|
419 Scam Example: "ADS INTERNATIONAL PROMOTION / ELECTRONIK LOTTERY / Queensley Rhoda / Paul Zimmerman / Linsco Trust Finance and Securities"
"ADS INTERNATIONAL PROMOTION / ELECTRONIK LOTTERY / Queensley Rhoda / Paul Zimmerman / Linsco Trust Finance and Securities / FALCON FINANCE & TRUST BV / FALCON TRUST FINANCE B.V." is a fake lottery scam run by a gang in the Netherlands. According to greenps.com the person behind this scam is a Nigerian called Samuel Ughulu who lives in Amsterdam. All phone numbers used in the scam are Dutch cellphones. The scam appears to be connected to another Dutch lottery scam, "Electronic Lottery / Macurly Clary" as the claims agents of boths scams send responses from the same IP address.
Examples of email addresses used by this scam. As you can see, Yahoo and Myway are most frequently used in this scam:
Phone numbers and other data for this scam: "zimmer" [mailto:paula_gibb27@yahoo.com] Mrs.Queensley Rhoda Contact Person:Mr.Paul Zimmerman TEL:+31 612 192 105 Email:adszimm410@myway.com Email:adspaul2005@yahoo.co.in For Mr.Paul Zimmerman adszpaul2005@yahoo.dk Tel:+31 612 192 105 Fax: 318 474 54671 Contact Person: Mr.Patrick Jones Email: Admin@otfinplc.com Tel: +31-622-038-388 Contact Person:Mr.Paul Zimmerman TEL:+31 680 780 273 Email:ftfs_245@myway.com Contact Person: Mr.Terry Edward (Lottery Director) Remittance Department Director, Netherlands Lottery International NL Company [Lotto InternationalNetherlands] 107 Vanderloop 1902AB ,Amsterdam, The Netherlands TEL:00-31-617786389 FAX;00-31-847518429 Email:terry_edward@mail2world.com For Mr.George Simon Emai:Otfenquiry@yahoo.com Tel: +31-622-038-388 Contact Person:Mr.Patrick Jones For Mr.Paul Zimmerman Tel:+31 612 192 105 Fax: 318 474 54671 = Munttorenplc Towers, Weesperzijde768 6643 Al Amsterdam, The Netherlands E-mail: admin@munttorenplc.com TEL: +31-616-358-552 , +31-205-248-242 FAX: +31-205-248-417 , +31-642-062-819 Example of initial "winning notification":
FROM:THE DESK OF THE MANAGING DIRECTOR INTERNATIONAL/PRIZE AWARD DEPT REF:PL2/209318/09 BATCH:18/103/HME. Attn:Dear Sir/Madam We are pleased to inform you of the result of the Lottery Winners International programs held on the 23/7/2004. Your e-mail address attached to ticket number 653164251591-6011 with serial number 7321410,batch number 7151085135,lottery ref number 6376527711 and drew lucky numbers 4-9-17-36-44-78 which consequently won in the 1st category, you have therefore been approved for a lump sum pay out of US$1.500,000.00 (One Million, Five Hundred Thousand United States dollars) CONGRATULATIONS!!! Due to mix up of some numbers and names, we ask that you keep your winning information confidential until your claims has been processed and your money Remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants. All participants were selected through a computer ballot system drawn from over 40,000 company and 20,000,000 individual email addresses and names from all over the world. This promotional program takes place every year. This lottery was promoted and sponsored by Association of software producers. we hope with part of your winning,you will take part in our next year US$20 million international lottery. To file for your claim, please contact our paying officer: Contact Person:Mr.Paul Zimmerman TEL:+31 612 192 105 Email:adszix2005@yahoo.co.in Remember, all winning must be claimed not later than 25th of February,2005. After this date all unclaimed funds will be included in the next stake. Please note in order to avoid unnecessary delays and complications please remember to quote your reference number and batch numbers in all correspondence. Furthermore, should there be any change of address do inform our agent as soon as possible. Congratulations once more from our members of staff and thank you for being part of our promotional program. Note: Anybody under the age of 18 is automatically disqualified. yours Sincerely, Mrs.Queensley Rhoda, Here is a reply from the "claims agent": Dear Winner, Message headers: Received: from [80.56.80.155] by web8402.mail.in.yahoo.com via HTTP; Thu, 10 Feb 2005 10:15:46 GMT Date: Thu, 10 Feb 2005 10:15:46 +0000 (GMT) From: paul zimmerman <adsqueensley@yahoo.co.in> Subject: FILL UP THE ATTACHED FORM Here are headers from other replies: Received: from [80.56.80.155] by web25108.mail.ukl.yahoo.com via HTTP; Wed, 12 Jan 2005 11:20:00 CET Date: Wed, 12 Jan 2005 11:20:00 +0100 (CET) From: paul zimmerman and Received: from [80.56.80.155] by web26503.mail.ukl.yahoo.com via HTTP; Sun, 13 Feb 2005 23:32:36 +0100 (CET) Date: Sun, 13 Feb 2005 23:32:36 +0100 (CET) From: paul zimmerman <adszimmer231@yahoo.de> Subject: FILL UP THE ATTACHED FORM
All scam emails were sent from the same address at a Dutch provider (IP 80.56.80.155): inetnum: 80.56.0.0 - 80.57.255.255 org: ORG-CB6-RIPE netname: NL-CHELLO-20000509 descr: Provider Local Registry country: NL admin-c: GM3659-RIPE tech-c: HTK1-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: CHELLO-MNT mnt-routes: CHELLO-MNT changed: hostmaster@ripe.net 20000509 changed: hostmaster@ripe.net 20010516 changed: lir-help@ripe.net 20011211 source: RIPE route: 80.56.0.0/16 descr: UPC.nl Network Services descr: Chello Customers descr: The Netherlands origin: AS8209 notify: registry@upc.nl notify: hostmaster@chello.at mnt-by: CHELLO-MNT changed: hostmaster@chello.at 20010622 source: RIPE organisation: ORG-CB6-RIPE org-name: Chello Broadband org-type: LIR address: Chello Broadband N.V. boeing avenue 101 1119pe schiphol rijk The Netherlands phone: +31 20 7788200 fax-no: +31 20 7788203 e-mail: hostmaster@chello.com admin-c: GM3659-RIPE admin-c: RM2527-RIPE admin-c: AK991-RIPE admin-c: SB9000-RIPE admin-c: MH392-RIPE admin-c: MG872-RIPE admin-c: HTK1-RIPE admin-c: MS2509-RIPE mnt-ref: CHELLO-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT changed: hostmaster@ripe.net 20040415 changed: bitbucket@ripe.net 20040617 changed: bitbucket@ripe.net 20041112 changed: bitbucket@ripe.net 20050201 source: RIPE role: Hostmaster Telekabel Wien address: UPC Telekabel Wien GmbH address: Erlachgasse 116 address: A-1100 Vienna address: Austria phone: +43 1 96068 5000 fax-no: +43 1 96068 5666 e-mail: hostmaster@chello.at trouble: help@chello.at admin-c: AK991-RIPE tech-c: SB666-RIPE tech-c: AK991-RIPE tech-c: MS2509-RIPE nic-hdl: HTK1-RIPE notify: hostmaster@chello.at mnt-by: CHELLO-MNT changed: hostmaster@chello.at 20040609 source: RIPE person: Gary Mendel address: Koningin Wilhelminaplein 2-4 address: 1062 HK Amsterdam address: The Netherlands phone: +31 20 355-2777 fax-no: +31 20 355-2755 e-mail: hostmaster@chello.com nic-hdl: GM3659-RIPE notify: hostmaster@chello.at mnt-by: CHELLO-MNT changed: hostmaster@chello.at 20010212 source: RIPEHere is a "Paul Zimmerman" reponse from a different source: Dear Winner, Message headers: Subject: FILL UP THE ATTACHED FORM Received: from [62.163.36.250] by mprdmailfe2.nwk.myway.com via HTTP; Sun, 06 Mar 2005 03:49:01 EST Reply-To: ads_paulzimm@myway.com From: "paul" <ads_paulzimm@myway.com> Subject: FILL UP THE ATTACHED FORM Received: from [62.163.36.250] by mprdmailfe1.nwk.myway.com via HTTP; Wed, 02 Mar 2005 02:19:02 EST Reply-To: ads_paulzimm@myway.com From: "paul" <ads_paulzimm@myway.com> Date: Mon, 07 Mar 2005 19:23:28 -0500 From: adspaulzimm@netscape.net To: emailaddress ("Firstname Lastname") Subject: FILL UP THE ATTACHED FORM MIME-Version: 1.0 Message-ID: <377864AE.6AE69C00.476B583F@netscape.net> X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 62.163.36.250 Subject: FILL UP THE ATTACHED FORM Received: from [62.163.36.250] by mprdmailfe4.nwk.myway.com via HTTP; Sat, 19 Mar 2005 13:01:24 EST Reply-To: adsqueensleyrhoda@myway.com From: "queen" <adsqueensleyrhoda@myway.com>
WHOIS details for sending network (IP 62.163.36.250): inetnum: 62.163.36.0 - 62.163.39.255 netname: UPC-FRL-LWD3 descr: Leeuwarden country: NL admin-c: RC482-RIPE tech-c: RC482-RIPE tech-c: HMCB1-RIPE status: ASSIGNED PA remarks: Contact abuse@chello.nl concerning criminal remarks: activities like spam, hacks, portscans notify: hostmaster@chello.at mnt-by: CHELLO-MNT changed: hostmaster@chello.at 20020618 source: RIPE route: 62.163.0.0/17 descr: UPC.nl Network Services descr: Chello Customers descr: The Netherlands origin: AS8209 notify: registry@upc.nl notify: hostmaster@chello.at mnt-by: CHELLO-MNT changed: hostmaster@chello.at 20031027 source: RIPE role: Hostmaster Chello Broadband address: UPC Technology address: Internet Services address: Erlachplatz 116 address: A-1100 Vienna address: Austria phone: +43 1 96068 5000 fax-no: +43 1 96068 5666 e-mail: hostmaster@chello.at admin-c: AK991-RIPE tech-c: MG111 tech-c: MS2509-RIPE tech-c: AK991-RIPE nic-hdl: HMCB1-RIPE notify: hostmaster@chello.at mnt-by: CHELLO-MNT changed: hostmaster@chello.at 20050118 source: RIPE person: Robert Chandler address: UPC Netherlands address: Kabelweg 51 address: 1014 BA Amsterdam address: The Netherlands phone: +31 20 7755 902 e-mail: rchandler@upc.nl nic-hdl: RC482-RIPE notify: rhuisman@upc.nl remarks: ____________________________________________________________ remarks: | E-mail is the preferred contact method! | remarks: | FOR ABUSE NOTIFICATIONS PLEASE ONLY USE THE FOLLOWING ONE: | remarks: | abuse@chello.nl | remarks: |____________________________________________________________| changed: RHuisman@upc.nl 20020220 changed: rchandler@upc.nl 20020822 source: RIPE
Scam emails in chronological order:
From: paul zimmerman [mailto:ads_zimm230@yahoo.de] Dear Sir/Madam, We wish to congratulate you and formally inform you that you have won the sum of $2,500,000.00 (Two Million,Five Hundred Thousand Dollars) in the last email-lottery draw, organized by ELECTRONIK LOTTERY. We have confirmed the above winning. You should note that your email address in addition to millions of company and individual email were extRacted with a software and the addresses were scrutinized with a ballot system and after the processes,30 email addresses were selected and they were shared into 3 categories respectively and which you are a winner in the 1st category of $2.5m.The said sum is now deposited in our suspense account in your favour waiting for the immediate remittance into your nominated bank account. Be informed that your winning prize has a hardcover insurance policy that makes it impossible to make any deduction of any kind, until the sum is finally credited into your designated account. However, our client (ELECTRONIK LOTTERY) has been notified of this development and the status of your claim. Below are the steps you will be following: 1. Filling of the form and sending back to us for creation of an account in your name. 2. You will activate an account with our accreditted payment center which varies because of the initial deposit of the different accounts and their features as they are stated below: a. Regular Account, the initial deposit is €1500.00 (One Thousand Five Hundred Euros). The Maximum transfer possible within a month is $2,500,000.00 (Two Million and Five Hundred Thousand USD). b. Daily Account, the initial deposit is €2,500.00 (Two Thousand Five Hundred Euros). The Maximum transfer possible within a month is $3,500,000.00 (Three Million Five Thousand USD). c. Premium Account, the initial deposit is €3,500 (Three Thousand Five Hundred Euros). The transfer possible within a month from this account is $5,000,000.00 (Five Million USD). d. Platinum Account, the initial deposit is €4,500.00 (Four thousand Five Hundred Euros), the maximum transfer possible from this account within a month is $10,000,000.00 (Ten Million USD) and above. You will make a choice on the kind of account you can go for as it is important because you are a non-residence of this country and secondly because the prize money is in a suspense account and you cannot deduct nor make any transfers from a suspense account unless you have an existing account with the firm where the money is. 3. You will start making transfers to your designated bank account. I hope these steps are clearly understood by you? Following the above, you are expected to fill the attached form and return back to this office along with a copy of your international passport or driver's license via email attachment for vetting process which is a standard practise just to ensure that we are dealing with the right individual and account. This process is vital and urgent following the instruction from our clients that all prize money should be claimed on or before 16th Of April,2005 Once again accept our congratulations and we look forward to hearing from you soon. Regards, Mr.Van Gogh 0031 619 026 083 ----------------------------------------------------------------- Find local movie times and trailers on Yahoo! Movies.
Received: from [62.163.36.250] by web42409.mail.yahoo.com via HTTP; Thu, 14 Apr 2005 01:10:18 EST Date: Thu, 14 Apr 2005 01:10:18 +1000 (EST) From: Electronik Lotto <electronik_lotto@yahoo.com.au> Subject: FILL FORM
"Linsco Trust Finance & Securities" is a scam From: "ANTHONY VAN HEIM" <anthonyheim@netscape.net> To: <emailaddress> Sent: Friday, May 13, 2005 1:23 PM Subject: Verification / claim processing form Attn:Sir/Madam, We wish to congratulate you and formally inform you that you have won the sum of 1,500,000.00 (One Million, Five Hundred Thousand Dollars) in the last email-lottery draw, organized by De Lotto Netherland Promotion. We have confirmed the above winning. The said sum is now deposited in our suspense account in your favor waiting for the immediate remittance to you. Be informed that your winning prize has a hardcover insurance policy that makes it impossible to make any deduction of any kind, until the sum is finally credited into your designated account. This firm on behalf of De Lotto Netherland Promotion will issue an Irrevocable Guarantee of Payment Bond (IGPB) in your favor,thereby securing the above prize money. A copy of the IGPB will be forwarded to our paying bank for immediate action. However, our client (DLN Promotion) has been notified of this development and the status of your claim. Following the above, you are expected to fill the attached form and return back to this office along with a copy of your international passport or driver's license via email attachment or by fax for vetting process which is a standard practice just to ensure that we are dealing with the right individual. This process is vital and urgent following the instruction from our clients that all prize money should be claimed on or before the DEADLINE on your notice. Once again accept our congratulations and we look forward to hearing from you soon. Regards, Queensley Roda Secretary Tel:+31 619 118 054 Fax:+31 847 507 914 Now comes the money demand: From: Linsco Finance [mailto:info@linsfinance.com] To: emailaddress Sent: Friday, May 20, 2005 4:35 PM Subject: Firstname, BANK DEPOSIT IN YOUR FAVOUR! Attn: Firstname Lastname, BANK DEPOSIT IN YOUR FAVOUR This is to inform you that we have received a payment advice for the sum of One Million, Five Hundred Thousand United States Dollars ($1,500,000.00) from the Lottery Organisation, to be credited to your account. Since you do not have an Operational account with our bank, your funds have been lodged in a suspense account pending on your activation of an Operational account with us. Please fill out the offshore account opening forms attached and send to us by fax with a copy of your valid identification document (International Passport or Drivers License). Please notify us also if you wish to make transfers to other accounts and provide your transfer instruction(s). IMPORTANT NOTICE Please note the type of account we have in our bank, initial deposit and the maximum transfer possible in one month. 1. Regular Account, the initial deposit is €1,500.00 (One Thousand, Five Hundred Euros). The Maximum transfer possible within a month is $500,000.00 (Five Hundred Thousand USD). 2. Daily Account, the initial deposit is €2,500.00 (Two Thousand, Five Hundred Euros). The Maximum transfer possible within a month is $1,000,000.00 (One Million USD). 3. Premium Account, the initial deposit is €3,500 (Three Thousand, Five Hundred Euros). The transfer possible within a month from this account is $1,500,000.00 (One Million, Five Hundred Thousand USD). 4. Platinum Account, the initial deposit is €4,500.00 (Four thousand, Five Hundred Euros), the maximum transfer possible from this account within a month is $5,000,000.00 (Five Million USD). For your account to be activated immediately, you are required to transfer the initial deposit, which will be deposited in your account to activate the account before your claims can be transferred out of the suspense account into a normal operative account. Note that funds lodged in suspense account are NON-DEDUCTIBLE until it has been transferred to your operative account. Once your account is opened you will have an account number and a pin code which you will use to access your account through our website for online transfer. Advise us on when payment can be made in order for us to inform you of payment modality. We look forward for your prompt response; should you have any questions, do not hesitate to contact us. Thank you for banking with us Best Regards, Lenz Daniels For: Wayne Smith Operations Manager Tel: +31 617 584 627 Fax: +31 205 248 231 Email: info@linsfinance.com
Linsco Trust Finance and Securities (Mr. Reinhard van der Vaart) Vision Ball Lottery vblottoaward@yahoo.com Reinhard van der Vaart Tel: +31 621 911 823 Fax: +31 847 473 516 Western Union: Name: Frank Barry Address: Hoogoorddreef 43, 1051 JL, Amsterdam, Netherlands
|