| |
419 Scam Example: "ADS INTERNATIONAL PROMOTION / Birigit Mathon / Frank Bruce"
"ADS INTERNATIONAL PROMOTION / Birigit Mathon / Frank Bruce" is a fake lottery scam run by a gang in the Netherlands and in West Africa. "Winners" are asked to open an account with a fake bank. The minimum deposit of € 1,500 is to be sent by Western Union or MoneyGram, a payment method that is untraceable. All phone numbers used in the scam are Dutch cellphones.
Example of initial "winning notification":
From: "BIRIGIT MATHON" <b_mathon001@yahoo.com>
To: <emailaddress>
Sent: Saturday, 05 February, 2005 22:53
Subject: NEW YEAR WINNING NOTIFICATION
FROM: THE DIRECTOR
EUROPEAN PRIZE AWARD DEPT.
REF:EL3/9318/04
BATCH:8/163/EL.
Attn:Dear Winner
We are pleased to inform you of the result of the Lottery Winners
International programs held on the 31/1/2005. Your e-mail address
attached
to ticket number :EL-23133 with serial number: EL-123542,batch
number: EL-35,lottery ref number: EL-9318 and drew lucky numbers
7-1-8-36-4-22 which consequently won in the 1st category, you have
therefore
been approved for a lump sum pay out of US$1,500,000.00 (One
Million,Five
Hundred Thousand United States dollars)
CONGRATULATIONS!!!
Due to mix up of some numbers and names, we ask that you keep your
winning
information confidential until your claims has been processed and your
money
Remitted to you. This is part of our security protocol to avoid double
claiming and unwarranted abuse of this program by some participants.
All
participants were selected through a computer ballot system drawn from
over
40,000 company and 20,000,000 individual email addresses and names from
all
over the world.
This promotional program takes place every year. This lottery was
promoted
and sponsored by a group of successful electronic dealers.we hope with
part
of your winning,you will take part in our next year US$20 million
international lottery. To file for your claim, please contact our
paying
officer:
Contact Person: Frank Bruce(Lottery Director)
Tel:+31-616-064-746
Fax:+31-847-454-548
Email: frankbruce111@myway.com
Remember, all winning must be claimed not later than 17th of february
2005.After this date all unclaimed funds will be included in the next
stake.Please note in order to avoid unnecessary delays and
complications
please remember to quote your reference number and batch numbers in all
correspondence.
Furthermore, should there be any change of address do inform our agent
as
soon as possible.
Congratulations once more from our members of staff and thank you for
being
part of our promotional program.
Note: Anybody under the age of 18 is automatically disqualified.
yours Sincerely,
Mrs Birigit Mathon
For Management
Message headers:
Received: from 2mails698.com (unknown [192.116.66.66])
by icicle.pobox.com (Postfix) with SMTP id DA9CBE996
for <emailaddress>; Sat, 5 Feb 2005 08:53:40 -0500 (EST)
From: "BIRIGIT MATHON" <b_mathon001@yahoo.com>
Reply-To: frankbruce111@myway.com
To: emailaddress
Date: Sat, 5 Feb 2005 05:53:37 -0800
Subject: NEW YEAR WINNING NOTIFICATION
X-Mailer: Microsoft Outlook Express 5.00.2919.6900 DM
Sending network: Golden Lines / Gilat Satcom (IP 192.116.66.66):
This is a satellite broadband ISP that provides internet connectivity to customers in Nigeria and other countries in West Africa.
inetnum: 192.116.65.0 - 192.116.69.255
netname: GILAT-SATCOM-BLOCK-31-32-40-46-53
descr: Gilat-Satcom
remarks: For abuse issues related to Gilat, email abuse-gilat@012.net.il
notify: abuse-gilat@012.net.il
country: GB
admin-c: GS3350-RIPE
tech-c: GS3350-RIPE
status: ASSIGNED PA
mnt-by: AS9116-MNT
mnt-lower: AS9116-MNT
changed: lir@linux.goldenlines.net.il 20050102
source: RIPE
route: 192.116.64.0/18
descr: Goldenlines
remarks: For addressing issues, email lir@linux.goldenlines.net.il
remarks: For abuse issues, email abuse@012.net.il
origin: AS9116
mnt-by: AS9116-MNT
changed: lir@linux.goldenlines.net.il 20041121
source: RIPE
role: Gilat Support
address: Gilat Satcom
address: 21D Yagia Kapaim st. Petach-Tikva, Israel
phone: +972 3 9255000
fax-no: +972 3 9217938
admin-c: DR5299-RIPE
admin-c: GE2074-RIPE
tech-c: DR5299-RIPE
tech-c: GE2074-RIPE
trouble: abuse-gilat@012.net.il
e-mail: customer@gilat.net
nic-hdl: GS3350-RIPE
mnt-by: AS9116-MNT
changed: hank@att.net.il 20040909
source: RIPE
Here is a reply from "Frank Bruce":
Subject: Ref: EL3/9318/04 Batch: 8/163/EL
Date: Tuesday 11 January 2005 21:26
From: <frank_bruce@euromail.net>
To: emailaddress
Dear Winner,
We wish to congratulate you and formally inform you that you have won
the sum of $1,500,000.00 (One Million, Five Hundred Thousand Dollars) in
the last email-lottery draw, organized by ADS INTERNATIONAL PROMOTION.
