about meeting tomorrow
From: Kathlene Donaldson – MiraDinehart@w-link.net
Subject: Don’t forget about meeting tomorrow
From: Milford Hinkle – RamonGriebling@heale.net
Subject: Don’t forget about meeting tomorrow
From:  Amazon.com – account-update@amazon.com
Subject: Re: Your Flight A189-45644
From:  JabariKinnon@mail.igretec.net
Subject: Re: Your Flight A07-8295
From:  LEON Doherty – DohertyLEON@hotmail.com
Subject: Re: Fwd: Your Flight A268-625505
From: Badoo – noreply@badoo.com
Subject: Fwd: Re: Your Flight A18-77208
From: “craigslist – automated message, do not reply” <ro
Subject: Fwd: Wire Transfer (30331FY38)
Example Messages Sent From 203.209.250.172 – SOURCE: Project Honey Pot
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume.
From: jxdguq – caolaeuva@yahoo.cn
Subject: 9税4

FBI OFFICE <> offilcefile1905@superposta.com <> barristernecter@yahoo.fr <>

41.223.248.96 by web92402.mail.cnh.yahoo.com <> bobwilliamson@superposta.com <> wunion617@superposta.com <> Received: from [41.223.248.96] by web92402.mail.cnh.yahoo.com via HTTP;
X-RocketYMMF: redwoodcapitalbank@yahoo.cn
Date: Thu, 15 Nov 2012 18:51:29 +0800 (CST)
From: “Rev. Robert Williamson, ESQ.” <offilcefile1905@superposta.com>
Reply-To: wunion617@superposta.com
Subject: TRANSFER MTCN

Attention Beneficiary,

I am contacting you because I’ve sent you the first payment of $5,000 this morning from your winning funds total amount of $1.5Million USD, Therefore you need to contact a Western Union agent Mr. Jerry Young, and ask him to give you the transfer payment information and MTCN.

Agent: Mr. Jerry Young
Email: wunion617@superposta.com
Phone: +229 98644349

Please try to contact him today request him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when E-mailing or calling him, Also he will be sending you $5,000.00 daily as per our office discussion with him.

Do get in touch with me once you have received the transfer. Please copy this email: wunion617@superposta.com, and paste before replying to him or simply call him at his number: +229 98644349

Sincerely

Rev. Robert Williamson, ESQ.

IMF MANAGING DIRECTOR

BENIN REPUBLIC

E-mail: bobwilliamson@superposta.com
+22998644349

________________________________________

Fraudster is also pretending to be Yahoo Member Services <carecustomer625@yahoo.com> Reply-to: carecustomer625@yahoo.com — YFB – 98.139.91.80 Received from: 41.223.248.96 – web182201.mail.bf1.yahoo.com

An FBI agent would contact you by phone or atleast by your name. They also have there own domain and wouldn’t use ‘superposta’ as an email-server.

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Collins, Peter E”

FRAUD – ATM CARD – INHERITANCE SCAM – NIGERIAN 419 SCAMMER

UPDATE FROM DR COLLINS PETER Also known as DR FRANK COLLINS Note: each time ‘Collins’ email’s me he has different addresses and IP’s so make sure you check both headers posted below. (the second email/header sent by Mr. Collins is below the first email and header.)

 

FIRST NAME USED: Collin Peter E

FIRST EMAIL: I am Mrs. Priscillia Thomas,i need your help to transfer 20,142,728.00 Million Dollars I inherited from my husband for more information, Please reply to me: priscitomas@hotmail.com

FIRST EMAIL HEADER:

