joewein.de LLC
Fighting spam and scams
on the Internet

Home / Blog / About us
Spam
419/Nigeria
Online fraud
jwSpamSpy
Contact

Email Spam Filter:
jwSpamSpy
Try it for free!

Google

 

419 Scam Example: "HONDA CAR LOTTERY"

"HONDA CAR LOTTERY" is a fake lottery scam run by Nigerian gang abusing the name of the car company. This follows a similar pattern as the "Microsoft lottery" scam, which has been going on for many months. The wording of the scam emails is very similar to the "BANK GIRO LOTERIJ" scam in the Netherlands, even the "reference code" is the same. Similar scam exists under the names "BMW Land Car Lottery", "TOYOYA CAR PROMOTIONS" and "Jaguar Landrover Award Promotions".

Please forward us copies of any replies or money demands by the ""claims agents" (Yahoo Mail: Forward / as Attachment, Outlook Express: Message / Forward as attachment, see "How to report 419 spam to us"). We will publish such replies here.

Please forward copies of fraud emails to the abuse department of the webmail address listed as the contact email for the "claims agent". Ask for the addresses to be suspended because they are used in a 419 fraud (see 419 FAQ).

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

Example of initial "winning notification":

From: "HONDA2005LOTTERY" <claims_hondaheadquarters@uk2.net>
Sent: Sunday, 22 May, 2005 20:43
Subject: AWARD FINAL NOTIFICATION

HONDA CAR LOTTERY (HEADQUARTERS)
An AFFILIATE OF HONDA UK.
28 TANFIELD ROAD,
CROYDON.LONDON

FROM: HONDA COMPANY UK.
ATTENTION: WINNER
TICKET NUMBER: 2752246896
SERIAL NUMBER: 652-662
BATCH NUMBER: AT-040SB06-03

                   AWARD FINAL NOTIFICATION:
We are pleased to inform you of the release, of the long awaited 
results of the HONDA CAR INTERNATIONAL PROMOTION PROGRAM held on 
the 6th of May 2005.You were entered as dependent clients with: 
Reference SERIAL NUMBER: 652-662 and Batch number AT-040SB06-03.
Your email address attached to the ticket number: 2752246896 that 
drew the lucky winning number, which consequently won the sweepstake 
in the first category, in four parts. You have been approved for 
a payment of 500,000.00euros(FIVE HUNDRED THOUSAND EUROS.)in cash 
credited to file reference number:IPL/4249859609/WP1.This is from 
a total cash prize of five million euros shared among the ten 
international winners in first categories. Along with a New Blue Car 
(visit to see your car (www.honda.co.uk) Pasted in front of the 
site under construction.

Congratulations!!!!!
All participants were selected through a computer ballot system 
drawn from 50,000 (Fifty thousand) names of email users around 
the world, as part of our international promotion program. Due 
to mixed up of some names and addresses, we ask that you keep this 
award personal, till your claims has been processed and your funds 
remitted to you.
This is part of our security measures to avoid double claiming or 
unwarranted taking advantage of the situation by other participants or 
impersonators.you.contacting your/our-accredited agent for your claims.

MRS.MONET BRONZE.
HONDA CLAIMING SECURITY AGENCY.
Email: claims_hondaheadquarters@uk2.net

She is your agent, and responsible for the processing and transfer 
of your winnings to you. YOUR SECURITY FILE NUMBER IS W-91237-H67/B4 
(keep personal) Remember, your winning must be claimed not later 
than 30th May,2005.

Failure to claim your winning/ fund will be added to next 10,000.000 
euros AND CAR international lottery program. Furthermore, should there 
be any change in your address, do inform your claims agent as soon as 
possible. Once again, Congratulations.
Yours Sincerely,

MR HARDY GREY.
HONDA CAR/LOTTERY CO-ORDINATOR.




___________________________________________________________________________
Mail sent from WebMail service at PHP-Nuke Powered Site
- http://www.thirdarmy.us

Reply by the "agent":
This scam email is sent from the same IP address as the "Duke Edwards, Camelot Universal International / Lightspeed Delivery Services" scam emails. Both scams use uk2.net email addresses.

ATTENTION!!!
TICKET NUMBER:  2752246896
BATCH NUMBER:AT-040SB06-03
REF NO: 652-662
EMAIL: emailaddress

        I am Mrs. Monet Bronze  the fiduciary agent assigned to your case.
I wish to Congratulate on your victory, you are lucky person to have won
this lottery. Your email address is amongst those chosen this quarter from
our new java-based software that randomly selects email addresses from the
web from which winners are selected. You are required to forward the
following details to help facilitate the processing of your claims and
certificate which will facilitate the release of your winnings.

1. Full names.......

2. Phone number.......

3. Fax number........

4. Occupation.......

5. Sex..........

6. Age............

7.Delivery address

8. Nationality.......

      It is expected that you would forward this information as soon as
possible to enable us attend to your winnings. Once we confirm your
information, your payments would be processed.

      After you have sent down this information, a certificate will be
prepared for you. This is to be your proof of winning. Be advised that
your winnings would be paid to you in installments of $30,000.00
{Thirty Thousand United States Dollars}. This is done because of the
amount won by you, this money would be paid to you on monthly basis for
the next 10 {Ten} months .You are advised to keep your winning numbers
secret to avoid unscrupulous elements from taking advantage of the
situation. Once again, congratulations.

Regards,

Mrs Monet Bronze

........................................................................

This email and its attachments are confidential and intended for the
exclusive use of the addressee(s). This email and its attachments may
also be privileged or protected by legal rules. If you have received this
by mistake please let us know by reply immediately and destroy the
email and its attachments without reading, copying or forwarding the
contents.

Message headers:

Received: from 192.116.80.165 (proxying for 192.116.80.162, 192.116.80.165)
        (SquirrelMail authenticated user claims_hondaheadquarters)
        by maxproxy7.uk2net.com with HTTP;
        Mon, 23 May 2005 04:52:27 +0100 (BST)
In-Reply-To: <messageid>
References: <messageid>
Date: Mon, 23 May 2005 04:52:27 +0100 (BST)
Subject: ATTENTION!!!
From: "Monet Bronze" <claims_hondaheadquarters@uk2.net>

WHOIS details for sending network (IP 192.116.80.165):

     inetnum:      192.116.79.0 - 192.116.82.255
     netname:      GILAT-SATCOM-BLOCK-4-27-28-33
     descr:        Gilat-Satcom
     remarks:      For abuse issues related to Gilat, email abuse-gilat@012.net.il
     country:      GB
     admin-c:      GS3350-RIPE
     tech-c:       GS3350-RIPE
     status:       ASSIGNED PA
     mnt-by:       AS9116-MNT
     mnt-lower:    AS9116-MNT
     source:       RIPE # Filtered
     
     role:           Gilat Support
     address:        Gilat Satcom
     address:        21D Yagia Kapaim st. Petach-Tikva, Israel
     phone:          +972 3 9255000
     fax-no:         +972 3 9217938
     admin-c:        DR5299-RIPE
     admin-c:        GE2074-RIPE
     tech-c:         DR5299-RIPE
     tech-c:         GE2074-RIPE
     remarks:        trouble:      abuse-gilat@012.net.il
     nic-hdl:        GS3350-RIPE
     mnt-by:         AS9116-MNT
     source:         RIPE # Filtered
     abuse-mailbox:  abuse-gilat@012.net.il
     
     % Information related to '192.116.64.0/18AS9116'
     
     route:        192.116.64.0/18
     descr:        Goldenlines
     remarks:      For addressing issues, email lir@linux.goldenlines.net.il
     remarks:      For abuse issues, email abuse@012.net.il
     origin:       AS9116
     mnt-by:       AS9116-MNT
     source:       RIPE # Filtered


From: "BRAIN BALMER" <agentbrainbalmer@gmail.com>
To: <emailaddress>
Sent: Wednesday, 02 November, 2005 23:21
Subject: CONTACT DELIVERY COMPANY

HONDA COMPANY UK.
An Affiliate of Honda Uk.
28 TANFIELD ROAD,
CROYDON.

LONDON.

Dear Winner,

I wish to inform you that your notarized and legalized Certificate
of Winning,Certified Bank Cheque and other relevant documents
are ready after the due process has been finalized with the appropriate
Ministry/Agencies.

We have forwarded these highly sensitive documents to a tested and
trusted Courier Agency.You are hereby instructed to contact
them with your verification form and engage their services to courier them to
you.
Your Security Order number is GM/CE/0007.State this Order Number
correctly as your subject while contacting them via E-mail through the details
below to ensure they respond in a timely manner.

GLOBAL MAX COURIER/SHIPPING EXPRESS
OFFICER: Mr.Joe Carlton
E-MAIL:gmcse@post.com
PHONE:+44 703 194 9557 or +44 703 194 9172

We herewith attach a reference copy of your Winning Certificate for
your perusal.
Reference Copies of your certified Cheque and other relevant documents
are not attached herewith for the sake of security because
they are highly sensitive documents.

Note that I am still your Claims Agent and in case there is any problem,
let me know immediately and I will likewise be contacting you to know the
status quo.
We advise that you co-operate with them immensely so that all details
that will ensure the successful delivery of your winnings will go without
any hitch within next week.

Once again, Congratulations.

Regards
Prof.Brain Balmer
Honda Car Company[fiduciary agent]
+44 703 190 3103



"GLOBAL MAX COURIER/ SHIPPING EXPRESS"


GLOBAL MAX COURIER/SHIPPING EXPRESS
Since 1991 Our Reputation For Services and Savings is Our Most Valued Asset





GLOBAL MAX COURIER EXPRESS
GMCSE International
Unit 6, Trident Industrial Estate
Blackthorn Road
(Operations / Sales / C.S.)
Colebrook, Slough SL3 OAH
United Kingdom.


Phone: +44 703 194 9172 ,+44 703 194 9557

Our Ref: GMCES/UK/REG/23/34/2

Good day Client,

We have received your mail, and your package has been with us for a while. We have been expecting your mail, so we can get in contact with you and proceed with the delivery of your parcel. Some charges are expected to be paid by you, in order for us to be able to continue with your delivery.

Note that we already have your address for delivery.

Here are the details of your package awaiting dispatch;

Package content: Undisclosed(only for Recipient)

Package status:metallic diplomatic seals

REG Number: GMCE/UK/REG/23/34/1

Delivery duration: Depend On Client

COST OF DELIVERY: IN US DOLLARS 4-5 Days (PREMIUM)

(USD) $

Courier charges: -$158.00

Insurance: ---------$201.00

Security Fee -----$183.00

Total: --------------$542.00

COST OF DELIVERY: IN US DOLLARS 2-3 Days ( RUSH)

(USD) $

Courier charges -$250.00

Insurance----------$201.00

Security Fee: ----$183.00

Total: -------------$634.00

You are to make this payment via WESTERN UNION MONEY TRANSFER to our
Accountant here in the United Kingdom. The address and name of the account office
is below:

Name: Mr. Eric Campbell

ADDRESS: 63 Harold Road, E13 0SG London.United Kingdom.

After which a payment receipt will be forwarded to you. You are to
forward payment details to this office via email, which must include the
following.

NAME OF SENDER:
ADDRESS OF SENDER:
AMOUNT:
MONEY TRANSFER CONTROL NUMBER: (M.T.C.N)

Upon receipt of the above, your parcel delivery will commence
immediately. I want you to note that your parcel will get to you in two
days after your transfer has being confirmed.

Regards,
Global Max Courier Team


Global MAX has gone through a transformation from a mere quoting method to becoming an essential tool for shippers, entities who perform projections and inspections, and the general public We make it simple. By standardizing the global matrix of rates, hence Global MAX, we have put the world in your fingertips. We are not a broker, we are licensed by the Federal Maritime Commission as a non-vessel operating common carrier (N.V.O.C.C.) to produce original shipping documents, and we are licensed by the Federal Aviation Administration under the TSA as an indirect air carrier (I.A.C.) to engage in air cargo worldwide, therefore we can leverage our technology with our experience to save you money and serve you on a global basis.


Since 1991 Our Reputation For Services and Savings is Our Most Valued Asset"



--
___________________________________________________
Play 100s of games for FREE! http://games.mail.com/

Message headers:

From: "GLOBAL MAX COURIER/ SHIPPING EXPRESS" <gmcse@post.com>
To: emailaddress
Date: Thu, 03 Nov 2005 06:11:31 -0500
Subject: GLOBAL MAX COURIER DELIVERY CHARGES
Received: from [190.170.20.204] by ws1-2.us4.outblaze.com with http for
 gmcse@post.com; Thu, 03 Nov 2005 06:11:31 -0500
X-Originating-Ip: 190.170.20.204
X-Originating-Server: ws1-2.us4.outblaze.com

WHOIS details for sending network (IP 190.170.20.204):
This originating IP address is a mystery, because it's in a range reserved for expansion by Latin American/Caribbean customers but doesn't seem to be assigned yet.

OrgName:    Latin American and Caribbean IP address Regional Registry 
OrgID:      LACNIC
Address:    Potosi 1517
City:       Montevideo
StateProv:  
PostalCode: 11500
Country:    UY

ReferralServer: whois://whois.lacnic.net

NetRange:   190.0.0.0 - 190.255.255.255 
CIDR:       190.0.0.0/8 
NetName:    NET190
NetHandle:  NET-190-0-0-0-1
Parent:     
NetType:    Allocated to LACNIC
NameServer: NS.LACNIC.NET
NameServer: NS2.DNS.BR
NameServer: NS1.AFRINIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
NameServer: NS-SEC.RIPE.NET
Comment:    This IP address range is under LACNIC responsibility for further
Comment:    allocations to users in LACNIC region.
Comment:    Please see http://www.lacnic.net/ for further details, or check the
Comment:    WHOIS server located at whois.lacnic.net
RegDate:    2005-06-17
Updated:    2005-06-30

OrgTechHandle: LACNIC-ARIN
OrgTechName:   LACNIC Whois Info 
OrgTechPhone:  (+55) 11 5509-3522
OrgTechEmail:  whois-contact@lacnic.net

# ARIN WHOIS database, last updated 2005-11-07 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Found a referral to whois.lacnic.net.

% Joint Whois - whois.lacnic.net
%  This server accepts single ASN, IPv4 or IPv6 queries
 

Unallocated resource: 190.170.20.204

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!