“UPS Courier Service”

WARNING – EMAIL SCAM / UPS PHISHING ATTACK

Account Suspended: Update Your Information
From: “UPS Courier Service” <activationserver@ups.com>

Dear Customer:

UPS Courier Service!

This message is to confirm that your online access have been suspended due to billing error.
We will review the activity on your account with you and upon verification, we will remove any retrictions placed on your account
We hope you enjoy the ease and convenience you’ll get with the ability to manage your UPS accounts from almost anywhere you are.

To access and activate your account, simply click the link below.

https://www.ups.com/us/activation ← ATTN: This is a spoofed link and NOT a legit UPS website.

The entire activation should take only 5 minutes of your time. Please complete the activation by now
Sincerely,

Thank you for being a valued customer

UPS,

Return-Path: tfcadmin@u16050260.onlinehome-server.com
X-YahooFilteredBulk: 74.208.74.16
Received-SPF: none (domain of u16050260.onlinehome-server.com does not designate permitted sender hosts)
X-Originating-IP: [74.208.74.16]
Authentication-Results: mta1534.mail.bf1.yahoo.com from=ups.com; domainkeys=neutral (no sig); from=ups.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO u16050260.onlinehome-server.com) (74.208.74.16) by mta1534.mail.bf1.yahoo.com with SMTP; Thu, 09 May 2013 01:29:45 +0000
Received: by u16050260.onlinehome-server.com (Postfix, from userid 10013) id CEB65D099; Mon, 6 May 2013 21:24:17 -0400 (EDT)
From: UPS Courier Service activationserver@ups.com
Subject: Account Suspended: Update Your Information
Message-ID: <3dfa45d367d9e24c2e74d18b1d205288@thefcove.com>
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version ]

 

“Luz Reyes” “Donella Weingartner”

WARNING – RENTAL SCAM / ONLINE SCAMMER

Subject Line: Fwd: $625 / 2br – 1075ft&sup2; – Outstanding 2 bedroom 1 bathroom Rental (Loris)

From: luz.reyes24304@yahoo.com <luz.reyes24304@yahoo.com>
Date: Tue, Mar 26, 2013 at 1:03 PM
Subject: $625 / 2br – 1075ft&sup2; – Outstanding 2 bedroom 1 bathroom
Rental (Loris)
To: <emailuser@gmail.com>

Hey Daisy,
Did you get my last email?
The property is a bedroom bath with garage and washer/dryer. Pets are
allowed with a $100 cleaning charge.
The requirements to lease our property are as follows:
1. Photo ID
2. First months rent and optional fee for pets
3. Lease Agreement, I’ll bring it to the viewing
(It is month to month, 6 month or a 1 year lease)
4. Background check for each applicant
The service we use is Tenant Verified, here is a link.
This is an affordable way for me to screen applicants based on prior
tenant history and employment information. If you have a felony or bad
tenant history, I am flexible and I’ll work with you.
Let me know when you have your background check. It’s in a .pdf, you
can print it and bring to the viewing or email it to me. I am looking
for real tenants not window shoppers or tire kickers, right now I have
3 rental properties and a full time job.
What is the best contact number for you? Are you available tomorrow?
Enjoy your Tuesday!
Luz Reyes

_________________

From: donellaweingartner@yahoo.com <donellaweingartner@yahoo.com>
Date: Mon, Mar 25, 2013 at 11:08 AM
Subject: $625 / 2br – 1075ft&sup2; – Outstanding 2 bedroom 1 bathroom
Rental (Loris)
To: “emailuser@gmail.com”

Hey Daisy,
The property is a bedroom bath with garage and full size washer and
dryer. Dogs and cats are allowed with a $100 cleaning fee.
Requirements to rent our property are as follows:
1. PhotoID
2. 1st months rent and optional fee for pets
3. Rental Agreement, I’ll bring it to the viewing
(Options are month-to-month, 6 month or a 1 year lease)
4. Background check for each applicant
The provider we use is Tenant Verified: link.
This is an affordable way for me to screen applicants based on
previous rental history and employment information. If you have a
criminal record or bad tenant history, I am flexible and I’ll work
with you.
Let me know when you’ve completed your background check. It’s in a
.pdf, you can print it and bring to the viewing or email it to me. I
am looking for real tenants not window shoppers or tire kickers, right
now I have 3 rental properties and a full time job.
What is the best contact number for you? Are you available tomorrow?
Enjoy your Monday!
Donella Weingartner

 

Donella Weingartner also uses the name Donella Pomponi and Barrister Bernard OBI

 

“United Bank of Africa” aka “Rev. James Long”

WARNING – NIGERIAN SCAM / ONLINE BANKING SCAM

Subject Line: NOTIFICATION FROM UBA BANK ONLINE BANK FUND TRANSFER

Sequel to the difficulties you have past through in all attempts you have made to receive this fund through Bank Wire Transfer, Couriers , Western Union And Money Gram Transfers the United Nation Fund Organization has agreed with the Federal Ministry Of Finance In Conjunction with the United Bank Of Africa to complete the transfer to you through online banking

In this way their will be no hitches in transferring this fund as you will be transferring your total fund of $5.5 Million Usd online

This is the UBA Bank Website ( http://www.ubagroupbank.net.tf ) when you open the website on your computer click on Internet Banking and then click New Customer then fill the requested information and submit then the bank will create and provide you the account number and your password to enable you transfer your total fund of $5.5 million usd

For further Enquires contact the bank at

Tel: +229 68 80 89 60

Contact Person: Rev. James Long

Email: info@ubagroupbank.net.tf / ubabank@ubagroupbank.net.tf

Regards
United Bank Of Africa
Benin Republic

Return-Path: <00.web893794@att.net>
X-YahooFilteredBulk: 66.94.237.212
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-Originating-IP: [66.94.237.212]
Authentication-Results: mta1055.mail.ne1.yahoo.com from=superposta.com; domainkeys=fail (bad syntax); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm11.access.bullet.mail.mud.yahoo.com) (66.94.237.212) by mta1055.mail.ne1.yahoo.com with SMTP; Mon, 18 Mar 2013 10:36:40 +0000
Received: from [66.94.237.196] by nm11.access.bullet.mail.mud.yahoo.com with NNFMP
Received: from [66.94.237.105] by tm7.access.bullet.mail.mud.yahoo.com with NNFMP
Received: from [127.0.0.1] by omp1010.access.mail.mud.yahoo.com with NNFMP; 18 Mar 2013 10:36:39 -0000
X-Yahoo-Newman-Id: 744319.67621.bm@omp1010.access.mail.mud.yahoo.com
Received: from [173.13.200.181] by web181502.mail.ne1.yahoo.com via HTTP; Mon, 18 Mar 2013 03:36:38 PDT
X-Mailer: YahooMailClassic/15.1.5 YahooMailWebService/0.8.138.524
Message-ID: <1363602998.31446.YahooMailClassic@web181502.mail.ne1.yahoo.com>
From: United Bank Of Africa <goodyservices@superposta.com>
Reply-To: ubabank@ubagroupbank.net.tf
Subject: NOTIFICATION FROM UBA BANK ONLINE BANK FUND TRANSFER

+22968808960 United Bank Of Africa Rev James Long

goodyservices@superposta.com
info@ubagroupbank.net.tf
ubabank@ubagroupbank.net.tf
00.web893794@att.net

 

“Gary Smith”

WARNING – EMAIL SCAM / PHONY LOAN OFFER

Subject Line: [ No Subject ]
—
Do You Need A Loan? If Yes Fill The Form Below
Name:
Amount:
Duration:
Mobile:
Country:

Return-Path: <abcfinancefirm@gmail.com>
Received-SPF: pass (domain of gmail.com designates 209.85.128.193 as permitted sender)
X-Originating-IP: [209.85.128.193]
Authentication-Results: mta1011.mail.ne1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-ve0-f193.google.com) (209.85.128.193) by mta1011.mail.ne1.yahoo.com
Received: by mail-ve0-f193.google.com with SMTP id 15so59550vea.0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:reply-to:date:message-id:subject:from:to :content-type; bh=tjkC4Cn8Xdj0mdl/LbkLnu9xowMzaMvna8UpPsd4t7g=; b=gb7hx3ymCCI82Nw2lqe7BQ2/73GfCKBErZZIQddx7JWY2yrAuu1emP5DMHszdSuVgZ nQZfUgwPLkjQy3FVkxL2yekJSJe3mXmmXGjR3jBQC9aBvmHOj/qFqT8EwqY7HXXJUhEB xnBAXlFLkFTsTCIsv0w2Om87kQmX+w3PeFFejLPHbSSjvFpK8aJOMCudUqe1kBnCULbO acB8aauvIeAV0OqPYjY9hT/07iFhlpaexCPRuOM6tpROlhBmkVx8YEN3emtkbp37Bapc WXcaPZg82NRcsp9fQ2TotaeeVT4HCbcMxT7E9W/WFv7N519mMrgMshKylvaf14r3Xb5I mCww==
X-Received: by 10.58.44.194 with SMTP id g2mr1546810vem.1.1363686526577; Tue, 19 Mar 2013 02:48:46 -0700 (PDT)
Received: by 10.52.170.52 with HTTP; Tue, 19 Mar 2013 02:48:46 -0700 (PDT)
Reply-To: garysmithloaninvestment@gmail.com
From: gary smith <abcfinancefirm@gmail.com>

gary smith abcfinancefirm@gmail.com
Abc Finance Firm
Reply-Address: garysmithloaninvestment@gmail.com Gary Smith Loan Investment

 

As Online Users Become More Adapt To Internet Scams; Scammers Find New Tactics To Exploit

Greetings to you, my friend.
I know this will come as a surprise to you, because you do not know me. My name is Abdul Al-Shallah and I am the son of a deposed government official in Nigeria.

Sound familiar? It’s a boilerplate opening for one of the most common scams in the known world — the Nigerian scam, also known as the “419 scam” or the advance fee scheme. The elements are always the same: someone (preferably royalty or some sort of official) has come into a lot of money, but needs another person outside of the country to use their money for a bribe (or to pay legal fees among other means) to spring the money free. The result is also predictable, with a wire transfer to a con artist’s account and a fake check that confirms a scam has taken place.

This scam is a hallmark of the Internet, but it’s actually much older than that — the advance fee scheme in its modern incarnation dates back to the early 1980s, and various forms can be traced back to before the 20th century. The reason that it sticks around, unsurprisingly, is because it never ceases to swindle millions of dollars from duped victims. The scheme, and many others like it continue to flood inboxes daily, often hitting the Spam folder before you ever lay eyes on it, waiting for a more trusting person to make a trip to the Western Union.

But that’s not to say that Internet scammers are resting on their laurels and leaving their dirty work to these classic methods. As Internet users become more sophisticated (and laugh at the advances of the forlorn Nigerian prince or similarly befallen individual), the chances of finding a willing innocent victim slowly dwindles. Like any other industry, scammers are looking for smarter, more efficient ways to reach their big payouts and to keep their “businesses” running smoothly, so they are forced to adapt and reach new extremes to get their money.

Now, security experts are seeing disturbing trends among scammers that make the old schemes appear to be child’s play. Appealing to the emotional pull of a victim is now just part of the scheme, which now includes familiarity dupes and long-term schemes to raid a bank account. These cons are more targeted, more ruthless and can take out even large corporations and entire governmental programs. There’s a new evolution in Internet con artistry, and it’s putting everyone at risk.

Check out the four new and scary ways con artists are getting their money on the Internet, and real-life examples of how they work by clicking The Next Web – Four New Ways Online Scammers Are Taking Your Money.

 

“Bank of America Alert”

WARNING – BANK OF AMERICA PHISHING SCAM / ONLINE BANKING SCAM

Bank of America Alert: Sign-in to Online Banking Locked
From Bank of America Alert bankofamericatransfers@mail.transfers.bankofamerica.com

To ensure delivery, add onlinebanking@ealerts.bankofamerica.com to your address book. <- This is so it doesn’t end up in the spam filter which will most likely happen because it’s spam, and the scammers know that.

Exclusively for: |

		Online Banking Alert Security Check

Security Checkpoint: You last signed in to Online Banking on 03/05/2013. Remember: Always look for your SiteKey® before entering your Passcode.

To: Bank Of America Account Holders Account: PERSONAL/BUSINESS CHECKING/SAVINGS ACCOUNT Date: 03/06/2013

Because of unusual number of invalid login attempts on you account, we had to believe that, their might be some security problem on your account. So we have decided to put an extra verification process to ensure your identity and your account security. Please click on Sign in to Online Banking to continue to the verification process and ensure your account security. It is all about your security. Thank you.

Like to get more Alerts? Sign in to your Online Banking account at Bank of America and within the Accounts Overview page select the Alerts tab.

Security Checkpoint: This email includes a Security Checkpoint. The information in this section lets you know this is an authentic communication from Bank of America. Remember to look for your SiteKey every time you sign in to Online Banking.

Email Preferences This is a service email from Bank of America. Please note that you may receive service email in accordance with your Bank of America service agreements, whether or not you elect to receive promotional email.  Privacy and Security Keeping your financial information secure is one of our most important responsibilities. For an explanation of how we manage customer information, please read our Privacy Policy. You can also learn how Bank of America keeps your personal information secureand how you can help protect yourself. Bank of America Email, 8th Floor-NC1-002-08-25, 101 South Tryon St., Charlotte, NC 28255-0001 Bank of America, N.A. Member FDIC. Equal Housing Lender © 2013 Bank of America Corporation. All rights reserved. This email was sent to:   AR72768/DD6A66

Return-Path: <bankofamericatransfers@mail.transfers.bankofamerica.com>
Received: from elasmtp-banded.atl.sa.earthlink.net (elasmtp-banded.atl.sa.earthlink.net [209.86.89.70])
by mtain-di09.r1000.mx.aol.com (Internet Inbound) with ESMTP id CD9733800009C;
Received: from [70.46.229.36] (helo=User)
by elasmtp-banded.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <bankofamericatransfers@mail.transfers.bankofamerica.com>)
id 1UDM8N-00070O-5M; Wed, 06 Mar 2013 16:44:25 -0500
From: Bank of America Alert bankofamericatransfers@mail.transfers.bankofamerica.com
Subject: Bank of America Alert: Sign-in to Online Banking Locked
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <E1UDM8N-00070O-5M@elasmtp-banded.atl.sa.earthlink.net>
X-ELNK-Trace: 96e671d63679e225d780f4a490ca6956d5d4673fe7faad86c8689bb8aad1e4f58afea7d0f18b49c4350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 70.46.229.36
x-aol-sid: 3039ac1da60d5137b8cc21dd
X-AOL-IP: 209.86.89.70
X-AOL-SPF: domain : mail.transfers.bankofamerica.com SPF : fail

 

“Erik Frank”

WARNING – WORK AT HOME JOB SCAM

Subject Line: Hello!

Hello Sir/Madam,
We are looking for new employees for our home-base jobs project. So it happens
that we think you might be a great addition to our team. We are looking for
competitive, honest, hard-working people. As well we reward skilled employees,
with the opportunity of working either part-time, or full time, a highly paid
salary, and daily comissions. If you want to take the job, please reply to this
e-mail ASAP.

Return-Path: google.employment_department@gmal.com
X-YahooFilteredBulk: 209.86.89.63
X-Originating-IP: [209.86.89.63]
Authentication-Results: mta1070.mail.gq1.yahoo.com from=gmal.com; domainkeys=neutral (no sig); from=gmal.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO elasmtp-junco.atl.sa.earthlink.net) (209.86.89.63) by mta1070.mail.gq1.yahoo.com with SMTP; Tue, 05 Mar 2013 10:23:43 -0800
Received: from [208.120.180.25] (helo=User) by elasmtp-junco.atl.sa.earthlink.net with esmtpa (Exim 4.67) (envelope-from <google.employment_department@gmal.com>) id 1UCwWa-00084R-6l;
Reply-To: <google.employment_department@hotmail.com>
From: ErikFrank <google.employment_department@gmal.com>
Subject: Hello!
Message-ID: <E1UCwWa-00084R-6l@elasmtp-junco.atl.sa.earthlink.net>
X-Originating-IP: 208.120.180.25
Erik Frank google.employment_department@hotmail.com
google.employment_department@gmail.com

 

“Dr. Grey Watson”

WARNING – 419 SCAM – AMERICA ONLINE PHISHING SCAM

Click here for previous posts sent by scammer Grey Watson.

From: hnfdhfghfh@yahoo.com
To: hnfdhfghfh@yahoo.com
Subject: From The Desk Of: Dr. Grey Watson194.72.251.4
Date: Mon, 11 Feb 2013 03:33:16 +0200

From The Desk Of: Dr.Grey Watson
Bank of America
Branch Offices New York
1680 Broadway, New York,
NY 10019, USA..
Vice Chairman on Investment Banking
Director, Credit Control Dept.
Email: drgreywatson@superposta.com

Attn: The Beneficiary,

TELEGRAPHIC TRANSFER NOTICE.

We are hereby officially notify you concerning your fund telegraphic Transfer through our bank, Bank of America, New York, to your bank account, which has been officially approved by the management of World Bank Swiss (WEBS) to credit the sum of US$10.5 Million into your bank
account.

Note that I have started processing your payment and every thing concerning the immediate remittance of your funds will be carried out within the shortest possible time from the time we received your? Below needed information.

Also be informed that the Governor of Bank in London (BL) will sign on your payment advice and a copy of the advice will be sent to the World Bank in Swiss for some record purposes. Meanwhile your information and your full contact details were received from our research manager, Barr.Paul Peterson on your behalf to FR for immediate release of your fund.

This fund was part of the lodged Late President Saddam Hussein of Iraq discovery fund with World Bank of Switzerland, which the Swiss Bank has decided to distribute it generously to help few lucky individuals and the American Government is in agreement with the Swiss Bank to distribute the fund to 700 hundred thousand people in America, Europe & Asia in other to help improve their businesses.

Therefore, reconfirm the aforesaid information accurately, because this office cannot afford to be held liable for any wrong transfer of funds or liable of any fund credited into an unknown account.

These are the information we needed to be reconfirmed by you.

1.Your Full Bank Account Details
2.Your Direct Cell or office phone to reach you
3.Your address of locations
4.Your full name

Finally, you are required to reconfirm directly to me the above information to enable me use it to process your bill of payment. Your quick response shall be mostly appreciated; all your response should be directed through our alternative email address for the immediate attention of the credit control department.

Yours Faithfully,

Dr. Grey Watson

Vice Chairman, Director, Credit /Telex Department.
EMAIL: drgreywatson@superposta.com
From: cindy l crossen crossen8@yahoo.com
Decatur-Avondale Estates Patch <noreply@patch.com>
Sent: Saturday, February 23, 2013 7:21 PM

Subject: From The Desk of:Mr. Fares D. Noujaim. Bank of America Branch Offices New York 1680 Broadway, New York, NY 10019, USA. Vice Chairman on Investment Banking Director, Credit Control Dept. Attn: The Beneficiary, TELEGRAPHIC TRANSFER NOTICE. We are hereby officially notify you concerning your fund telegraphic Transfer through our bank, Bank of America, New York, to your bank account, which has been officially approved by the management of World Bank Swiss (WBS) to credit the sum of US$18.5 Million into your bank account. Note that I have started processing your payment and every thing concerning the immediate remittance of your funds will be carried out within the shortest possible time from the time we received your, Below needed information. Also be informed that the Governor of Bank in London (BL) will sign on your payment advice and a copy of the advice will be sent to the World Bank in Swiss for some record purposes. Meanwhile your information and your full contact details were received from our research manager, Barr. Paul Peterson on your behalf to FRB for immediate release of your fund. This fund was part of the lodged Late President Saddam Hussein of Iraq discovery fund with World Bank of Switzerland, which the Swiss Bank has decided to distribute it generously to help few lucky individuals and the American Government is in agreement with the Swiss Bank to distribute the fund to 700 hundred thousand people in America, Europe & Asia in other to help improve their businesses. Therefore, reconfirm the aforesaid information accurately, because this office cannot afford to be held liable for any wrong transfer of funds or liable of any fund credited into an unknown account. These are the information we needed to be reconfirmed by you. 1.Your Full Bank Account Details 2.Your Direct Cell or office phone to reach you 3.Your address of locations 4.Your full name Finally, you are required to reconfirm directly to me the above information to enable me use it to process your bill of payment. Your quick response shall be mostly appreciated, all your response should be directed through our alternative email address for the immediate attention of the credit control department. Yours Faithfully, Mr. Fares D. Noujaim Vice Chairman, Director, Credit /Telex Department. Signed,Bank of America,New York sent you a link from Decatur-Avondale Estates Patch – International Community School hosts tours of their new site at the former Medlock Elementary School

From The Desk of:Mr. Fares D. Noujaim. Bank of America Branch Offices New York 1680 Broadway, New York, NY 10019, USA. Vice Chairman on Investment Banking Director, Credit Control Dept. Attn: The Beneficiary, TELEGRAPHIC TRANSFER NOTICE. We are hereby officially notify you concerning your fund telegraphic Transfer through our bank, Bank of America, New York, to your bank account, which has been officially approved by the management of World Bank Swiss (WBS) to credit the sum of US$18.5 Million into your bank account. Note that I have started processing your payment and every thing concerning the immediate remittance of your funds will be carried out within the shortest possible time from the time we received your, Below needed information. Also be informed that the Governor of Bank in London (BL) will sign on your payment advice and a copy of the advice will be sent to the World Bank in Swiss for some record purposes. Meanwhile your information and your full contact details were received from our research manager, Barr. Paul Peterson on your behalf to FRB for immediate release of your fund. This fund was part of the lodged Late President Saddam Hussein of Iraq discovery fund with World Bank of Switzerland, which the Swiss Bank has decided to distribute it generously to help few lucky individuals and the American Government is in agreement with the Swiss Bank to distribute the fund to 700 hundred thousand people in America, Europe & Asia in other to help improve their businesses. Therefore, reconfirm the aforesaid information accurately, because this office cannot afford to be held liable for any wrong transfer of funds or liable of any fund credited into an unknown account. These are the information we needed to be reconfirmed by you. 1.Your Full Bank Account Details 2.Your Direct Cell or office phone to reach you 3.Your address of locations 4.Your full name Finally, you are required to reconfirm directly to me the above information to enable me use it to process your bill of payment. Your quick response shall be mostly appreciated, all your response should be directed through our alternative email address for the immediate attention of the credit control department. Yours Faithfully, Mr. Fares D. Noujaim Vice Chairman, Director, Credit /Telex Department. Signed,Bank of America,New York ( bankofamericanewyork74@yahoo.com ) has shared the following event from Decatur-Avondale Estates Patch:
International Community School hosts tours of their new site at the former Medlock Elementary School

Return-Path: <crossen8@yahoo.com>
Received: from nm16-vm1.bullet.mail.bf1.yahoo.com (nm16-vm1.bullet.mail.bf1.yahoo.com [98.139.213.131])
by mtain-mh11.r1000.mx.aol.com (Internet Inbound) with SMTP id A2C3738000093
for <scammer419@aol.com>; Sun, 24 Feb 2013 12:30:10 -0500 (EST)
Received: from [98.139.215.141] by nm16.bullet.mail.bf1.yahoo.com with NNFMP; 24 Feb 2013 17:30:10 -0000
Received: from [98.139.212.200] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 24 Feb 2013 17:30:10 -0000
Received: from [127.0.0.1] by omp1009.mail.bf1.yahoo.com with NNFMP; 24 Feb 2013 17:30:10 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 522462.61826.bm@omp1009.mail.bf1.yahoo.com
Received: (qmail 55302 invoked by uid 60001); 24 Feb 2013 17:30:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1361727010; bh=0sc4nr+pqOlvq8SQpXImmwdM6buO4neJ6A98CgnR7X4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=l7oknc4Vexm6cnniutjA9BE07XaVTBbvNGes6m3ENwmJfOUwbyDeiD9u7Sie3qONCX4wSVxq2I/f7hSr9rr9UTNDfixerWt7myBpzuOSkJGbvXpOXOTn29BESVGNDXiXmUNkDqnVj5SaSAuuMJOIT0cqYGDJRZuf0wcs2VTqauo=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=rnjA+39ZkaGJwdGenoEM+KyV+QBnNj337v0bKIdY1acncE4VbDM6LWduWGPVQIjNekxRMVCel/TXXDPdiuM4Tozm0H+qi5hshzt9+kcTnGotMPITJqL3S+tJOWlj+YZg9wE+2esKrbH5jGrdNPH47Y70Pre7NCyMiewgRprjsRg=;
X-YMail-OSG: GJU8ve8VM1lpFYGT3isErhgajAAtLPGL9EhJeaK_ojXzb8v
9JV42Zv5sk7EYHgQa.aQGdcA1kSPrZ5zbFsNB2bwcqzCvkf_sgS64gxNh88s
lTt.a08JpkQ5FsHO25_JF37__JXIvMS66s5PcorkB4IP74WCRsP9bAU1Adu8
Zo097KmAYzSFfO_ze1CpK2nnQ3e5xwTgzL8FWoL3kiZB4lKmC5TE3qgCCdjl
sUVZJPvzqShwIweAGO9y.nttu9nq1n7JaWgkrUhH9D_5.ssVFq6pLq13feid
Yrx4VbJkE.HYUu4y5G1Xv1Q2exx_5Y4Ab4GxC9CC0SXPpkqsBDDpIhj5fW9k
yb8EzAtxnE6SuxUjBtWCSJgBHgauJXvgBGYW3Ot3pxDAw6ru6B5N.rTLCJmN
TqRuC8u8gWx5fj0quGWpsfVFSznraRMPwNIiWKIcqEantiCWZRkYkfEyfoy.
GOIKA9j9OZD0pjYP4tIzGaOf7WSyuJHprSwTR1DtULqVPZ8ZO9fqKSL_3IgU
Poib0rZDIufjYQrEdAQuDrHjYrHlqc0SjXDbZw0FN.RKH4hXk8VGPxLtJ0KH
RTGAnAWuWAjHFzri9gM5qli9HSZRkiG0i_psGmBDrL_LUakovl0QqfFKl.xa
EUXxaDNFprLwFqQxScrcmzc.H_xllhsVRQ.nKki.8xezTlm.doKfFcYOayyx
y9pj28M1n3vzqYM2mx80JmNRj.6vMmfzmcU2xHKZZdSah8Y0OCG_gUF5_fkP
.dsqjKWw5bChsZepZxAaGVWSN.n2pxxGU_9igzU7y5hr4VqG0DepqyJNXzQw
4cgb.a94zL2YvN1V_cIdl_RvGnTPETOv4IxZR0GIlU.Od7YrVCKhRqmWdFDm
bWMcjh.ebymekpwvD.JOTeRqlOIJ8TB5qE.DpHrlIR5IUtoBcKtRxFkjf71R
ZU43p58zhe.cRzdRDH7bCUktwHi0CuKsJrfdU3rmAm9vZdu3DhxOqvzRKJDR
TT_m1sVLErg–
Received: from [99.103.147.2] by web140801.mail.bf1.yahoo.com via HTTP; Sun, 24 Feb 2013 09:30:10 PST
X-Rocket-MIMEInfo: 001.001,CgoKY2luZHkgbCBjcm9zc2VuCgpGcm9tOiBEZWNhdHVyLUF2b25kYWxlIEVzdGF0ZXMgUGF0Y2ggPG5vcmVwbHlAcGF0Y2guY29tPgpUbzogClNlbnQ6IFNhdHVyZGF5LCBGZWJydWFyeSAyMywgMjAxMyA3OjIxIFBNClN1YmplY3Q6IEZyb20gVGhlIERlc2sgb2Y6TXIuIEZhcmVzIEQuIE5vdWphaW0uIEJhbmsgb2YgQW1lcmljYSBCcmFuY2ggT2ZmaWNlcyBOZXcgWW9yayAxNjgwIEJyb2Fkd2F5LCBOZXcgWW9yaywgTlkgMTAwMTksIFVTQS4gVmljZSBDaGFpcm1hbiBvbiBJbnZlc3RtZW50IEJhbmtpbmcgRGkBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.134.513
References: <51296b17cce0e_2ac2333fce018d@patchfe-d26.ihost.aol.com.tmail>
Message-ID: <1361727010.45138.YahooMailNeo@web140801.mail.bf1.yahoo.com>
From: Cindy Crossen <crossen8@yahoo.com>
Reply-To: Cindy Crossen <crossen8@yahoo.com>
Subject: Re: From The Desk of:Mr. Fares D. Noujaim.
X-AOL-SCOLL-AUTHENTICATION: mtain-mh11.r1000.mx.aol.com ; domain : yahoo.com DKIM : pass
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d60df512a4e224459
X-AOL-IP: 98.139.213.131

Below are some other names, email and IP addresses used by the above Grey Watson –

BANK OF AMERICA NY USA secretary.accounts@morison.co.ke REPLY-ADDRESS: <bankofamericannyusa@yahoo.cn> (LMAO, CN? ISN’T THAT A CANADIAN ADDRESS? ALSO YAHOO IS A FREE EMAIL SERVER AND BANK OF AMERICA (NOT ‘AMERICAN’) WOULD HAVE AN ACTUAL DOMAIN)
RETURN-PATH: secretary.accounts@morison.co.ke
X-YAHOO-FILTER-BULK: 62.8.88.13
Subject: From The Desk of: Mr. Fares D Noujaim
41.206.84.120
FROM: ”Bank of America” <red4x4tj@yahoo.com> red4x4tj@yahoo.com
newyorkbankofamerica@yahoo.com
RECEIVED-IP: 62.8.88.2 by zmbs01.wananchi.com
Other scam addresses who’ve sent mail using the same receiving IP information
62.8.65.11
41.212.2.11
41.212.18.30
41.212.32.10
62.8.88.13

 

Internet Fraud Resources

Internet fraud is an issue that many people experience. The best way to fight fraud is to learn how to detect and avoid becoming a victim. If you have already been victimized then there IS help available. Below is a link which will lead you to a list of official Government web resources provided by USA.GOV to help you learn and report online fraud.

Click here for the link of resources.

Clicking the link provided will bring you to a list of different resources which I’ve posted below. (However, you need to go to the website to actually click on the different links.)

Reporting Internet Fraud:

Child Pornography on the Internet
Complaints about Foreign Companies
Consumer Complaint Form
Further Ways to Report Internet Fraud from Cybercrime.gov
Identity Theft
Internet Crime Complaint Center
Internet Investment Fraud

Learning about Internet Fraud:

Avoiding Internet Investment Fraud
Cyber Crime Information
FBI Kids’ Page – Internet Safety Tips
FBI Warning about False FBI E-mails
Financial Crimes (International) (PDF)
Identity Theft: Trends and Issues
Identity Theft Information
Internet Do’s and Don’ts for Kids
Internet Protection Information for Consumers and Businesses
Kids’ Privacy and the Internet
Personal Information and Computer Security
Phishing Scams
Spyware
Statistical Data and Reports on Internet Fraud

 

 

“Prince Ares”

Facebook Scammer who also sends out other scams including phony Loan offers

Return-Path: <ujtnarng@djsnhdh.com>
X-YahooFilteredBulk: 201.45.154.205
X-Originating-IP: [201.45.154.205]
Authentication-Results: mta1026.mail.ac4.yahoo.com from=nxxbvrvhe.com; domainkeys=fail (bad syntax); from=pavdz032.com; dkim=permerror (no key)
Received: from 127.0.0.1 (EHLO relay0.iaxwrqen.com) (201.45.154.205) by mta1026.mail.ac4.yahoo.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=pavdz032.com; h=Message-ID:Date:From:Reply-To:To:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe; i=hfpxbucukm@pavdz032.com; bh=dFVZvz8xLuT_rKYt3EnH8h4_Y=; b=Z66y6TC4hHQav5l511K8rN7BV5J2QPB2W413mbPu0TdqFp920187h_E0S5S_J68F60qS583caI9 2bEDByPgYz1H5D8Aq_7B4fb_vm1XuZ6mqy7Sr5wc3D2KR89_2UIV
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=pavdz032.com; b=8294O73zP5nEdA9d6ib515t_4wQ8Z6UvsP8c8tIm3Ombw4O2EkQiw_9P4o9_SY1TQUUuwKoG4le Bl5cNKPOp3H_di0y19vLuaGJiK8mb_63cY2_NK9fEzAB7X4SxKgk;
From: “Facebook” <ajyfdofoh@nxxbvrvhe.com>
Reply-To: <ddbthbreutflr@lgthyibfibkuhlqz.com>
To: <princeares@yahoo.com>
Subject: Hey
Return-Path: tkapwv@dfvqdjfz.com

hey baby i saw your facebook profile (youre cute!) id love to chat with you on yahoo messenger my
screename there is nicebooty73@yahoo.com addme to chat i’m online now 🙂

Return-Path: <zutuxaap@jhdgsndhj.com>
X-YahooFilteredBulk: 188.124.84.112
X-Originating-IP: [188.124.84.112]
Authentication-Results: mta1014.mail.ac4.yahoo.com from=ghmruojtgv.com; domainkeys=fail (bad syntax); from=hgehj052.com; dkim=permerror (no key)
Received: from 127.0.0.1 (EHLO smtp0.zupqfco.com) (188.124.84.112) by mta1014.mail.ac4.yahoo.com with SMTP; Tue, 26 Feb 2013 10:58:30 -0800
From: “Facebook” <rndywxklvxq@ghmruojtgv.com>
Reply-To: <vybkkzxucrclf@ghljzccazbycdzw.com>
To: <princeares@yahoo.com>
Subject: Hey
Return-Path: onwyitun@lijjaenpb.com

From: “Facebook” <rndywxklvxq@ghmruojtgv.com> princeares@yahoo.com

hey baby i saw your facebook profile (youre cute!) id love to chat with you on yahoo messenger my
screename there is classyfoxy8104@yahoo.com addme to chat i’m online now 🙂

Adriana

The below message is a loan scam which was from the same scammer above. You’ll notice he uses the name PrinceAre which is the same name in the above scammers email address princeares@yahoo.com Young Lee Loan Firm – YOUNGLEELOANFIRM@YAHOO PrinceAre

Adriana

Hello i am Mr Leehom PrinceAre you in any financial stress or need a loan to settle debts or pay the bills? There is a small credit score and you are finding it hard to give credit to local banks and other financial institutions? Need a loan for any reason, such as: a) Personal Loan, Business Expansion. b) Business Start-up and education. c) the debt consolidation. d) Hard Money Loans. Contact today and get the stems of this service. Sincerely favorite.meet up with their financial need,you can contact us via PRINCELOANASIAFIRM@GMAIL.COM