| |
419 Scam – Yukos oil scam
In these emails the scammers claim to be associates of arrested Russian tycoon Mikhail Khodorkovsky. They seek your help in moving millions of dollars in secret funds through your bank account, promising you a slice of it, but first you must send money to a securities company, lawyer or bank.
As far as we can tell this scam has no connection to Russia whatsoever. The criminals are based in Africa, where all emails are sent from. It's the classic Nigerian fraud with a slightly modified storyline. Payments to the criminals appear to be made through a gang member in Gibraltar and possibly other locations in Europe.
There is also a "Kenneth Lay / Enron" offshoot of the Yukos Oil scam, likelwise unconnected to the real person and company:
We have received numerous variants of the following scam.
Example #1:
Dear friend,
I have a profiling amount in an excess of US$423M, which I
seek your partnership in accommodating for me. You will be
rewarded with 40% of the total sum for your partnership.
Can you be my partner on this?
INTRODUCTION OF MY SELF:
I am Ms.KIMAEVA LIOUDMILA, a personal secretary to Mikhail
Khodorkovsky the richest man in Russia and owner of the
following companies: Chairman CEO: YUKOS OIL (Russian Most
Largest Oil Company) Chairman CEO: Menatep SBP Bank (A well
reputable financial institution with its branches all over
the world)
SOURCE OF FUNDS:
The documents of the above funds in question was handed
over to me to be used in payment of an American oil
merchant for his last oil deal with my boss Mikhail
Khodorkovsky. Already the funds have been deposited with
ACCESS TRESURY SERVICES PLC UK ,where the final crediting is
expected to be carried out. While I was on the process, My
Boss got arrested for his involvement on politics in
financing the leading and opposing political parties (the
Union of Right Forces, led by Boris Nemtsov, and Yabloko, a
liberal/social democratic party led by Gregor Yavlinsky)
which poses treat to President Vladimir Putin second tenure
as Russian president. You can catch more of the story on
this
http://newsfromrussia.com/main/2003/11/13/51215.html
YOUR ROLE:
All I need from you is to stand as the beneficiary of the
above quoted sum and I will arrange for the documentation
which will enable ACCESS TRESURY SERVICES PLC UK transfer the
sum to you. I have decided to use this sum to relocate to
American continent and never to be connected to any of
Mikhail Khodorkovsky conglomerates. The transaction has to
be concluded in 2 weeks before Mikhail Khodorkovsky is out
on bail.
As soon as I get your willingness to comply through my most
private email address [kim303@di-ve.com] I will give you
more details.
Thank you very much
Regards
KIMAEVE LIOUDMILA
When contacted, "MRS LIOUDMILA" sent the following reply:
Dear Sir,
Thanks for your prompt response to my mail.This is a
very urgent and trustworthy business transaction.
Like I said in my first letter, I am representing Mr.
Mikhail Khodorkovsky (m.k.) and would like to ask for your
partnership in re-profiling funds over US$450 million I
sent our current conversational status to Moscow and have
received the authority to proceed with you, and get some
clarifications both ways.
Before I am able to give out the information that will
enable you access confidential data-pages of mikhail, I
would need some information as follows:
(1) What is your net worth?
(2) If you have problems, do they affect your activites you
undertake with us as an individual rather than a
corporate entity?
(3) Have you handled large funds, and was successfully?
All the answers will be kept very confidential. I must
explain why we are asking these questions: If you do have
existing profile problems, we may end up inheriting your
backlog thus creating a problem where none exist. We intend
to liquidate a large investment, and take the capital appr.
derivative to provide a new investment fund, under your
management, for future investments, thus negating any
requirements for taxation or declaration of process for
income generation. However, if you do have
issues prior to this, it puts anything you do in the light,
and thus puts us in uncomfortable situation. As you see,
our assets are frozen in switzerland, and while we have
excess of USD5b lying there, we are unable to liquidate
them, or use them as guarantee for payment of the USD3.5b
lying there, we are unable to liquidate
them, or use them as guarantee for payment of the USD3.5b
backtaxes inflicted on us by the government. If the
situation does not improve, we shall be bankrupt before the
end of forth quarter this year. The funds being liquidated
arise from independent investments of the
group, outside the russian soil, so we can legitimately do
so, only if this is done quietly. If the authorites hear
about this, we shall have to tender it for hearing in
international judicial systems, and that will kill us.
Hence answer the questions in honesty, and let us know we
are confortable with you. We are trying to ensure that you
do not put us in any trouble, and likewise, we shall
provide you with an input as an entity with
no history to the investment, only as a management
consultant.
Everybody must be safe now and in the future, hence the
questions.
I represent Mr. Mikhail khordokovsky, the former C.E.O of
Yukos in Russia. I am sure you know of his predicaments
presently. this is why we need your help I received your
positive position hence this email to you based on his
advice. I am sure you are up to date with m.k and Mr.
putin.Mr. p is intent in destroying m.k and his business
empire,We are working to get a break from the courts and we
will need all the cash call we can muster to hold our head
above waters in the coming days. The Gibraltar portfolio is
one of our arms yet to be infected by the Moscow led fed
tax offensive designed to bring us down and we need you to
help us keep it so. We need funds from this portfolio and
we can not get the funds on our own without arousing
moscow. To avoid this we need to completely reprofile the
funds from Gibraltar portfolio in your name so as to turn
away Moscow and their ally from us. The complete amount
available for you for reprofiling ispresently over $500m
and the 40% still stands.
The new beneficiaries of the portfolio will need to offset
the back taxes to the authorites in Gibraltar and move the
funds online over the internet through a dedicated
confidential bank access that I will obtain from m.k in
Moscow through existing channel of communications. Once I
get your name or company name, address, for identity
toreplace that of m.k and reprofile the portfolio
accordingly, then I will get the bank access across to you
to access the portfolio, pay the back taxes to the
authorites and move the funds to another account we will
provide you in monte carlo and you keep the 40% as agreed.
please write back promptly.I will also suggest you visit
these news sites on the internet to be better informed
about this projet.
http://newsfromrussia.com/main/2003/11/13/51215.html
http://www.supportmbk.com/mbk/mbk_bio.cfm
http://www.disinfopedia.org/wiki.phtml?title=Mikhail_B._Khodorkovsky
http://www.pbs.org/frontlineworld/stories/moscow/khodorkovskyinterview.html
http://www.fores.com/finance/lists/75/2004/LIR.jhtml?passListId=75&
passYear=2004&passListType=Person&uniqueId=M1IF&datatype=Person
http://mikhail_khodorkovsky_society.blogspot.com/
Yours truly
Ms Lioudmila.
NB: Find attached is my company id.
Kindly send yours to me for me to know whom precisely i am dealing with.
The fake ID sent by "KIMAEVA LIOUDMILA" is Here. Note how these guys screwed up on the second line, when they printed the Russian (Cyrillic) name in a Latin font.
The email headers show where this email came from:
Return-Path: <kimaeve707@yahoo.com>
Received: from 68.142.200.64 (HELO web30001.mail.mud.yahoo.com)
(68.142.200.64) by mta188.mail.dcn.yahoo.com
with SMTP; Tue, 08 Feb 2005 03:17:54 -0800
Received: (qmail 81240 invoked by uid 60001); 8 Feb 2005 11:17:53 -0000
Received: from [213.255.255.245]
by web30001.mail.mud.yahoo.com via HTTP;
Tue, 08 Feb 2005 03:17:53 PST
Date: Tue, 8 Feb 2005 03:17:53 -0800 (PST)
From: kimaeve lioudmila
Subject: Thanks for your mail.
To: emailaddress
WHOIS information for IP 213.255.255.245:
inetnum: 213.255.255.0 - 213.255.255.255
netname: SYSTEMPLUS-LIMITED
org: ORG-SLS2-RIPE
descr: SYSTEMPLUS LIMITED
country: NG
admin-c: RO534-RIPE
tech-c: RO534-RIPE
status: ASSIGNED PA
mnt-by: SV-MNT
mnt-lower: SV-MNT
changed: noc@sky-vision.net 20050112
source: RIPE
route: 213.255.252.0/22
descr: SkyVision Network Services
origin: AS25228
mnt-by: SV-MNT
changed: noc@sky-vision.net 20041013
source: RIPE
organisation: ORG-SLS2-RIPE
org-name: SYSTEMPLUS LIMITED, SN519
org-type: NON-REGISTRY
address: IKEJA
address: LAGOS
address: NIGERIA
phone: +23480217777
e-mail: rokafor@yahoo.com
admin-c: RO534-RIPE
tech-c: RO534-RIPE
mnt-ref: SV-MNT
mnt-by: SV-MNT
changed: noc@sky-vision.net 20041229
source: RIPE
person: RICHMOND OKAFOR
address: SYSTEMPLUS LTD
address: Benin
address: Nigeria
phone: +23480217777
fax-no: +23480217777
e-mail: rokafor@yahoo.com
nic-hdl: RO534-RIPE
mnt-by: SV-MNT
changed: noc@sky-vision.net 20040428
source: RIPE
Here is a similar one:
Received: (qmail 40412 invoked by uid 0); 20 Feb 2005 17:53:16 -0000
Received: from unknown (HELO smarthost3.tiscali.dk) (62.79.79.29)
by 10.30.215.42 with AES256-SHA encrypted SMTP; 20 Feb 2005 17:53:16 -0000
Received: from cpmail.dk.tiscali.com (mail.tiscali.dk [212.54.64.159])
by smarthost3.tiscali.dk (8.13.1/8.13.1) with ESMTP id j1KHnWxQ003285;
Sun, 20 Feb 2005 18:49:37 +0100 (CET)
(envelope-from slonb@tiscali.dk)
Received: from [81.199.6.62] by cpmail.dk.tiscali.com
with HTTP; Sun, 20 Feb 2005 18:50:46 +0100
Date: Sun, 20 Feb 2005 17:50:46 +0000
Message-ID: <41BEE27A0000C451@cpfe2.be.tisc.dk>
From: "slonb@tiscali.dk "
Subject: HI
Reply-To: slonbreth@yahoo.com
To: emailaddress, jessegore@tiscali.dk
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-15"
Content-Transfer-Encoding: quoted-printable
Attn
I,representing mr. mikhail khodorkovsky (M.K.) and would like to ask for
your partnership in re-profiling funds over US$423 million. I will give
the details, but in summary, the funds are coming via private bank and th=
is
is a legitimate transaction. You will be paid 4% for your "management
fees".
If you are interested, please write back and I will provide further
instructions.
Keep this confidential.
Finally, please note that this must be concluded within a short time.
Write me back. I look forward to it.
Mr Olson Berghart.
Sending network (IP 81.199.6.62):
inetnum: 81.199.6.0 - 81.199.6.255
netname: BEST-1
descr: Best Communications, Nigeria
country: NG
admin-c: CN574-RIPE
tech-c: CN574-RIPE
status: ASSIGNED PA
notify: lir@ipplanet.net
mnt-by: AS12491-MNT
mnt-routes: AS12491-MNT
changed: lir@ipplanet.net 20040429
source: RIPE
person: Chukwudi Nweke
address: 8 Lawason Road, Surulere
address: Lagos
address: Nigeria
phone: +234 1288 5178
e-mail: chukwuditc@yahoo.co.uk
nic-hdl: CN574-RIPE
notify: lir@ipplanet.net
changed: lir@ipplanet.net 20040429
source: RIPE
"Yuriy Lagutin"
Dear Friend,
Like I said in my first letter, I am representing Mr. Mikhail
Khodorkovsky and would like to ask for your partnership in
re-profiling funds over US$450 million. I sent our current
conversational status to Moscow and have received the authority
to proceed with you. I am sure you know of his predicaments presently.
This is why we need your help. I am sure you are up to date with
Mr. Khordokovsky and Mr. Putin. Mr. Putin is intent on destroying
Mr. Khordokovsky and his business empire. We are working to get a
break from the courts and we will need all the cash call we can
muster to hold our head above waters in the coming days.
As you see, our assets are frozen in switzerland, and while we
have excess of USD5billion lying there, we are unable to liquidate
them, or use them as guarantee for payment of the USD3.5billion
backtaxes inflicted on us by the government. If the situation does
not improve, we shall be bankrupt before the end of second quarter
of this year.
The Gibraltar portfolio is one of our arms yet to be infected by
the Moscow led fed tax offensive designed to bring us down and we
need you to help us keep it so. We need funds from this portfolio
and we can not get the funds on our own without arousing Moscow.
To avoid this we need to completely reprofile the funds from
Gibraltar portfolio in your name so as to turn away Moscow and
their ally from us. The complete amount available for reprofiling
is presently over $450M and you will receive 4% for your assistance.
The funds being liquidated arise from independent investments of
the group, outside the Russian soil, so we can legitimately do so,
only if this is done quietly. If the authorites hear about this,
we shall have to tender it for hearing in international judicial
systems, and that will kill us. Everybody must be safe now and
in the future.
Once I get your name or company name, address, telephone and fax
numbers inclusive as well as banking informations for identity to
replace that of Mr. Khordokovsky and reprofile the portfolio
accordingly, then I will get the bank access across to you to
access the portfolio and move the funds to another account we will
provide you and you keep the 4% as agreed. Please write back promptly.
I am presently in London from where I will be handling the transaction
with you for confidential reasons. My telephone number is 44-704-010-6215
and fax: 44-870-130-8875.
Please respond quickly.
Regards,
Yuriy Lagutin.
Message headers:
Received: from [81.199.108.18] by mprdmailfe2.nwk.myway.com
via HTTP; Mon, 28 Mar 2005 13:05:15 EST
X-AntiAbuse: This header was added to track abuse,
please include it with any abuse report
X-AntiAbuse: ID = f1f27a2340662796049a9ba35d107332
Reply-To: rvassily_attn@myway.com
From: "Rurik" <rvassily_attn@myway.com>
WHOIS details for sending network (IP 81.199.108.18):
inetnum: 81.199.108.0 - 81.199.111.255
netname: CIDR-INTERCELLULAR-1
descr: Intercellular Nigeria Ltd
country: NG
admin-c: YA95-RIPE
tech-c: YA95-RIPE
status: ASSIGNED PA
mnt-by: AS12491-MNT
source: RIPE # Filtered
person: Yakubu Adamu
address: 5th Floor, UBA House 57
address: Marina, Lagos
address: Nigeria
phone: +234 14704387
fax-no: +234 12643014
e-mail: akintolad@intercellular-ng.com
e-mail: adamuy@intercellular-ng.com
nic-hdl: YA95-RIPE
source: RIPE # Filtered
Dr. Jan Misianik
Hello Friend,
I am Dr. Jan Misianik. and I represent Mr. Mikhail Khordokovsky the
former C.E.O of Yukos Oil Company in Russia. I have a very sensitive and
confidentialbrief from this top (oligarch) to ask for your partnership in
re-profiling funds US$42.3 Million. I will give the details, but in summary,
the funds are coming via Bank Menatep. This is a legitimate transaction.
You will be paid 10% for your "Management Fees".
If you are interested, please write back by ail:janmisianik@london.net
and provide me with your confidential telephone number,fax number and
email address and I will provide further details and instructions. Please
keep this confidential; we can't afford more political problems.
Finally, please note that this must be concluded within two weeks.Please
write back promptly.Write me back. I look forward to it.
Regards,
Dr. Jan Misianik.
Message headers:
Received: from [196.25.253.14] (account bobvaye1@webmail.co.za)
by cgp6.sentechsa.net (CommuniGate Pro WebUser 4.3.5)
with HTTP id 1480541; Wed, 06 Jul 2005 09:26:05 +0200
From: "bob vaye" <bobvaye1@webmail.co.za>
Subject:mutual business proposal
To: bobvaye1@webmail.co.za
|