419 Scam Example: "SWISS PROMO LOTTERY / Overseas Asset Management Ltd (Paul Hunt, Henry Lewis)"
"SWISS PROMO LOTTERY / Overseas Asset Management Ltd (Paul Hunt, Henry Lewis)" is a label used by criminals for an advance fee scam that involves fake checks and money orders produced in Canada.
Victims are contacted by bulk email and told they won a lottery prize. They are told to contact a company called "Overseas Asset Management Ltd", which handles the payout. Several victims in the US were mailed fake money orders for US$6000, supposedly a loan, which they are told to cash and then wire the money to the "lottery claims agent". In effect the victims will wire $6000 of their own money to the criminals, because the money orders will bounce.
Other victims were instructed to wire £985 to a person in London who used the alias "Anthony Wilkinson".
If you receive money orders or checks "loaned" to you to pay lottery claims fees (which no legitimate lottery charges in the first place), do not open the letter but take it directly to the police so they can check the content for fingerprints. If you live in the United States, contact the nearest field office of the United States Secret Service (USSS). If you live in Canada, contact the RCMP. Please forward us any emails by the criminals that you have received.
ATTN: FIRSTNAME LASTNAME. RE: DELIVERY AND CLAIMS OF LOTTERY JACKPOT. WE HAVE RECEIVED YOUR APPLICATION FOR CLAIMS OF YOUR LOTTERY BENEFITS WHICH AMOUNTS TO €1,500,000.00 EUROS (ONE MILLION, FIVE HUNDRED THOUSAND EUROS ONLY). WE HAVE ALSO VERIFIED THE WINNING NUMBER AND TICKET NUMBER. REF NUMBER: SLI/421/960/05 BATCH NUMBER: ST-688-SN13-05 TICKET NUMBER: 27522465896-532 PLEASE NOTE THAT THIS OFFICE IS PRESENTLY IN CHARGE OF YOUR PAYMENT VERIFICATIONS AND WILL TAKE ALL NECCESSARY STEPS TO ENSURE THAT YOU RECIEVE YOUR WINNINGS AS AT WHEN DUE. IN THIS LIGHT, YOU ARE IMMEDIATELY REQUIRED TO SUPPLY THE DETAIL AND FILL OUT THE ATTACHED FORM. THIS IS TO ENSURE FOR PROPER IDENTIFICATION BEFORE PAYMENTS. WE CURRENTLY CHARGE A PROCESSING FEE OF £985.00 (NINE HUNDRED AND EIGHTY FIVE POUNDS) ONLY. THIS WILL COVER THE ENTIRE COST OF YOUR APPLICATION FORM PROCESSING AND DELIVERY BY OUR OUT STATION LAWYERS. THIS AMOUNT IS TO BE PAID BY YOU IMMEDIATELY, THROUGH WESTERN UNION MONEY TRANSFERS TO ONE OF OUR ON DUTY LAWYERS: NAME: MR. ANTHONY WILKINSON ADDRESS: 15 MILMARK GROVE, THAMESMEAD LONDON.SE28 8EY. PLEASE NOTE THAT THE ABOVE AMOUNT CANNOT BE DEDUCTED FROM YOUR LOTTERY WINNINGS BECAUSE YOUR CLAIMS HAVE NOT BEEN FULLY PROCESSED. FOR FURTHER INFORMATION, PLEASE CONTACT THE UNDERSIGNED. THANK YOU. YOURS FAITHFULLY, DR. HENRY LEWIS (DIRECTOR OF OPERATIONS)
Note that postal addresses on Western Union transfers have no meaning, except for the city. The scanned signature didn't actually look like "Henry Lewis" at all. It seemed to read "Rasalaheya" or something like that.
Here's another email:
Dear Firstname Lastname, We confirm the receipt of your payment details from the Swiss Promo Lottery Company. In line with our prepayment processes and procedures, we are required to ensure adequate sponsorship of all aspects of your payment and delivery to you. The processing of your payment will attract total fees of between US$5,000 to US$15,000.00 depending on your location within the USA. Hence, our sponsors in the USA and Canada will make provision for this amount first to you. We will therefore be recommending you and sending your details to our sponsor agents first. Principally, the reason for this recommendation is to ensure that your winnings are adequately processed and all expenses paid by our private sponsors in USA or Canada. The sponsorship amounts vary between $5,000.00 to $50,000.00 and this amount will be given to you first hand to ensure that it covers all expenses for you. If you wish us to confirm your recommendation for this sponsorship, please indicate by completing your full names and address, which your check can be drawn and posted securely. This is very important, as payments will be sent to you in Check, Drafts or Money Orders as the case may be. As soon as we receive the above details, we will submit same to allow our sponsors reach you. Please find attached your lottery payment application for completion. Thank you. Yours faithfully Dr. Henry Lewis. ________________________________________________________________ Sent via the WebMail system at overseasassetmanagement.com
Form.doc (Title: OVERSEAS ASSET MANAGEMENT LTD, author and company are blank):
OVERSEAS ASSET MANAGEMENT LTD Corporate Office: 42/43 CALTHORPE ROAD, EDGBASTON, BIRMINGHAM B17 3ST. ENGLAND. Tel: + 44 782 183 0842, Tel/Fax: + 44 870 762 0889 Email: firstname.lastname@example.org, email@example.com LOTTERY PAYMENT APPLICATION FORM (TO BE COMPLETED BY LOTTERY WINNERS ONLY) Ticket Number: Reference Number: Batch Number: Name: Home Address: Town/City: Post Code: Country: Telephone (Home): Mobile: Fax (Private): Fax (Office): Email Address: Date of Birth: I/D Number: Passport Number: Signature:. __________________ Date:. ________________ DATA PROTECTION Overseas Asset Management Ltd records and stores all personal details (including details of all your winnings and amounts paid out on behalf of Swiss Promo International), in order to effectively process all winnings, payouts and keep records for submission to Swiss Promo Switzerland. We may from time to time use your personal information to update you about any new services that we can offer you. We may also pass your personal information to third parties (including other lottery sponsors) who we think may offer services, which may be of benefit or interest to you. If you do not wish to receive this information from such third parties please tick here THIRD PARTIES: We will only supply your personal identifiable information to any person or organisation: 1. Where we need to share the information to provide services you have requested. 2. Where we need to send the information to get increased sponsorship on behalf of Swiss Promo Intl. 3. Where we are required to forward the information in order to comply to tax authorities or with a regulatory or legal process. NOTE: ALL COMPLETED APPLICATION FORMS SHOULD BE SUBMITTED BACK TO US BY FAX IMMEDIATELY OR BY ATTACHED EMAIL,(WITH A COPY OF YOUR INTERNATIONAL PASPORT OR ID CARD). APPLICATIONS WILL ONLY BE PROCESSED UPON CONFIRMATION OF PAYMENT OF ALL PROCESSING FEES
Here is another mail from the criminals (see 2nd mail for source):
From: PaulHunt LoanINC [mailto:firstname.lastname@example.org] Sent: Saturday, February 26, 2005 4:31 AM To: emailaddress Subject: Overseas Asset Management Ltd. ATTN:Firstname Lastname Home Address: homeaddress Work Address: workaddress Dear sir, This is to inform you that we have been contacted by Overseas Asset Management Ltd Birmingham, England. to sponsor the processing fee of your winning which has been approved. In line with the agreement which we signed with Overseas Asset Management Ltd.We will send you the required amount of by US Money Order from one of our financier in the USA (since you are resident in the USA) in three different installment to enable your winnings to be processed. The money order will be sent to your address, in your name and once it is received by you, it should be paid into your BANK ACCOUNT immediately and used to pay the processing fee incidental on your winning. You are warned that we will take a legal action against you if this money is cashed and used for other purpose except what it has been approved for and do not hesitate to inform us once you receive the MO and your account has been credited and send your new balance statement to Overseas Asset Management Ltd. to confirm that you have received our loan. This measure is for administrative purposes and to to enable us send the next amount immediately. Please acknowledge this email. Congratulation. Regards Paul Hunt Paul Hunt Loan services 13 Albert Rd.,Toronto canada.