We have confirmed the above winning.
You should note that your email address in addition to millions of
company and individual email were extracted with a software and the
addresses were scrutinized with a ballot system and after the processes, 30
email addresses were selected and they were shared into 3 categories
respectively and which you are a winner in the 1st category of $1.5m.
The said sum is now deposited in our suspense account in your favour
waiting for the immediate remittance into your nominated bank account. Be
informed that your winning prize has a hardcover insurance policy that
makes it impossible to make any deduction of any kind, until the sum is
finally credited into your designated account.
This firm on behalf of ADS INTERNATIONAL PROMOTION will issue an
Irrevocable Guarantee of Payment Bond (IGPB) in your favour, thereby
securing the above prize money. A copy of the IGPB will be forwarded to our
paying bank for immediate action.
Following the above, you are expected to fill the attached form and
return back to this office along with a copy of your identification for
vetting process which is a standard practice just to ensure that we are
dealing with the right individual and account.
This process is vital and urgent following the instruction from our
Payment center that all prize money should be claimed as soon as possible.
Once again accept our congratulations and we look forward to hearing
from you soon.
Regards,
Mr. Frank Bruce
Tel:+31-616-064-746
Fax:+31-847-454-548
Subject: ATTENTION DEAR WINNER
Date: Tuesday 18 January 2005 03:56
From: Frank Bruce <frank_bruce@euromail.net>
To: emailaddress
Dear Winner,
This is to notify you that we are in receipt of your filled form and
immediate action has been taken.
Your winnings of 1.5 million US dollars has been processed.
Please contact our paying bank for Release of payment into your nominated
bank account.
Bank Details:
Banking Fortis
fortisbanque@bizconsulting.com
I advise you send them a mail immediately as a copy of the IGPB has been
forwarded to our paying bank for immediate payment action.
this is the instruction from our Payment center that all prize money should
be claimed as soon as possible.
Should you have any questions, do not hesitate to contact us.
Once again accept our congratulations.
Cheers
Mr. Frank Bruce
Tel:+31-616-064-746
Fax:+31-847-454-548
Subject: Bank deposit in your favour
Date: Friday 21 January 2005 12:07
From: "paul smith" <info_fortbank@consultant.com>
To: emailaddress
Dear Customer.
This is to inform you that we have received a credit advice for the sum of
One Million Five Hundred Thousand United States Dollars ($1,500,000.00) from
ADS PROMOTION to be credited to your account.
Since you do not have an operational account with this bank, your funds have
been lodged in a suspense account pending the activation of an account.
We want you to know that the funds $1,500,000.00USD is in our suspense
Account and has a hardcover insurance policy which make this impossible
To make any deduction till the funds is transferred to an existing Account.
With this you are advised to set up an online account with our Bank so that
the funds can be deposited in your account before transfer can be effected.
We have different online accounts and this has different minimum
deposit depending on which of the account you will like us to set up for you.
ACCOUNTS & THEIR MINIMUM DEPOSIT
1) REGULAR ACCOUNT: This has a minimum deposit of 1,500 euro
2) NUMBERED ACCOUNT: This has a minimum deposit of 2,500 euro
3) VAULTING ACCOUNT: This has a minimum deposit of 3,500 euro
4) PREMIUM ACCOUNT: This has a minimum deposit of 4,500 euro
The Premium account has a full option banking amenities which involves
Having a Master Card, credit/debit balance print out and overdraft.
NOTE that the minimum deposit Belongs to you as this will be in your account
before crediting the $1,500,000.00USD. Thank you for banking with us and
have a wonderful
day.
Please fill out the attached offshore account opening forms and send by fax
(31-84-748-4542) a copy of your valid identification.
Yours sincerely
Breda Moore
For: Mr.Armstrong Becker
Head of Fortis Bank
Amsterdam Netherlands.
--
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://www.mail.com/?sr=signup
Subject: Payment instructions
Date: Tuesday 25 January 2005 15:23
From: "paul smith" <info_fortbank@consultant.com>
To: emailaddress
Dear customer
We acknowledge the receipt of your account opening documents.
For your account to be activated immediately, you are required to make an
initial deposit of €1,500 (one Thousand, Five Hundred Euros to activate your
account.
You are expected to locate the nearest WESTERN UNION MONEY TRANSFER
AGENT/MONEY GRAM AGENT to make payment of the sum of €1,500 Euros
representing initial deposit for account activation to our account officer
whose details are stated below:
Name: Jerry uwangue
Address: Gronoveen 60,110lv, Amsterdam, Netherlands.
You are expected to send a copy of the payment receipt to us via fax and
email attachment for reference purpose and also give us a call to inform us
that you have made the payment.
Once your account is activated you will be provided with your accounts
co-ordinates and you will also give us the the informations of your
designated bank account were you want the funds to be transfered into.
We look forward for your prompt response; should you have any questions, do
not hesitate to contact us.
Thank you for banking with us
Yours Sincerely
Breda Moore
For: Mr. Armstrong Becker
Head of Fortis Bank
Amsterdam Netherlands.
Received: from [62.194.10.181]
by ws1-5.us4.outblaze.com with http
for info_globaltrust@consultant.com; Mon, 14 Feb 2005 08:30:30 -0500
From: "global trust bank global trust bank" <info_globaltrust@consultant.com>
To: emailaddress
Date: Mon, 14 Feb 2005 08:30:30 -0500
Subject: Bank deposit in your favour
X-Originating-Ip: 62.194.10.181
Dear Customer. This is to inform you that we have received a credit advice for the sum of One Million Five Hundred Thousand (1,500,000.00) from Lottery Company to be credited to your account.
Since you do not have an operational account with this bank, your funds have been lodged in a suspense account pending the activation of an account.
We want you to know that the funds 1,500,000.00Euros is in our suspense Account and has a hardcover insurance policy which make this impossible to make any deduction till the funds is transferred to an existing account. With this you are advised to set up an online account with our bank so that the funds can be deposited in your account before transfer Can be effected.
We have different online accounts and this has different minimum deposit Depending on which of the account you will like us to set up for you. ACCOUNTS & THEIR MINIMUM DEPOSIT
1) REGULAR ACCOUNT: This has a minimum deposit of 600 euro 2) NUMBERED ACCOUNT: This has a minimum deposit of 1,500 euro 3) VAULTING ACCOUNT: This has a minimum deposit of 2,500 euro 4) PREMIUM ACCOUNT: This has a minimum deposit of 3,500 euro
The Premium account has a full option banking amenities which involves Having a Master Card, credit/debit balance print out and over draft.
NOTE that the minimum deposit Belongs to you as this will be in your account before crediting the 1,500,000.00Euros. Thank you for banking with us and have a wounderfull day.
Please fill out the attached offshore account opening forms and send by fax a copy of your valid identification.
Yours sincerely
Breda Moore For:Mr.Armstrong Becker
Head of Global Trust Bank Amsterdam Netherlands.
--=20
___________________________________________________________ Sign-up for Ads Free at Mail.com
http://www.mail.com/?sr=signup
WHOIS details fro sending network (IP 62.194.10.181):
inetnum: 62.194.0.0 - 62.195.255.255
org: ORG-UN1-RIPE
netname: NL-A2000-20001010
descr: UPC Netherlands
descr: Provider Local Registry
country: NL
admin-c: RIHU1-RIPE
tech-c: RIHU1-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: A2000-KTA-MNT
mnt-routes: A2000-KTA-MNT
changed: hostmaster@ripe.net 20001010
changed: hostmaster@ripe.net 20010115
changed: lir-help@ripe.net 20011217
changed: hostmaster@ripe.net 20020419
changed: hostmaster@ripe.net 20020423
changed: hostmaster@ripe.net 20020603
changed: hostmaster@ripe.net 20020709
source: RIPE
route: 62.194.0.0/16
descr: A2000 / Kabeltelevisie Amsterdam B.V.
origin: AS8209
notify: hostmaster@chello.com
mnt-by: A2000-KTA-MNT
changed: hostmaster@chello.at 20031027
changed: hostmaster@chello.at 20041028
source: RIPE
organisation: ORG-UN1-RIPE
org-name: UPC Netherlands
org-type: LIR
address: UPC
address: Kabelweg 51
address: 1014 BA AMSTERDAM
address: The Netherlands
phone: +31 20 770 73 12
fax-no: +020 77707758
e-mail: hostmaster@A2000.com
admin-c: RIHU1-RIPE
admin-c: RM2527-RIPE
admin-c: FA1780-RIPE
admin-c: ER1204-RIPE
admin-c: MS2509-RIPE
mnt-ref: A2000-KTA-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20041112
changed: bitbucket@ripe.net 20050214
source: RIPE
person: Richard Huisman
address: UPCnl
address: Kabelweg 51
address: 1014 BA Amsterdam
address: The Netherlands
phone: +31 20 7783 049
fax-no: +31 20 7783 055
e-mail: rhuisman@upc.nl
nic-hdl: RIHU1-RIPE
notify: rhuisman@upc.nl
remarks: E-mail is the preferred contact method!
remarks: ---------------------------------------
remarks: -- For abuse notification please use --
remarks: -- --
remarks: -- abuse@chello.nl --
remarks: -- --
remarks: ---------------------------------------
changed: R.Huisman@A2000.com 20000417
changed: R.Huisman@upc.nl 20021003
changed: RHuisman@upc.nl 20030807
source: RIPE
|