Return-Path: <>
X-YahooFilteredBulk: 157.55.116.165
Received-SPF: none (domain of CH1EHSNDR002.bigfish.com does not designate permitted sender hosts)
X-YMailISG: A8zSEdIWLDtDE2pBn2j7Mg7kVH0A9HcFcs_CGir7I3SWxOc5 gWFUT56g4PVV_fYdmJLC_HKbSpMU7ZlnMSp.RDhVee.MNOhihGcSxyRoIl.s h6nlC5NSrJjmy7eLGgAsow5X9spU6qzeZp4jCw1j3fbQxUky6z3TDnF3Dt2U UDb0p6z2p81lNt9OqcaMss3JjSEU.6BtleBgn6A23X8_c3ZWGemeyqoFU2EG DZEtBOrrP2.kZTxusR8pGzCgaGz6q9wgn6yXwDNXrIwautUdkAqT8tjZL7Xh PWlBIZGZlvrAUg7Klkkpr1mE9Ewz7fvRydyT_qFe88ODYOzOUd_7K9r7rIFw WNnxXF6Emx9IT9YaVn_Da1TA9wSp.yW_dQ65dI4zKxZlU16lFNXqlFLRB2pL yMKLBNdHCwSFBMbBGHokSoGoPF17OwMCOhPCtq.j37SCgPcELPvXhSWwolvt 7bqlQi3Hw8YbvwYLf9.zqlOAeUpXnUrUdAi6QN8PZqiaX1n4iMdn4FtBljbj YLTi3zClm5roQl.nb8sQYt6aZk3NoByYY9cQh7.TQMPvxElS8Yu7_FjvLiu9 rt0yTGDn2Zf1TPJQPK0YQRKI8C7gkdptWgQWMf_F32RQ9TerVELP1viC02UZ H2S1A9tQbqx.Z2sn_mk09Y6uhE7I3SX4KQSN0wHuo1WQZnGEEKRNtsQFXvN4 cmL5hzjvvcWBA0EAle2sWoL.uCChUKZEPOVxjVmXm.R9k8zBTaqEYY2im5uT .MXfm1SafJFJsUchPRU87v4Yj1uVOwOj3lAOJqPdvJbYZo2TmbdWHoXt51oT QqxYcXFOdmoXGKxmi.8bVyfeMpVt36US39BF6DazGDGHgaZedgZSxBfmvglX pH4lP8oFyu6XLLGxYXmvt5xdANUgDfOtVOrIuwvLsFqYyM.paTffw_ETh1vH 1R5hDKC1QEK1NJ2p1DqEZeyZsg6HF5lX6_I2aRVUz7S4s1RA9J_BEl51Ogcj z.MK6mBQ5.hjrEOQX6ODF6FB03iGcl7OwUriiBtlLl8v3OEf2EAPAYrCil.R QVP8AtsL.clvE0E6NmhAb9fL9etnCiDSfhDjbsD8vMfqOQ2s6tVJuuPU.qT7 vO2B2ICarig2UYK3AbG4oBlxDLHrUoUIA0hv_CvvqfDKCGD7gS4DJSLGEWJV 2A.dFV.0A.4emCoABS.0Qv1o1n9sDqGO5ADD2aloIkWc.WLwcw–
X-Originating-IP: [157.55.116.165]
Authentication-Results: mta1217.mail.mud.yahoo.com from=newtrier.k12.il.us; domainkeys=neutral (no sig); from=newtrier.k12.il.us; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO CH1EHSNDR002.bigfish.com) (157.55.116.165) by mta1217.mail.mud.yahoo.com with SMTP; Tue, 20 Nov 2012 12:09:47 +0000
Received: from ch1outboundpool.messaging.microsoft.com (10.43.68.240) by CH1EHSNDR002.bigfish.com (10.43.69.241) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 20 Nov 2012 12:08:35 +0000
Received: from mail131-ch1-R.bigfish.com (10.43.68.242) by CH1EHSOBE001.bigfish.com (10.43.70.51) with Microsoft SMTP Server id 14.1.225.23; Tue, 20 Nov 2012 12:08:35 +0000
Received: from mail131-ch1 (localhost [127.0.0.1]) by mail131-ch1-R.bigfish.com (Postfix) with ESMTP id 147B0401A6; Tue, 20 Nov 2012 12:08:35 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:50.201.16.151;KIP:(null);UIP:(null);IPV:NLI;H:NTMAIL01.nths.net;RD:ntexch01.nths.net;EFVD:NLI
X-BigFish: VPS48(zzc85dha398ivzz1de0h1d18h1202h1d1ah1d2ahzz8275bh17b1eeiz2dh2a8h443h668h839hd25hf0ah1288h12a5h12bdh137ah1441h14ddh1504h1537h153bh162dh1631hbe3k15d0l15cma02m)
X-FB-OUTBOUND-SPAM: yes
X-SpamScore: 48
Received: from mail131-ch1 (localhost.localdomain [127.0.0.1]) by mail131-ch1 (MessageSwitch) id 1353413312648742_16690; Tue, 20 Nov 2012 12:08:32 +0000 (UTC)
Received: from CH1EHSMHS016.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.244]) by mail131-ch1.bigfish.com (Postfix) with ESMTP id 57645260079; Tue, 20 Nov 2012 12:08:32 +0000 (UTC)
Received: from NTMAIL01.nths.net (50.201.16.151) by CH1EHSMHS016.bigfish.com (10.43.70.16) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 20 Nov 2012 12:08:32 +0000
Received: from NTMAIL02.nths.net ([192.168.194.152]) by NTMAIL01.nths.net ([192.168.194.150]) with mapi id 14.02.0309.002; Tue, 20 Nov 2012 06:08:31 -0600
From:
“Collins, Peter E” <collinsp@newtrier.k12.il.us>
To: “info@notice.com” <info@notice.com>
Subject:
Thread-Index: Ac3HF8EFf0hwi3SMRaeT/rgft5INsA==
Date: Tue, 20 Nov 2012 12:08:30 +0000
Message-ID: <38A096FD7555034E86C81153095D831B015C15A5@NTMAIL02.nths.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [41.71.173.93]
Content-Type: multipart/alternative; boundary=”_000_38A096FD7555034E86C81153095D831B015C15A5NTMAIL02nthsnet_”
MIME-Version: 1.0
Return-Path: collinsp@newtrier.k12.il.us
Reply-To: <collinsp@newtrier.k12.il.us>
X-OriginatorOrg: newtrier.k12.il.us
Content-Length: 1152

NAME USED: Dr Collins Peter

SECOND EMAIL: Attn: This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-7030115459 ,

HEADER:

Return-Path: <web52644778980000x@att.net>
X-YahooFilteredBulk: 98.136.218.126
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: YxwxuscWLDtYRBlEuwlWrBw_0ByFAfeYeEaKlhKmf_Pqo3oQ VZ4RzgKvia0dbtrf82vD2MygMgJipAOcg0xhghxyhvviIGLdwL7O9HeA_MVd CTYGLOwuYMZNFxvjFm62VKjODYvnptlR8EP2Eq4bl7k5b40vuAKQlN.VEPv6 Jj6Hv94NjiaoP1DqZkJ9niVr4amHA2Krz7hUiu7nb4dKm5FksoBvOjLiu5c6 LHxAgL_1HwQC1Kj94cY6qI2QeZMVbZE8q4fnq1zWg.nXZRhqSr2Z3IE99Vfw wZ56W_kHMqjve3BFqLHqrBq8RKFRrEA0LIWoTxzT.SXuavzNzee4EgDmzQFG Azw55EUT4_L8CQh3Yvuo2mQqsL5b0DvfvtZgLcOjD60.rbyLf51x.t.t1fsa 1oEjZhoHjxxQ_bG_Ud44UCim9Aad_eUMKDNhKnRDHkyuvhq6981x7wC3Wrki zhD6OWa.KVTqY6RVBWhX6fgWm.qUZFTXpIDTFRgSjZTcIVgOmcPtIsNbPbks gayTqPf4rqmt_33Dez5Oe0dBUM.TJUwDanFeN7Az8x9JN5pNWjxybYOZ6mu0 1EzAgiuYd0zc_wF1bS1fDmTpxrbXcalKzBvT_GAZ1Rge1P.T9Ju5Z.wvtoRi wqzLdIQR.OJ4R4ADjlXDt_6MY.sWxwWbrsh62pdNCgNpoAJM9IcaoldrE6Wy xAeVMkTvdzh0OLi.r2AWk71jpv78aC7kn_vonZ1YHhV0armnTXgZAHbnbO6F ms6.bhBcpysOsOdkJuQ8l0llDNW0anfgunue24vR2UyAsfvxa5D_2e7D5Vuz dyXvxJC9q2wxkkR17TCc1eWwmBV2WC0OGQA0lPnYwXC9.yEVofWQKNjgsss7 0wjyMZ7LN98TSaNp_4JnxMT0HF2Fhhpbh7YY80jc5n_FyXP0AAt26MYs6aBK T.qEDebCeFuzB40HJcGbnJO.J4a8XjwVoysy3i5nTd6ax3p1fCHqMU3tR9jh b.i8Qr4pUCBGxaNBhT1_dQ3b1sYVNd7pMi9b6dvEmmGH9dTOtRewwZvd2nvn 8oDpVXiYIzqx6Rq9ZSZIkJxb9HOhpjhN8mq3Guaq.mQ2YUN_.q2034AQmjzY 8YOUg8CZFXzXJY38jakTJIjuiXD8BOagQvhFHUIiK07F7luKu0vFisMrqAvg oNshOmGpcxznwZ9u.c9DnN2tcjL0OgzDpvg3Unkg3p29sDV6CMFXqf2v1QpQ sKcLP7oQKRmcKvaXxNN6.tyYsNUkH1Bksqg-
X-Originating-IP: [98.136.218.126]
Authentication-Results: mta1033.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm11-vm9.bullet.mail.gq1.yahoo.com) (98.136.218.126) by mta1033.mail.bf1.yahoo.com with SMTP; Tue, 11 Dec 2012 06:46:42 -0800
Received: from [98.137.12.55] by nm11.bullet.mail.gq1.yahoo.com with NNFMP; 11 Dec 2012 14:46:41 -0000
Received: from [98.139.44.74] by tm15.bullet.mail.gq1.yahoo.com with NNFMP; 11 Dec 2012 14:46:41 -0000
Received: from [127.0.0.1] by omp1011.access.mail.sp2.yahoo.com with NNFMP; 11 Dec 2012 14:46:41 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 713612.98465.bm@omp1011.access.mail.sp2.yahoo.com
Received: (qmail 53233 invoked by uid 60001); 11 Dec 2012 14:46:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355237201; bh=1Tsupv5caskqf9mge0R5RXi2qnrZiMm1Aq74YLv1THA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=d0RbFWDQ2rV8/8EXXlMR7i2VOjKilYeOBFydV1IW16ocBNPVQMUNHFzIM6L3A2h4gqL3Grzh8MgbGkhwqhOlWMu7My6F8FKiIf+Pg5ye5iuwah/8G6S1Ado8CChFMhmECHbzGAwLDbrxPlRFKvz5joLrsKMtRzKRtcE5eXphoGA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vjMzxQxarqcqmShOCLgE0HDBbv9eGBiPHgQKKYF4O5TCYrCvNT3eU9W0hvngieNBEGMbuiR2/ZoXPq873PanQzZD0By1gxA2Fmf/8Sthuei1fyBqDwvcd6nl3Dvv7uynmy0Ya+st1wQ6JH/BShU88SffXHjTLkjLkt6lxEEktr0=;
X-YMail-OSG: pgvQF3QVM1mLxZmT73VMfxmEGdzXaRnQRMYeQPC63iaQjwW 4K__5URLbF_yynhsaAouwFbc08adA0R4mnNqiV7YHyxU0tr11LXo4Ta_0KiQ TxVS..r_9SsgbyOZjhMSXrjXbXJ0GHf47ktIl028sBsTjWbcxtPXSQqbPyMQ F4QNhvxM.BVDpOh5T5oFYwuoORrB1NLSM3csjYOg8LvqCtdnvTTwoYkxokns 9xiHNLl83SO2R2DHSayC.6oNQLjvYMPxh8Aeym4t_6ajnBr4DfRGx1TPrs23 gQrSqww3hv.xnu5ggtpJ3j15R6o.gHcdWPsXslYVUJHwh0WtHcK7MkQZw7gc 8sBseuqMwUeoGZ113dC7howF0iEEmrCoduq8mPsfH7mFEZz7g4oJrkl0w_n6 kX1dWfnuQ3LPbUf1PgsoqlP7nCEQ3ZEpKGet6VglOMgncopioOk8Z_fVN5Hw lmdaAPfS91ze0AWfaLqWRth2qUVz8sPz.TjOgloZYT28Sq1yGuMg5uezQIzD OZBs0oZs_Pza2bTonu1swUyBd3jlvdll5CUc-
Received: from [172.163.86.61] by web180804.mail.gq1.yahoo.com via HTTP; Tue, 11 Dec 2012 06:46:41 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355237201.98816.YahooMailClassic@web180804.mail.gq1.yahoo.com>
Date: Tue, 11 Dec 2012 06:46:41 -0800 (PST)
From: Dr Collins Peter <web52644778980000x@att.net>

SECOND EMAIL FROM: “Dr Collins Peter” <web52644778980000x@att.net> REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com

Scammers number – +2347030115459 (prepaid throwaway phone most likely)
info@notice.com — 41.71.173.93 Location: NIGERIA – RIVERS – PORT HARCOURT (LAGOS) Scammer using fake IP with the location: United States (not scammers REAL location) 157.55.116.165
Example Messages Sent From 157.55.116.165
From: “Parekh, Hardik M” <hardik.parekh@mavs.uta.edu>
Subjectnone/blank
From: “Gordon, Anne Catherine” <anne.c.gordon@Vanderbilt
Subjectnone/blank
From: “Mr. Adams Mensah” <adams37mensah@hotmail.com>
Subject: IN GOOD FAITH…
From: “Stobbs, James, R (Jim)” <JStobbs@azdes.gov>
Subject: Your mailbox has exceeded the storage limit
From: SWISS LOTTO <swisslotto1978@gmail.com>
Subject: FINAL NOTIFICATION!! YOUR SWISS LOTTO WINNING NOTI
From: “Gritzmacher, Linda” <GritL@wawm.k12.wi.us>
Subject: Mailbox quota limit exceeded
From: Shankar Pant <srp0005@tigermail.auburn.edu>
Subject: System Administrator.
From: hlb.com.my <access.services@hlb.com.my>
Subject: 1 urgent alert
From: “Tutkowski, Elisabeth” <tutke@wawm.k12.wi.us>
Subject: PC-HELP
From: Hong Leong Connect <alamb@bsu.edu>
Subject: Important Security Message From Hong Leong Connect
From: cj1eufv6ql <volunteers@delautism.org>
Subject: 销N售8主
From: 侯绚丽
Subject: =?utf-8?B?Yjky5YiG6Kej5o6=?
From: “Hall, Carole” <CaroleHall@azdes.gov>
Subject: Mailbox Quota Storage Limit
From: Shankar Pant <srp0005@tigermail.auburn.edu>
Subject: Thanks System Administrator.
From: Chase Bank Alert <info@chase.org>
Subject: YOUR ONLINE ACCESS HAS BEEN SUSPENDED
From: “Ender, Allison” <EnderA@wawm.k12.wi.us>
Subject: Mailbox quota limit exceeded
From: <postmaster@go.local>
Subject: Undeliverable: Разработка инв
From: “Ender, Allison” <EnderA@wawm.k12.wi.us>
Subject: Mailbox quota limit exceeded?
From: =?utf-8?B?QWxlc=?=
Subject: segera
From: “Van Deusen, James” <VanDeusenJ@wawm.k12.wi.us> onlineme20@gmail.com
Subject: Mailbox Folder

 

 
Leave a comment

Posted by on 11/21/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Don Bright”

WARNING – NIGERIAN 419 SCAMMER

INFO: Don Bright <> fredwilliams3@rediffmail.com <> expressprocessatmcardbenin53@yahoo.com.tw

SUBJECT: FROM ECO WAS ATTORNEY  MR JAMES GEORGE ATM DEPARTMENT

FROM ECO WAS (ATTORNEY ) MR. .JAMES GEORGE
IN COTONOU BENIN REPUBLIC:
 NO:171 AKIL ROAD
 
Attn; Dear Customer,
 Greeting !! 
I wish to acknowledged you that we have finally succeeded in getting your Over due Payment worth’s of $3.8million’s United State Dollars out from Economic Community of West African States (E.C.O.W.A.S) department with the help of Mr.James George Attorney General of Federal High Court of Justice Benin Republic which acts as your foreign Attorney representative here in Benin Republic before his back to Paris France to compete his job there. 
However I am bring to your attention today that we are finally instructed for the immediate conversion of your ($3.800.000.00 USD) into an ATM VISA CARD by which you can easily received it via United Bank for Africa  Cotonou Benin Republic
Regards your fund lump sum of $3.800, 000.00USD via ATM VISA CARD has being approved and mandated by the Government of Benin. So this instruction is reaching you right now to kindly Contact  the Director of ATM VISA CARD CENTER of United Bank for Africa PLC : Cotonou  an “ATM VISA CARD CENTER”contact information’s is below.
ATM Visa Card Claiming Department
United Bank for Africa ( U B A)
Director: Mr. Ken Brown
Visa Card claiming Department
Email expressprocessatmcardbenin53@yahoo.com.tw    Tel: +229-97804183

While contact him immediately  request for the card copy and get back to us and below is the needed information’s or form to fill  for the Card processing and production which they demanded you to re-confirm to them by yourself as the beneficiary by using this code of conduct  “ATM-0321″, As Subject alright.
Your Full Name::::::::
Country::::::::
City::::::::
Home address::::::::
Telephone::::::::
Fax::::::::
Code::::::::
A copy of your id::::::::

Note that because of impostors, The bank also issued you their code of conduct,which is “ATM-0321″ so remember to indicate this code while contacting the ATM VISA CARD CENTER whereby using it as your subject alright.
Thanks for your maximum understanding co-operation and may God Bless you.
Regards
Don Bright
Chief Justice of Benin

 

HEADER:

Return-Path:   <fredwilliams3@rediffmail.com>
X-YahooFilteredBulk:   203.188.201.151
Received-SPF:   softfail (transitioning domain of rediffmail.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG:   kXm_l1sWLDulJeDnOLmSYdHmIqwp9r2k_ROYymTodmz266na zbWmm1RAwqAGvVzdkwDVIbDT8aDMccE0hDmzwJtDnlV4iJuFz0KcXVf1dBak x98QBBYy.rvg1pyEHXGwIyg0vfjfZzaH0cL2NhozBoR7T_SswQDqjPkpilTa 9zxjg2xwxJWYGVKBP6a2QUEmK3WpQosxrAVpSWwkGBZg7eVeoGsZDVA8NS5L GXQxxkjBDQK2EhPR0e6buJvQZBVYdWxOjzJaKeW3LkzKD_L.cqJXriH9pi0N a9gjHsvYsVZYjN5HmL7qbB1fOyNvL7A0y_kkrCIzGnq7tQWDOYsY8Szbpt6. wUI265q4YMhRGPG57mtQh4MqOj5vTQWQ7k8GODjOiFp0HD8EaShYjft3mra2 C_47mjLCermdzu7q8jRpFeuy.iiolsQV79zOfbeSP12ZhqrSPSaF4T2cx2Je dcVjk6guaZJMhSdnV5vjprupXr65wFz.T4l_kWsL446Pp5D.MrHn6DFmr.QQ wwbxEuJf.dYTCjEdTv3pR6agpyKx0H6efevBOMagtK391o8pFLXmZwl7eCTJ N_96Hs_mtE9u6YvXmTwAhNuDzbCI9bZq9lOiUg5Je0lnK9ECjTz6wN8DhErI _HKSfh6HYtEWjX41pyCBu_AqC.BPf9.apP4wnqPa4Swvf6nK_yd4JLPy5hQ4 QZk87kD3_aGkwheBtgxJYtaIXuBDZArx6K7eibTJR4wEWXCKoEMZKqfIfuTg E5J50THp.313pUu1skrpRY4W9mneEQYmVYnei3tje.0qjxtMAnE8EF0NFBPu 6C512x7CKXMg5jX8NC3U6dUxxQwBPkMGfXFkB1uLcKbz20aZCm3XVSe2RCwJ MiTkcht7A8Mh1uKqPfT03S4_W57g12Vd0rr8nAtzPoa7PReYYsq8cRUJWwOQ YTUr4LnYBE1VgmlOXv6cF_H9DZgwjMUFn7Jjwko_VAscFQcVfBtSqwzh7aF_ a2Myv2f0jlv.x8iqZtoJdMZ4QFeqm2lyK.z5vT_fjtINJACHdd.c.rYMFjIs s2Ki0.H4pWR9AlbhLbzWzS6We6y8GR84DuP8bfLv9tnzxPI6Y8wXeNX_PGPU ngcHDVItOGamaK8YRs3UA6Hh47uLPhQQ_bR6QtxSQ9dylIHZyGC2LFEezNIB sO95KtmJdbtuFkwDPvP498wr.UEGHikyo6zfrcF6sMvSRqO_qSFK9WL6di.Q cSu_k8mhBhCBX7UflKUBgnJpVLOjNapnlBuYCIUAdlJfPyzAb7qCXLBfIO61 ufTgbAVKdinUnJtyqf2z2ocHbeY8x7k3RtTt407n6zAyJnuWdacA4JR12kuR GzIeiw–
X-Originating-IP:   [203.188.201.151]
Authentication-Results:   mta1219.mail.mud.yahoo.com from=rediffmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1219.mail.mud.yahoo.com with SMTP; Mon, 12 Nov 2012 20:05:36 -0800
Received:   from [203.188.200.80] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 13 Nov 2012 04:05:33 -0000
Received:   from [203.209.230.76] by tm1.bullet.mail.tp2.yahoo.com with NNFMP; 13 Nov 2012 04:05:33 -0000
Received:   from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 13 Nov 2012 04:05:29 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   882944.40828.bm@omp105.mail.cnb.yahoo.com
Received:   (qmail 23703 invoked by uid 60001); 13 Nov 2012 04:05:29 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352779529; bh=ZStJQptkpiRtW9IHly4mG/teeC4Vi9ewmbkLGyxQEnw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=s41UtQ0D/KXQzDMgifijBIXVjLNxUR1ahFoNSwOa5shnso/PYBkPTZZBb2hauAI82cgX1+T8RA0TCkf5LfBmjlbI1n6GWWodpb9OueyaXHgU7l7t1hgqlXHBbeUDAAxLdDowSoVrHuaexcgdtaReePY0PgpW6Gn1rBq1SI+rbvo=
X-YMail-OSG:   i3LOjoUVM1lxIQLS9kVi4Y8kX8wV_wAnVTfrRQhVear54pa qPUcdSwwe
Received:   from [41.138.90.38] by web92402.mail.cnh.yahoo.com via HTTP; Tue, 13 Nov 2012 12:05:28 CST
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352779528.23247.YahooMailClassic@web92402.mail.cnh.yahoo.com>
Date:   Tue, 13 Nov 2012 12:05:28 +0800 (CST)
From:  
Don Bright <fredwilliams3@rediffmail.com>
Reply-To:   expressprocessatmcardbenin53@yahoo.com.tw
Subject:   FROM ECO WAS (ATTORNEY ) MR. .JAMES GEORGE ATM DEPARTMENT
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”373869220-595389065-1352779528=:23247″
Content-Length:   22280
 