The scammers mailed six counterfeit money orders in the amount of US$1000 each supposedly from a source in New York but actually mailed from Canada.
If you receive money orders or checks "loaned" to you to pay lottery claims fees (which no legitimate lottery charges in the first place), do not open the letter but take it directly to the police so they can check the content for fingerprints.
If you live in the United States, contact the nearest field office of the United States Secret Service (USSS). If you live in Canada, contact the RCMP.
Another email from the criminals:
ATTN:Firstname Lastname streetaddress city, state, zipcode Sir, We are writing to inquire if the US postal Money orders which were sent to you have been cashed and the money sent to Overseas Assets Ltd, United Kingdom for the payment of your processing fee. Please inform us if the payment has been sent and received in the U.K. so that we can send the next installment to you in line with our agreement with Overseas Assets Ltd. Please acknowledge this email as soon as possible to enable us reconcile our accounts and send you the next payment within 24 working hours. Regards Paul Hunt Paul Hunt Loan Inc. Canada. ______________________________________________________________________ Post your free ad now! http://personals.yahoo.ca
Received: from [184.108.40.206] by web31302.mail.mud.yahoo.com via HTTP; Fri, 18 Mar 2005 10:29:37 EST Date: Fri, 18 Mar 2005 10:29:37 -0500 (EST) From: PaulHunt LoanINC <email@example.com> Subject: CONFIRM THE RECEIPT
inetnum: 220.127.116.11 - 18.104.22.168 netname: ITCLICK-NETWORX-NG descr: ITClick Networx Limited descr: ISP descr: Lagos, Nigeria country: NG admin-c: SAI22-RIPE tech-c: SAI22-RIPE status: ASSIGNED PA remarks: --------------- remarks: T-IP-20040304-I remarks: --------------- notify: firstname.lastname@example.org mnt-by: TAIDE-NOC changed: email@example.com 20040304 source: RIPE route: 22.214.171.124/18 descr: TAIDE-NET origin: AS5377 mnt-by: TAIDE-NOC changed: firstname.lastname@example.org 20010402 source: RIPE person: Sunday A Idajili address: Suites B180/181 Ikota Shopping Complex address: Victoria Garden City, Lekki address: Lagos, Nigeria phone: +234 1 4722950 phone: +234 1 4616821 fax-no: +234 1 4616126 e-mail: email@example.com nic-hdl: SAI22-RIPE notify: firstname.lastname@example.org changed: email@example.com 20040304 source: RIPE
Another email from the criminals:
ATTN: FIRSTNAME LASTNAME WE ARE IN RECIEPT OF YOUR DETAILED INFORMATION AS WELL AS CONTACTS. PLEASE NOTE THAT WE ARE DOING ALL WE CAN PRESENTLY TO SORT OUT PAYMENTS TO YOU WITHIN THE SHORTEST POSSIBLE TIME. WE HAVE SUBMITTED YOUR DETAILS TO OUR ACCREDITED CLEARING HOUSE BASED IN THE UK, OVERSEAS ASSET MANAGEMENT LTD. THIS COMPANY DOES ALL VERIFICATIONS, CONFIRMATIONS AND FINAL APPROVALS ON OUR BEHALF BEFORE WE CAN PROCEED TO DISBURSE ANY PAYMENTS THROUGH OUR BANKERS. BE REST ASSURED THAT WITH YOUR FULL COOPERATION WITH THIS PROCESSING/CLEARING HOUSE IN UK, YOUR WINNING WILL BE SCHEDULED FOR IMMEDIATE RELEASE TO YOU. YOU ARE THERFORE REQIURED TO PROVIDE FULLY ANY INFORMATION AS REQUIRED BY THIS OFFICE IN THE UK. FEEL FREE TO MAKE IMMEDIATE CONTACTS WITH THE OVERSEAS ASSET MANAGEMENT LTD ON, OVERSEAS ASSET MANAGEMENT LTD CALTHORPE ROAD EDGBASTON BIRMINGHAM B17 3TS, UNITED KINGDOM TEL: + 44 782 183 0842 TEL/FAX: +44 870 762 0889 firstname.lastname@example.org CONTACT DR. HENRY LEWIS NOTE: WE SHALL HONOUR ONLY SUCCESFULLY CLEARED WINNERS FROM THE OVERSEAS ASSET MANAGEMENT LTD OFFICE. THIS IS DUE BECAUSE, ONLY THIS OFFICE CAN CLEARIFY FULLY YOUR IDENTITY ON OUR BEHALF. THANK YOU. YOURS FAITHFULLY, MR. JIM WALKER (LOTTERY CO-ORDINATOR) __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp
Date: Thu, 24 Feb 2005 10:26:23 -0500 From: email@example.com To: emailaddress (Firstname Lastname) Subject: CONFIRMED MIME-Version: 1.0 X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 126.96.36.199
inetnum: 188.8.131.52 - 184.108.40.206 remarks: ******************************************************* remarks: * Please send abuse reports to firstname.lastname@example.org * remarks: ******************************************************* netname: BT-ADSL descr: IP Pools country: GB admin-c: BTOW1-RIPE tech-c: BTOW1-RIPE status: ASSIGNED PA mnt-by: BTNET-MNT mnt-lower: BTNET-MNT mnt-routes: BTNET-MNT changed: email@example.com 20031114 source: RIPE route: 220.127.116.11/11 descr: BT Public Internet Service origin: AS2856 mnt-by: BTNET-MNT changed: firstname.lastname@example.org 20030615 source: RIPE role: BT OPENWORLD OPERATIONAL SUPPORT remarks: ******************************************************** remarks: * Please send abuse reports to email@example.com * remarks: * * remarks: ******************************************************** address: BT address: Openworld address: UK e-mail: firstname.lastname@example.org admin-c: IT337-RIPE tech-c: RJG3-RIPE nic-hdl: BTOW1-RIPE mnt-by: BTNET-MNT changed: email@example.com 20030520 source: RIPE
Request: overseasassetmanagement.com connected to whois.domainpeople.com [18.104.22.168:43] ... Registrant: Sanusi Sunkanmi 115 Robins Ct Hackettstown, NJ 07840 United States of America Registrar: DomainPeople Inc. Domain Name: overseasassetmanagement.com Created on .............Fri Jun 06 02:55:25 2003 Expires on .............Mon Jun 06 05:55:33 2005 Record last updated on .Tue Aug 10 09:02:14 2004 Status .................HOLD Administrative Contact: Trem Int Limted Ron Ellis Byfangerstr.32 Essen, NRW 45257, DE (49)201 4868425 (49)201 4868425 firstname.lastname@example.org Technical Contact: Trem Int Limted Ron Ellis Byfangerstr.32 Essen, NRW 45257, DE (49)201 4868425 (49)201 4868425 email@example.com Billing Contact: Trem Int Limted Ron Ellis Byfangerstr.32 Essen, NRW 45257, DE (49)201 4868425 (49)201 4868425 firstname.lastname@example.org Domain servers in listed order: ns1.vhostdns2.com 22.214.171.124 ns2.vhostdns2.com 126.96.36.199 (overseasassetmanagement.com) Register your domain name at http://www.domainpeople.com
Status "HOLD" usually means that there's a problem with the domain, such as it's registration fee was not paid (or the credit card payment bounced) or it was registered with fake contact details.