419 Scam – "TERRAWORLD PROMO LOTTERY (Manfred Altmeier)
"TERRAWORLD PROMO LOTTERY (Manfred Altmeier)" are labels used by a fake lottery and fake "claims agent" operating in Canada and Nigeria.
Please send us replies by "claims agents", especially money demands and payment instructions, we will publish them here.
Please forward copies of fraud emails to the abuse department of webmail address listed as the contact email for the "claims agent". Ask for the addresses to be suspended because they are used in a 419 fraud (see 419 FAQ).
From: "Dianna Leash"
This is a few weeks later:
From: TerraWorld Promotions To: emailaddress Sent: Monday, March 28, 2005 8:25 PM Subject: Verification Dear Winner, I am in receipt of your completed winners form. Verification process takes about 2-3 working days. Upon verification, you will be contacted. Please note that you must keep your winning numbers to your self and away from the general public to avoid double claims or duplication of numbers and when that happens, you would be automatically disqualified. Attached is the "FAQ" document to answer all your questions and concerns. Congratulations! once more from all of our staff here at TerraWorld Promotions. Best Regards, Manfred Atlmeier, Direct Line: + 1(647)219-7491 It's imperative to acknowledge the receipt of this email.
From: "Msoft Group LLC" <email@example.com> To: <emailaddress> Sent: Tuesday, 05 April, 2005 1:01 Subject: Transfer Instructions Dear Mr. Firstname Lastname Congratulations! Your prize winnings of $1,000,000.00 has been officially approved by our accounting department and will be transferred upon you completing and signing the document below. Due to profit maximization and the need to be a fierce competitor in the technology marketing segment we have been successful in out sourcing our productions to other countries outside North-America that the labour market is friendlier in financial terms and competitive wise. We also deal directly with off-shore banks for tax exempt reasons and capital maximization niches that regular banks do not offer. We currently deal with two major accredited off-shore financial entities and we expect all our prize winners that have won lump sums of money to secure a checking account with either one of them for easier facilitation of the transfer of your winnings and in respect to the new anti-money laundery laws and regulations in accordance with wire tranfers exceeding $250,000.00. Be advised that the statute time of limitation for your claim expires on the 15th of April, 2005. Once we are in receipt of the completed form below with the bank details enclosed, your transfer will be enacted with a swift in-house transfer which gets posted on the same day. If you already have an off-shore account with one of this banks , do inform us. The banks have different requirements and the requirement are stated below: Please be informed that your winnings can not be transfer to your account directly untill an account is secured with one of our accredited paying banks. This is due to promotional and gaming board regulations. 1. HSBC offshore ( www.offshore.hsbc.com/hsbc), below are the requirements: General and accounts enquiry : Tel :011-44-1534-616000 (i) A certified copy of your passport mailed by post only. (ii) Proof of residence such as a bill or any other document that clearly shows your addres (iii)A completed online form (iv)A reference from your current bank (v) This is an off-shore bank, so minimum deposit do apply.(USD$5000-USD$10,000) 2. HillCrest Securities (www.hillcrestsecurities.com), below are the requirements: Toll free for North American callers: : 1-888-608-0820 ext.1 (charges may apply when calling outside North America) (i) A copy of a piece of government issued identification such as a driver's license, passport e.t.c (ii) A completed online form (iii) This is an off-shore bank, so minimum deposit do apply.(USD$3000-USD$10,000) Do contact the bank designated to your region and upon securing an account, do complete and send back the form below. Please note that HSBC is applicable to all winners in Carribean, Latin America, And South Asia Region or category "F" winners. And HCS is applicable to winners in North America, Afirca,Western Europe, Eastern Europe and middle East Regions Winner's first and last name ________________________________ Amount won: _______________________________ Batch number / ticket number : _______________________________ Chosen bank:___________________________________Account Number__________________________________ Claim agent's name :_________________________________________ Claim agent's reference number: _____________________________ Name : ___________________________ ____________________________ Date _________________________________ Signature Sincere Regard, Daniel Wayne Tel: + 1(647) 833-2949 --
Received: from [18.104.22.168] by ws1-2.us4.outblaze.com with http for firstname.lastname@example.org; Mon, 04 Apr 2005 11:01:39 -0500 From: "Msoft Group LLC"
The victim was mailed a bogus certificate named "CERT+Surname.doc":
CustName: Sprint Canada Inc. Address: 301 Industrial Ave City: Vancouver StateProv: PostalCode: V6A 4E6 Country: CA RegDate: 2001-05-14 Updated: 2001-05-14 NetRange: 22.214.171.124 - 126.96.36.199 CIDR: 188.8.131.52/24 NetName: NET-SPRINT-186-75-A NetHandle: NET-206-186-75-0-1 Parent: NET-206-186-0-0-1 NetType: Reassigned Comment: RegDate: 2001-05-14 Updated: 2001-05-14 NOCHandle: NOC71-ORG-ARIN NOCName: Sprint Canada Inc. NOCPhone: 416-496-1644 NOCEmail: email@example.com TechHandle: NOC71-ORG-ARIN TechName: Sprint Canada Inc. TechPhone: 416-496-1644 TechEmail: firstname.lastname@example.org OrgAbuseHandle: ABUSE43-ARIN OrgAbuseName: ABUSE OrgAbusePhone: 416-496-4942 OrgAbuseEmail: email@example.com OrgNOCHandle: NOC71-ORG-ARIN OrgNOCName: Sprint Canada Inc. OrgNOCPhone: 416-496-1644 OrgNOCEmail: firstname.lastname@example.org OrgTechHandle: ILOP-ARIN OrgTechName: IRS Local Order Provisioning OrgTechPhone: 416-773-7535 OrgTechEmail: email@example.com OrgTechHandle: NOC71-ORG-ARIN OrgTechName: Sprint Canada Inc. OrgTechPhone: 416-496-1644 OrgTechEmail: firstname.lastname@example.org OrgTechHandle: TECHN7-ARIN OrgTechName: Technical Provisioning OrgTechPhone: 604-331-2952 OrgTechEmail: email@example.com
Request: hillcrestsecurities.com connected to whois.enom.com [184.108.40.206:43] ... Registration Service Provided By: Hillcrest Securities Contact: Info@hillcrestsecurities.com Visit: Domain name: hillcrestsecurities.com Administrative Contact: Hillcrest Securities Edward Peter (Info@hillcrestsecurities.com) +1.5555551212 Fax: +1.- 303- 1279 Jane Street Toronto, ONTARIO M6M4Y4 CA Billing Contact: Hillcrest Securities Edward Peter (Info@hillcrestsecurities.com) +1.5555551212 Fax: +1.- 303- 1279 Jane Street Toronto, ONTARIO M6M4Y4 CA Technical Contact: Hillcrest Securities Edward Peter (Info@hillcrestsecurities.com) +1.5555551212 Fax: +1.- 303- 1279 Jane Street Toronto, ONTARIO M6M4Y4 CA Registrant Contact: Hillcrest Securities Edward Peter (Info@hillcrestsecurities.com) +1.5555551212 Fax: +1.- 303- 1279 Jane Street Toronto, ONTARIO M6M4Y4 CA Status: Locked Name Servers: dns1.name-services.com dns2.name-services.com dns3.name-services.com dns4.name-services.com dns5.name-services.com Creation date: 08 Mar 2005 16:26:02 Expiration date: 08 Mar 2006 16:26:02