1 Comment

Posted by on 11/20/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

” FBI ” fbi-office1100@libero.it

RECOVERY SCAM – FBI IMPOSTER – NIGERIAN SCAMMER

Additional information at the end of this post regarding a romance scam by this same scammer, different scam.

Email:

US-FBI-SHADEDSEAL.SVG FEDERAL BUREAU OF INVESTIGATION FBI SEATTLE DIVISION 1110 THIRD AVENUE SEATTLE. 98101-2904

THIS IS ROBERT S. MUELLER III OF FEDERAL BUREAU OF INVESTIGATION (FBI). THE FBI IN ALLIANCE WITH THE ECONOMIC COMMUNITY OF WEST AFRICAN STATES (ECOWAS), WITH THEIR HEAD OFFICE THERE IN NIGERIA HAS BEEN WORKING TOWARDS THE TOTAL ERADICATION OF FRAUDSTERS AND SCAM IN THE WESTERN PART OF AFRICA WITH THE HELP OF THE UNITED STATES GOVERNMENT AND THE (U.N) UNITED NATIONS. WE HAVE BEEN ABLE TO TRACK DOWN SO MANY OF THIS SCAMMERS IN VARIOUS PARTS OF WEST AFRICAN STATES, WHICH INCLUDES (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMEROUN AND SENEGAL) AND THEY ARE ALL IN OUR CUSTODY OVER THERE IN LAGOS NIGERIA, MEANWHILE DURING THE PROCESS OF ARREST, WE WERE ABLE TO RECOVER SOME FUNDS FROM THE PROSECUTED SCAMMER.

REGARDING THIS GREAT ACHIEVEMENT, THE (U.N) UNITED NATIONS ANTI-CRIME COMMISSION AND THE UNITED STATE GOVERNMENT HAVE ORDERED THAT THE MONEY RECOVERED FROM THESE SCAMMERS BE SHARED AMONG 100 LUCKY PEOPLE AROUND THE GLOBE. THIS EMAIL IS BEEN DIRECTED TO YOU BECAUSE YOUR EMAIL ADDRESS WAS FOUND IN ONE OF THE FILE AND COMPUTER HARD DISK RECOVERED FROM THE PROSECUTED SCAMMERS THERE IN OUR CUSTODY. YOU ARE THEREFORE BEING COMPENSATED WITH THE SUM OF $1MILLION DOLLARS. WE HAVE ALSO ARRESTED ALL THOSE WHO CLAIMED TO BE BARRISTERS, BANK OFFICIALS, LOTTERY AGENTS, PERSON OR GROUP OF PERSON’S WHO CLAIM TO HAVE FUNDS IN THEIR CUSTODY THAT BELONGED TO YOU OR WANT YOU TO BE THE NEXT OF KIN OF SUCH FUNDS WHICH DO NOT EXIST.

SINCE YOUR EMAIL APPEARED AMONG THE LUCKY BENEFICIARIES WHO WILL RECEIVE A COMPENSATION OF $1MILLION DOLLARS, WE HAVE ARRANGED YOUR PAYMENT THROUGH OUR SWIFT CARD PAYMENT CENTER WITH ZENITH BANK PLC.

PLEASE, FEEL FREE TO CONTACT THE PROCESSING OFFICER DR. MIKE OBARU. THE SWIFT CARD HAS BEEN SPECIALLY PREPARED TO ENABLE YOU WITHDRAW YOUR MONEY IN ANY ATM MACHINE IN ANY PART OF THE WORLD, SO YOU ARE THEREFORE ADVISED TO CONTACT THE PROCESSING OFFICER DR. MIKE OBARU WITH THE REQUIRED INFORMATION AS STATED BELOW.

CONTACT PERSON: DR. MIKE OBARU. DIRECTOR ZENITH BANK PLC SWIFT CARD PAYMENT CENTER CONTACT EMAIL: (ZENITHATMDEPARTMENT01@HOTMAIL.COM) TEL:+2348125279893

YOU ARE ADVICE TO FORWARD THE INFORMATION BELOW TO DR. MIKE OBARU TO ENABLE HIM SEND YOUR ATM LOADED ATM CARD INCLUDING YOUR PIN FOR EASY ACCESSIBILITY.

YOUR FULL NAME__________________________ YOUR ADDRESS____________________________ P.O.BOX_________________________________ COUNTRY_________________________________ TELEPHONE NUMBER________________________ MOBILE NUMBER___________________________ FAX NUMBER______________________________ OCCUPATION______________________________ MARITAL STATUS__________________________ AGE _______________ SEX___________________

OFFICIALLY SIGN.    ROBERT S.MUELLER III FEDERAL BUREAU OF INVESTIGATION J. EDGAR HOOVER BUILDING 935 PENNSYLVANIA AVENUE, NW WASHINGTON, D.C. 20535-0001, USA http://www.fbi.gov/about-us/executives/director (fake fbi website. I am keeping it on here incase a potential victim uses a search-engine.)

HEADER:

Return-Path:   <fbi-office1100@libero.it>
X-YahooFilteredBulk:   212.52.84.102
Received-SPF:   pass (domain of libero.it designates 212.52.84.102 as permitted sender)
X-YMailISG:   xAtmkYEWLDvD0iBY2KNVvnzKATvf2rmIHFIADQoJJMosMAvJ my.Jfzk7bNiaJvj64Ho6AJfKr9R1oToqR9zlNnXOgGLmEre.RoQd1KFo8MO. 6PU_m0juNZ48raeERM7KHpLz_TfqBH2Km1F0iDYk4cwmgg3Yn33PJwJu3DnM vN3WA9crjid3TJlpmsZm_ZziohvZkVl0LhiMfDWf23rA.h7I1_h0BVzMNq7g BJynJp7yTevnB8UUzjxgoZwwqFKCI0oZ.ng7mS4Enp8C_f1PFwhbc5GfBp6O IkJy1nxQ0fAFqU4iIvrFqwuKqoQWJjLDTR9sXmMths6fpSosVcsJtKEPez9K P6oyzjQ.NbLDsz16NMhE4h1NCXmsbuZLy51MM3yG2bxT3R.jo04is92y9hJb xTJkBXpDVaJe0iZEpVMkiNSZ8i0swhQs1933AnuX2eX5CXgQyWBcrIj3VSy6 bSgXR6CMNIvtIhJ0zz5_aDFV_oRLilAt8IH5xsi9XR2XnczxHZ0ZOcISuSuy cUYT9_7f3On.1oY4O.56xbBo73_88iiP7uiDUSsfMonq5X7ngm260dwE0DaF HnPS3qbR5J93dpJx0wpVRptSFmzUnoDZ_CGiXbineduNHB2eR0or5SrmeNXv BYwZ3VjaoCrPyxMb2nBKH798BjkY.Bea6ez_cEXKpKYylH5mKfFyuCH6b1oK nAKIhx_fldos1FW.8mP4Nz3Mcd1OpVnjnkBZeiOkrLiWCV1jkaRyWXx5XNHd R1uXpiQCnsZAthbAIAyZsU6C.5Ki7ckEY2Mg1nfL2AaulFbgM96IEGi7SqIF dkE4Ha9PV7Ampe5g3Nfz5twkwEVwcM_5oliaVjYNaAHGnezm03WBr3TthvSo qqUbOdE.huUlRdLsaiMYb8jjrGGeH8WDvXZ9NDzDyCW_Rt2iZibfgpCAO7S6 kqsAmPul7ibaj8iiWLIMia.OwQE7JARPN0m7iZsrC6_wne8Beb8FHsGLvMKJ 4zKZ8IT4Hhz6Ien3cGlfTPoZMkXZOZmIpiK2Qdd5hhILkhDFAkECZItupWzP 5uJzRJqNO67KtmhN_VnQlxbwz0KB_hcKHTumnJeAxn.XxXK5ENz8ukLuoGrC wEj_YYllwKpnP_xrnTYY7vAWzmXKD0tCBCdAtswAuQLlc2lCBsu5i_LIp9ox EH.si_2gIbug99h1gRq6uyfxLblSLkoijVHuxynBW.oZU7wtTPvTSOWjY1b3 6bGsOUdGk4GVDeZ89C.LUvcgx5sI1B1vW6VdX8WiggddY15uA3XK.a8g0Drl .JgxEIhczxPal4C6cs1NfUDSb89oBBFsxTx9hj_KTWiqeHxwATvYbDyThMF0 hZ5yN4vzhj6GNog6TAkfkWXl3Yy7rY_gQiTPb7y3VuhlrjL5x9t6ySoYYbJN 8y3WDq6YQfBWrdIH28qPy73FOx_Bk2bvA1QvuCcfM3wDJa1_7PawPAdNX1mZ 4TRD3tMHOab4NC0Oc79D.uKzieP31FrQ_vFGW19c4Wi._JpKAdCRuh5SMCOX EkM._vjyhmVKyGohrXRGk3C69Rv9nQoBSsoy5nqnP3mUTyqeEZA0ISjrYNyw 2N2SYL3Z5rj_550.MN3DEOMRJ1BMBu_cr0MnHzVfs6Bt
X-Originating-IP:   [212.52.84.102]
Authentication-Results:   mta1192.mail.bf1.yahoo.com from=libero.it; domainkeys=neutral (no sig); from=libero.it; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO outrelay02.libero.it) (212.52.84.102) by mta1192.mail.bf1.yahoo.com with SMTP; Mon, 15 Oct 2012 04:09:59 -0700
X-CTCH-Spam:   Bulk
X-CTCH-RefID:   str=0001.0A0B0208.507BED78.0140,ss=3,sh,re=0.000,fgs=16
X-libjamoibt:   1821
Received:   from wmail74 (172.31.0.38) by outrelay02.libero.it (8.5.140.03) id 50764619008E2E89; Mon, 15 Oct 2012 13:09:54 +0200
Message-ID:   <27451027.1527241350299394356.JavaMail.defaultUser@defaultHost>
Date:   Mon, 15 Oct 2012 13:09:54 +0200 (CEST)
From:   “fbi-office1100@libero.it” <fbi-office1100@libero.it>
Reply-To:   “fbi-office1100@libero.it” <fbi-office1100@libero.it>
Subject:   LEGAL MAIL
MIME-Version:   1.0
Content-Type:   text/plain;charset=”UTF-8″
Content-Transfer-Encoding:   7bit
X-SenderIP:   196.46.245.24
X-libjamv:   zn1mBWAiz0I=
X-libjamsun:   dpN/pSNPH5urOmpbGr9iSSTqQoO028QCt0Pe4TZ9g28=
Content-Length:   2999

702303213 ZENITHATMDEPARTMENT01@HOTMAIL.COM

Email-Address: fbi-office1100@libero.it 

IP: 196.46.245.24 – NIGERIA (Lagos)

IP: 41.206.11.37 Lagos, Nigeria

IP: 192.168.34.227

212.52.84.102

animated gif

ATTENTION: 

A Nigerian with the IP address of – 41.206.11.37 – commented on this post, I didn’t accept the comment but I will post what he said below. Also, Lagos, Nigeria is where the comment is originating from which already set me off, but I didn’t want to post him unless I had some type of proof of negative activity. Well, I found warnings from this scammer who using the name “ Elias ” – upesaspelltemple65@yahoo.com –okdousplltemple@yahoo.com (notice in the comment he puts okdousplltemple@yahoo.co but forgets to put the “M” – Somebody needs to tell this thief that only 3rd world countries believe in that spelling casting nonsense. Of course there probably are a small amount of vulnerable people who do believe it, most of us don’t believe it.

Sneaky little rats, below is the comment he sent. 

“this is a spell caster I contacted 2weeks ago. he is really great. I have been scammed initially by other spell casters of almost a thousand of dollars. I am not rich, I work my ass for this hard earned money. But my sadness was turned to joy when I met Dr.okdou he is really terrific and you will get results for whatever you are seeing he for within very few days. he is so honest and sticks to his promises. His contact is below: okdousplltemple@yahoo.co  ”

Also below I’ve posted the names and email addresses of scammer(s) who have sent scam to (potential) victims under the host IP address which is used by the scammer to fool victims into thinking they’re from the United States. The host IP is 207.46.202.15. — however, the scammers REAL IP is  41.206.11.37 which is originating from Africa (Nigeria) — Any questions feel free to ask.

“Elias” – upesaspelltemple65@yahoo.com – okdouspIItemple@yahoo.com ← This Nigerian Scammer is scamming under the following names/email address/etc below:

1) Gerald Moris – geraldmoris50@yahoo.com –

Image

Gerald Moris is pretending to be this man posted above. He tries to lure vulnerable lonely woman on dating websites then tries to scam them out of money.

Host of this IP: 41.206.11.37.vgccl.net >< ISP:MTN NIGERIA >< IP-Address: 41.206.11.37 (Lagos Nigeria)
Contact Email: hotmaster@mtnnigeria.com ><

Organization: IP Block Assigned for MTN N Corporate Clients

Host IP is: 207.46.202.15 which is listed as Beverly Hills, California ><

Host name for this IP: – 1661882.r.msn.com >< 1654287.r.msn.com

Registrar:Markmonitor.com >< http://www.markmonitor.com

Referral URL

http://www.markmonitor.com

ns4.msft.net
ns5.msft.net
ns2.msft.net
ns3.msft.net
ns1.msft.net

41.206.11.37 <- This Nigerian Scammer is connected to the list of IP’s below. (this IP is most likely in some internet cafe where all the cowards meet up and spend their life on the computer trying to rob people.)

te0-2-0-6.mpd21.fra03.atlas.cogentco.com IP: 154.54.62.217 130.117.14.214 (130.117.14.214) 188.138.112.3 ↔ 212.193.237.224 volkan@msn.com 213-152-230-91.mtnns.net – 213.152.230.91 —- xe-2-0-0.mpr2.lhr3.uk.above.net (64.125.28.93) 41.220.75.237 (41.220.75.237.vgccl.net)- Lagos, Nigeria 41.181.77.95 – South Africa City: Johannesburg

static-ip-188-138-112-3.inaddr.ip-pool.com – 188.138.112.3 – volkan@msn.com

_______________________________________________________

ANOTHER SCAM EMAIL SENT BY THE ABOVE SCAMMER –

Fake FBI Scammer is also ” Juillet ” A.k.a ”Romance Scammer”

Hello Dear,
my name is Juliet,
I am, very happy to contact you, to day
i wish to be in good relationship, with you,
and i will be very happy if you can reply me
through my private Email: juillet kamala@yahoo.com

return-path:
envelope-to: scamdex_dmca@HUN1P0T,paypal@HUN1P0T,scamdex@HUN1P0T
delivery-date: Fri, 05 Oct 2012 19:52:55 -0700
received:
from outrelay03.libero.it ([212.52.84.103]:37683)by lester.HUN1P0T with esmtp (Exim 4.77)(envelope-from )id 1TKKVa-00050G-BB; Fri, 05 Oct 2012 19:52:55 -0700
from wmail12 (172.31.0.42) by outrelay03.libero.it (8.5.140.03) id 506C837E0059E570; Sat, 6 Oct 2012 04:52:50 +0200
message-id:
date: Sat, 6 Oct 2012 04:52:50 +0200 (CEST)
from: “23456789juli@libero.it”
reply-to: “23456789juli@libero.it”
subject: hi
mime-version: 1.0
content-type: text/plain;charset=”UTF-8″
content-transfer-encoding: 7bit

___________________________________________________

none (domain of dsnrelay.libero.it does not designate permitted sender hosts) YWdlL3JmYzgyMgMDNQ–
X-YMailISG: nmmVK2kWLDtJxNGdAzHdbyoPWiscf9Y5sfY.IakKrUePMq1t 32dtFcrQ69cMcj_2gGCfyQi04cyKGiaFNndEglLACJX1urKbjLisdKVhhdiH WS9pLOdM7ZeGRZfVqIzd46A5Ou2v6IjJ0eZXK75uMoNSZBErVXqTHjmrrKWX GDsqpJ102bTmiFTBRpPHzW6QSVj1UVgXKUbqiHguH5Hm69ylMuNdMuD8Sth7 jlGwrcLyp8VvoKh82cW7pfDcS60Mw6MIWeAPepfGDPTUHuQk21e0ZL4kogpi 8mLfjiUj4kBxiIlGDggSEwCiJR4wrGLErZ.FJoMy.SnBYRMugb_cB7yZKXWq mKLNnNDrhk4NVL3szpFMl7JQhSa_vzL6jPGr5IxAL_YFtGBXb5NPQ6.zNnEF MkfT9dEJfN8kZv._yaGRtbataqLzoKDVtzE2MhPxrYwlwSpNK3qV.ZSiT0l0 K234WioX7_NqP2uKDIx63p.01CBzzgu2iwD5scbOhr_9gAyqyg12Z6rMO9G0 _2eWEoPC1JmZRkEbGhxoMi0rkHn6ms0Mm4qyEuDmUBjYGvbJKN57I53n.LoV T9zumu.iZeEdrj97uBe1LvDSB.5DEf.I8_Vu72n2V.l4eUFHz2pCc6la7PvR wo72kNlDMaG_U7kN03_hdwvhW81yJFrCCVCgehNDuOKcPnAZKqdzwS0X3855 lJ4MFsbsX1gexEdgQGkA1rtKHEtcSgzqbG9RwarfalZFu_bLvbRbnn2RcxRV KqquWHlheHedyaZZutNXelnZ1k9IzbqJXmt4JNGH7LBkxC5xliIOsjQtORMM x4aYPSy1cIcrBY_ziu3XUvw-
X-Originating-IP: [212.52.84.43]
Authentication-Results: mta1318.mail.gq1.yahoo.com from=mailrelay11.libero.it; domainkeys=neutral (no sig); from=mailrelay11.libero.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dsnrelay.libero.it) (212.52.84.43) by mta1318.mail.gq1.yahoo.com with SMTP; Thu, 18 Oct 2012 00:07:13 -0700
X-libjamoibt: 1020
Received: from mailrelay11.libero.it (192.168.32.95) by dsnrelay.libero.it (8.5.133) id 4F5A21B7479B2052 for <>; Thu, 18 Oct 2012 09:07:11 +0200
Received: from localhost (localhost) by mailrelay11.libero.it (MOS 4.2.3-GA) with internal id MLR71868; Thu, 18 Oct 2012 09:07:11 +0200
From: Mail Delivery Subsystem <MAILER-DAEMON@mailrelay11.libero.it> Add sender to Contacts
Message-Id: <201210180707.MLR71868@mailrelay11.libero.it>
Content-Type: multipart/report; report-type=delivery-status; boundary=”MLR71868.1350544031/mailrelay11.libero.it”
Subject: Returned mail: RCPT TO:<fbi-office1100@libero.it> Mailbox disabled (from ims4b7.libero.it)
Auto-Submitted: auto-generated (failure)
X-DSN-Junkmail-Status: score=10/55, host=mailrelay11.libero.it
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A0B0201.507FAA9F.0066,ss=1,re=0.000,fgs=256, ip=0.0.0.0, so=2011-06-21 16:49:39, dmn=2011-06-08 23:29:05
X-Mirapoint-Loop-Id: dba025d3596373ad78331c32509687d7

192.168.32.95 <> 212.52.84.43

mtalibero17.libero.it [192.168.34.227]

—– The following addresses had permanent delivery errors —–
fbi-office1100

“fbi-office1100@libero.it” <fbi-office1100@libero.it> MAILER-DAEMON@mailrelay11.libero.it ims4b7.libero.it

 
1 Comment

Posted by on 10/18/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Inheritance Scam – “Nelly Pius”

NIGERIAN SCAMMER – ATM CARD SCAM – INHERITANCE SCAM

UPDATE: Nelly Pius emailed me with a new scam on December 19, 2012 – to view the recent scam click: Nelly Pius INHERITANCE SCAM 

Name: Nelly Pius

Email Address: pius_nelly@yahoo.dk

IP Address: 98.138.229.226 (If you google IP address provided, you will see this particular scammer has been warned on other anti-scam sites, under other fake scamming email addresses.)

 no-scammers

Hvornår:torsdag den 27. september 2012 21:00 – 22:00 (GMT+00:00)Fra:pius_nelly@yahoo.dkMeddelelse:Vital Information from ECO-WAS / UN
The (ECO-WAS) Economic Community Of West African State’s GOVERNMENTS, Resolved to pay you an INTEREST of your unclaimed Inheritance / contract and compensation Payment since till toady
It’s been released on a Special Payment Method called (AUTOMATED TELLER MACHINE SWIFT ATM CARD PAYMENT), which you shall be withdrawing on daily bases until you claimed your total amount of $2.500.000 (two Million Five Hundred Thousand Dollars)
You are therefore advised to re-confirm the below information to the paying officer in charge as the Roland Bruno.
Your current address for the delivery of your ATM VISA CARD: Your Full Name…………………..and………….country Telephone………………… Age:……………….and………………..sex Occupation & Position:………………….. Scan Copy of your ID Card or international passport or drivers license to ensure that the money is received by you directly
(Send the required details to the below 🙂 Paying officer: Dr Roland Bruno Email 😦 ecowassavings@yahoo.co.uk ) Tel: +22968096722 Debt Management Office, ATM CARD SWIFT CARD CENTER. OCEANIC INTERNATIONAL BANK BENIN;
Meanwhile, you shall certainly pay for the processing affidavit bill of which I do not know now until you get in touch with the officer. After that they will supply you with your withdrawals information; Such as your withdrawal limit, Pin code # and also the activating serial numbers of your ATM card.
Yours faithfully; Mrs. Nelly

Return-Path:
X-YahooFilteredBulk: 98.138.229.226
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: FOcNh6QWLDuwokGIamqo2H1mhFgBK__fvBOJZ8GjwILP0jKp H_fXx0rsRIGtWnE8LHiDjqgrUbhVMalmSllTqA0DRUXVL000oPDuFM_4Cvdq BG9I6cTmDOPwt3Rbvyyrw1_.26QSw.velDioRcayZTUc9dtps6B4yu8iQb.X 45quHIwVHMKOZyAuvrZsOde4f9rNUjjA8jehT99P2KYxuszbHy4plZ2JCHhj iC1s4KT_XanfymkXm60urdqtbA3TVX_bkGnktQMQ8hA.KV.ll1KgActsQDPn CT7Whw9F3G0YtO..HY98BjSqfWUqKZ_9O9hoN175bzx.Y6003jsGJgZowQkK DkoWcD2MMet7hoGllu2xaFaCO9F6K6sjGW6RgGbTuBNKodcmZg55dvOsYnAk nl6eg5A3hk2QXz40LgNCiTRNDYXId7UJ7liQp5vfEz4bmRvkbIn_F_Kfe2fb PDqG9HXvy3iWkgsYmNbI0Y.ZFQt8NXdK4qoGihSNJzGAn0oaufWSCAD5nPEG qUAVabftIWrVbIL4h83oo.Axnnhc.gP3Sq4JICZK8R2pTv1uyLgotWgJvqEV lkaRO.4hr5fTMA68AuEBbZZBKuhYZrONNhHOjRDA_0Ub1Qpt4A1N8mvS3EDH OXTxGMfwNHggXYzAgM0efEowxSH.p4KSFlFuB7HalF_uTf4LepMH4Jw4Pepy dIbhOHSt.rWElmpQ3FwQnY9fDEO1fWjdBFb1fd23HFfEEhZ52qAgqSX5dYYj 4vFsP3QgcvjRtphwDJkTsI.k5YFbuEY1o27.qr3.fwQXMDHm1PecFRfcxknH Jl.asZFxcHerjK8aglPDjTm09Ky4HobY_cRHFbwE5N18S8XBiN9KyUjqM8cq 7Vud9U_1F3uyXraJMJvjkyjEzPbxFCjYsHE2q5Gzm3WuiC_GvzJDux0kJDIk 770Sr9EKBwyYKov.lNHPyxTlFcN6RfyaBaPyTPh_kulsWBnKWktZyWm2.So2 su_Sb9DHRVLfhN42iBrx.mBeF.j5_QaHc9JE44XYqT8JtIdYgT_SVNz7EBC2 BI4oHmscMaNsSbRNw3z8YK9PsnVCLOVhJpvvjN5y8T4j9kVUW2NhHD.y6GbY 2w6WzXd15q8JQEc1UvKGxrEBOWvmF8mtoZ4.Kq1hJKG_YWRjbzVTK8i4IVZt Jq9yFcvcvvHtTnv5kMfjdym2iCAoBpeAXzrfjoXkRlaR9YBmt7fNfFWWaw95 EyaipLDjQK4gxYlU82KJMKQ3VO26udNOb4EUtEFbacxgTlNLV2l8uUNqsdJL hjzulYxZXb1uXou1HaGVNzmsWQH8BYmJ1OYxtqVtnwxpijmNxCG6Aeqg6Bxx dfj8ZU4cWpVf
X-Originating-IP: [98.138.229.226]
Authentication-Results: mta1129.mail.gq1.yahoo.com from=yahoo.dk; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO n3-vm2.bullet.mail.ne1.yahoo.com) (98.138.229.226) by mta1129.mail.gq1.yahoo.com with SMTP; Thu, 27 Sep 2012 12:45:09 -0700
Received: from [98.138.226.174] by n3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [98.136.168.76] by t3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [127.0.0.1] by store166.c107.cal.gq1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
X-yahoo-newman-expires: 1348778706
From: Nelly Pius
Sender: Nelly Pius
Reply-To: Nelly Pius 98.136.168.76 – – 98.138.229.226

pius_nelly@yahoo.dk

 
1 Comment

Posted by on 10/02/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: