RSS

Tag Archives: Fake Credit Card

“juliette Chapin”

warning_gif

ATM LOTTERY SCAM – ADVANCE FEE FRAUD

CLICK HERE FOR A LIST OF OTHER EMAILS SENT BY THIS SCAMMER – NOTE THAT THIS SCAMMER, LIKE MOST, USE DIFFERENT IP & REPLY ADDRESSES IN AN ATTEMPT TO HIDE THEIR IDENTITY.

No-Scams

Mtcn #: 773-443-3038
Your agent can pick up at any agent location. Sender name is juliette Chapin
Sent was $1000
After all the issues we had this was the solution to sending the money.And reference #s 23290772, i sent the last $1500. I am thank you for you help by stand by me and General Daniel for this we are appreciate so much. I hope that me and General Daniel will meet with you soon. i have attached the receipt for the money sent as instructed.
I will wait for an email from you with the phone number.

johnbaird.josephiceberg johnbaird.josephiceberg@ymail.com
Western_Union_Transfer_Slip_JG…exe (1.9 MB)Money_Gram_Payment_Slip_JGPE_0…exe (1.9 MB)

Jen

_____________

Message contains attachments1 File (565KB)
WU slip.scr

Dear Sir,

Copy of your trasfer payment slip details sent to you as instructed. View the attachment the mtcn # 773-443-3038..with d same information you provided.

Regards,

juliette Chapin
Accounting Services Division
#103, 21 Rover Way
Spartan Wood,LA ,90250
Telephone: (780) 410-5703
Fax: (780) 416-5614

HEADER DETAILS:

Return-Path: <mickbone97@yahoo.com>
X-YahooFilteredBulk: 98.139.212.164
X-Originating-IP: [98.139.212.164]
Received: from 127.0.0.1 (HELO nm5.bullet.mail.bf1.yahoo.com) (98.139.212.164) by mta1067.mail.ne1.yahoo.com with SMTP; Tue, 15 Jan 2013 22:14:22 +0000
Received: from [98.139.212.153] by nm5.bullet.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:20 -0000
Received: from [98.139.212.227] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:18 -0000
Received: from [127.0.0.1] by omp1036.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 913034.31949.bm@omp1036.mail.bf1.yahoo.com
Received: (qmail 55569 invoked by uid 60001); 15 Jan 2013 22:14:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1358288058; bh=Pw9QukRh++jJavYxeuzXL3ty3osgj78RqiLC0VB59Cw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=DjLxsVlM+WTnrVf6HtpOnJcggBsj1P4TWpljCwNMl1RHDnCmJRncUJBEiIoDrit+uhA5TapwKvNivqm8d5aN8ANZAiNuv3t1u4oJxj5n6fJo+GXVSlpfDjDWV1chfGeEFDsM325rt1g2FsvBBo9SmX7PE/ZJa39gVPRz2hjrXAw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=pRvNHGH74NYyO6zuEOD9hoIeKILeNCo59SiXhIF4IYXXV1M7PbkvTXDKGufOqAuKFbOjJ3fgzn567+ee0mZH8o/0tbgFlImP4cQIKun2Q+IO32z3lqK0R8Q01VxetN9q9cSdwXm4EhPY/MVrDryOZJzUBCKa0eJp272q8gr4snQ=;
X-YMail-OSG: EN7NKToVM1lcCmL2caBuHQSWMsdmGdBbJwZO0XpzzCoDiqg 75mq_JKpR.la82Pb4bgvAwD7p8RIz98IrgjQMUlTjFhsHc0uzMVVS2hnOwks Sx1gd8_d.dIfUtKYte.siU6hB6wkSSlfNa5Nazlt9bKmJYUqWv9gDWrSueoh HNYaEl9NZJG.q7KUPd14Tk4_IeHHN9iy.nT9YE3R3roDZDfF3QCjvsM_gM7d hyVXuLHwHu7LTcexf.tzaOSLke99ZuUb5ht0B8Znxf9JE4IkzXCgSG0JaTxz 5j2XWlDPn8Sf5NEQQIMBAHJpQvTTMVGSp5n9VRt0kb5yivX3aOU6SYS3ruVF lqW0gJtn8cWDU5FBOIYZugqxm1kx_4qUxa5Lx2yoptKcAT1lylupKbmE9Zo3 1Y2XQd1efGqSbPfzK5TunPz4yKucGNEq4t56TzcgjHEehEZROwnazapyTTB3 n3q2iL8ymv6sIw.bXUhWaYF5a7O4HNuorhTkp_q9NRpkmnqXwXc7xQ18W8d4 WDmvnPogYYxuESR2hreu9GE2yzpRUI3zJnMywyBzb8TPuyzuuf19hvcT5cgW Y3DvlaEDNiUo-
Received: from [41.138.189.62] by web140701.mail.bf1.yahoo.com via HTTP; Tue, 15 Jan 2013 14:14:17 PST
X-Mailer: YahooMailWebService/0.8.130.494
References: <1358287914.52674.YahooMailNeo@web140701.mail.bf1.yahoo.com> <1358287992.40627.YahooMailNeo@web140706.mail.bf1.yahoo.com>
Message-ID: <1358288057.49423.YahooMailNeo@web140701.mail.bf1.yahoo.com>
Date: Tue, 15 Jan 2013 14:14:17 -0800 (PST)
From: juliette Chapin <mickbone97@yahoo.com>
Reply-To: juliette Chapin <mickbone97@yahoo.com>
Subject: The copy of the western union receipt
To: “atmpaymentcenttt@e-mail.ua” <atmpaymentcenttt@e-mail.ua>

“juliette Chapin” <mickbone97@yahoo.com>
atmpaymentcenttt@e-mail.ua <atmpaymentcenttt@e-mail.ua>

From: juliette Chapin mickbone97@yahoo.com
webtzzzz.office@att.net <webtzzzz.office@att.net>

IP_Used: 98.139.212.164 Received_IP: 41.138.189.62

 
Leave a comment

Posted by on 01/29/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

NIGERIAN SCAMMER – FBI IMPOSTER – ADVANCE FEE FRAUD

Okay, this is funny. This Nigerian scammer has been spamming me with phony lottery (atm) scams. I have posted dozens of email-addresses, IPs, names, etc that this fraudster has been using. In the email below he claims that ‘Anderson Smith’ was arrested one month ago but this scammer IS Anderson Smith and Anderson Smith’ emailed me a few days ago. (obviously not arrested.)

Anyway, this scammer sent me a email yesterday and I noticed he fowarded the email to atleast 75 other email-accounts so I decided to forward a message warning all the other accounts just incase one believed him. Well, today I get the below email.. I’m thinking one of the people I people I forwarded the message to could of possibly forwarded it back to the scammer? Oh maybe the scammer had an email up there? I don’t no. Hmm.

Dear: (my fake name)

Thanks for your email, i pray this email gets to you in good state of mind.

This Mr. Anderson Smith was the former correspondent delivery officer in the atm and check department here in the FBI branch office Nigeria. Who was sentenced to jail last month because he has been the one who has been scamming people round the world by the FBI after much investigations had been done in his office

Now he is about to scam out your money from your pocket, you are strictly advice to stop all transactions you have been holding with anybody and forward the write up to me, so i can send to the FBI head office right the way for proper investigations.

I will also like to inform you that your funds is still with the security keeping company who are in control of making sure your funds is been delivered to you right in your door front within the next 24 working hours.

You are advised to contact me with the information’s as stated below:

Your full Name.
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

We await your swift response to this email in know distant time.

Best Regards:
Mr Stephen Fred
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) aSBwcmF5IHRoaXMgZW1haWwgZ2V0cyB0byB5b3UgaW4gZ29vZCBzdGF0ZSBv ZiBtaW5kLiBUaGlzIE1yLiBBbmRlcnNvbiBTbWl0aCB3YXMgdGhlIGZvcm1l ciBjb3JyZXNwb25kZW50IGRlbGl2ZXJ5IG9mZmljZXIgaW4gdGhlIGF0bSBh bmQgY2hlY2sgZGVwYXJ0bWVudCBoZXJlIGluIHRoZSBGQkkgYnJhbmNoIG9m ZmljZSBOaWdlcmlhLiBXaG8gd2FzIHNlbnRlbmNlZCB0byBqYQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEw
X-YMailISG: YRAg_6UWLDsNPJ41NgYqJwAf5OJLkgUP_WnGcMzl8tpjvtMl _rR7NL5SqQ5ckG58fvfr6m0wcweGFaHpNtYbxDMuVDaIIh1l3K5mNhJuuUo_ 1gL0f1X33EdIEWkU5mPAyilJBlXEpEzk7F_IyU989l1G9TzWOre1Rm4NVrtv wL._Vi2pXJgOQWfreL61PfLIlsJaWcVz4qtNDDj2gyD40PxwRgmAN75tZ4nn aRWQg0kEw6lZsV6CpK5tBR93lSxR5BijjoPWypit6rRfFHu2RPGypmHaaT5i NyOQ3dFSpUGR0qaoBtZbkYY6RfdMQeiKvQSJUW3FpI9_7lT9PcuRP8ulxAyH IdKsAozRLeGkYH_HEicxkXssyyV0P5VqNhSjcN.FVIQIMg49oMMuyXhq6Ams KYFWO16wfZulmhe3zhfu8iLnXUOx1asM1CoRtivrLypsvcMHW2z3jV3Sf4xn gIGmDsHpgafAgkUO3QWxCyUJLenj8Dj_BwC0KlH1rTcmzgg1cDn.8n1xfx4I TffWkboW6Eu0ftF39kDBSKHoC1iLW1RlaaenH.P0luai9hY6QXflsWADaNMp vyw3FUaI9ZssiJp679eh4kt0pGwVUec2kSxHDhpu7SLrLfsGFNoF0pPZYXUt uGRiYlJUlUr5v8msaTOvPCQ35gQ51eUcQaRxD4v2KkyvHegnUen7ToXi2Kh_ OKg9ouVRwnkubOu7lDdfjAzSeczwtAcm5f2ubi7_l3rFwW9zApCW4_AjeWmd 7vvS5V1nYymEkC31.V8sS56xjK3kQCE2iE9j0pUAjktDOX6wn8J_4Ayq1PGI JXgjS5w9nTji3nRHdgxyZOWsXn0db6EffdhNgia3_uSx8P4LjSMZZ7l7PS2t R0PhNr9NWBA._lPQRp.ZCkvQ.8fqwvIlrCFFnsl0SMfnnvOGhZygyoSDyQDm CBfSA7cKbH3v.lGz0WBYswdnCdFJQrwjekmXVAKaUQt440eGAHPbesQ0ln9U PSqwPsVIJt7QkPvTDHPfdX1TOmMQogOlC1_Pt08aiFWDsz.hfNhiKZl1XK82 uJT_t0sFbY8LfjS.p25d_9wZv04b8nl7s5nCniDYVnKK9LESNJdIkvjYCVgb WGkqKQSwqmZou53wA60pT5kbAMhI2QtgZo59Jrt_qvNwcY82MaPQKLLMaFGN a_I2Gwi0ptjskEuktAOgHo9vf3tIbLhf.cNFXjFPrGYa4yPAkAR_C1RMGzCi eEu2c3Go8MzGJFVU0PFqESSugO1nYIzz7W4yaGauPPLzBhykdx2OBa._GR.x 6IyB0YF2._YiCvukGztRVMt0SLWP2kQarf68uCf11I2A4mPMlitmKL._tD.x kkfi6Zc9B.JKZieJlcetzb7nwXocEQaWXoZUH1twHVOZ8dyzq3AnFQxdxoD9 G4mkqGOembFIUmoPAkuk2.N1hJoPV672fTBJY_dMNjDU_OM1tua2bQhWEaV9 RB9WTSbJRX_xtzqg0OrPgSmaXawGuXf0u4RaLPOD8kQiMN9f3w0LTGpfzNF9 8Rvgg796.RX_9Zj_ho8NkHiqorsQgxJeAkzeCQnhuNyKZTd8ZiwYbk_jS8OY .8E_qA6ixSW3NL.CC4hF64r.DdClBZQLn0xSC1PeTm3AGG38oY6zt26wqSnu hrLzp2rqW6lj8PfrLPMzw.Gqo8wMvm6Om0JtuF0gPL_NJ3YY50rFVWWnWA–
X-Originating-IP: [77.238.189.211]
Authentication-Results: mta1213.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm4-vm0.bullet.mail.ird.yahoo.com) (77.238.189.211) by mta1213.mail.ac4.yahoo.com with SMTP; Thu, 20 Dec 2012 02:24:58 -0800
Received: from [77.238.189.234] by nm4.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [212.82.108.243] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 56404.21902.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 69722 invoked by uid 60001); 20 Dec 2012 10:24:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355999096; bh=pyOeaUKKOWWZW3lLdVTTiYRo9J3z45S6mIgOy2HgFlE=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6sEt/VfUuEDUeUudSXs2M1ShOX0eWuYo7bOFh/XdhIPki+ZIyWn9FslcZYIOK+sL8m2MaPtDxi6PNqGk3ODuJVgRnYkMO9IvTfVw4QnvNAaE0M7IfkAvckE4iO1WwKrgM4BNroefkyNDvwH2m/l87dYrH6Im4aiMBs/53/5CRh0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4oyJFxMb7QIfFN0qOOV5EQRhasHrL0MG/qXmF0XzHB3Z75TEzL5ABDN+fjzt3FxSN4mb8R65+JBQMcZgeYn8hdlOLtIV7RGsbY7RDzkjKCf/9HGA0mDNi4dbn7Oof6iDUGP+kjNmcqlB3BqyHnRKxJyfsGxbxGwxQB5nyfnYApU=;
X-YMail-OSG: gJ29ik4VM1lXPyNG1YswL1rjwFhoTxeyDPqgBh6qE0W3Pqd SBPMiD2ZzSxd7xBXJUeIU9HeH8gYoc_o0hqMUZ.qWnc3PHsey18hkIJmRVZQ yDDgnrXDyofzHPQaZVicPUr9PhVOPPvLSyF37PopUuxDIHztw_T1fAI6YJN3 .IY9klRHXSdhx1XzjXDiWH_LvYN69G9aOSo0rZgdyeHU0M8MLOq7kfarzh9P bTtG.jAKXiYSxzvh4HXO1BJJ4nyYbdwX1bmpjdGVdXFLJ63kWgxitArYUuQ8 Aebx62dNlVOnuz3S5Wit3dSljkkO6nzX6N23R7uQUBOYLas3hJt9ayP4NSI0 9bWoBPZmOLXWneE8s8tCtkcKyynk9esWOszaD5qVI4GnBogGS9PyOOt_UJwD sMJf2NMf4K55JsKHz4XsW2WTb0G5d0vkdPg–
Received: from [41.71.177.225] by web171903.mail.ir2.yahoo.com via HTTP; Thu, 20 Dec 2012 10:24:56 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <1355977301.69904.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Message-ID: <1355999096.69523.YahooMailNeo@web171903.mail.ir2.yahoo.com>
Date: Thu, 20 Dec 2012 10:24:56 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS IS OUT FOR DELIVERY TO YOUR DOOR FRONT! GET BACK TO US NOW.

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 41.71.177.225 – 77.238.189.211

 
Leave a comment

Posted by on 12/22/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

ATM CARD MONEY TRANSFER & COUNTERFEIT CHECK SCAM – NIGERIAN 419 SCAMMER

There are two email’s and two headers below. The first email and header was published on scammer419 Yesterday 12/17/12 – the second was published today (12/18/12) — Same scammer using different addresses and IP addresses.

EMAIL #1 –

TO: 4thekids1234@gmail.com, jlpurtee1218@yahoo.com, lschum6@aol.com, vikhadd068@aol.com, childcare4yours@gmail.com, jessicaspitler@hotmail.com, monkeyforthezoo@yahoo.com, angelinahudak@gmail.com, bruces_lil_sis@yahoo.com, pmiller140@woh.rr.com, chelli4dottogo@yahoo.com, shannonschapiro@yahoo.com mschutt5@woh.rr.com, phillips.april@ymail.com, ticktockclocking@gmail.com, aprilsplayhouse@att.net, lrichards7@cfl.rr.com, rosa8485@gmail.com, mommyme0107@yahoo.com, armstrongcare1@yahoo.com, albart@bellsouth.net, new.horizons322@att.net, thebestsweep@yahoo.com, missalisha08@ymail.com, dezy2224@yahoo.com, morgragedanielle@yahoo.com, joanna.sweet@hotmail.com, adenelly@aol.com, pratherjck3@aol.com, camillephlps@yahoo.com, cs09jedq@yahoo.com, baby_pmpn@yahoo.com, kmiller182@cfl.rr.com, kayladaniels90@yahoo.com, lisaconradi@gmail.com, confidence07011996@live.com, poncallinfo@gmail.com, myfamof3@gmail.com, kjg36@comcast.net, missrosesdaycare@yahoo.com, cooljet6@yahoo.com, anged98@yahoo.com, cowboydad75@gmail.com, crawbox08@gmail.com, sacpr210@yahoo.com, khusfelt1991@yahoo.com, dskupien@delawaresafetycouncil.org, primaryyears@aol.com, kidz1st@gmail.com, bonclaude1@aol.com, millerv25@gmail.com, krosieone@aol.com, poohcc07@aol.com, ironhilldaycare1@yahoo.com, bangelique95@gmail.com, truruler@yahoo.com, denisedr54@comcast.net, sromasko@verizon.net, portiabusaitis@gmail.com, portiabusaitis@comcast.net, dawnschafferman@comcast.net, elevatedplaceslearningcenter@gmail.com, gerlacht00@comcast.net, melissalee1209@hotmail.com, valdave@comcast.net, rgoo135623@aol.com, baybeesteps@msn.com, rhino_07@comcast.net, mseekids@yahoo.com, faithshouse@live.com, jeanneflynn59@gmail.com, rachel_vigil@yahoo.com, gspederson55@q.com, ptrcgzmn@yahoo.com, thomasjohn1088@gmail.com, earlybirddaycare@gmail.com, sabrinareiman@yahoo.com, letmcg@ymail.com, brandon.carson25@yahoo.com, christinamauro23@msn.com, katielewnard123@hotmail.com, porkyexposed@yahoo.com, mgfbower07@gmail.com, lonniejbeard@hotmail.com, aklittle0102@aol.com, jennywarn@live.com, leyadewey122@gmail.com, neen062964@hotmail.com, info@need-a-nanny.com, dork_britt@yahoo.com, tinytots80123@yahoo.com, caycestaubin@yahoo.com, ivana331@gmail.com, tstots@hotmail.com, bballvarsitygirl@gmail.com, alwaysforhim2@gmail.com, degutii@msn.com, tiffjowilliams@gmail.com, patriciacallan@msn.com

FROM: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>

SUBJECT: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: Federal Bureau of Investigation Anti-Terrorist And Monitory Crime Division. Federal Bureau Of Investigation. J.Edgar.Hoover Building Washington Dc Customers Service Hours / Monday To Saturday Office Hours Monday to Saturday: Dear Beneficiary, Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3days ago. It is obvious that you have not received your fund which is to the tune of $3.5Million due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?

ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2015. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks Dec 2012 you save $285

Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24hrs after the receipt of payment has been confirmed.

Note: Everything has been taken care of by the Federal Government of Nigeria, The United Nation and also the FBI and including taxes, custom paper and clearance duty so all you will ever need to pay is $180.

DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $420 but because UPS have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $420 to $180 nothing more and no hidden fees of any sort!

To effect the release of your fund valued at $3.5Million us dollars you are advised to contact our correspondent in Africa the delivery officer Mr Stephen Fred with the information below, Name:Mr Stephen Fred Email:mr.stephenfred@yahoo.dk You are advised to contact him with the information’s as stated below:

Your full Name.. Your Address:….. Home/Cell Phone:…….. Preferred Payment Method (ATM / Cashier Check)

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for shipping. And make sure that you keep the receipt of the $180payment that you made because that is the prove you will show to the delivery team when they arrive at your door step with your package of delivery

Yours sincerely, Miss Donna Gwen FEDERAL BUREAU OF INVESTIGATION UNITED STATES DEPARTMENT OF JUSTICE WASHINGTON, D.C. 20535

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with Mr Stephen Fred of the ATM CARD CENTER who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.

HEADER:

Return-Path: <albanesi@dmghost.dmg-hosting.com.ar>
X-YahooFilteredBulk: 200.58.125.17
Received-SPF: none (domain of dmghost.dmg-hosting.com.ar does not designate permitted sender hosts)
X-YMailISG: G4vRLFYWLDtBXE2mxgWetbgPe68s2c_J4Sy1u3QrHo_wMTq2 7ltguaR_7OqUckxfw_6vp2Lr1Jg7Eu.nS2bLDg6fo4oYGP7MTDSxe12a7pKp vDuNtWg442ZrtozAbb4qwjv9yjVKzjc3q6SUJC3ROeRuYcRhx4ZTHNEwa9dJ RRunFvOz3W.7zc.2.2cpeXIR1pV74p_qpVqC3m7H8mdBoPRVTOHo4yAvFEyq HBGagGWmoRoWFUM6WeZcFGLRRd9yG4M2adkg0pGcbx9auO2ojmtRX.d4awpI tNrecy67Vucu5czgWkng.ADegJxE6eNLDqWhXtM8r1A7O_E267YruDaoRxO6 _sIUXJPaS8LB26kJPkafbJgK7Q9bXgF9ll5Efh6DIfA71GiZ_BFxWhGrotmy _KZxe6vxBpdwxzK0Rxlr8WrNY0QZMLOp0hD28W3sC.84e3mVvDE1o89.CZ5h 9jg8M2nfaP2qu3nHGA54gPG1P9JZx9oasJlLQdjhkEP6ND1NMGwvMf48kGMY 3mnmKiJxTzCRP42tdS7Y8Ho32JKgSZ3qE_UtRHNqJnXY6nt4cEAR35W0rrKt Rxajt4Z12QQVP6ynOi0a9qX6gOBgqHI0ImNxtkZaeznZBDB94jKQgd6rsgsf F.xd9S3BVrxw5c_tcsF2ZfpH5vlPphmuFtr.6wHtqPTbo1WcAAW3TzAVQgd5 P1qNkbouaz9T_2LDTBLWIumE0eZYfRwlzjApSWZq5xN7T443jat0wR.gnq8Y dJGDz8sxqmnuHdASS5COEyfmLADo5GME9Hr1nFYnYoUc9gMY6EgDUlovdax2 JWSXg640Sl6p_WEGbvRpunnYfKhxouArjEiZxy2c4lMKAGhYcq0JrGub358H ai9FMNMHAkRnf4b18ttxSIYK5obMdAtyW.Vw4jaqgXYO540R_KQljdv7peAg k9p124LIGZdkN7S_XKaNsg3O.ey154tsrBwhl14kTdz57ZxzNc7niAYFQF1V VUTONPpN4iNZT_t8.LcVzBcHhSjrqoWJ2SMpE28MH6cyiV8IsUDbddT1YIcM iZAV58stob2h.JyLctYJZ.g5G.VYjJubKffjKBTkHbCYZ1wNzGE8sWDDIJwo eRX04Jtt4F13ZI2AARhKdrG8DAr2NSIhIUoWXKs.qbgWrQgZleThlG8O6OOT G1avOrcRyDcNaaQxG32I
X-Originating-IP: [200.58.125.17]
Authentication-Results: mta1317.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dmghost.dmg-hosting.com.ar) (200.58.125.17) by mta1317.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:44:35 -0800
Received: from albanesi by dmghost.dmg-hosting.com.ar with local (Exim 4.71) (envelope-from <albanesi@dmghost.dmg-hosting.com.ar>) id 1Tkafo-0004nX-Uf; Mon, 17 Dec 2012 10:24:00 -0300
Date: Mon, 17 Dec 2012 10:24:00 -0300
Message-Id: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar>
To: 4thekids1234@gmail.com,jlpurtee1218@yahoo.com,lschum6@aol.com,vikhadd068@aol.com,childcare4yours@gmail.com,jessicaspitler@hotmail.com,monkeyforthezoo@yahoo.com,angelinahudak@gmail.com,bruces_lil_sis@yahoo.com,pmiller140@woh.rr.com,chelli4dottogo@yahoo.com,shannonschapiro@yahoo.com,mschutt5@woh.rr.com,phillips.april@ymail.com,ticktockclocking@gmail.com,aprilsplayhouse@att.net,lrichards7@cfl.rr.com,rosa8485@gmail.com,mommyme0107@yahoo.com,armstrongcare1@yahoo.com,albart@bellsouth.net,new.horizons322@att.net,thebestsweep@yahoo.com,missalisha08@ymail.com,dezy2224@yahoo.com,morgragedanielle@yahoo.com,joanna.sweet@hotmail.com,adenelly@aol.com,pratherjck3@aol.com,camillephlps@yahoo.com,cs09jedq@yahoo.com,baby_pmpn@yahoo.com,kmiller182@cfl.rr.com,kayladaniels90@yahoo.com,lisaconradi@gmail.com,confidence07011996@live.com,poncallinfo@gmail.com,myfamof3@gmail.com,kjg36@comcast.net,missrosesdaycare@yahoo.com,cooljet6@yahoo.com,anged98@yahoo.com,cowboydad75@gmail.com,crawbox08@gmail.com,sacpr210@yahoo.com,khusfelt1991@yahoo.com,dskupien@delawaresafetycouncil.org,primaryyears@aol.com,kidz1st@gmail.com,bonclaude1@aol.com,millerv25@gmail.com,krosieone@aol.com,poohcc07@aol.com,ironhilldaycare1@yahoo.com,bangelique95@gmail.com,truruler@yahoo.com,denisedr54@comcast.net,sromasko@verizon.net,portiabusaitis@gmail.com,portiabusaitis@comcast.net,dawnschafferman@comcast.net,elevatedplaceslearningcenter@gmail.com,gerlacht00@comcast.net,melissalee1209@hotmail.com,valdave@comcast.net,rgoo135623@aol.com,baybeesteps@msn.com,rhino_07@comcast.net,mseekids@yahoo.com,faithshouse@live.com,jeanneflynn59@gmail.com,rachel_vigil@yahoo.com,gspederson55@q.com,ptrcgzmn@yahoo.com,thomasjohn1088@gmail.com,earlybirddaycare@gmail.com,sabrinareiman@yahoo.com,letmcg@ymail.com,brandon.carson25@yahoo.com,christinamauro23@msn.com,katielewnard123@hotmail.com,porkyexposed@yahoo.com,mgfbower07@gmail.com,lonniejbeard@hotmail.com,aklittle0102@aol.com,jennywarn@live.com,leyadewey122@gmail.com,neen062964@hotmail.com,info@need-a-nanny.com,dork_britt@yahoo.com,tinytots80123@yahoo.com,caycestaubin@yahoo.com,ivana331@gmail.com,tstots@hotmail.com,bballvarsitygirl@gmail.com,alwaysforhim2@gmail.com,degutii@msn.com,tiffjowilliams@gmail.com,patriciacallan@msn.com
Subject: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
From: Mr. Stephen Fred <mr.stephenfred@yahoo.dk>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – dmghost.dmg-hosting.com.ar
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [826 825] / [502 502]
X-AntiAbuse: Sender Address Domain – dmghost.dmg-hosting.com.ar albanesi@dmghost.dmg-hosting.com.ar

Mr. Stephen Fred <mr.stephenfred@yahoo.dk> <albanesi@dmghost.dmg-hosting.com.ar> mr.stephenfred@yahoo.dk

__________________________________________

EMAIL #2 –

TO: deleted@yahoo.com

FROM: “vikhadd068@aol.com” <vikhadd068@aol.com>

SUBJECT: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: http://oabfranca.org.br/entrance.php NOTE: I DID NOT CLICK THE LINK AS I DONT CLICK ANY LINKS/FILES RECEIVED FROM SCAM EMAILS.

HEADER:

Return-Path: <>
Received-SPF: none (domain of imb-m01.mx.aol.com does not designate permitted sender hosts) AQEBAQ–
X-YMailISG: fG83VQIWLDuwe8ej5n0IaROXvxrlzu18BJ2irW7rRnkNUMiR 0Ctsgto2LNAskyV2Q6ixNssLOsmnFDVOBVCrL.Ma4HX.zvoh5.y.Me6a47y1 Y.s4vBi98z.8nCoiFrNhF8AthsY6JNRIP0mO3NwL6he8knCzy63JqA9qhhqY FQRl4qMLiHM902WJNFvAOn.XvAyS6gBl90P7phn5AwFtzDAnWp7SjQKS8yd9 2cqKCaMlnKRjdDDXjb2Q70KZ_PcWA5mIrPPIPxX4lk8JBJe._gcgSX6kzAYp 4YvvqU7x6K6snhfvbJKtaMeaXIjmTDn.pLJ6GEKwthBTc3K6CzQF1pPdkRRD yra8kG4Jxtlb_RaSjcjAXw5qpiHxnBAx3Oek1rLM84NqcWLvSV3nRFriYeYV nhI5BWjm8wwT3AcOsJUwm97do1.YsTka4wRMCVD6cqiCuU2jAKvwx1uDI2.b RoFUQReDBAjwqAAHPZLlkdarxo05P1Uwq5jHR99zLNJlOjaSRiMEUe0PS9zs QDsD3ljuWathFexCSe6PKWbyt3x4XQhQYjJ8mtq3elH0LdNeIuahbPv6S4G8 hueVJ.bJ9cI2b2jYCsk1qnouy2MQDdlL5VbiPxDCWp7AsBes8Nb4BepjQsVR w2UcWs9.Sy1V065valQ1_avr4y87pRQOmtt5dWEaxIAO8bWhK4iCTfcE1cJY 20x8ZehazHdzyZAVwjK95yH6Y0LghsrH75EbuSGscuYeXfnXpPOU0lHJOYpM Smn8XIi4jgWio99h4HL5hAKWRirLVLu_X5PDmHnYDie5ONFtGejBROGsblcC rl9jhZH6AJlOWZyqVTRM5Ppp3S6YCnbXEAxRydb6MzVMCUdDrES1gAdSYuc_ i5b5UqWEyedgNzG5O1cUaG9VQQWVQd26QYIhUn1LH8p5cF1d4w9e3Y7VQQ8N MYYqmESf9lsGNdZFCRFIMXXUdD5OQpzT7199rPh0OAQ6e5FssdlgeHW5u8Oe Qm9rwYEstTmh6VWIAnHdJLj59EuoMNynb0YBxAks2F6YXhwIzblZ4az3IDAf 3UW5o76BBwQ424rwxaewfRAxh33BT18DwtTa_1U0vcIPi7ooZSfLIzHxatMM tdMmB1yNMhgNeqj41iMGVgytMBZI7HV5OTRdtnMQsAoEFr2MQitM8bjxFQ4k VUhdeQ30xHi1UVWyJwl9l8xmrHA-
X-Originating-IP: [64.12.227.42]
Authentication-Results: mta1395.mail.mud.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO imb-m01.mx.aol.com) (64.12.227.42) by mta1395.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 23:38:11 -0800
Received: from mtain-mf12.r1000.mx.aol.com (mtain-mf12.r1000.mx.aol.com [172.29.96.160]) by imb-m01.mx.aol.com (AOL Mail Bouncer) with ESMTP id B186A382B708 for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Received: from core-mic004a.r1000.mail.aol.com (core-mic004.r1000.mail.aol.com [172.29.104.4]) by mtain-mf12.r1000.mx.aol.com (Partner Internet Inbound) with ESMTP id 9ADBB3800008A for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Date: Tue, 18 Dec 2012 02:35:08 -0500 (EST)
From: vikhadd068@aol.com
Message-ID: <52151792.8536.1355816108626.JavaMail.zimbra@core-mic004.r1000.mail.aol.com>
In-Reply-To: <1355816106.93122.YahooMailClassic@web161004.mail.bf1.yahoo.com>
Subject: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Auto-Submitted: auto-replied (aol; away)
Precedence: bulk
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:335928000:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60a050d01cac1b64
X-AOL-IP: 172.29.104.4

64.12.227.42 — 172.29.96.160 — 172.29.104.4

 
1 Comment

Posted by on 12/18/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

United Nations Organization London Regional (UN)

419 LOTTERY SCAM / RECOVERY SCAM

Ban Ki Moon also goes under the following names;
Jim Ovia
James Ovia Glory
Zeniith Bank PLC
Charles Brown
John Smith
Sarah Smith
Maria Jimmy
Barclay’s Bank
Paul Morgan
Andrew Johnson
Davis Milton

He has used many names over the months and it’s hard to keep up with them however, if you click here you will see a list of this Nigerian scammers previous emails, names and addresses. You can also type each name individually in the search bar on the top right-hand corner.

UNITED NATION
3 Whitehall Court London
SW1A 2EL United Kingdom

Attention:Beneficairy.

How are you today? Hope all is well with you and family? You may not understand why this mail came to you. I wish to inform you that we have been having a meeting with the IMF for the past 1 month now which ends yesterday in regards to innocent individual who has been a victim of scam that was going on in African and Europe, this Organization(UNITED NATIONS) have agreed to compensate them with the sum of US$750,000.00.

This includes every foreign contractors that may have not received their Contract sum, and some people that have an unfinished Transaction/International Businesses that failed due to one problem or the other.

Going through our data base your email contacts and name was found on the list and that is why we are contacting you for you to receive your own compensation and this said money will be paid via ATM MASTER CARD Payment Method which is the easiest and safer way of receiving without any hindrance and it will be issued to you from our Authorized Bank in Nigeria(Africa) You are advised to contact

Mr.Herbert Wigwe
Email: unrepherbert@yahoo.co.uk
Tel: 234-815-573-7125

As he is our Legal Representative in Nigeria, contact him immediately for your own ATM MASTER CARD, you should send him your full Name and telephone number your confidential address where you want him to send the Card.
Hoping to hear from you as soon as you receive your MASTER CARD.

Best regards,
Secretary-General
Mr. Ban Ki-Moon

Below is another email received on January 26, 2013 –

Attention: Beneficiary,

We wish to inform you that the UN / WORLD BANK ORGANIZATION facilitated a round-table meetings which just ended some days ago, and it has been agreed upon that a compensation payment of US$2,500,000.00 should be paid to scammed individuals whose Names and E-mails have been chosen through an open E-mail ballot system.Your name was included and that is why we are contacting you.

This includes every foreign beneficiaries that may have not received their contract/Inheritance sum and people that have had an unfinished transaction or international businesses that failed due to Government problems etc. Also, wehave been receiving complains from beneficiaries informing us that they are yet to receive their payments due to scams emanating from Africa as well as some financial institutions.

Due to high rate of complains by beneficiaries henceforth, MR. JIM OVIA is no more incharge to make any foreign payments and we will like to get you informed that you will not be receiving your payment through Bank Drafts due to illegal Bank Drafts circulating everywhere. In view of this, beneficiaries are to receive their payments via ATM CARD through our correspondence payment center affiliated with INTERCONTINENTAL PAYMENT CENTER. However, it is my pleasure to inform you that your ATM CARD no:6000101025717299 have been reserved for you which contains your certified amount.

You are hereby advised to contact our payment representative affiliated with
INTERCONTINENTAL PAYMENT CENTER with your payment Code: 6823.You are advised to contact Dr. Charles Brown of our paying center. Contact him immediately for your payment. This meeting was first held on the 8th of April 2003.

You can view this page for your perusal:
http://www.un.org/News/Press/ docs/2003/ik344.doc.htm

Therefore, you should send him your full Names and telephone number, your correctmailing address where you want to receive your ATM Card:

Contact Name: DR.Charles Brown
CONTACT PERSON: DR.CHARLES BROWN
E-MAIL:dr.charlesbrownb@yahoo.com.ph

You are required to contact the above person for your ATM Card, and furnish him with the following information that will be required to set-up the card in your name.

1. Your Full name:
2. Your Country:
3. Contact Address:
4. Telephone Number:
5. Fax Number:
6. Marital Status:
7. Occupation:
8. Sex:
9. Age:
10. A Copy Of Your Identity Attached.

Meanwhile, your Secret Pin Number will be e-mailed to you electronically for security reasons as soon as you confirm the receipt of your ATM CARD. Congratulations as I look forward to hear from you as soon as you confirm your payment.

Regards,
Secretary-General, Ban Ki-Moon.
http://www.un.org/sg/
NB: Dealing with MR. JIM OVIA is at your own risk

Return-Path: <secretary@arab.com>
X-YahooFilteredBulk: 208.68.171.34
X-Originating-IP: [208.68.171.34]
Authentication-Results: mta1279.mail.mud.yahoo.com from=arab.com; domainkeys=neutral (no sig); from=arab.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO hotelexpertmessaging.com) (208.68.171.34) by mta1279.mail.mud.yahoo.com with SMTP; Fri, 18 Jan 2013 15:23:36 -0800
Received: from server.indianjobsonline.com [216.246.77.145] by hotelexpertmessaging.com with SMTP; Fri, 18 Jan 2013 13:44:37 -0500
Reply-To: <dr.charlesbrownb@yahoo.com.ph>
From: “Secretary-General”<secretary@arab.com>
Subject: foreign beneficiaries

Secretary-General secretary@arab.com REPLY-ADDRESS: dr.charlesbrownb@yahoo.com.ph
IP_USED: 208.68.171.34 RECEIVED_IP: 216.246.77.145

12/13/12 EMAIL –

SUBJECT: Greetings from the United Nations Organization London Regional (UN)

EMAIL: INTERNATIONAL FUNDS TRANSFER / AUDIT UNIT

UNITED NATION COMPENSATION COMMITTEE
LONDON REGIONAL HEADQUARTER
RELEASE CODE No:BC0998775BV009

Wining payment of $US1, 620,000 from United Nations London.

Beneficiary Email id owner.

Greetings from the United Nations Organization London Regional (UN) global office. This is to officially bring to your notice that The ATM card payment
center (BACLAYS BANK PLC LONDON) Accountant Director MR JOHN J SMITH has been given express instruction to issue out in your favor the sum of $1,620,000 USD ( One Million, Six Hundred and Twenty Thousand United States Dollars ) in ATM Master Card functional in Any automatic Machine as your wining payment for this Fiscal year 2012 this instructions is from the custody of the United Nation representative office London this is for abbreviation of the rate of poverty as we saw your name on the list of unpaid individuals, The United Nation Compensation Commission (UNCC) was created in 1991 as a subsidiary organ of the UN Security Council and the payment has been approved by us to be release to you as we notice your payment has been delayed by uncertain reasons which has just been resolved by us through our power so you are free to receive your funds now.

We hereby issued you our code of conduct, which is (ATM-UNO/UNCC-5507) so You have to indicate this code when contacting the card Issuance Center with your contact details as stated below, You are hereby to contact the BACLAYS BANK PLC LONDON with the information below as soon as you receive this email for immediate release of your payment to you so that you can be the first beneficiary to receive its fund since the paying office have a lots of beneficiary to pay as directed by (UNO/UNCC).

Full Name:
Address:
Telephone No:
Age:
Occupation:
Country:
Identity Card if any has no copy:

Below is BACLAYS BANK PLC LONDON ATM Card issuance center contact information contact them now for the immediate release of your payment to you since it has been approved by United Nations and World Bank Group meanwhile do not be taken unaware that all the necessary document backing the fund up has been forwarded to the custody of the paying bank to ensure smooth release of your $ 1,620,000 USD (One Million, Six Hundred and Twenty Thousand United States Dollars) to you as directed by us.

CONTACT:
BACLAYS BANK PLC LONDON
CONTACT PERSON::MR JOHN J SMITH.
CALL THE BANK AT:: +44-7010726181
Email:: ww.barclaysgrp@xd.ae

Do let us know immediately you have contacted BACLAYS BANK PLC LONDON for your payment for more advise as we are keeping close on them to ensure you are paid as soon as possible, Meanwhile do not forget your Code of Conduct (ATM-UNO/UNCC-5507) when contacting the bank as it is very important.

Note::The reason you are receiving this notification in your mailbox is because we found your name in our list of people their payment has been delayed so we decide to intervene and help you get paid which we have done.

We are waiting for your prompt update once you have contact BACLAYS BANK PLC LONDON.

In God We Trust.
Zonal co-ordinator
Signed Mrs Maria Jimmy
Approved Mr Ban Ki Moon
United Nation Secretary General

HEADER:

Return-Path: <mohdahmed@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.182
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: plPzIh0WLDtQJVOBjloakInG29IH8L6ACOxnSz3VqgMIP5Bx onDZ8XO5T_ODL9iTSrrjj9IhQVLskP0dIAcNXTK8wdnDE9UDaSBlQ748jVCx jNqkhgs_BoW.OuUQ.HjUeWHMixT5QnEIfx2uLIKkU.3cTF5Ldo8ujcF3ouYp TKaiwFOZno.njMgWijKflKSoZe5_VG6ZEXfdFVSa8zPkZNeHySYH_b8AOpQi x_T6Diamf1URTzai8.YWsMFTVv2ZXF7qnsyTPIjKAoIOmHXnuUHsL4AdEaw1 rfG4bs1M_0OuasFb5KfYyVEs3u2TKMH1CuuVLvmMPbgUwkZpRuIcXU8CEGF3 fVfJ4i36s_Fa6wfTwjPOn4LOsXSVrSVmYmN5HYF5rdfdGcASarxCd8TsdqD. C9NJo0H6elh2VZozH_A3DOXbrlr5S_7bgNhNGoiq9r3JXDtW5orjYXxGIWOz EEXGAiBAJwbh0YfObEirK.NSJUIZeI.IcAUnzg6qomnCdMjBrnfRstYtfp3s fwxn.T8UInj0SmEU0GXeeyCPG3ZwqyJpsGFxvUXRCfo9JaXUGUOEcUFwgf4S i8LbnD226rGkaUMT_eqPj8PaagtaxkuDv0RyoCuQnIL4BQFcATuoZFDFPRiJ PSP9qJ_pJgaFWDHO8JOqsVnZrqduJtj8B1SiYpe3AK87Fw1EQ8PiNNS5y921 hxZJspghZg.d3aQ.EKYqca4IF6T3JpotkY3FAwigr45BmOcCCR2Txw4cYa8O kAllxUkmIWCmAjfmG4hvBovo37Uai62cP30mfVjKmttUj5MlSqGEccnmhuiY 2ExSRHj0SIjbG9VF7WsWsJG57t1zTl_BYA_rHNX.Ro7CzO0tn.2QZ6m1GIpD Bfik5UI6raKMRpi9OxVChp1j8O3vkMcAlX7iIBvdpTCPAc5W9ktDLvjOUqf7 U0dXKm5_Mxi4BWk9KfQPM3RXnL29lJFq_QjL3wvVfbyAbAeUtuXse2iM97XU n8sy.iJyWgnoLHZhQTEaEnvFWe_c3UBSxQf33tTw.iOujQ4y4uWgyY6.5HbJ yIeEN68kvrwYYVZoLtjNcfEPjb2.ETZPik_z8sanHvZu93aPDc2F0canjD2R lgmO_KmgxcMOh.cKAZGkm_BBP3TKxztvcmyBrdt_N_xyEx678t_OpCP7JdMj VJjC.6lNNaD3BWmo4AaKfPtguEDwK4_sbnJ.TPdEIpIkblVNe5NcVUIT4ZxI NB7ZDKX0KO5EbbAMNkgBJGG.XhFNY1IOvvE6945HdSkHiLDG6Vb3ZgNOSI0M UjyFCIPMC2mVfnhlQqHPOHTkRjIv450eJcji.Q220RNETg7xIN3Rkz6WjxK5 CPdH7Y7iOAJzJDWsN_7RbQPbLZb8JiyhtRsMAILrmyrJV9jXh4HSo0T_1e3P sry9qMVo7cqgT8M3rYtxyc_6QHpHMhO.FS1v8qHzPLbI6Sl_GTb9iWztMboA 2Q–
X-Originating-IP: [203.188.200.182]
Authentication-Results: mta1045.mail.ac4.yahoo.com from=yahoo.cn; domainkeys=fail (bad sig); from=yahoo.cn; dkim=permerror (bad sig)
Received: from 127.0.0.1 (EHLO nm2-vm0.bullet.mail.tp2.yahoo.com) (203.188.200.182) by mta1045.mail.ac4.yahoo.com with SMTP; Tue, 16 Oct 2012 11:52:22 -0700
Received: from [203.188.200.82] by nm2.bullet.mail.tp2.yahoo.com with NNFMP; 16 Oct 2012 18:52:20 -0000
Received: from [119.42.242.156] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 16 Oct 2012 18:52:20 -0000
Received: from [127.0.0.1] by omp1003.mail.cnh.yahoo.com with NNFMP; 16 Oct 2012 18:52:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 177687.88001.bm@omp1003.mail.cnh.yahoo.com
Received: (qmail 94232 invoked by uid 60001); 16 Oct 2012 18:52:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1350413539; bh=iGDO00ZmYitKlGbDrey0iSYkzbda8HTST44iKSkG6vI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=fCnML5yO+lRVxbeS6R9XahVrp7RSi5eeVK1uIE+9cn2/J7Quqg88zzWfTXDGvh3uAhcfxDFlhyOoEmKvjAmqn3OST+fXNs+0/3R9cccPEh6DyRLp2YrAUYe0++dsT5YoeAIHl1gif/EjtJOeLBxJdQe5fQwHwm7eGoCUTMykIHY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tYSCiHX+xrxbGmlEE0iu6AS0kKNZKWVPtcULjZjsk5/FuDO13CRUqYpZv5YuJIv9s8vOpBQQqBpzA39ehRMIZO22VR+6jUx+u0wHnwyLDUrZZsGh/Kg+klvjnnf5cUJWvCUHX01pxC1rSt6NOxXNjlGl+SGsVbLQd6036lpQm48=;
X-YMail-OSG: U13DIzoVM1k1WOQchhlHUn_Z4ZLanAUc2ScFYZjW1u7FK_u VgYM8YbEX
Received: from [106.67.78.89] by web92413.mail.cnh.yahoo.com via HTTP; Wed, 17 Oct 2012 02:52:19 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1350413539.87773.YahooMailClassic@web92413.mail.cnh.yahoo.com>
Date: Wed, 17 Oct 2012 02:52:19 +0800 (CST)
From: “United Nations Organization London Regional \(UN\)” <mohdahmed@yahoo.cn>
Reply-To: ww.barclaysgrp@xd.ae
Subject: Greetings from the United Nations Organization London Regional (UN)

FROM: United Nations Organization London Regional (UN) mohdahmed@yahoo.cn RETURN-PATH: mohdahmed@yahoo.cn REPLY-ADDRESS: ww.barclaysgrp@xd.ae

RECEIVED FROM: 106.67.78.89 X-YAHOO-FILTER-BULK: 203.188.200.182 

Mr. Herbert Wigwe
unrepherbert@yahoo.co.uk
2348155737125

 

 
2 Comments

Posted by on 12/13/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Western Union Department” a.k.a “ATM Card Approval Department” a.k.a “Mr. MIKE BENN” a.k.a “Barrister George Clement” a.k.a “Susan Dawson”

419 SCAM / ADVANCE FEE FRAUD

Dear Customer,

Western Union Office
DR PHILLIP HILLS
Call +229-98745447I want to inform you that we have already sent you $5000.00 US Dollars through Western union as we have been given the mandate to transfer your full over due payment total sum of $7.800.000.00 USD, via western union by the Ministry of Finance.I tried reaching you on phone to give you all the information on phone but I couldn’t get through yesterday,

So I decided to email you the MTCN and sender name so that you can pick up the $5000.00 to enable us send another $5000.00 today as you know we will be sending you $5000.00 only per day. And it was agreed that you will pay the transfer charge sum of $87 before the release of the payment to you.
Please pick up this information and locate any western union around to pick up the $5000.00 and call the Operation Manager DR PHILLIP HILLS because he is the person in charge of your payment, and he can send you another payment today once you contact him,
 
phone line Call +229-98745447
E-mail:weste.office@yahoo.com )
contact him once you picked up the $5000.00 today.
Below is the western union information to pick up the $5000.00; which you will be receiving daily after you sent them their transfer charge of $87 and it will serve as re-confirmation of your payment file in their office.
 
Here is the Senders Information;
1. SENDER NAME:…  charles donald
2. TEST QUESTION :…. How Much ?
3. TEST ANSWER: …….  $5,000.00
4. AMOUNT ……….  $5,000 USD
5.MTCN ….. 6130251864
 
They will be waiting to hear from you with the transfer charge payment of $87 today;

Receiver Name….Mr Chilokwu Sunday
Country —— Benin Republic
Your City —– Cotonou
Your Question —- A
Your Answer —– B
Be advice that $87 transfer charge is compulsory as they told me that is the only money you will pay until you receive your payment completely. Endeavor to E-mail your direct telephone number because you will call once the payment
informations is sent to you,
Regards
Mr. MIKE BENN
Call him immediately you receive this massage +22998745447
western union department.
Yours in service
Mr. MIKE BENN

HEADER:

Return-Path: <good_o@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.217
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG:
X-Originating-IP: [203.188.200.217]
Authentication-Results: mta1028.mail.ac4.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm5-vm1.bullet.mail.tp2.yahoo.com) (203.188.200.217) by mta1028.mail.ac4.yahoo.com with SMTP; Wed, 14 Nov 2012 08:00:54 -0800
Received: from [203.188.200.81] by nm5.bullet.mail.tp2.yahoo.com with NNFMP; 14 Nov 2012 16:00:51 -0000
Received: from [203.209.230.76] by tm2.bullet.mail.tp2.yahoo.com with NNFMP; 14 Nov 2012 16:00:51 -0000
Received: from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 14 Nov 2012 16:00:50 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 871122.62052.bm@omp105.mail.cnb.yahoo.com
Received: (qmail 51301 invoked by uid 60001); 14 Nov 2012 16:00:50 -0000
Nc4OYZWCWjsKyIE8ZTRRgR+ikaqDlMInYg0=;
X-YMail-OSG: tsM3mXgVM1mQukNs9vSWv2B4i6xoWzPHIXnTgZbj5d7LcFY wJ.7t3BuI
Received: from [41.216.50.17] by web92410.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 00:00:49 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352908849.45572.YahooMailClassic@web92410.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 00:00:49 +0800 (CST)
From: “Mr. MIKE BENN” <good_o@yahoo.cn>
Reply-To: weste.office@yahoo.com
Subject: Call him immediately you receive this massage +2 2998745447
+2-2998745447

Mr MIKE BENN <> good_o@yahoo.cn <>  weste.office@yahoo.com

Same scammer, different scam– <atmcardapprovaldpt@hotmail.com>

 [41.216.50.17] by web133005.mail.ir2.yahoo.com

Hello;   ,
This to acknowledge you that your consignment box is diverted into our office here by Mr Maxwell James director Fedex Company, Mr Maxwell James reported to us that you were ask to send $72.00 for the release of the certificates peper that will lead up the box to your destination home address and you refused.
 
Now listen,we want to hear from you to know if you are willing to pay the money or not because we have giving instruction by His Excellency Mr.President Dr Thomas Boni Yayi,that if you refused to send the $72.00 for the release the certificate we should send the consignment box to the CENTRAL BANK OF WEST AFRICAN COTONOU, BENIN REPUBLIC (CBB)
 
And we give you two days today and tomorrow to make the payment with the information gaving to you if you fail to do so do not bother to ask for the payment of (US $3.5Million)again, for your information i am giving you the advice that you should try and make the payment of $72.00 today, immediately the $72.00 is confirm your will receive your(US $3.5Million ) and you will not pay any other money again said by me Barr,George Clement.
 
The director in charges of your BOX will alert the united state bureau and also your state police for the BOX to be deliver to you without any restriction and problem when the fund get to your location area. 
Thanks.  
Barr,George Clement
FROM THE CHIEF GEORGE FEDERAL HIGH COURT OF BENIN

Below is a Nigerian scammer attempting to scam under the same IP address as above. Although it may be another scammer behind the IP, the email is very similar to the many emails the above fraudsters have sent. 

From Ms. Susan Dawson
Return-Path: sonjohn133@yahoo.cn
Received: from 41.216.50.17, Cotonou, Benin, Office Des Poste Et Telecommunications Aka Benin Telecoms Sa
Date: Sat, 10 Nov 2012
From: “Ms. Dawson Susan” <sonjohn133@yahoo.cn>
Reply-To: ccef453@yahoo.com.hk
Subject: U.S Treasury Department’s Office of Foreign Assets Control

From: “Ms. Dawson Susan” <sonjohn133@yahoo.cn>
Reply-To: [ccef453@yahoo.com.hk]
Subject: U.S Treasury Department’s Office of Foreign Assets Control

Attn,
This email is to notify you about the release of your outstanding payment which is truly $15.500.000.00 USD. The New York NY ( USA) scheduled a time frame to settle all foreign debts which includes Contract/Inheritance/ Gambling/ Lottery(Sponsored by Microsoft and National Lottery) and other international loans.News had it that over the past,numerous individual (s) who happen to be impostors (claiming to be individuals, banks and organizations) are claiming to release numerous sums of fund via numerous ways.

With the help of the (OFAC)U.S Treasury Department’s and with the FBI we have noticed that people have being asked to pay outrageous amount of money by these impostors for the transfer of their funds to them. We want you to stop all communication that has to do with these fraudsters who have been requesting unreasonable sums of money from you to release your funds which they do not have access to.

We have received a mandate and instructions from the (OFAC)U.S Treasury Department’s to commence the immediate release of your funds through one of the following payment options stated below depending on your choice:

1. Payment via Automatic Teller Machine (ATM card): This is where you will be sent an Automatic Teller Machine card with Pin also known as ATM card (A Master Card would be issued). Upon receipt of your custom ATM card you will be allowed to withdraw $10,000 per day by default and you are given the option to transfer funds from your ATM card to your bank account.
2. Certified Cashiers Check or Bank Draft: In this case you will be sent a certified bank draft or check signed in your favor which you will deposit in any bank for it to be cleared within 3 to 5 working days at most depending on your bank.
3. Online Banking ( Bank To Bank Transfer) to enable you process this operation, $285 Dollars is Required for opening for an online banking operation, that will enable you get access to your account Online.
Below are few list of tracking numbers you can track from FedEx and UPS website to confirm people like you whom have successfully received their payment safely.
Name : Mrs. Jeannie Michael: FedEx Tracking Number: 794588016471 (http://www.fedex.com/)
Name : Mrs. Vista Rayne Arnold: FedEx Tracking Number: 796925954101 (http://www.fedex.com/

You are advised to select one out of the three options on how you wish to receive your $15.500.000.00 USD, Your Online Banking Acess or ATM card or Check/Bank Draft will be shipped via Courier Shipping Company and would get to you within 2 working days at most.

For international shipping as stated by our company We had to sign contract with Courier for bulk shipping which makes the fees reduce from the actual $520 to $79.00 nothing more and no hidden fees of any sort.
You are advised to contact the Department’s Officer responsible for the shipping of your Check or ATM card with the following information for shipping of your payment Check or ATM card.

Department’s Officer: Ms. Dawson Susan
Email- [ ccef453@yahoo.com.hk ]
The Department’s Officer Ms. Susan Dawson will provide you with instructions on how you are to make payment of the $79.00 only for the shipping of your ATM card or Cashiers Check.

You are to adhere strictly to the instructions above for more information contact the Department’s Officer.
Remember that you are not paying any fees extra no matter what. Once again note that the actual Courier Retail Price: $520 Your Price (Because of our contract signed): is now $79( $79.00 Savings!). 

Below is the information where to send the $79.00 to them.
Name of the receiver ………… John Udezuo
Country ……………. Benin Republic
City …………… Cotonou
Test Question ……….. Who is Son?
Test Answer ………………. Jesus
Amount ………………. $79.00 Only

 
Leave a comment

Posted by on 11/25/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: