|
How do the 419 scammers get money?
How the scam works The advance fee fraud is based on blinding the victim with the prospect of a sudden windfall of an unexpected fortune in order to trick him/her into paying a considerable amount to the scammer. The victim never receives the promised but non-existent fortune. Below are several examples of mails demanding money at various stages of the scam.
Payments to 419 scammers are usually made through Western Union. This is a great service for sending money a close relative in an emergency. It is not a service you should use for sending thousands of dollars to a person you only got to know via the internet. Western Union transfers are basically untraceable. If you wire cash by Western Union to someone in say, London then anyone who receives the transfer codes from you can go to one of over 400 different locations in that city, pick up your cash and walk away, never to be identified or seen again. In a far smaller number of cases payment is requested by bank wire transfer to a designated bank account in Spain, Italy or other countries. In either case, if you have received payment instructions, forward us a copy of the payment instructions (make sure to include [419] in the subject line). When do the scammers demand money? In fake lotteries, the general sequence goes like this, unless the spam recipient is smart enough not to do what the scammers want:
This was one of the biggest fake lottery scams in late 2004. See our detailed page on this scam:
ATTN:THIRD CATEGORY AWARD WINNER:-firstname lastname Note: This scammer has also used the following email addresses:
"WORLD WIDE CASH CHANGE LTD / PRESTIGIUOS LOTTERY U.K" The scammers have registered websites for the fake lottery and fake claims agent:
Example #1: ATTN: REFERENCE: PL44125645 Dear prize winner, Acting on the instructions in your claims file with Reference number PL44125645, I wish to inform you that payment of your Lottery Claims amounting to £4,800,000.00 being prize money from prestigious lottery U.K. Cash 5 draws has been certified by all authorities involved. Be informed that instruments of payment for the sum of £4,800,000.00 to you, is already in our possession and shall be processed upon your meeting the requirements stated below. You are required to fill a "Lottery Winnings Claim Form" with all necessary details. LOTTERY WINNING CLAIM FORM 7 REFERENCE NO: _____________ TICKET NO: _______________ FULL NAME:........................................ COMPANY NAME:..................................... FULL ADDRESS:..................................... ................................................. ................................................ TEL: ........................... FAX:............................ YOUR EMAIL: ............................. Reply to : foreignservicedirector7@world-widecashchange.net ACCOUNT COORDINATES (Details of the account where you want your funds transferred): ..................................................... ..................................................... .................................................... BRIEF DESCRIPTION OF COMPANY/ INDIVIDUAL: .................................................... .................................................... .................................................... ________________ __________________ Signature Date Carefully fill out this form and send back either by fax or by email You will also be required to pay a fee of £4,670.00 (Four thousand six hundred and Seventy Great Britain Pounds), or its equivalent in your local currency. This payment is to cover transfer charges, Insurance of vital documents like prize claim certificate and other transfer documents, handling and opening of account charges. Note that your total prize claim of £4,800,000.00 has been insured to the real value and as such cannot be deducted from. This is in accordance with section 12(7) (b) of the national lottery act of the British Lottery Affairs Commission as adopted in 1996 and amended in 2001. This is to protect winners and to avoid misappropriation of funds. A certificate of prize claim certificate along side other vital documents will be sent to you via Courier service immediately transfer of your winnings is effected. Your winnings will be transferred within 24hrs after the receipt of both requirements stated above. Congratulations once more, I shall be awaiting your filled Lottery Winnings Claims Form. Sincerely yours, Mr. Gary Blackwell WORLD WIDE CASH CHANGE LTD TEL: +44 2000000177 +44 7005981869 FAX: +44 2075043761 +44 7005982095 EMAIL:foreignservicedirector7@world-widecashchange.net WEBSITE: www.worldwidecashchange.net NB: For further information about £4,670.00 (Four thousand six hundred and Seventy Great Britain Pounds) U.K, feel free to contact them directly; LOTTERY COORDINATOR PRESTIGIUOS LOTTERY U.K 73 BELGRAVE ROAD LONDON ENGLAND SW1V 2BB UNITED KINGDOM TEL: 447005947683 FAX: 447005963708 WEBSITE: www.prestigiouslotteryuk.com
Example #2: Received: from hotmail.com (bay23-f18.bay23.hotmail.com [64.4.22.68]) by rly-xn01.mx.aol.com (v103.7) with ESMTP id MAILRELAYINXN110-62c41b6351b11a; Tue, 07 Dec 2004 17:56:30 -0500 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 7 Dec 2004 02:54:00 -0800 Message-ID: <BAY23-F180AA6B8B787DCEBFA9C02C0B50@phx.gbl> Received: from 82.206.150.211 by by23fd.bay23.hotmail.msn.com with HTTP; Tue, 07 Dec 2004 10:53:24 GMT X-Originating-IP: [82.206.150.211] X-Originating-Email: [foreignservicedirector7@world-widecashchange.net] X-Sender: foreignservicedirector7@world-widecashchange.net From: "FOREIGN SERVICE DIRECTOR" <foreignservicedirector7@world-widecashchange.net> To: ################ Subject: payment instruction Date: Tue, 07 Dec 2004 10:53:24 +0000 Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_67b4_1709_1947" X-OriginalArrivalTime: 07 Dec 2004 10:54:00.0954 (UTC) FILETIME=[0F3D25A0:01C4DC4B] X-AOL-IP: 64.4.22.68 ------=_NextPart_000_67b4_1709_1947 Content-Type: text/plain; format=flowed ATTENTION:surname firstname Dear Prize Winner, We are in receipt of your completed verification form and it has been forwarded to our accounts department for verification and documentation. You are advised to immediately make arrangements to pay our processing fees, amounting £4,670.00 (Four thousand six hundred and Seventy Great Britain Pounds), or its equivalent in United States dollars, via money gram money transfer through our Claims representing officer in the United States. Find below full details of receiver; NAME OF RECEIVER: Mr. Francis Thompson Address of receiver: 7222 Bellerive 2705 Houston, Texas 77036 Tel: 1-713-589-7041 Fax: 1- 832-550-2547 Email:fran_thomp@worldwidecashchangeltduk.net Please note that you are to send the receipt of payment via email attachment or fax immediately after making the payment. We shall conclude arrangements and transfer your prize money into your account upon confirmation of your processing fees. A Pro Forma invoice for this payment is sent as an attachment with this email. Please download it for your perusal. I await your response. Sincerely yours, Mr. Gary Blackwell WORLD WIDE CASH CHANGE LTD TEL: +44 2070600695 TEL: +44 7040116624 FAX: +44 2070600698 EMAIL: foreignservicedirector7@world-widecashchange.net ------=_NextPart_000_67b4_1709_1947 Content-Type: application/msword; name="Invoice.doc" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Invoice.doc" 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAPgAAAAAA AAAAEAAAQAAAAAEAAAD+////AAAAAD0AAAD///////////////////////////////////// //////////////////////////////////////////////////////////////////////// ... AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAA= ------=_NextPart_000_67b4_1709_1947-- WHOIS lookup for 82.206.150.211: inetnum: 82.206.128.0 - 82.206.255.255 org: ORG-IA67-RIPE netname: Uk-INTELSAT-20031126 descr: PROVIDER Local Registry descr: Intelsat country: GB admin-c: IRA4-RIPE tech-c: IRTC1-RIPE tech-c: CQ37-RIPE tech-c: AT1875-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: AS22351-MNT mnt-routes: AS22351-MNT notify: noc@intelsat.com changed: hostmaster@ripe.net 20031126 changed: hostmaster@ripe.net 20040608 source: RIPE organisation: ORG-IA67-RIPE org-name: Intelsat org-type: LIR address: Intelsat address: Chiswick Park, Building 3 address: 566 Chiswick High Road address: London address: W45YA address: United Kingdom phone: +44 208 899 6035 phone: +1 202 944 6792 phone: +1 202 944 6958 fax-no: +1 202 944 6955 e-mail: augustin.traore@intelsat.com e-mail: chuan.qin@intelsat.com admin-c: AT1875-RIPE admin-c: IRA4-RIPE admin-c: IRTC1-RIPE admin-c: CQ37-RIPE mnt-ref: AS22351-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT changed: hostmaster@ripe.net 20040415 source: RIPE role: Intelsat Ripe Admin address: Intelsat Global Service Corporation address: 3400 International Drive, NW address: Washington, DC address: 20008 address: USA e-mail: noc@intelsat.com e-mail: bgp@Intelsat.com admin-c: AT1875-RIPE tech-c: CQ37-RIPE nic-hdl: IRA4-RIPE remarks: remarks: ************************************************************* remarks: * * remarks: * This is a generic ROLE object for an Intelsat Admin * remarks: * Contact person for RIPE matters. Inquiries about RIPE * remarks: * issues should be directed to the NOC or BGP email-boxes, * remarks: * which will forward them appropriately. For operational * remarks: * issues, send an Email or call the Intelsat NOC at: * remarks: * * remarks: * noc@intelsat.com * remarks: * +1 202 944 6792 * remarks: * * remarks: * For BGP related issues, send an email to: * remarks: * * remarks: * bgp@intelsat.com * remarks: * * remarks: * For issues of network abuse, including spam, please send * remarks: * email to Intelsat at: * remarks: * * remarks: * abuse@intelsat.com * remarks: * * remarks: ************************************************************* remarks: notify: Augustin.Traore@Intelsat.com notify: chuan.qin@intelsat.com changed: Daniel.Campbell@Intelsat.com 20021216 changed: tac.ops@intelsat.com 20031023 source: RIPE role: Intelsat RIPE Technical Contact address: Intelsat Global Service Corporation address: 3400 International Drive, NW address: Washington, DC address: 20008 address: USA e-mail: abuse@intelsat.com e-mail: noc@intelsat.com e-mail: bgp@Intelsat.com e-mail: Chuan.Qin@Intelsat.com e-mail: Augustin.Traore@Intelsat.com admin-c: IRA4-RIPE tech-c: CQ37-RIPE nic-hdl: IRTC1-RIPE remarks: remarks: ************************************************************* remarks: * * remarks: * This is a generic ROLE object for an Intelsat Technical * remarks: * Contact person for RIPE matters. Inquiries about RIPE * remarks: * issues should be directed to the NOC or BGP email-boxes, * remarks: * which will forward them appropriately. For operational * remarks: * issues, send an Email or call the Intelsat NOC at: * remarks: * * remarks: * noc@intelsat.com * remarks: * +1 202 944 6792 * remarks: * * remarks: * For BGP related issues, send an email to: * remarks: * * remarks: * bgp@intelsat.com * remarks: * * remarks: * For issues of network abuse, including spam, please send * remarks: * email to Intelsat at: * remarks: * * remarks: * abuse@intelsat.com * remarks: * * remarks: ************************************************************* remarks: notify: Augustin.Traore@Intelsat.com notify: chuan.qin@intelsat.com changed: Daniel.Campbell@Intelsat.com 20021216 changed: tac.ops@intelsat.com 20040116 source: RIPE person: Chuan Qin address: Intelsat address: 3400 International Drive, NW address: Washington, DC address: 20008 address: USA phone: +1 202 944 8530 nic-hdl: CQ37-RIPE e-mail: Chuan.Qin@Intelsat.com changed: TAC.OPS@Intelsat.com 20031126 source: RIPE person: Augustin Traore address: 3400 International Drive NW, Washington DC 20008-3006 phone: +703-944-7033 e-mail: augustin.traore@intelsat.com nic-hdl: AT1875-RIPE mnt-by: AS22351-MNT changed: TAC.OPS@Intelsat.com 20031126 source: RIPE
"GOLDEN REEF LOTTERY / SOUTHTRUST INVESTMENT PTY. / Harry Robben" This email from a supposedly South African lottery was sent from Nigeria (IP 81.199.85.129)Return-Path: <mrhrobben@southtrustltd.com> Received: from rly-yi04.mx.aol.com (rly-yi04.mail.aol.com [172.18.180.132]) by ################# (v#####) with ESMTP id MAILINYI14-7c941bd9f1d247; Mon, 13 Dec 2004 08:55:01 -0500 Received: from hotmail.com (bay23-f15.bay23.hotmail.com [64.4.22.65]) by rly-yi04.mx.aol.com (v103.7) with ESMTP id MAILRELAYINYI47-7c941bd9f1d247; Mon, 13 Dec 2004 08:54:37 -0500 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 13 Dec 2004 03:18:07 -0800 Message-ID: <BAY23-F1583CC4DC5F4DB065EDC12A9AB0@phx.gbl> Received: from 81.199.85.129 by by23fd.bay23.hotmail.msn.com with HTTP; Mon, 13 Dec 2004 07:58:20 GMT X-Originating-IP: [81.199.85.129] X-Originating-Email: [mrhrobben@southtrustltd.com] X-Sender: mrhrobben@southtrustltd.com From: "Harry Robben" <mrhrobben@southtrustltd.com> To: ################# Subject: CLAIMS REQUIREMENT/PROCESSING FORM Date: Mon, 13 Dec 2004 07:58:20 +0000 Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_3e16_65d8_51ad" X-OriginalArrivalTime: 13 Dec 2004 11:18:07.0085 (UTC) FILETIME=[6BADB9D0:01C4E105] X-Mailer: Unknown (No Version) ------=_NextPart_000_3e16_65d8_51ad Content-Type: text/plain; format=flowed ATTN: THIRD CATEGORY WINNER We are in receipt of your claims file, from GOLDEN REEF LOTTERY with reference Number REFERENCE NO: ST-A542-5 and BATCH NO: 228-GP. Be informed that we have in our possession instruments of payment for the sum of US$2,000,000.00 to you. You will be required to fill the "Lottery Winnings Claim Form" with all necessary details, after download, kindly print, fill, and send back either by fax or as an email attachment. Please find attacted Lottery Winnings Claim Form (LWCF) You will also be required to pay a fee of USD6,500.00 (Six thousand five hundred United States dollars only), or it�s equivalent in your local currency. This payment is to cover transfer charges, Insurance of vital documents like prize claim certificate and other transfer documents, handling and opening of account charges. Note that your total prize claim of US$2,000,000.00 has been insured to it's value and as such cannot be deducted from.This is in accordance with section 13(1)(n) of the national gambling act as adopted in 1993 and amended on 3rd July 1996 by the constitutional assembly. This is to protect winners and to avoid misappropriation of funds. A certificate of prize claim along side other vital documents will be sent to you via Courier service immediately transfer of your winnings is effected. Note that your winnings will be transferred within 24hours after the receipt of all the requirements. I shall be awaiting your response. Truly yours, Mr. Harry Robben. CLAIMS DEPT. MANAGER, SOUTHTRUST INVESTMENT PTY. PHONE: +27 838 919033 FAX: +27 115 076331 EMAIL: mrhrobben@southtrustltd.com www.southtrust.co.za ------=_NextPart_000_3e16_65d8_51ad Content-Type: application/msword; name="LWCF.doc" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="LWCF.doc" 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAATwAAAAAA AAAAEAAAUQAAAAEAAAD+////AAAAAE4AAAD///////////////////////////////////// .... AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA ------=_NextPart_000_3e16_65d8_51ad-- inetnum: 81.199.84.0 - 81.199.87.255 netname: CIDR-COMMUNICATION-01 descr: Internet service provider country: NG admin-c: TECH7-RIPE tech-c: TECH7-RIPE status: ASSIGNED PA notify: lir@ipplanet.net mnt-by: AS12491-MNT changed: lir@ipplanet.net 20040902 source: RIPE person: Tech Supernet300 address: 21 Mobolaji Bank address: Anthony Way Ikeja address: Lagos address: Nigeria phone: + 234 1 4976493 e-mail: admin@supernet300.com nic-hdl: TECH7-RIPE changed: lir@ipplanet.net 20040902 source: RIPEThis is the same provider as used by the "HERITAGE FINANCE LTD" scammers and in the "Mr. Chen Chun-Hwa" dead foreigner scam. It could be the same gang or they could be using internet cafes sharing the same provider. The claims form (LWCF.doc) was created by someone using the user name "GUNIT". The document was last printed out on 2004-10-29.
"GREENER PASTURES LOTTERY / "1ST MOVES INTERNATIONAL (SHIPIT), LONDON" Here's the contact information for the agent: Here's the fake lottery's fake postal address:CONTACT: STEVEN BROWN, CUSTOMER SUPPORT UNIT - CSU, 1ST MOVES INTERNATIONAL (SHIPIT), LONDON. FAX: 44 � 20 79003038 TEL: 44 � 77 46479156 EMAIL:steven_shipit@winning.com Here's the scam email:GREENER PASTURES LOTTERY, 42 ELLAND ROAD, LONDON. SE4 2JB ENGLAND. Subject: NON RESIDENCE AWARD CLAIM FORM-BF The £1500 is supposed to be a minimum deposit for opening an account at an online bank. The bank does not exist. If cash is sent, the criminals posing as a bank simply pocket it and ignore the new "customer". The victim will never gain access to his virtual bank account and any complaints will be disregarded. The wording of the following scam email is bears similarities to "ROYAL BAY SECURITY" scam. Here's the scam email: From: uknational lotto [mailto:uknationallo@mail2Uk.com] Option 1 (picking up the winnings in person) is discouraged by the scammers, because they don't actually have offices in the UK or Spain, the countries they claim to be operating in. Option 2 (courier service) costs £406. This money is wired to pay for a fake courier service wich will either not deliver at all or deliver a worthless fake check that bounces when cashed. Option 3 (private bank) costs £1500 in minimum deposits. Since "Newcastle Trust Private Bank" is a fake bank, any money wired by Western Union will be pocketed by the criminals. There is no bank, no bank acount and no winnings: Dear Firstname Lastname, This is to inform you that we acknowledge the online wire transfer option you have chosen for your winnings to be transferred to you. The email was sent ("Received: from [80.179.242.228] by mail2Uk.com with HTTP; 12/17/2004 11:47:59 PM PST") via a satellite broadband provider in Israel that covers Nigeria and other countries. It's interesting that this ISP also lies about which country it's based in, claiming to be in Great Britain even though it's really in Israel: inetnum: 80.179.242.224 - 80.179.242.255 netname: Gilat-ART2036 descr: Please Send Abuse/SPAM complaints To Abuse-gilat@012.net.il country: GB admin-c: DR5299-RIPE tech-c: DR5299-RIPE status: ASSIGNED PA notify: lir@linux.goldenlines.net.il changed: lir@linux.goldenlines.net.il 20040617 mnt-by: AS9116-MNT mnt-lower: AS9116-MNT source: RIPE route: 80.179.128.0/17 descr: Golden Lines origin: AS9116 mnt-by: AS9116-MNT changed: lir@linux.goldenlines.net.il 20020711 source: RIPE role: DNS REG address: 25 Hsivim st. Petach-Tiikva, Israel e-mail: dnsreg@012.net.il trouble: abuse@012.net.il admin-c: GE2074-RIPE tech-c: IB737-RIPE tech-c: AG914-RIPE nic-hdl: DR5299-RIPE notify: lir@linux.goldenlines.net.il changed: lir@linux.goldenlines.net.il 20030715 mnt-by: AS9116-MNT source: RIPEThe domain of the "bank" is hosted in China and was only registered a few months ago: Domain Name: NEWCASTLETRUST.COM Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN Whois Server: whois.dns.com.cn Referral URL: http://www.dns.com.cn Name Server: NS1.DNS.COM.CN Name Server: NS2.DNS.COM.CN Status: REGISTRAR-LOCK Updated Date: 26-nov-2004 Creation Date: 01-oct-2004 Expiration Date: 01-oct-2005 Email from the fake "bank": Received: from hotmail.com (bay23-f6.bay23.hotmail.com[64.4.22.56] (misconfigured sender)) by sccrmxc17.comcast.net (sccrmxc17) with ESMTP id <20041221043101s1700fir49e>; Tue, 21 Dec 2004 04:31:01 +0000 X-Originating-IP: [64.4.22.56] Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 20 Dec 2004 20:31:00 -0800 Message-ID: <BAY23-F640039A086AA62DB9AFF1AAA30@phx.gbl> Received: from 80.179.242.228 by by23fd.bay23.hotmail.msn.com with HTTP; Tue, 21 Dec 2004 04:30:48 GMT X-Originating-IP: [80.179.242.228] X-Originating-Email: [bonnyvarsat@newcastlebank.net] X-Sender: bonnyvarsat@newcastlebank.net From: "Bonny Varsat" <bonnyvarsat@newcastlebank.net> To: emailaddress Bcc: Subject: ACCOUNT OPENING PROCEDURE Date: Tue, 21 Dec 2004 04:30:48 +0000 Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_1e21_3811_6614" X-OriginalArrivalTime: 21 Dec 2004 04:31:00.0778 (UTC) FILETIME=[DFC510A0:01C4E715] This is a multi-part message in MIME format. ------=_NextPart_000_1e21_3811_6614 Content-Type: text/plain; format=flowed ATTENTION: Firstname Lastname 21-12-2004 WE HAVE VERIFIED YOUR CLAIMS AND THE PROCEDURE WILL INVOLVE YOUR OPENNING AN ONLINE ACCOUNT WITH US INTO WHICH WILL BE CREDITED YOUR WINNINGS. YOU MAY THEN TRANSFER YOUR FUNDS FROM THE ONLINE ACCOUNT TO ANY ACCOUNT OF YOUR CHOICE ANYWHERE IN THE WORLD. PLEASE FIND ATTACHED TO THIS EMAIL THE ACCOUNT OPENNING FORM WHICH YOU ARE TO FILL AND RETURN BACK TO US IMMEDIATELY. NOTE THAT ALL ACCOUNTS NOT PROPERLY SETUP BY THE 24TH OF DECEMBER 2004 WILL HAVE TO BE SUSPENDED UNTIL THE NEXT FISCAL FINANCIAL YEAR OF 2005 AS WE ARE ROUNDING UP ACCOUNTS FOR THIS YEAR. YOU ARE TO CONFIRM THE RECEIPT OF THIS MAIL IMMEDIATELY. BONNY VARSAT FOREX ALLOCATION UNIT MANAGER NEWCASTLE TRUST PRIVATE BANK www.newcastletrust.com Phone: +44-207-060-1448 Fax: +44-870-131-0463 As you can see the email from the "bank" arrived from the same IP address (80.179.242.228) as the mail by "Howard Collins". What a remarkable coincidence ;-) Here is a money demand from "METRO SECURITIES": From: "oliver bundu" <metrosecurities@consultant.com>
Here are the message headers: Return-Path: <metrosecurities@consultant.com> Delivered-To: victimaddress Received: (qmail 396534 invoked from network); 6 Jan 2005 11:54:45 -0000 Received: from unknown ([172.18.5.85]) (envelope-sender <>) by qmail6.highway.telekom.at (qmail-ldap-1.03) with QMQP for <>; 6 Jan 2005 11:54:45 -0000 Received: (qmail 185216 invoked from network); 6 Jan 2005 11:54:44 -0000 Received: from webmail-outgoing.us4.outblaze.com ([205.158.62.67]) (envelope-sender <metrosecurities@consultant.com>) by email08.aon.at (qmail-ldap-1.03) with SMTP for <victimaddress>; 6 Jan 2005 11:54:44 -0000 Received: from wfilter.us4.outblaze.com (wfilter.us4.outblaze.com [205.158.62.180]) by webmail-outgoing.us4.outblaze.com (Postfix) with QMQP id 440BB18001A8 for <victimaddress>; Thu, 6 Jan 2005 11:54:44 +0000 (GMT) X-OB-Received: from unknown (205.158.62.81) by wfilter.us4.outblaze.com; 6 Jan 2005 11:54:44 -0000 Received: by ws1-2.us4.outblaze.com (Postfix, from userid 1001) id 2A3991F50B1; Thu, 6 Jan 2005 11:54:44 +0000 (GMT) Content-Type: text/html; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Received: from [195.166.237.40] by ws1-2.us4.outblaze.com with http for metrosecurities@consultant.com; Thu, 06 Jan 2005 06:54:44 -0500 From: "oliver bundu" <metrosecurities@consultant.com> To: "Firstname Lastname" <victimaddress> Date: Thu, 06 Jan 2005 06:54:44 -0500 Subject: Re: Fw: ACCOUNT RESTRICTION X-Originating-Ip: 195.166.237.40 X-Originating-Server: ws1-2.us4.outblaze.com Message-Id: <20050106115444.2A3991F50B1@ws1-2.us4.outblaze.com>
This money demand arrived from Nigeria (IP address 195.166.237.40): inetnum: 195.166.237.0 - 195.166.237.255 netname: LINKSERVE descr: IP pool for satellite hub country: NG admin-c: TO219-RIPE tech-c: TO219-RIPE status: ASSIGNED PA mnt-by: AS8770-MNT mnt-lower: AS8770-MNT mnt-routes: AS8770-MNT changed: obinna@linkserve.net 20040906 source: RIPE person: Tunde Ogedengbe address: Linkserve address: 22 Akin Adesola address: FATB Plaza address: Victoria Island address: Lagos Nigeria phone: +234 1 2623900 fax-no: +234 1 262 3906 e-mail: tunde@linkserve.com.ng nic-hdl: TO219-RIPE notify: tunde@linkserve.com.ng changed: hostmaster@ripe.net 19971217 source: RIPE Here is a money demand from a "SANTA LUCIA" "claims agent": Return-Path: <santalucia1964@yahoo.com> Received: from 207.115.57.39 (EHLO ylpvm08.prodigy.net) (207.115.57.39) by mta829.mail.sc5.yahoo.com with SMTP; Wed, 15 Dec 2004 05:32:32 -0800 X-Originating-IP: [206.190.39.144] Received: from web52606.mail.yahoo.com (web52606.mail.yahoo.com [206.190.39.144]) by ylpvm08.prodigy.net (8.12.10 083104/8.12.10) with SMTP id iBFDWJOX022309 for <emailaddress>; Wed, 15 Dec 2004 08:32:19 -0500 Received: (qmail 42627 invoked by uid 60001); 15 Dec 2004 13:32:31 -0000 Received: from [80.58.2.46] by web52606.mail.yahoo.com via HTTP; Wed, 15 Dec 2004 05:32:31 PST Date: Wed, 15 Dec 2004 05:32:31 -0800 (PST) From: santa lucina firstname,we have gotten the approval to send your check to you.we have also taken your information to the paying bank here in spain.But the bank requested that we must obtain a tax clearance certificate from madrid local government so that they can hand your check to us for onward delivery to you. This email was sent from a Spanish internet service provider: inetnum: 80.58.0.0 - 80.58.24.255 netname: RIMA descr: Telefonica de Espana SAU descr: Red de servicios IP descr: Spain country: ES admin-c: LJP5-RIPE tech-c: FLT14-RIPE status: ASSIGNED PA remarks: *************************************************** remarks: For ABUSE/SPAM/INTRUSION issues remarks: PLEASE CONTACT THROUGH LINK remarks: http://www.telefonicaonline.com/nemesys/ remarks: or send mail to nemesys@telefonica.es remarks: any mail to adminis.ripe@telefonica.es will be ignored remarks: *************************************************** notify: adminis.ripe@telefonica.es mnt-by: MAINT-TdE changed: adminis.ripe@telefonica.es 20020530 changed: adminis.ripe@telefonica.es 20030924 source: RIPE route: 80.58.0.0/16 descr: RIMA (Red IP Multi Acceso) origin: AS3352 mnt-by: MAINT-AS3352 changed: adminis.ripe@telefonica.es 20010622 changed: adminis.ripe@telefonica.es 20020206 changed: adminis.ripe@telefonica.es 20030401 source: RIPE person: L Jimenez address: TELEFONICA DE ESPANA address: Emilio Vargas, 4 address: 28043-MADRID address: SPAIN phone: +34 91 5846497 fax-no: +34 91 5842650 e-mail: adminis.ripe@telefonica.es nic-hdl: LJP5-RIPE mnt-by: MAINT-TdE remarks: *************************************************** remarks: For ABUSE/SPAM/INTRUSION issues remarks: PLEASE CONTACT THROUGH LINK remarks: http://www.telefonicaonline.com/nemesys/ remarks: or send mail to nemesys@telefonica.es remarks: any mail to adminis.ripe@telefonica.es will be ignored remarks: *************************************************** notify: ah@telfonica.es changed: adminis.ripe@telefonica.es 20020530 source: RIPE Subject: NON RESIDENCE AWARD CLAIM FORM-BF
"processment and legal documentation charges" (EUR 928.10) From: MRS. VERONICA VAN BOSCH [mailto:veronicbosch@netscape.net] Sent: 27 December 2004 12:50 To: Full Name Subject: CONGRATULATION!!! MACSOFTWARE INTERNATIONAL LOTTERY BV Laan Van Hoornwajck 55 2289 Dg Rijswijck Den Haag, The Netherlands ATTN: We are pleased to inform you of the announcement today 27th, December 2004 of winners of the MACSOFTWARE PROMOTION LOTTERY NETHERLANDS /INTERNATIONAL, PROGRAMS held on 23rd of October 2004. Your email address attached to ticket number 023-56475130154, drew the lucky numbers6-13-11-42-40-59, batch number 6656/NL and consequently won the lottery in the 1st category. You have therefore been approved of a lump sum pay out of (EUR500,OOO:00) FIVE HUNDRED THOUSAND EURO ONLY in credited to file LOTTERY REF NO. SGIL/763276/03. This is from total prize money of EURO 20,000,000.00 shared among the seventeen international winners in categories B with serial number: IL/FLW/12-C033721181. All participants were selected through a computer ballot system drawn form 25,000 company email addresses and 30,000,000 individual email addresses from Australia,Africa, New Zealand, America, Europe, North America and Asia as part of International Promotions Program, which is conducted annually. CONGRATULATIONS! Your fund is now in custody of a financial Security company insured in your FILE REFERENCE. Due to the mix up of some numbers and names, we ask that you keep this award strictly from public notice until yourClaim has been processed and your money remitted to your account.This is part of our security protocol to avoid double claiming or unscrupulous acts by participants of this program. This lottery program was promoted by our group of philanthropist headed by the Netherlands government. We hope with a part of you prize, you Will participate in our end of year high stakes EURO 5,000,000 million International Lottery. To begin your claim, please contact your file/claim Officer: MR.WILLIAM ROBINSON FOREIGN SERVICE MANAGER STANDARD SECURITY BV DEN HAAG, THE NETHERLANDS EMAIL:macsoftlotter@netscape.net TEL:+31-627-501-802 Please be informed that NON RESIDENCE of THE NTHERLANDS will be required to make a NON DEDUCTABLE advance payment of processment and legal documentation charges of (EUR928.10 Cent) Nine Hundred And Twenty Eight Euro Ten Cent, to enable our legal department acquire Notorisation papers from the Court prior to award payment policy as required by the paying Financial Securiry Company.Please be aware that your Paying Authority will Effect Payment Swiftly upon satisfactory Report, Verifications and validation provided by our Processing Agent; that would be designated to your file. For due processment and remittance of your winning prize to your designated account of your choice. Remember, all prize money must be claimed not later than 10th of January 2004. After this date, all funds will be returned as unclaimed. NOTE: In order to avoid unnecessary delays and complications, please remember to quote your reference.And batch numbers in every one of your correspondences with your agent. Furthermore, should there be any change of your address, do inform your claims agent as soon as possible. Congratulations once again from our team of staff and thank you for being part of our promotional program. Note: Anybody under the age of 18 is AUTOMATICALY DISQUALIFIED. And batch numbers in every one of your correspondences with your agent. Furthermore, should there be any change of your address, do inform your claims agent as soon as possible. Congratulations once again from our team of staff and thank you for being part of our promotional program. Note: Anybody under the age of 18 is AUTOMATICALYDISQUALIFIED. Yours sincerely, Mrs.Veronica Van Bosch Lottery Coordinator
"processing and notifying your winning with the High Court of
Justice" (EUR 850) From: "jason van aken" <jasonvanaken@mail2Netherlands.com> The attached Microsoft Word document "PAYMENT SCHEME2(1).rtf" was edited by user "ws04" (Workstation 4?) at company "zainabia internet cafe". It was created on 2004-12-14 and last saved by "B". Here is the (no doubt fake) postal address given in the Word document: FEIRENS FINANCE BV DE AMSTERDAM�S PORT BIJLMERPLEIN 888 1102 MG AMSTERDAM 1000 BV AMSTERDAM THE NETHERLANDS TEL: 31-645-808-259 FAX:+31-645-590-445The email was sent from IP address 81.70.36.107, a DSL customer in the Netherlands: Received: from [81.70.36.107] by mail2Netherlands.com with HTTP; 12/14/2004 9:49:29 AM PST inetnum: 81.70.0.0 - 81.70.127.255 netname: EURONET-ADSL descr: Wanadoo Nederland BV descr: Muiderstraat 1 descr: 1011 PZ Amsterdam country: NL admin-c: EIAR1-RIPE tech-c: EIAR1-RIPE status: ASSIGNED PA notify: registry@euro.net mnt-by: EURONET-MNT changed: registry@euro.net 20030616 source: RIPE route: 81.68.0.0/14 descr: EuroNet Internet origin: AS5390 mnt-by: EURONET-MNT changed: arjen@euro.net 20020111 source: RIPE role: EuroNet Internet Administrative Role Account address: Wanadoo Nederland BV (formerly EuroNet Internet BV) address: COD / IKC / Network address: Muiderstraat 1 address: 1011 PZ Amsterdam address: The Netherlands phone: +31 20 535 5555 fax-no: +31 20 535 5400 e-mail: eiar1@euro.net admin-c: AW2096-RIPE tech-c: BL78 tech-c: PC2773-RIPE tech-c: FB1141-RIPE tech-c: EI89-RIPE nic-hdl: EIAR1-RIPE remarks: In case of abuse issues: remarks: - For WANADOO-CABLE blocks please contact abuse@casema.nl remarks: - For other blocks contact abuse@euronet.nl or abuse@wanadoo.nl mnt-by: EURONET-MNT changed: arjen@euro.net 20011101 changed: frans@quanza.net 20030109 changed: arjen@euro.net 20030902 changed: arjen@euro.net 20040116 source: RIPE Payment instructions: From: jasonvanaken@netscape.net To: emailaddress (Name) Subject: PAYMENT SCHEME FORM Dear Lucky Winner, We are in receipt of your claims file,with REFERENCE NO: 35149/337-5247/LNI and BATCH NO: Batch Number: 26371545-LNI/2005.Be informed that we have in our possession instruments of payment for the sum of 500,000.00 euros to you. To begin the process of the transfer of your winnings, You are also to choose any of the options below by which you would want to be paid: (a)Telegraphic Transfer (b) Certified Check You would also be required to pay the sum of 850.00 Euro (Eight Hundred and fifty Euros), or it's equivalent in your local Currency. This payment is to cover transfer charges, Insurance of vital documents like prize claim certificate,tax clearance and other transfer documents, Administrative charges.Payment should be through our accredited agents WESTERN UNION MONEY TRANSFER as instructed below and sent to us through email. NAME ACCOUNTS OFFICER: Mr.John Blair ADDRESS OF RECEIVER: 1104 KE Port Bijlmerplein Amsterdam,Netherlands. AMOUNT: 850 CURRENCY: EURO Also a Certificate Of Prize Claim Will be sent to you upon receipt of payment. Note that your total prize claim of 500,000.00 Euros has been insured to the real value and as such cannot be deducted from your winnings. This is in accordance with section 13(1)(n) of the national gambling act as adopted in 1993 and amended on 3RD July 1996 by the constitutional assembly.This Is to protect winners and to avoid misappropriation of funds. A certificate of prize claim along side other vital documents will be sent to you via Courier service immediately transfer of your winnings is effected.Note that your winnings will be transferred within 48hrs after the receipt of all the requirements by this company. Please email or call me if you have any queries. Best Regards, Jason Van Aken. __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register The following email arrived in response to a reply to a notification by Treasure Chest Sweepstakes LotteryThe contact address was: Mr.PAUL NEWTON. (Foreign Transfer Manager)Here's where the scammers ask for money: From: onwardagencybv@netscape.net ADVOCATENKANTOOR H. LEFERS
The following email claiming to be from a civil servant in South African describes a scheme to receive money from a payment to a contractor. This email was sent in response to the initial reply by the spam recipient. From: "Allen Mugenbeni" <mugenbeni@tsamail.co.za> Note: We verified that correspondence with this particular scammer was being read by someone using an internet service provider based in South Africa (InfoSat (Pty) Ltd). However, someone is also reading the same mails via Gilat SatCom, a satellite ISP near Tel Aviv in Israel that provides internet connections for ISPs in Nigeria and other parts of Africa... "Cost Of Transfer Charge (C.O.T.)" (EUR 1,500) The following money demand is from a fake Italian lottery. From: <funds2000@netscape.net> "refundable deposit fee" (EUR 820) The following money demand is from a "LOTTONET LOTTERY INTERNATIONAL", a ficticious Spanish lottery: PAYMENT INFORMATION "Charges for verification process" (EUR 750) The following money demand is part from a claims form of a fake Spanish lottery (Makron International Lottery, vsagent3@netscape.net):
Verisign "compulsory processing fee" (EUR 550) ATTN:firstname lastname, "courier service and insurance" (UKL 405) The following money demand is from a "Dgcourier Worldwide Express", supposedly delivering a prize from the "California Lottery". Compare this scam with "Alpha Express delivery services", a later version of the same scam most likely sent from Nigeria that also charges £405 and the "UK National Lottery" scam that mentions a courier service that costs £406. Another related scam is "BIZNIZZ COURIER COMPANY". Also, the IP addresses of the "UK National Lotto" scam email and the "Alpha Express delivery services" scam email are very close: 80.179.242.228 vs. 80.179.242.243 (network Gilat-ART2036).
Dear Customer, Here's an email directing a victim to contact this fake company:
Hello Firstname Lastname,
"courier service and insurance" (UKL 405 / USD 785.40) Most likely, "Alpha Express delivery services" and "ALPHA PRIVATE BANK UK" are just new labels for "Dgcourier" and "Newcastle Trust Private Bank" from the older scam. Another related scam is "BIZNIZZ COURIER COMPANY". The IP addresses of the "UK National Lotto" scam email, the "BIZNIZZ Courier Company" and the "Alpha Express delivery services" scam email are very close: 80.179.242.228, 80.179.242.240, 80.179.242.243. Received: from hotmail.com (bay21-f14.bay21.hotmail.com [65.54.233.103]) by ##################### (Postfix) with ESMTP id 76F8C25606 for <#####################>; Thu, 27 Jan 2005 08:56:08 +0100 (CET) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 26 Jan 2005 23:56:00 -0800 Message-ID: <BAY21-F14B18C979B50D42C39DB2FAC780@phx.gbl> Received: from 80.179.242.243 by by21fd.bay21.hotmail.msn.com with HTTP; Thu, 27 Jan 2005 07:55:39 GMT X-Originating-IP: [80.179.242.243] X-Originating-Email: [deliveryservices@alphaexworld.com] X-Sender: deliveryservices@alphaexworld.com In-Reply-To: <##################################> From: "John Walters" <deliveryservices@alphaexworld.com> To: ##################### Subject: Parcel number AEX97451 Date: Thu, 27 Jan 2005 07:55:39 +0000 Mime-Version: 1.0 Content-Type: text/plain; format=flowed X-OriginalArrivalTime: 27 Jan 2005 07:56:00.0963 (UTC) FILETIME=[A4891930:01C50445] Status: O X-Mmail: \Recent X-M-Uid: 1423.1106812574 Dear customer, Good day to you. This is to inform you that we are in possession of certain documents and certified cheques which are to be couriered to you. You are to please confirm your mailing address to enable us dispatch your parcel immediately. Note that we also do not deliver to P.O.Box address or street corners but to your residence. We are a well established company offering courier and transport services 24 hour a day for priority delivery of letters, parcels and consignments to any destination. Alpha Express Deliveries with its high security storage and network of affiliate security partners and agents around the world provide you with storage and specialized courier services through which you could send high quality goods like precious stones, art crafts and classified commodities to any part of the world. Your Parcel number is AEX97451. Description of parcel to be delivered: An original certificate of weight :-------------0.15kg Bonded draft of weight :-------------0.17kg Total weight of parcel :-------------0.32kg Colour of Parcel :-------------Brown Delivery Destination: Name: Firsname lastname Address: Not confirmed We do not operate on COD. Below are the mandatory administrative charges that you required to pay to enable us courier your certificate of winnings as well as your certified bank cheques to you: Courier charges...............................75.00 Pounds Administrative ..............................110.00 Pounds Insurance ............................... 220.00 Pounds TOTAL 405.00 Pounds (785.40USDollars) The charges are a little high because of the insurance cover we have undertaken incase of loss, damage or theft of your highly sensitive document before it gets to you. We assume all responsibilities incase of any eventualities. You are to make the payment through Money Gram money Transfer so as to speed up the process of delivery. You are to locate the nearest money gram agent to you and make the payment in the name of our accounts officer below: Mr Lawrence Yolelo 3-4 Abbey Orchard Street, Westminster, SW1P 2JJ You are to fax this office a copy of the transfer slip. If you do not have a fax machine, just send the following information via email as they appear on the money gram transfer slip: 1.Name and address of sender 2.Amount sent 3.Reference number You are to send a copy of the evidence of payment to your handling agent as well for confirmation. A receipt of the above payment will be couriered to you from our office, along with your winning cheques and certificate. As soon as we receive confirmation of your address and evidence of payment of the above charges, we will dispatch your documents immediately. The date and time of departure and expected date of delivery will be sent to you. It will take less than fourty eight hours to get your document to you. You will be required to sign for the parcel personally. You will be required to present a copy of your international passport or your driver's license as identification. All orders not delivered within Five(5) working days from this communication will be returned as unclaimed. We are glad to be of service to you. Mr John Walters Customer service Alpha Express delivery services 3-4 Abbey Orchard Street, Westminster, SW1P 2JJ Phone:+44-207-060-0353 Fax :+44-870-831-0812 ========================================================================== "Alpha Express" "Alpha Private Bank" are registered and copyright trade marks of :- Alpha Private bank. / Alpha Express Ltd. ========================================================================== This e-mail and any files transmitted with it are confidential and may be legally privileged and are solely for the individual or entity to whom they are addressed.If you have received this e-mail in error please delete this message and any attachment files, or contact Alpha Express Worldwide. on Tel: +(44) 2070600353 . All business is transacted under our Standard Trading Terms and Conditions a copy of which is available upon request . All liability for viruses is excluded to the fullest extent permitted by law
There's the network for sending IP address 80.179.242.243: inetnum: 80.179.242.224 - 80.179.242.255 netname: Gilat-ART2036 descr: Please Send Abuse/SPAM complaints To Abuse-gilat@012.net.il country: GB admin-c: DR5299-RIPE tech-c: DR5299-RIPE status: ASSIGNED PA notify: lir@linux.goldenlines.net.il changed: lir@linux.goldenlines.net.il 20040617 mnt-by: AS9116-MNT mnt-lower: AS9116-MNT source: RIPE route: 80.179.128.0/17 descr: Golden Lines origin: AS9116 mnt-by: AS9116-MNT changed: lir@linux.goldenlines.net.il 20020711 source: RIPE role: DNS REG address: 25 Hsivim st. Petach-Tiikva, Israel e-mail: dnsreg@012.net.il trouble: abuse@012.net.il admin-c: GE2074-RIPE tech-c: IB737-RIPE tech-c: AG914-RIPE nic-hdl: DR5299-RIPE notify: lir@linux.goldenlines.net.il changed: lir@linux.goldenlines.net.il 20030715 mnt-by: AS9116-MNT source: RIPEWHOIS details for domain "alphaexworld.com" (created 2005-01-08, complain to abuse@alphaexworld.com which is handled by the MSN abuse department) Request: alphaexworld.com connected to whois.melbourneit.com [203.27.227.114:43] ... Domain Name.......... alphaexworld.com Creation Date........ 2005-01-08 Registration Date.... 2005-01-08 Expiry Date.......... 2006-01-08 Organisation Name.... JOHN WALTERS Organisation Address. 45 williams str Organisation Address. Organisation Address. new york Organisation Address. 10008 Organisation Address. NY Organisation Address. UNITED STATES Admin Name........... JOHN WALTERS Admin Address........ 45 williams str Admin Address........ Admin Address........ new york Admin Address........ 10008 Admin Address........ NY Admin Address........ UNITED STATES Admin Email.......... CUSTOMER@alphaexworld.com Admin Phone.......... +1.1534361395375 Admin Fax............ Tech Name............ MSN NOC Tech Address......... One Microsoft Way Tech Address......... Tech Address......... Redmond Tech Address......... 98052 Tech Address......... WA Tech Address......... UNITED STATES Tech Email........... MSN-PA-TECH@msn.com Tech Phone........... +1.4258828080 Tech Fax............. Name Server.......... pdomns1.msn.com Name Server.......... pdomns2.msn.com Here is a typical copy an email directing a victim to contact this fake company: From: "Microsoft Word promotions" <claimsdept@mswordpromotions.com> To: <emailaddress> Sent: Wednesday, February 23, 2005 11:02 AM Subject: Options Dear Sir/Madam, We hereby inform you that we have processed your payment and your cheque is ready for disbursement. In this regard you are to choose from the options below that best suites you on how you wish to receive your funds. Also your funds deposited with us is not in liquid form but in Bank Cheque, this advice complies with the Anti-Fraud section 2,sub section (iv) of the procedural manual of the funds disbursement agreement existing between courier companies and the British Government. The options to receive your winnings are: 1. Come down in person to collect your funds at our payment center in either London or Spain depending on where there is availability of funds. You will be required to present a valid International Passport as proof of Identification amongst other documentation which will be required by the finance house if you choose this option. 2. Have our affiliate courier company send the cheque to our online payment center, This is In consonance with our policy in this regard, be advised that if you opt for the cheque to be couriered, we however exempts ourself from all liability related to this service. The cost of this service would be borne by you, this is a prerequisite for this option. You will be referred to our affiliate courier company so that you can make enquires concerning modalities, and charges. The reason for the courier option is for the fact of double taxation, that is if you are to come over to sign for the release of your winnings personally, you would have to pay taxes on the winnings in UK and then go and pay taxes on the same winnings in your country once the funds get there. In the light of the above you are adviced to choose from the options given to you. That is to say if you opt for courier service you are to notify this office that we may forward your check and winning certificate per your request to courier to the issueing bank.Below are their contact for you to open communication with them immediately as regards the requirements to sending your check to the payment center. Below are their contact details: Alpha Express Services, LTD. Director: Mr John Walters Email: customer@alphaexworld.com You are to keep me fully informed on all developments. Sincerely, Mr Jack Harold ........................................................................... This email and its attachments are confidential and intended for the exclusive use of the addressee(s). This email and its attachments may also be privileged or protected by legal rules. If you have received this by mistake please let us know by reply immediately and destroy the email and its attachments without reading, copying or forwarding the contents Similar emails were used in these scams:
Here is another version of the same scam: Network of sending IP address 192.116.119.135:Received: from 192.116.119.135 by by21fd.bay21.hotmail.msn.com with HTTP; Tue, 01 Feb 2005 16:08:55 GMT X-Originating-IP: [192.116.119.135] X-Originating-Email: [customer@alphaexworld.com] X-Sender: customer@alphaexworld.com In-Reply-To: <####################> From: "JOHN WALTERS" inetnum: 192.116.119.0 - 192.116.119.255 netname: GILAT-SATCOM-BLOCK-3 descr: Gilat-Satcom remarks: For abuse issues related to Gilat, email abuse-gilat@012.net.il notify: abuse-gilat@012.net.il country: GB admin-c: GS3350-RIPE tech-c: GS3350-RIPE status: ASSIGNED PA mnt-by: AS9116-MNT mnt-lower: AS9116-MNT changed: lir@linux.goldenlines.net.il 20050102 source: RIPE route: 192.116.64.0/18 descr: Goldenlines remarks: For addressing issues, email lir@linux.goldenlines.net.il remarks: For abuse issues, email abuse@012.net.il origin: AS9116 mnt-by: AS9116-MNT changed: lir@linux.goldenlines.net.il 20041121 source: RIPE role: Gilat Support address: Gilat Satcom address: 21D Yagia Kapaim st. Petach-Tikva, Israel phone: +972 3 9255000 fax-no: +972 3 9217938 admin-c: DR5299-RIPE admin-c: GE2074-RIPE tech-c: DR5299-RIPE tech-c: GE2074-RIPE trouble: abuse-gilat@012.net.il e-mail: customer@gilat.net nic-hdl: GS3350-RIPE mnt-by: AS9116-MNT changed: hank@att.net.il 20040909 source: RIPE The real Citibank does not use free webmail accounts such as "mail2banker.com" to send mail to its customers and it doesn't demand payments for non-existent lottery companies by Western Union wire transfer.
From: Citibank of Nigeria Plc <citipayment@mail2banker.com> "consultations and mobilization fees" (USD 5,250) From: "Barr Nkosi nkosi" <law_nkosi@yahoo.com> To: "Lastname, Firstname" <emailaddress> Date: Fri, 17 Dec 2004 07:20:58 -0500 FROM: Barrister Gerald Nkosi. ATTN: Title Firstname Lastname. Madam, This is to acknowledge the receipt of your mails and Attached documents of prove. The documents were well received and I would also like to inform you that this chambers has carried out her investigations and confirmation of your documents and beneficiary status and found out that all the information you passed to us was correct. I checked the validity of your inheritance and found out that Dr. Dredo Deposited these funds with A.D.B some years ago with your name as his next of kin/beneficiary of the deposited funds. The director of the foreign deposit department of A.D.B informed me that this funds would be sent to the government as unclaimed before the end of this month because, no individual has come up as a relative to Dr. Dredo for the release of the funds. I then presented the Death certificate of your late uncle to him and he really sympathized for the death of their prime customer Dr. Dredo.=20 I made it clear to him that I have been appointed by your family to apply for the release of this inheritance because you would not be able to make a trip for final sign off ceremony and all documentation from the relevant ministries. Presently, I would have to file an application on your behalf for the release of your inheritance and as soon as it is approved which will take two to three banking days, the bank will send you a letter of acknowledgment and confirmation of your receiving Bank account details where you would like your inheritance to be swiftly transferred through our Reserve Bank (Central Bank). Before we can proceed with the applications, you would be required by this chamber to make available the professional service charge of this chamber for us to commence immensely with the application process. The official consultations and mobilization fees of this humble chambers would have to be Ten thousand five hundred united states dollars (USD 10,500.00) but you would be required to make available 50% of the official charge, Five thousand two hundred and fifty United states dollars (USD 5,250.00) for our commencement. The remaining balance of the service charged would be paid upon the receipt and confirmation of your inheritance into your receiving bank account.=20 Upon the receipt of your confirmation and willingness to make the payment, the modes of the payment would be related to you. You are welcomed to ask any question you feel very important. Help us to serve you better. Barrister Nkosi=20 (Principal Attorney)
"Notarization of Cashier's Check" (USD 875) Received: from web42103.mail.yahoo.com ([66.218.93.196]) by mx1.############## with ESMTP Service id <BA0039d21b>; Wed, 15 Dec 2004 11:48:18 +0300 Received: (qmail 11815 invoked by uid 60001); 15 Dec 2004 08:48:11 -0000 Message-ID: <20041215084811.11809.qmail@web42103.mail.yahoo.com> Received: from [217.194.157.74] by web42103.mail.yahoo.com via HTTP; Wed, 15 Dec 2004 00:48:11 PST Date: Wed, 15 Dec 2004 00:48:11 -0800 (PST) From: Kenneth |Bello <centre4_africa2@yahoo.com> Subject: NOTARIZATION OF CASHIER'S CHEQUE To: "xxxxxxxx" <xxxxxxxxxxxx> In-Reply-To: <xxxxxxxxxxxxxxx> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-1666078122-1103100491=:6153" Return-Path: centre4_africa2@yahoo.com X-OriginalArrivalTime: 15 Dec 2004 08:48:18.0990 (UTC) FILETIME=[D32EC4E0:01C4E282] ...... NOTARIZATION OF CASHIER'S CHEQUE From the directive of Mr.DICKSON MICHAEL, DIRECTOR OF FOREIGN SERVICES,EUROPE ELGORDO LOTTERY PROMO MADRID,SPAIN. We have ascertained and verified the validity of your winning from our headquarters in MADRID, SPAIN, and you need to get a legal clearance from the ministry of justice here in Nigeria to a sworn affidavit on your behalf for the notarization of your cheque. However, You will be required to make a payment of (US$875 Dollars) EIGHT HUNDRED AND SEVENTY FIVE UNITED STATES DOLLARS to notarize your lotto prize cheque in the Federal high court of Nigeria since the cheque has been issued in your name the fees is not deductable and under the Nigeria judicial constitution in accordance with article 44 subsection 144 of the Nigeria regulations as amended in 1996 constitution. The notorized document and the receipt of payment will be released and issued in your name from the Federal high court of justice to our office subject upon confirmation of this payment which is payable to the federal high court of justice through our legal department so that we can as well send your cheque to your designated address. The notarization of your cheque is mandatory because it will be attached to your cheque before the Courier Service ( DHL EXPRESS MAIL SERVICE) can accept for the postage of your cheque due to the huge amount involved. It is not the policy of the lotto company to accept fund from any of our winners, but it was resolved after the 11th of September, 2001, incident in the United States of America, coupled with the March 11th madrid train bomb terrorist attack, that to enhance speedy delivery of the won prize cheque to the beneficiary and to duly certify that the fund is not related to Drug money, Money Laundering and Terrorist Sponsoring fund, the cheque must be notarized in the court for it to be cleared by the courier service, to save time and cost it became imperative to request the notary amount in order to have the prize notarize in court and winners meet the deadline and subsequently post your cheque to your designated address. Immediatelly we recieved your payment details our attorney will proceed to the High court to get your won cheque notarized before it can be posted to you. A copy of your payment draft will be sent to you via attachment for you to see before it will be posted to you issued in your name from our official paying bank ABN AMRO BANK,for you not to be sceptical about your won prize. You are directed to pay by WESTERN UNION MONEY TRANSFER with the following information below ,to speedy the processing of your notarization document. To the NAME: ALLEN IKE #30 DECO ROAD STATE: DELTA STATE COUNTRY: NIGERIA You are required and advice to make this payment to enable us start with the legal processing of your cheque and kindly provide the payment information, as stated below, 1)NAME OF SENDER 2)NAME OF RECEIVER 3)AMOUNT SENT 4)MONEY TRANSFER CONTROL NUMBER (MTCN) 5)TEST QUESTION 6)TEST ANSWER. Call me on phone( +234 802 300 9161) or Email me immediatelly you have received this mail for confirmation here in our office. Congratulations once again. Yours Faithfully, Barrister ALLEN IKE Head of legal department. DR.KENNETH BELLO DIRECTOR OF OPERATIONS AFRICA PAYMENT CENTER TEL: +234 802 300 9161 FAX: +234 53 255295 Do you Yahoo!? Dress up your holiday email, Hollywood style. Learn more.
"Authentication and filling fee, legal consent and Affidavit" (UKL 1510) From: <adamsmith_agent@iol.pt>
"processing and administrative charges" (EUR 650) From: <adspromo2004@netscape.net>Header information: Date: Fri, 14 Jan 2005 03:00:54 -0500 From: adspromo2004@netscape.net X-AOL-IP: 62.194.13.97This email was sent from the Netherlands (IP 62.194.13.97): inetnum: 62.194.0.0 - 62.195.255.255 org: ORG-UN1-RIPE netname: NL-A2000-20001010 descr: UPC Netherlands descr: Provider Local Registry country: NL admin-c: RIHU1-RIPE tech-c: RIHU1-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: A2000-KTA-MNT mnt-routes: A2000-KTA-MNT changed: hostmaster@ripe.net 20001010 changed: hostmaster@ripe.net 20010115 changed: lir-help@ripe.net 20011217 changed: hostmaster@ripe.net 20020419 changed: hostmaster@ripe.net 20020423 changed: hostmaster@ripe.net 20020603 changed: hostmaster@ripe.net 20020709 source: RIPE route: 62.194.0.0/16 descr: A2000 / Kabeltelevisie Amsterdam B.V. origin: AS8209 notify: hostmaster@chello.com mnt-by: A2000-KTA-MNT changed: hostmaster@chello.at 20031027 changed: hostmaster@chello.at 20041028 source: RIPE organisation: ORG-UN1-RIPE org-name: UPC Netherlands org-type: LIR address: UPC address: Kabelweg 51 address: 1014 BA AMSTERDAM address: The Netherlands phone: +31 20 770 73 12 fax-no: +020 77707758 e-mail: hostmaster@A2000.com admin-c: RIHU1-RIPE admin-c: RM2527-RIPE admin-c: FA1780-RIPE admin-c: ER1204-RIPE admin-c: MS2509-RIPE mnt-ref: A2000-KTA-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT changed: hostmaster@ripe.net 20040415 changed: bitbucket@ripe.net 20041112 source: RIPE person: Richard Huisman address: UPCnl address: Kabelweg 51 address: 1014 BA Amsterdam address: The Netherlands phone: +31 20 7783 049 fax-no: +31 20 7783 055 e-mail: rhuisman@upc.nl nic-hdl: RIHU1-RIPE notify: rhuisman@upc.nl remarks: E-mail is the preferred contact method! remarks: --------------------------------------- remarks: -- For abuse notification please use -- remarks: -- -- remarks: -- abuse@chello.nl -- remarks: -- -- remarks: --------------------------------------- changed: R.Huisman@A2000.com 20000417 changed: R.Huisman@upc.nl 20021003 changed: RHuisman@upc.nl 20030807 source: RIPE Dear Lastname Firstname,
"application / processing of winning certificate" (EUR 795) From: "williams miller" lt;williamsmiller@luckydayemaillotteryuk.orggt; To: <emailaddress> Sent: Friday, January 14, 2005 8:49 PM Subject: FINAL PROCEDURE....................CONGRATULATIONS!!!!! FROM: THE DESK OF THE NETHERLANDS AGENT, LUCKYDAY E-MAIL LOTTERY INTERNATIONAL. REF: LEIP/71740023/NL2004 ATTN:MR. FIRSTNAME LASTNAME CONGRATULATIONS!!!!! THIS IS TO ACKNOWLEDGE THE RECEIPT OF YOUR DULY FILLED PAVF FORM WITH THE DETAILS BELOW: BATCH :-PTP/31211214257/190888/2202 REF-PTP/21449267220/255100/2202 TICKET :-219028657434 SERIAL:-918735625 LUCKY :-21-70-81-82-99. AND TO FORMERLY INFORM YOU THAT AFTER THE VERIFICATION PROCESS CONDUCTED ON YOUR PRIZE AWARD VERIFICATION & PAYMENT FORM THE ADMINISTRATIVE DEPARTMENT HAVE GIVEN US THE GO AHEAD TO MAKE FULL PAYMENT TO YOU TO THE TUNE OF EUROS1,000,000.00 TO THE ACCOUNT YOU ARE GOING TO OPEN WITH THE SECURITY COMPANY HERE IN AMSTERDAM,NETHERLANDS. THE SAID SUM IS NOW DEPOSITED IN OUR SUSPENSE ACCOUNT IN YOUR FAVOR WAITING FOR THE IMMEDIATE REMITTANCE INTO YOUR NOMINATED BANK ACCOUNT. BE INFORMED THAT YOUR WINNING PRIZE HAS A HARDCOVER INSURANCE POLICY THAT MAKES IT IMPOSSIBLE TO MAKE ANY DEDUCTION OF ANY KIND, UNTIL THE SUM IS FINALLY CREDITED INTO YOUR DESIGNATED ACCOUNT. FOLLOWING THE ABOVE, YOU ARE TO MAKE AVAILABLE THE SUM OF €795.00 (SEVEN HUNDRED AND NINETY FIVE EUROS), BEING PAYMENT FOR APPLICATION /PROCESSING OF YOUR WINNING CERTIFICATE. YOU ARE ADVISED TO MAKE THIS PAYMENT THROUGH WESTERN UNION MONEY TRANSFER TO THE NAME OF OUR ACCOUNTS CLERK IN AMSTERDAM AS YOUR PRIZE WILL BE PAID FROM OUR BANKER IN AMSTERDAM AS STATED BELOW: NAME OF RECEIVER: NICK PATRICK ADDRESS: KLEIGBURG 184 ZIPCODE: 1104 EA CITY: ZUIDOOST STATE: AMSTERDAM COUNTRY: NETHERLANDS. YOU ARE TO SEND THE EVIDENCE OF PAYMENT BY FAX TO THIS OFFICE. THIS PROCESS IS VITAL AND URGENT FOLLOWING THE INSTRUCTION FROM OUR CLIENTS THAT ALL PRIZE MONEY SHOULD BE CLAIMED AS SOON AS POSSIBLE. CONGRATULATIONS ONCE AGAIN AND WE LOOK FORWARD TO HEARING FROM YOU SOON. WE WAIT FOR SCAN COPY OF YOUR EVIDENCE OF PAYMENT THAT WILL ENABLE US TO PROCEED WITH YOUR CLAIM. LASTLY AS SOON AS YOU MAKE THIS PAYMENT YOU ARE ALSO TO SEND TO US THE CONTROL NUMBERS AND THE TEXT QUESTION AND ANSWER IF THERE IS ANY. YOU ARE ADVISED TO ADHERE STRICTLY TO THIS INSTRUCTION. YOURS FAITHFULLY, WILLIAMS MILLER. www.luckyday.nl
"notarization of cheque" (USD 875) From: Frank William <fr_william_2001@yahoo.com> To: Firstname Subject: NOTARIZATION OF CASHIER'S CHEQUE Date: Fri, 21 Jan 2005 15:32:14 +0000 EUROPE ELGORDO SWEEPSTAKE LOTTERY PROMO MADRID, SPAIN 21ST JAN. 2005 ATTN : Firstname TICKET NUMBER : 023-0148-790-459, SERIAL NUMBER : 5073-11 LUCKY NUMBERS : 43-11-44-37-10-43 REF NUMBER : EESW/25041238013/03. ADDRESS: .AGE.............29yrs AMOUNT WON : $1 000, 000:00 LOTTERY DATE : 22nd Dec. 2004 DEAR MADAM, With reference to your e-mail and from the directive of MR. MICHAEL SMITH, DIRECTOR OF FOREIGN SERVICE, EUROPE ELGORDO LOTTERY PROMOMADRID,SPAIN. We have ascertained and verify the validity of your winning from our headquarters in MADRID, SPAIN, and you need to get a legal clearance from the local Court of justice here in London to sworn an affidavit on your behalf for the notarization of your cheque. However, You will be required to make a payment of (US$875 Dollars) EIGHT HUNDREDAND SEVENTY-FIVE DOLLARS UNITED STATES DOLLARS to notarize your lotto prize cheque in the Local court of Justice, here in London, since the cheque has been issued in your name the fees is not deducttable since the cheque has been issued in your name and under the British judicial constitution . The notorization document and the reciept of payment will be released and issued in your name from the Local court of Justice to our office subject upon confirmation of this payment which is payable to the Local court through our legal department so that we can as well send your cheque to your designated address. The notarization of your cheque is mandatory because it will be attached to your cheque before the courier service can accept for the postage of your cheque due to the huge amount involved. It is not the policy of the lotto company to accept fund from any of our winners, but it was resolved after the 11th of September, 2001, incident in the United States of America that to enhance speedy delivering of the won prize cheque to the beneficiary and to duly certify that the fund is not related to as Drug money, Money Laundering and Terrorist Sponsoring fund, the cheque must be notarized in the court for it to be cleared by the courier service, to save time and cost it became imperative to request the notary amount in order to have the prize notarize in court and winners meet the deadline and subsequently post your cheque to your designated address.Immediatelly we recieved your payment details today our attorney will proceed to the court on thursday to get your won cheque notarized before it can be posted to you. A copy of your payment draft is sent to you via attachment for you to see before it will be posted to you issued in your name from our official paying bank ABN AMRO BANK,for not to be sceptical about your won prize. You are directed to pay by WESTERN UNION MONEY TRANSFER with the following information below ,to speedy the processing of your notarization document. Name of reciever- MR JOHNNY ERIC MAX STUART Address : 32 ASHDOWN COURT EDMONTON LONDON N17 9XQ You are required and advice to make this payment to enable us start with the legal processing of your cheque and send the details you used in making the payment via email thus 1)NAME OF SENDER 2)NAME OF RECEIVER 3)AMOUNT SENT 4)MONEY TRANSFER CONTROL NUMBER 5)TEST QUESTION 6)TEST ANSWER. We await your urgent response Congratulations once again. Yours Faithfully, BARRISTER JOHNNY ERIC MAX STUART Head of legal department. MR FRANK WILLIAM payment director. NB:A COPY OF YOUR DRAFT IS ATTACHED AND INCASE OF VERIFICATION , YOUR CHEQUE CANNOT BE CONFIRM IN THE BANK ,UNTIL AFTER NOTARIZATION
"account opening/activation" (EUR 1500) Dear Firstname Lastname, Data for the fake "claims agent" and "lottery" for this demand:
DR. ROY DANIELS (CONCORD TRUST AGENCY) Amsterdam-Netherlands. Tel: 0031- 619 010 742. Fax: 0031- 847 300 041. concordbv222@go.com concordbv555@go.com concordinfo@go.com concordlotto@excite.co.uk concordlotto@netscape.net concordtfagency@netscape.net concordtrust001@netscape.net concordtrustbv@netscape.net MICROSOFT GLOBAL EMAIL LOTTERY Mrs. Lucia Dezor
"costs of processing" (EUR 750) From: winningteam22@netscape.net To: emailaddress Subject: YOUR CERTIFICATE OF WINNING AND INSTUCTION OF PAYMENT Date: Fri, 21 Jan 2005 09:36:49 -0500 21TH JAN,2005. MR SMITHS ADAMS. HILL CREST LOTTERY EGASTRAAT 254, AMSTERDAM,THE NEDERLANDS TEL,+31-624-401-507. DEAR SIR, WE ARE SORRY WE DID NO RESPOND TO YOU ON TIME,THIS WAS BECAUSE WE WERE VERY BUSY WITH YOUR WINNING FILE AND THE CERTIFICATE.YOUR WINNING CERTIFICATE HAS BEEN ATTACHED TO THIS BRIEF,FOR SECURITY PURPOSE WE DONT WANT TO SEND IT TRUE FAX MACHINE.DOANLOAD YOUR ATTACHMENT AND YOU CAN PRINT OUT YOUR CERTIFICATE OF WINNING. THE INFORMATION OF PAYMENT WE SEND TO YOU BEFORE,IT WILL TAKE FEWS WEEKS BEFORE WE CAN WITHDRAW THE MONEY,SO WE ADVICE YOU TO SEND THE PROCESSING FEE WITH THE FOLLOWING DETAILS...... ACCOUNT NAME :FELIX. EDA. AJAYI. ACCOUNT NUMBER :9630689. SWIFT CODE : PST BNL 21. BANK ADDRESS : POST BANK,THE NETHERLANDS. TRY AS SOON AS POSSIBLE TO SEND THIS MONEY, BEST REGARDS, MR SMITHS ADAMS. __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp
"processing fees" (EUR 860 / USD 1200) This email was sent from Nigeria:Received: from [196.38.110.38] (HELO mail01.infosat.net) by mail02.infosat.net (CommuniGate Pro SMTP 4.1.8) with ESMTP id 188108160 for ################; Mon, 24 Jan 2005 11:16:15 +0200 Received: from [213.255.198.15] (account pacificsec99@highveldmail.co.za) by mail01.infosat.net (CommuniGate Pro WebUser 4.1.8) with HTTP id 603108446 for ################; Mon, 24 Jan 2005 11:16:15 +0200 From: "pacific finance" <pacificsec99@highveldmail.co.za> Subject: Processing fees remittance advice. To: "######## ########" <################> X-Mailer: CommuniGate Pro WebUser Interface v.4.1.8 Date: Mon, 24 Jan 2005 11:16:15 +0200 Message-ID: <web-603108446@mail01.infosat.net> In-Reply-To: <##############################> MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit ATTENTION: CATEGORY A WINNER WINNING REF: GWK/132/756/40077 S/NO: 7772-511 Dear ################, We are in receipt of your completed verification form and we are presently processing your claim. Please contact the information manager of Global Lottery for your winning Certificate. While you are advised to immediately make arrangements to pay our processing fees, amounting to: 860 Euros, or its equivalent in united states dollars, which is: US$1200 USD. You are to pay the fees via western union money transfer through our accounts officer, with the information provided below. NAME OF RECEIVER: MR. BARRY FRANK ADDRESS OF RECEIVER: PS&F.BV Kempering 123, 1104KE Amsterdam. AMOUNT: Please note that you are to send the receipt of payment or payment details via email. It is important to note also that I do cannot effect the transfer of your funds if our processing fee is not recieved. Feel free to contact me via email, or by telephone for further clarification regarding this transaction. Regards, Mr. Richard Coker. Finance Director Pacific security and Finance BV. Kempering 123, 1104KE Amsterdam. Tel:+31-626-492-504 ext: 101 inetnum: 213.255.198.0 - 213.255.198.127 netname: Disc org: ORG-DC13-RIPE descr: Disc Communications country: ng admin-c: AA3079-RIPE tech-c: AA3079-RIPE status: ASSIGNED PA mnt-by: SV-MNT mnt-lower: SV-MNT changed: noc@sky-vision.net 20041222 source: RIPE route: 213.255.192.0/18 descr: SkyVision Network Services origin: AS25228 mnt-by: SV-MNT changed: noc@sky-vision.net 20030324 source: RIPE organisation: ORG-DC13-RIPE org-name: Disc Communications org-type: NON-REGISTRY address: LATEEF JAKANDE STREET address: Ikeja address: Nigeria phone: +234-803-302-0900 phone: +234-1-345-0111 fax-no: +234-1-345-0004 e-mail: bayobanjo@hotmail.com e-mail: ayodeleajisebutu@hotmail.com e-mail: ayodeleajisebutu@yahoo.com admin-c: AA3079-RIPE tech-c: AA3079-RIPE mnt-ref: SV-MNT mnt-by: SV-MNT changed: noc@sky-vision.net 20041222 source: RIPE person: Ayodele Ajisebutu org: ORG-DC13-RIPE address: Lateef Jakande Road address: Agindigbi , Ikeja, Nigera phone: +23412229911 fax-no: +23412229911 e-mail: ayodeleajisebutu@hotmail.com nic-hdl: AA3079-RIPE mnt-by: SV-MNT changed: noc@sky-vision.net 20041222 source: RIPE
"handling and processing charges" (UKL 4,751)
From: Raymond Stein [mailto:raymondstein12@yahoo.co.uk]
"MANDATORY NOTORAZATION/PROCESSING CHARGES" (USD 650) LINK-STRIDE LOTTERY COMMISSION, AV 12 CASTILLA MADRID, SPAIN. Madam, OUR TELEPHONE CONVERSATION AS REFER. VIEW ATTACHED PRIZE WINNING CERTIFICATE AND A COPY OF THE CHEQUE THAT WILL BE ISSUED IN YOUR FAVOUR AS SOON AS THE NOTARIZATION/PROCESSING CHARGES IS PAID. BE INFORMED THAT EVERY PROCCEDURE TOWARDS THE TRANSFERENCE OF YOUR CLAIMS (US$5.5 MILLION DOLLARS)TO YOUR NOMINATED BANK ACCOUNT BEFORE THE VALIDITY TIME FRAME HAS BEEN PUT IN PLACE. HOWEVER,YOU ARE REQUIRED TO PAY A MANDATORY NOTORAZATION/PROCESSING CHARGES OF US$650 DOLLARS.THIS IS IN ACCORDANCE WITH ARTICLE 44 SUB-SECTIONS 144 AS AMENDED SO AS TO PROTECT SUCCESSFUL WINNERS, TO FORESTALL ALL FRAUDULENT ACT AND TO AVOID MISAPPROPRIATION OF FUNDS. HOWEVER, SEND MANDATORY REQUIRED CHARGES THROUGH WESTERN UNION MONEY TRANSFER IN THE NAME OF OUR ZONAL ACCREDITTED ACCOUNT RECIEVER OFFICER. NAME: UFUOMAKPOR PHILIP AKPOVWOVWO. ADDRES: LAGOS-NIGERIA. TEXT QUEST: WINNER. ANSWER: LINK-STRIDE. MOREOVER, MY OFFICE THERFORE HOPE THAT YOU WILL COMPLY IMMEDIATELY WITH THIS DIRECTIVES OTHERWISE WE ARE LEFT WITH NO OTHER OPTION THAN TO GIVE UP YOUR WINNING PRIZE FOR RE-ASSESSEMENT/RE-VALIDATION. FINALLY, I WAIT YOUR TELEPHONE CALL UPON YOUR RECIEPT OF THIS MAIL. YOURS FAITHFULLY, MR.BRIAN EDWARD. (AFRICA ZONAL DIRECTOR) -------------------------------------------------------------------------------- LINK-STRIDE LOTTERY COMMISSION, AV 12 CASTILLA MADRID, SPAIN. MADAM, BE INFORMED THAT MY OFFICE HAS BEEN EMPOWERED/MANDATED BY THE LINK-STRIDE LOTTERY GAMING COMMISSION TO RELEASE YOUR CHEQUE TO YOU UPON YOUR PAYMENT OF THE REQUIRED MANDATORY NOTARIZATION/PROCESSING FEES. KNOW THAT YOUR WINNING PRIZE CLAIMS US$5.5 MILLION DOLLAR COULD ONLY BE KEPT IN OUR POSSESSION FOR A LIMITED PERIOD OF TIME AFTER WHICH SAME WILL BE RETURNED TO THE LINK-STRIDE LOTTERY GAMING COMMISSION BOARD IN MADRID, SPAIN FOR RE-VALIDATION. BE REST ASSURED THAT YOUR WINNING PRIZE CLAIMS WOULD BE RELEASE TO YOU WITHIN 48HOURS AFTER YOUR PAYMENT OF THE STIPULATED MANDATORY REGULATORY FEES. MY OFFICE WILL NOT GIVE FURTHER CLARIFICATION ON THIS MATTER AS WE ARE UNDER A ENORMOUS PRESSURE TO PROCESS THE PRIZE WINNING CLAIMS OF OTHER SUCCESSFUL WINNERS WITHIN THE STIPULATED VALIDITY TIME FRAME. FINALLY, KNOW THAT OUR TELEPHONE LINES ARE USUALLY VERY BUSY AS VARIOUS SUCCESSFUL PRIZE WINNERS ARE YEANING FOR THEIR CLAIMS AS WELL. IF YOU ARE UNABLE TO GET THROUGH TO US, YOU SHOULD PRESIST IN YOUR TRYING OR SEND A FAX ACROSS FOR OUR PROMPT ACTION. YOURS FAITHFULLY, MR.BRIAN EDWARD. (AFRICA ZONAL DIRECTOR) From: firstatlantic@bizconsulting.com [mailto:firstatlantic@bizconsulting.com]
"administrative charges, insurance" (EUR 850) From: "Nigel Parkers" <n_parkers@winning.com> To: "Firstname Lastname" <emailaddress> Sent: Thursday, 11 November, 2004 4:25 Subject: PRIZE CLAIM Our ref: OAM/024/63WD/04 Header info: Received: from [81.199.83.28] by ws1-14.us4.outblaze.com with http for n_parkers@winning.com; Wed, 10 Nov 2004 14:25:11 -0500 Sending Network (IP 81.199.83.28): inetnum: 81.199.82.0 - 81.199.83.255 netname: CIDR-COMMUNICATION-01 descr: Internet service provider country: NG admin-c: TECH7-RIPE tech-c: TECH7-RIPE status: ASSIGNED PA notify: lir@ipplanet.net mnt-by: AS12491-MNT changed: lir@ipplanet.net 20040902 source: RIPE person: Tech Supernet300 address: 21 Mobolaji Bank address: Anthony Way Ikeja address: Lagos address: Nigeria phone: + 234 1 4976493 e-mail: admin@supernet300.com nic-hdl: TECH7-RIPE changed: lir@ipplanet.net 20040902 source: RIPE
"Endorsement Fee, Affidavits" (EUR 2010, Nigeria)
From: "Michael Moses" <michaelmoses_lottonet@yahoo.co.uk> Asking "whois.ripe.net" about "83.170.12.18": inetnum: 83.170.12.0 - 83.170.13.255 netname: DE-IABG-TELEPORT-COBRANET-ISP descr: IABG - Teleport customer CobraNet country: LB admin-c: HM1517-RIPE tech-c: ED740-RIPE status: ASSIGNED PA notify: guardian@teleport-iabg.de mnt-by: IABG-MNT changed: gabriel@iabg.de 20040616 source: RIPE route: 83.170.0.0/18 descr: IABG mbH origin: AS29259 notify: lir.teleport@iabg.de mnt-lower: IABG-MNT mnt-routes: IABG-MNT mnt-by: IABG-MNT changed: bschmidt@teleport-iabg.de 20040420 source: RIPE person: Hikmat Mardo address: Lagos-Nigeria address: Lekki Phase 1 address: rafiu babatunde street plot 8 phone: +23417767720 phone: +234802 832 2133 phone: +23415555656 phone: +9613666325 e-mail: hjm@cobranet.org nic-hdl: HM1517-RIPE notify: guardian@teleport-iabg.de mnt-by: IABG-MNT changed: gabriel@iabg.de 20040617 source: RIPE person: Elie Dib address: Lagos-Nigeria address: Lekki Phase 1 address: rafiu babatunde street plot 8 phone: +9613235266 e-mail: elie@cobranet.org nic-hdl: ED740-RIPE notify: guardian@teleport-iabg.de mnt-by: IABG-MNT changed: gabriel@iabg.de 20040617 source: RIPE From: <KATHLESSCHRIS@netscape.net>Here is some header information, which shows this email came from Nigeria: Date: Sat, 29 Jan 2005 12:58:00 -0500 From: KATHLESSCHRIS@netscape.net Subject: RE: Winnings Notification MIME-Version: 1.0 Message-ID: <593EA832.22A9F334.3C081978@netscape.net> X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 81.199.85.150 X-AOL-Language: english
"processing and handling" (UKL 480) From: lloydsfinance_3@katamail.com Date: Friday, February 04, 2005 2:41:21 PM To: emailaddress Subject: WINNING NOTIFICATION!!! We are please to announce you as one of the 10 lucky winners in the Freedom Universal Lotto draw held on the 10th of January. All 10 winning addresses were randomly selected from a batch of 50,000,000 international emails.Your email address emerged alongside 9 others as a category 2 winner in this year's Annual Freedom Universal Lotto Draw. Consequently,you have therefore been approved for a total pay out of US$4,000,000 Dollars (Four million Dollars) only.The following particulars are attached to your lotto payment order: (i) winning numbers: 37-13-43-85-67-11 (ii) email ticket number: FUL754/22/76 (iii) lotto code number: FUL09622UK (iv) the file Ref number: FUL/04/736207152/UK Please contact the underlisted claims Agent as soon as possible for the immediate release of your winnings: Mr.Jack Daniel Payment Agent The Freedom Universal Lotto Company TEL:+ 44 7040 115 608 FAX:+ 44 8701 203 445 EMAIL: lloydsfinance_3@katamail.com or jack_d2@katamail.com N.B:Steps to claiming your prize; 1.Winners must pay £480 pounds only or its equivalent in your local currency as fee before claiming their prize for the processing and handling of award by agent. 2.Please quote your Reference number in all correspondence with the claims officer. 3.Winners should send to claim officer account detail or address where they want their prize paid or sent. 4.Winners must send thier names,address,telephone number and means of identification (international passport or drivers licence)to claim officer to process immediate payment of their prize. Once again on behalf of all our staff, CONGRATULATIONS!!! Sincerely, Mrs. MONICA KELLY Promotions Manager Freedom Universal Lotto company UK & Europe. ----------------------------------------------------------- The Freedom Universal Lotto Awards is proudly sponsored by the Microsoft Corporation,the Intel Group,Toshiba, Dell computers,Mckintosh and a conglomeration of other international IT companies.The Freedom Universal Lotto internet draw is held once in a year and is so organized to encourage the use of the internet and computers worldwide.We are proud to say that over 200 Million Euros are won annually in more than 150 countries worldwide.
Express Dispatch Courier Ltd.
Received: from mailweb.nyc.com (localhost [127.0.0.1]) by mailweb.nyc.com (8.12.9p2/8.12.9) with ESMTP id j14Heq8T010610 for <emailaddress>; Fri, 4 Feb 2005 12:40:52 -0500 (EST) (envelope-from fiduciaryagent@nyc.com) Received: (from vpopmail@localhost) by mailweb.nyc.com (8.12.9p2/8.12.9/Submit) id j14HepiM010609; Fri, 4 Feb 2005 12:40:51 -0500 (EST) (envelope-from fiduciaryagent@nyc.com) X-Authentication-Warning: mailweb.nyc.com: vpopmail set sender to fiduciaryagent@nyc.com using -f Received: from 216.139.181.214 (NYC.com Mail authenticated user fiduciaryagent@nyc.com) by mailweb.nyc.com with HTTP; Fri, 4 Feb 2005 12:40:50 -0500 (EST) Date: Fri, 4 Feb 2005 12:40:50 -0500 (EST) Subject: VERIFICATION PARTICULARS/COURIER INFORMATION From: fiduciaryagent@nyc.com To: Firstname Lastname <emailaddress> User-Agent: NYC.com Mail/1.4.2 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Abuse-Notice: NYC.com is not a purveyor of Unsolicited Bulk/Commercial Email. If you believe this message to be spam, please contact abuse@nyc.com Content-Length: 995 U.K NATIONAL LOTTERY Dear Winner, Congratulations once again from all the staff here. In order to verify your winnings, we need your particulars for record purposes, Attached here is a copy of our verifications form, please fill accordingly so as to proceed with your winnings. Once again congratulations from all the staff. VERIFICATION FORM 1.FULL NAMES:__________________________________ 2.ADDRESS:_____________________________________________ ____________________________________________ 3.SEX:_______________ 4.AGE:________ 5.MARITAL STATUS:___________________ 6.OCCUPATION:________________________ 7.E-MAIL ADDRESS:_____________________________ 8.TELEPHONE NUMBER:_____________________ 9.LOTTO NUMBER:____________________ B. DRAW NUMBER:______________ 10.TICKET NUMBER:___________________ 11.SERIAL NUMBER:__________________ 12.BRIEF DESCRIPTION OF COMPANY/INDIVIDUAL____________ ___________________________________________ 13. COUNTRY________________________________ Upon receipt of the duly requested data, I will send you the contact information of the payment office so you can proceed with effecting the release of your claim in anyway you deem fit. Warm Regards, Claire Dalton(MRS). NOTE:A copy of this verification form should also be sent to Mr.paul williams of Express Dispatch Courier Ltd. with this email address: xpresscouriers2000@yahoo.co.uk He would be responsible for sending you the original copies of those documents which would require your signature. When the documents are couriered to you, you would sign them and return them to the courier company where it would be forwarded to the Lottery headquarters for final payment of your prize money. Please oblige to follow their instructions so the document can get to your present address on time. Visit New York City online. Special offers on hotels, shops, attractions, and more. Plus FREE @nyc.com or @newyorkcity.com E-Mail! http://www.NewYorkCity.com http://www.NYC.com Sending network (IP 216.139.181.214): Asking "whois.arin.net" about "net-216-139-181-128-1": OrgName: Global Communicaton Network NetExpress OrgID: GCNN Address: Plot 287 Ajose Adeogun Street City: Lagos StateProv: PostalCode: Country: NG NetRange: 216.139.181.128 - 216.139.181.255 CIDR: 216.139.181.128/25 NetName: NETEXPRESS1 NetHandle: NET-216-139-181-128-1 Parent: NET-216-139-160-0-1 NetType: Reassigned Comment: RegDate: 2002-10-04 Updated: 2002-10-04 TechHandle: TIK-ARIN TechName: Ikoko, Tekena TechPhone: 234-84-237-536 TechEmail: tikoko@onebox.com OrgTechHandle: ETI2-ARIN OrgTechName: Timitimi, Ebibomo OrgTechPhone: 2341-262-0934 OrgTechEmail: ebibomo@yahoo.com
"handling,insurance,and settlement of Euro Goverment tax" (UKL 900) Subject: TIME IS OF THE ESSENCE REGARDING YOUR FUNDS
WHOIS details: maximum-security-trust-finance.org (2004-12-12, report to: abuse@msn.com) Domain ID:D105341090-LROR Domain Name:MAXIMUM-SECURITY-TRUST-FINANCE.ORG Created On:12-Dec-2004 22:39:09 UTC Expiration Date:12-Dec-2005 22:39:09 UTC Sponsoring Registrar:Melbourne IT, Ltd. dba Internet Names Worldwide (R52-LROR) Status:TRANSFER PROHIBITED Registrant ID:D110288904751919 Registrant Name:Edward Clapton Registrant Organization: Registrant Street1:12 QUEENS BOURDLAVARD Registrant Street2: Registrant Street3: Registrant City:NEW YORK Registrant State/Province:NY Registrant Postal Code:10019 Registrant Country:US Registrant Phone:+1.2124734667 Registrant Phone Ext.: Registrant FAX: Registrant FAX Ext.: Registrant Email:financial_director@maximum-security-trust-finance.org Admin ID:D110288904751916 Admin Name:Edward Clapton Admin Organization: Admin Street1:12 QUEENS BOURDLAVARD Admin Street2: Admin Street3: Admin City:NEW YORK Admin State/Province:NY Admin Postal Code:10019 Admin Country:US Admin Phone:+1.2124734667 Admin Phone Ext.: Admin FAX: Admin FAX Ext.: Admin Email:financial_director@maximum-security-trust-finance.org Tech ID:D110288904751918 Tech Name:MSN NOC Tech Organization:Microsoft Tech Street1:One Microsoft Way Tech Street2: Tech Street3: Tech City:Redmond Tech State/Province:WA Tech Postal Code:98052 Tech Country:US Tech Phone:+1.4258828080 Tech Phone Ext.: Tech FAX: Tech FAX Ext.: Tech Email:MSN-PA-TECH@msn.com Name Server:PDOMNS1.MSN.COM Name Server:PDOMNS2.MSN.COM
"charges for the transfer" (UKL 686) This money demand couldn't be fulfilled, resulting in the following demand:Subject: TRANSFER INSTRUCTIONS ! Date: Friday 21 January 2005 00:10 From: lottery accountant <lloydbank_trnsfr_info@yahoo.co.uk> To: emailaddress The UK NATIONAL LOTTERY/ SWEEPSTAKES INTERNATIONAL. Customer Service Foreign Claims/Transfer Dept. ATTN: FIRSTNAME LASTNAME I am very pleased to inform you have been accredited for payment.And the charges for the tranfer is 0.62% of your total winnings that is £111,355 ,which is £686. You are to make the required amount available via WESTERN UNION to our accounts office in London through our accounts officer;because this is the standard procedure. MRS RICHARD HILL44 Elspete rd Woolich, London SW4 6DH, United Kingdom. Endeavour to send the following information immediately after making the payment, * senders Name and address (Sender's name and address would be used to make delivery). * the money transfer control number(MTCN). -or a scanned copy of the payment slip to me for official references .And on confirmation of your payment for the transfer your winnings will be transfered into your account. I do hope you clearly understand these procedures as explained. Have a nice day and await your prompt response. Yours Faithfully, EARL GILBERTH. Documents currently undergoing verification /clearance at the United Nations(UN),Geneva and will be faxed directly to your bank for lodgement of your winnings into your account immediately after you indicate receipt of the above .
Subject: TRANSFER INSTRUCTIONS ! Date: Sunday 23 January 2005 22:26 From: lottery accountant <lloydbank_trnsfr_info@yahoo.co.uk> To: emailaddress The UK NATIONAL LOTTERY/ SWEEPSTAKES INTERNATIONAL. Customer Service Foreign Claims/Transfer Dept. ATTN: FIRSTNAME LASTNAME I hope all is well with you,i contacted my payment department ,and i was told that western union does not exist in south africa,so you are to make the required amount available via paying into the account of our agent below ,because your payment office for your country falls under the u.s zone. Citi Bank #111 wall street, new york,ny 10043,USA Swift code:citius33 A/c no. :36120856 Routing no. :021000089 Beneficiary Name: Al machidan ltd. payment detail:L.B. Plc. Further credited to: Al Machidan Ltd. Please after payment you have to send a scanned copy of the payment slip to me for official references .And on confirmation of your payment for the transfer charges, your winnings will be transfered into your account immediately and then you will send us your bank phone number and fax number so that the relevant document will be faxed directly to them which include clear source of fund,anti-terrorism certificate and a host of others.. I do hope you clearly understand these procedures as explained. Have a nice day and await your prompt response. Yours Faithfully, EARL GILBERTH. Documents currently undergoing verification /clearance at the United Nations(UN),Geneva and will be faxed directly to your bank for lodgement of your winnings into your account immediately after you indicate receipt of the above . HEATHROW COURIER SERVICES (Howard Dean) Attn:Firstname Lastname, And another one:
From: <mail.heathrowcourier@uku.co.uk>
"processing / handling fees" (USD 650") JOHN JOHNSON & ASSOCIATES
"Netherlands game board" / Henry Patrick Oduwa (EUR 520) Attn: Firstname Lastname Congratulations! We know you did not entered for this lottery but according to the lottery co-ordinate it is email balloting lottery, however emails were selected all over the world and your email address is a lucky number. We have already contacted the tax office about your winning. We are independent advocate from the lottery programmer and our services is to make sure our client winning prize has is been transferred to his or her nominated account. WITHOUT THE FOLLOWING, WE CANNOT FILE FOR YOUR WINNING PRIZE. -------------------------------------------------------------------- 1,Before we can star processing your winning, the ticket number 175420658766483 must be obtain from the Netherlands game board at the sum of 520 euros only. 2, this amount is not deductable from your winning because your winning prize is covered with HIGH INSURANCE POLICY. 3,we need your scan international passport or identity, the tax office here in the Nederlands want to verify your age, as you may know any winner that is below 18year is disqualified from receiving his winning prize. 4, you are requested to pay 520 euros to obtain your winning ticket number and you are expected to fill the blank space in the claim form with your accounting details. In the next 72 hours the tax office and the paying bank will contact you. 5, you are required to send 520euros via western union money transfer with the name of the accountant below Family name: Okoduwa Name: Henry Patrick (Amsterdam -The Netherlands) Best regards, Advocate Mr. Brands Advocate Mrs. G.F Saskia Dr John Peters AMSTERDAM NETHERLAND Phone number:+31-626-448-919 FAX number: +31-84-750-7733 __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Message headers: Received: from netscape.net (mow-d16.webmail.aol.com [205.188.139.132]) by air-in03.mx.aol.com (v104.18) with ESMTP id MAILININ34-3f70421b5dac13c; Tue, 22 Feb 2005 11:28:28 -0500 Date: Tue, 22 Feb 2005 11:28:28 -0500 From: bejeslawfirms@netscape.net To: emailaddress ("Firstname Lastname") Subject: RE: CLAIM FORM Message-ID: <350D668C.7FADDB86.04CACE42@netscape.net> X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 62.163.12.31
WHOIS details for sending network (IP 62.163.12.31): inetnum: 62.163.12.0 - 62.163.15.255 netname: UPC-BRT-HM8 descr: Brabant country: NL admin-c: RC482-RIPE tech-c: RC482-RIPE tech-c: HMCB1-RIPE status: ASSIGNED PA remarks: Contact abuse@chello.nl concerning criminal remarks: activities like spam, hacks, portscans notify: hostmaster@chello.at mnt-by: CHELLO-MNT changed: hostmaster@chello.at 20020618 source: RIPE route: 62.163.0.0/17 descr: UPC.nl Network Services descr: Chello Customers descr: The Netherlands origin: AS8209 notify: registry@upc.nl notify: hostmaster@chello.at mnt-by: CHELLO-MNT changed: hostmaster@chello.at 20031027 source: RIPE Here was the initial spam: DONEDENSTRAAT 203,
"BIZNIZZ COURIER COMPANY" FROM:THE DESK OF THE OF CHIFE EXECUTIVE OFFICER OF BIZNIZZ COURIER COMPANY ADDRESS: Voorburgstraat 250 1059 VD Amsterdam Netherlands BIZNIZZ COURIER COMPANY Message headers: Received: from [80.179.242.240] by ws1-5.us4.outblaze.com with http for biznizzexpress@deliveryman.com; Fri, 28 Jan 2005 03:15:31 -0500 From: "Jain Poels" <biznizzexpress@deliveryman.com> See "De Lotto Netherlands / Diego Stefani" for the initial scam email.
WHOIS detail for sending network (IP 80.179.242.240): inetnum: 80.179.242.224 - 80.179.242.255 netname: Gilat-ART2036 descr: Please Send Abuse/SPAM complaints To Abuse-gilat@012.net.il country: GB admin-c: DR5299-RIPE tech-c: DR5299-RIPE status: ASSIGNED PA notify: lir@linux.goldenlines.net.il changed: lir@linux.goldenlines.net.il 20040617 mnt-by: AS9116-MNT mnt-lower: AS9116-MNT source: RIPE route: 80.179.128.0/17 descr: Golden Lines origin: AS9116 mnt-by: AS9116-MNT changed: lir@linux.goldenlines.net.il 20020711 source: RIPE role: DNS REG address: 25 Hsivim st. Petach-Tiikva, Israel e-mail: dnsreg@012.net.il trouble: abuse@012.net.il admin-c: GE2074-RIPE tech-c: IB737-RIPE tech-c: AG914-RIPE nic-hdl: DR5299-RIPE notify: lir@linux.goldenlines.net.il changed: lir@linux.goldenlines.net.il 20030715 mnt-by: AS9116-MNT source: RIPE CONCORD TRUST AGENCY (Regina Van Berg) ATTN. FIRSTNAME LASTNAME, Concord Trust Agency is pleased to inform you that we have received and verified the claim form information that you sent to our office and to enable us process your claim file, you are adviced to remit the compulsory agency processing fee of 420.00 Euro(Four hundred and twenty euro only). You have to send this fee through the western-union money transfer on the name of our company's accounting officer. First name: Mr. Nicola Dave Last name : Paolo Address : 32 Palmstraat City : Amsterdam Country : Netherlands And give us the control number of payment by email or phone. To locate the closest western union money transfer office in your area please log onto www.westernunion.com We wish to bring to your notice the fact that the paying-out Bank has instructed us to collect this fee from the lottery winners because of the insurance policy that covers your funds which does not allow any deduction until final credit of your money into your nominated Bank Account. Upon your payment of this fee, we shall conclude the processing of your winning within 24hrs and send your claim file to the paying out Bank. Do send us your Bank information in your next mail, though the Bank will also contact you and demand it when we must've furnished them with the necessary documents regards to your winning. We await your urgent response on this matter. Best Regards, Regina Van Berg. For(CONCORD TRUST AGENCY) Tel: +31-617 792 760. __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register
MR MARK DONALD, The National Lottery The National Lottery P O Box 1010 Liverpool, L70 1NL UNITED KINGDOM (Customer Services) Ref: UK/9420X2/68 Batch: 074/05/ZY369 Fax: 44 (0)871 661 8831 CONGRATULATIONS Firstname Lastname, Your particulars have been received in this office.This means that you have been officially cleared for payment by the Verifications Dept. at the headquarters of the UK National Lottery.Your winning cheque, original copy of your winning certificate, together with a covering document (Money Laundering protection and Letter of Affidavit for Claims) from the British government stating that the money was obtained legally through their National Lottery promotion will be sent to you as soon as you choose from any of the option stipulated below. To begin the final step of the claims process, which is the shippment of your winning cheque prize to you. With regards to this, there are Three options open to you, you are required to select the most convenient of the Three. The options, together with their associated conditions are presented below:You are be required to pay the neccesary courier charges to enable us send you your cheque and other claim documents. Shipping your winning cross cheque to you via any of this channel listed below: DHL DHL company logo Mailing: £150.00 Insurance: £130.05 Vat: £ 90.00 TOTAL: £370.00 UPS UPS company logo Mailing: £140.00 Insurance: £120.00 Vat: £ 60.00 TOTAL: £320.00 FEDEX FEDEX company logo Mailing: £180.00 Insurance: £140.00 Vat: £ 30.DELIVERY DETAILS55 TOTAL: £350.55 This company declined reverse payment for these charges, stating that it is against their professional policy towards ensuring the safe delivery of the cheque to you. That if a reverse payment is made, and something goes wrong, that we/you cannot sue the courier company or insurance company to recover the full value of the fund as stipulated in the cheque since payment for insurance cover was not made at point of mailing.With the above reason, reverse payment is ruled out. Note: that your prize is protected by a hardcover insurance policy, which makes it impossible to deduct any amount from the money before it has been remitted to you. This means that the above charges cannot be deducted from the prize and hence must be provided by you before your prize is transferred to you. This is in accordance with section 13(1)(n) of the national gambling act as adopted in 1993 and amended on 3RD july 1996 by the constitutional assembly.This is to protect winners and to avoid misappropriation of funds Send your response to indicate your option within the next 24hrs,because you only have 6 days to claim this cheque and after this period,your cash prize will be deemed to have been forfeited by you and will be reused in the drawings of the next edition of the lottery. Once again,congratulations. YOURS SINCERELY, MR MARK DONALD (FIDUCIARY OFFICER) The National Lottery P O Box 1010 Liverpool, L70 1NL UNITED KINGDOM Fax: 44 (0)871 661 8831
"John Terry, DELIVERYMAN COURIER SERVICES" ATTEN:Firstname Lastname. We hereby inform you that we have received the required informations,and the services of a Certified Notary Public has been engaged to handle the Notarisation of your Papers, and your payment is now being finally processed.Your cheque will soon be ready for disbursement,along with your winnings certificate. In this regard you are to choose from the options below,the one that best suites you on how you wish to receive your winning prize: 1. Come down in person to collect your winning prize at The Promoters office:UK NATIONAL LOTTERY,12 Bridge Street,Staines Middlesex TW18 4TP United Kingdom. 2. Have our affiliate courier company send the cheque of your winning prize to you. In consonance with our policy in this regard, be advised that if you opt for the cheque to be couriered,you shall bear all liability related to this service.That is cost of this service would be borne by you; this is a prerequisite for this option.You will be reffered to our affiliate courier company so that you can make enquires concerning their modalities. We expect that you will notify us of your choice upon receipt of this message so that appropriate arrangement can be put in place.Also note that all winners in your catergory are expected to claim their winning prize within 10 working days,failure to which the payment will be recalled back as unclaimed.This is to enable us time to also attend to winners in the other catergories. Sincerely, Kennet Graham The U.K. National Lottery 12 Bridge Street, Staines Middlesex TW18 4TP United Kingdom. Message headers: Received: from unknown (195.166.241.58) by rediffmail.com via HTTP; 22 mar 2005 09:24:43 -0000 MIME-Version: 1.0 From: "kenneth graham" <kenneth_grahamuk@rediffmail.com> Reply-To: "kenneth graham" <kenneth_grahamuk@rediffmail.com> To: "Firstname Lastname" <emailaddress> Subject: PLEASE DO ACT ACCORDINGLY. Mail from the courier service: DELIVERYMAN COURIER SERVICES. 18/20 BURN STREET, UK LONDON. ATTEN:Firstname Lastname. We have received the information that you sent and hereby inform you that your winnings,documents and certificate is ready to be couriered to you. The following charges are required in sending them to you. Courier Charges:--------------------- 85.00 pounds Administrative :--------------------- 60.00 pounds Insurance :--------------------------45.00 pounds TOTAL190.00 pounds You are required to pay these charges to our , via [western union money transfer] below and please endeavour to send a confirmation to me. You are required to pay these charges to the address below: John Terry 18/20 BURN STREET, UK LONDON. After payment of these charges contact me through my e-mail address, for immediate delivery of your packaged winnings,documenta and certificate. Thanks john Terry Message headers: Firstname Lastname <emailaddress>Received: from [195.166.241.58] by ws1-4.us4.outblaze.com with http for john_terry@deliveryman.com; Thu, 24 Mar 2005 09:10:30 -0500 From: "john terry" <john_terry@deliveryman.com> To: "Firstname Lastname" <emailaddress> Date: Thu, 24 Mar 2005 09:10:30 -0500 Subject: Do act accordingly. X-Originating-Ip: 195.166.241.58
WHOIS details for sending network (IP 195.166.241.58): inetnum: 195.166.224.0 - 195.166.255.255 org: ORG-LNL1-AFRINIC netname: NG-LINKSERVE-971217 descr: Linkserve Nigeria Limited descr: PROVIDER country: NG admin-c: CO445-AFRINIC tech-c: OC5192-AFRINIC status: ALLOCATED PA notify: chima@linkserve.net notify: obinna@linkserve.net mnt-by: AFRINIC-HM-MNT mnt-lower: MNT-LKS-AS8770 mnt-domains: MNT-LKS-AS8770 changed: hostmaster@ripe.net 19971022 changed: hostmaster@ripe.net 20040706 changed: hostmaster@ripe.net 20040922 changed: hostmaster@ripe.net 20040922 changed: hostmaster@ripe.net 20040927 changed: hostmaster@ripe.net 20041122 changed: hostmaster@afrinic.net 20050205 remarks: data has been transferred from RIPE Whois Database 20050221 source: AFRINIC organisation: ORG-LNL1-AFRINIC org-name: Linkserve Nigeria Limited country: NG org-type: LIR address: Plot 308 Adeola Odeku Street address: N/A address: Victoria Island address: Nigeria phone: +234 1 2623900 phone: +234 1 2623901 fax-no: +234 1 2623906 e-mail: chima@linkserve.net admin-c: CO445-AFRINIC admin-c: OC5192-AFRINIC mnt-ref: AS8770-MNT mnt-ref: AFRINIC-HM-MNT mnt-ref: MNT-LKS-AS8770 notify: obinna@linkserve.net mnt-by: AFRINIC-HM-MNT changed: hostmaster@ripe.net 20040415 changed: bitbucket@ripe.net 20040514 changed: bitbucket@ripe.net 20040820 changed: bitbucket@ripe.net 20040903 changed: hostmaster@ripe.net 20040903 changed: bitbucket@ripe.net 20040903 changed: bitbucket@ripe.net 20040906 changed: bitbucket@ripe.net 20040922 changed: hostmaster@ripe.net 20040922 changed: bitbucket@ripe.net 20040927 changed: bitbucket@ripe.net 20040927 changed: bitbucket@ripe.net 20041005 changed: bitbucket@ripe.net 20041006 changed: bitbucket@ripe.net 20041007 changed: bitbucket@ripe.net 20041012 changed: bitbucket@ripe.net 20041012 changed: bitbucket@ripe.net 20041012 changed: bitbucket@ripe.net 20041022 changed: bitbucket@ripe.net 20041117 changed: bitbucket@ripe.net 20041117 changed: bitbucket@ripe.net 20041117 changed: bitbucket@ripe.net 20041201 changed: hostmaster@afrinic.net 20050205 remarks: data has been transferred from RIPE Whois Database 20050221 source: AFRINIC person: chima onyekwere address: Linkserve plot 308 adeola Odeku street, Victoria Island notify: chima@linkserve.net phone: +234 1 262 3900 nic-hdl: co445-AFRINIC changed: hostmaster@ripe.net 20041117 changed: hostmaster@afrinic.net 20050205 remarks: data has been transferred from RIPE Whois Database 20050221 source: AFRINIC person: Obinna Chukwujekwu address: 308 Adeola Odeku Street phone: +234 1 2624802 nic-hdl: OC5192-AFRINIC mnt-by: MNT-LKS-AS8770 changed: obinna@linkserve.net 20040927 changed: hostmaster@afrinic.net 20050205 remarks: data has been transferred from RIPE Whois Database 20050221 source: AFRINIC
"Orbital xpress courier Services" Dear Customer, Good day to you. This is to inform you that we are in receipt of your email to us.We will stop at nothing to see that we deliver your parcel to you in no distant time. Below are the mandatory administrative charges that you required to pay to enable us courier your certified bank check to you: Courier charges ............................... 85.00 Pounds Administrative ...............................160.00 Pounds Insurance ...............................240.00 Pounds TOTAL 485.00 Pounds (US$928.487) The charges are a little high because of the insurance cover we have undertaken incase of loss,damage or theft of your highly sensitive document. We assume all responsibilities incase of any eventualities. You are to make the payment through Western Union Money Transfer so as to speed up the process of delivery. You are to locate the nearest western union agent to you and make the payment through the name of our accounts officer below: Mr JOHN SMART 109 chandlers way southend - on - sea Essex SS2 5SE You are to send to this office via email a copy of the transfer slip. just send the following information via email as they appear on the western union transfer slip: 1.Name and address of sender 2.Amount sent 3.Control number(MTCN) 4.Test question and answer if any You are to send a copy of the evidence of payment to your handling agent as well for confirmation. A receipt of the above payment will be issued to you from our office.This will be used as a benchmark for future pay negotiations. As soon as we receive confirmation and evidence of payment of the above charges, we will despatch your parcel immediately. The date and time of departure and expected date of delivery will be sent to you. It will take fourty-eight hours to get your parcel delivered to you. You will be required to sign for the parcel and to do this, you will need either your international passport as identification or your driver's license. All orders not delivered within Five(5) working days from this communication will be returned. Please ensure that you confirm your delivery address. Feel free to write us if you have any questions. We are glad to be of service to you. mark webster Customer Services Orbital xpress courier Services ====================================================================== "Orbital xpress courier" is a registered and copyright trade marks of :- Orbital courier International Ltd. ====================================================================== This e-mail and any files transmitted with it are confidential and may be legally privileged and are solely for the individual or entity to whom they are addressed. If you have received this e-mail in error please delete this message and any attachment files, or contact Orbital xpress courier on Tel: +(44) 7031849143. All business is transacted under our Standard Trading Terms and Conditions a copy of which is available upon request . E .& .O. E . All liability for viruses is excluded to the fullest extent permitted by law. Here's a case of the criminals trying to obtain credit card details after they couldn't get other payments from a victim:
From: orbitalxpress@cooperation.net
"Money laundering certificate" (UKL 1,150) Dear Sir, We have been mandated as the Paying Bank of Lucky Day Lottery, to make a Wire transfer of One million Euros (1,000,000.00 Euros) to your norminated Bank account in your country. The funds are to be transferred via telegraphic transfer to your account. However,the Transfer can only be effected upon the reciept of underlisted Document as stipulated by the British Banking Law: 1. Money Laundering Clearance Certificate from the British Joint Money Laundering Steering Group : This certificate is to show that the fund was not obtained through drugs or illegal act. Your Funds will be due in your Bank Account within 48 Hours upon receipt of the above Certificates. It costs,1,150.00 Pounds to obtain this Certificate from the British Joint Money Laundering Streering Group(JMLSG) Contact your claim Agent,Mr James Smith,and have the money sent to him,so he can assist you with securing the Certificate. Note that,the transfer cannot be effected until the Certificate is received. Yours Faithfully, David Hart Banking Manager, Weartherbys Bank Limited Sanders Road Wellingborough Northamptonshire NN8 4BX Message headers: Message-ID: <BAY1-F10471A47A36492865C70EABA350@phx.gbl> From: dhart@weathebysbank.com To: emailaddress Subject: FURTHER REMITTANCE ADVICE Date: Thu, 14 Apr 2005 19:23:33 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2657.72) X-Originating-IP: [80.231.4.18]
WHOIS details for sending network (IP 80.231.4.18): inetnum: 80.231.4.0 - 80.231.4.255 netname: COBRANET-ISP-TGB descr: Cobranet country: NG admin-c: HM1517-RIPE tech-c: ED740-RIPE status: ASSIGNED PA notify: ip-addr@teleglobe.ca mnt-by: AS8297-MNT changed: ip-addr@teleglobe.ca 20050225 source: RIPE route: 80.231.0.0/16 descr: Teleglobe origin: AS6453 mnt-by: TELEGLOBE-MNT changed: ripe@teleglobe.net 20040527 source: RIPE person: Hikmat Mardo address: Lagos-Nigeria address: Lekki Phase 1 address: rafiu babatunde street plot 8 phone: +23417767720 phone: +234802 832 2133 phone: +23415555656 phone: +9613666325 e-mail: hjm@cobranet.org nic-hdl: HM1517-RIPE notify: guardian@teleport-iabg.de mnt-by: IABG-MNT changed: gabriel@iabg.de 20040617 source: RIPE person: Elie Dib address: Lagos-Nigeria address: Lekki Phase 1 address: rafiu babatunde street plot 8 phone: +9613235266 e-mail: elie@cobranet.org nic-hdl: ED740-RIPE notify: guardian@teleport-iabg.de mnt-by: IABG-MNT changed: gabriel@iabg.de 20040617 source: RIPE DEAR FIRSTNAME LASTNAME, WE THE MICRO LOTTERY OFFICIALS ARE VERY HAPPY TO INFORM YOU THAT YOU ARE THE WINNER AND WE HOPE TO TRANSFER YOUR 2,000.000 USD TO YOUR DESIGNATED BANK ACCOUNT WITHIN 10 WORKING DAYS IF YOU CAN SPEEDY THIS TRANSACTION BY CO-OPERATING WITH US WITHOUT ANY DELAY FROM YOUR SIDE.TO PROCESS AND PAY OFF YOUR WINNING SUM OF 2,000.000 USD,PAY IMMEDIATELY VIA WESTERN UNION MONEY TRANSFER YOUR PROCESSING FEE OF $700USD TO PROCESS YOUR DOCUMENTS AND PAYMENT.WE ARE VERY SORRY FOR THE SPONSORS OF THIS LOTTERY LEFT NO MONEY FOR SUCH EXPENCES. NAME: BENJAMIN PHILIP. LAGOS-NIGERIA. QUESTION:ME. ANSWER: WINNER. CONGRATULATION ONCE AGAIN.PLEASE GIVE ME A CALL IMMEDIATELY YOU RECIEVE MAIL IF YOU HAVE ANY QUESTION TO ASK. BEST REGAEDS, CHUKS ANI. CLAIMS PROCESSING MANAGER. +234-802-7352641. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com message headers: Received: from [80.179.244.94] by web31602.mail.mud.yahoo.com via HTTP; Tue, 19 Apr 2005 00:23:34 PDT Date: Tue, 19 Apr 2005 00:23:34 -0700 (PDT) From: micro lottery <microlotteryng@yahoo.com> Subject: Re: WINNERS FORM
WHOIS details for sending network (IP 80.179.244.94): inetnum: 80.178.0.0 - 80.179.255.255 org: ORG-GLIC1-RIPE netname: IL-GOLDENLINES-20020705 descr: Provider Local Registry descr: Golden Lines International Communication Services Ltd. country: IL admin-c: DR5299-RIPE tech-c: DR5299-RIPE notify: lir@linux.goldenlines.net.il status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: AS9116-MNT mnt-routes: AS9116-MNT changed: hostmaster@ripe.net 20020705 changed: hostmaster@ripe.net 20040525 source: RIPE route: 80.179.128.0/17 descr: Golden Lines origin: AS9116 mnt-by: AS9116-MNT changed: lir@linux.goldenlines.net.il 20020711 source: RIPE organisation: ORG-GLIC1-RIPE org-name: Golden Lines International Communication Services Ltd. org-type: LIR address: 25 Hasivim St. K. Matalon address: 41970 address: Petach Tikva address: Israel phone: +97239291122 fax-no: +97239274608 e-mail: dnsreg@012.net.il admin-c: DR5299-RIPE admin-c: AG914-RIPE admin-c: GE2074-RIPE admin-c: MH21010-RIPE admin-c: IB737-RIPE mnt-ref: AS9116-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT changed: hostmaster@ripe.net 20040415 changed: bitbucket@ripe.net 20041105 source: RIPE role: DNS REG address: 25 Hsivim st. Petach-Tiikva, Israel e-mail: dnsreg@012.net.il trouble: abuse@012.net.il admin-c: GE2074-RIPE tech-c: IB737-RIPE tech-c: AG914-RIPE nic-hdl: DR5299-RIPE notify: lir@linux.goldenlines.net.il changed: lir@linux.goldenlines.net.il 20030715 mnt-by: AS9116-MNT source: RIPE
From: rdscourier <mailto:rdscourier@lycos.co.uk> WHITE STAR SECURITY NETWORK ATTENTION: REF NO:TGA-4GA-69889 Batch number :340/1608/RDL Dear Firstname Lastname, We hereby inform you that we have processed your payment and your cheque is ready for disbursement. In this regard you are to choose from the options below that best suites you on how you wish to receive your funds. Also your funds deposited with us is not in liquid form but in Bank Cheque, this advice complies with the Anti-Fraud section 2,sub section (iv) of the procedural manual of the funds disbursement agreement existing between courier companies and the British Government. The options to receive your winnings are: (1). You can come down in person to collect your funds at our payment center in either London or Netherland depending on where there is availability of funds. You will be required to present a valid International Passport as proof of Identification amongst other documentation which will be required if you choose this option. (2). Have our affiliate courier company send the cheque to our online payment center, This is In consonance with our policy in this regard, be advised that if you opt for the cheque to be couriered, we however exempts ourself from all liability related to this service. The cost of this service would be borne by you, this is a prerequisite for this option. You will be referred to our affiliate courier company so that you can make enquiries concerning modalities, and charges. The reason for the courier option is for the fact of double taxation, that is if you are to come over to sign for the release of your winnings personally, you would have to pay taxes on the winnings in UK and then go and pay taxes on the same winnings in your country once the funds get there. In the light of the above you are adviced to choose from the options given to you. That is to say if you opt for courier service you are to notify this office that we may forward your cheque and winning certificate per your request to courier to the issueing bank.Below are their contact for you to open communication with them immediately as regards the requirements to sending your cheque to the payment center. Below are their contact details: Trans Global Courier Services Building 219, Epsom Square, Heathrow Airport,Hounslow, Middlesex, TW6 2DG Handling officer:Mr Collins Peterson Email:contact_tg_courier@yahoo.co.uk Tel:+44-703-184-1899 Fax:+44-87-1239-0770 You are to keep me fully informed on all developments depending on the option you decide to take. Sincerely, Mr Park Reynolds Foreign Service Manager of White Star Security Network. 43 Deptford Broadway, London, SE9 4PH TEL:+44-703-194-2718 FAX: 44-870-133-1080
"Trans Global Courier Services" From: Trans Global Courier Services [mailto:contact_tg_courier@yahoo.co.uk] Sent: Friday, June 03, 2005 9:25 AM To: Lastname, Firstname Subject: Re: REF NO: EG/38807886091/02(Trans Global Courier Services) TGCS SAFE DELIVERY.... -------------------PAYMENT INSTRUCTION----------------------- Dear Customer, Goodday to you. This is to inform you that we are in possession of certain documents and certified cheque of £3,187,556 (THREE MILLION ONE HUNDRED AND EIGHTY SEVEN THOUSAND POUNDS) which are to be couried to you. You are to reconfirm your mailing address. Your cx registered number: 3464353. Description of parcel to be delivered: An original certificate of weight:-------------0.35kg Bonded draft of weight :-------------0.80kg Total weight of parcel :-------------1.15kg Colour of Parcel :-------------Brown Length of days :-------------Nextday We do not operate on COD. Below are the mandatory administrative charges that you are required to pay to enable us courier your certificate of winnings as well as your certified bank cheque of £3,187,556 (THREE MILLION ONE HUNDRED AND EIGHTY SEVEN THOUSAND POUNDS) Courier charges ............................ £85.00 Administrative .............................£180.00 Insurance ................................. £260.00 TOTAL ................................. £525.00(or it equilvalent in US Dollars) These charges are so because of the insurance cover we have undertaken incase of loss or damage of your highly sensitive document before it gets to you. the information you were provided by We assume all responsibilities incase of any eventualities. You are to make the payment through Western Union Money Transfer so as to speed up the process of delivery. You are to locate the nearest western union agent to you and make the payment in the name of our accounts officer below: Mr Simon William 80 Scrubs Lane London NW10 6RF United Kingdom. After payment please you are advised to send the payment slip to our fax line +44-87-1239-0773 so that our accounts officer can acknowledge your payment and your package can be despatched to you. If you do not have a fax machine, just send the following information via email as they appear on the western union transfer slip: 1.Name and address of sender 2.Amount sent 3.Control number 4.Test question and answer if any Please note that on confirmation of the paid charges,the date and time of departure and expected date of delivery will be sent to you.It will take twenty-four hours to get your package to you. Note all orders not delivered within Five(5) working days from this communication will be returned. We are glad to be of service to you. Collins Peterson Handling officer Trans Global Courier Services Building 219, Epsom Square, Heathrow Airport,Hounslow, Middlesex, TW6 2DG Handling officer:Mr Collins Peterson Email:contact_tg_courier@yahoo.co.uk Tel:+44-703-184-1899 Fax: +44-87-1239-0770
|