|
419 Scam – "FREEDOM UNIVERSAL LOTTERY / MEGA JACKPOT LOTTO / Banco Platinum International"
"FREEDOM UNIVERSAL LOTTERY / MEGA JACKPOT LOTTO / Banco Platinum International" are a a fake lottery company and a fake bank operating in Nigeria and the UK. (see one example scam email here). Please forward us copies of any replies or money demands by the ""claims agents" (Yahoo Mail: Forward / as Attachment, Outlook Express: Message / Forward as attachment, see "How to report 419 spam to us"). We will publish such replies here. Please forward copies of fraud emails to the abuse department of the webmail address listed as the contact email for the "claims agent". Ask for the addresses to be suspended because they are used in a 419 fraud (see 419 FAQ).
The scammers have registered a domain for the fake bank:
Example of fake winning notification email (2005-02-28): From: "CARMLOTLOTTERY" <claimsdept42004@yahoo.co.uk>
Example of fake winning notification email (2004-12-10):
From: "FREEDOM UNIVERSAL LOTTERY PROMOTIONS" <info_lotto_1@yahoo.co.uk>Both spams were sent through an insecure PHP-Nuke webmailer, a common method for 419 scammers to send their spam. It hides the original IP address and makes it more difficult to get the sending account shut down. What follows is a rather typical sequence of fraud emails from various roles that the scammers play, all originating from the same IP address in Africa, probably Nigeria. Received: from [80.179.242.228] by prdmailfe3.nwk.iwon.com via HTTP; Wed, 15 Dec 2004 18:01:21 EST Claims agent reply: From: "Brian Lloyds" <freedomclaimsagent@iwon.com> In the next email the scammers screwed up and addressed the "winner" by the name of another victim. Other than that it was the standard scam email. From: "Brian Lloyds" <freedomclaimsagent@iwon.com> Next email: From: "Brian Lloyds" <freedomclaimsagent@iwon.com> Next email: From: "Brian Lloyds" <freedomclaimsagent@iwon.com> Next email: From: "Brian Lloyds" <freedomclaimsagent@iwon.com> Next email: From: "Brian Lloyds" <freedomclaimsagent@iwon.com> To: <emailaddress>
WHOIS lookup for bancoplatinum.net WHOIS lookup for IP address [80.179.242.228]Request: bancoplatinum.net connected to whois.crsnic.net [198.41.3.54:43] ... connected to whois.enom.com [66.151.151.170:43] ... Registration Service Provided By: Microsoft Contact: pdbeta@microsoft.com Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress Domain name: bancoplatinum.net Registrant Contact: Benard Newton Benard Newton (donaldjones@bancoplatinum.net) +1.818617393456 Fax: none 7050 vassar ave #14 canoga park canoga park, CA 91303 US Administrative Contact: Benard Newton Benard Newton (donaldjones@bancoplatinum.net) +1.818617393456 Fax: none 7050 vassar ave #14 canoga park canoga park, CA 91303 US Technical Contact: NOC MSN NOC MSN (MSN-PA-TECH@msn.com) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Billing Contact: NOC MSN NOC MSN (MSN-PA-BILL@MSN.COM) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Status: Locked Name Servers: pdomns1.msn.com pdomns2.msn.com Creation date: 18 Oct 2004 04:39:55 Expiration date: 18 Oct 2005 04:39:55 WHOIS lookup for IP address [80.179.242.244] WHOIS lookup for IP address [80.179.242.249] Gilat / Golden Lines is a satellite broadband ISP in Israel that provides internet connectivity to Nigeria and other countries in Africa. The country in the following WHOIS record is fake, ask you can see from the street address. inetnum: 80.179.242.224 - 80.179.242.255 netname: Gilat-ART2036 descr: Please Send Abuse/SPAM complaints To Abuse-gilat@012.net.il country: GB admin-c: DR5299-RIPE tech-c: DR5299-RIPE status: ASSIGNED PA notify: lir@linux.goldenlines.net.il changed: lir@linux.goldenlines.net.il 20040617 mnt-by: AS9116-MNT mnt-lower: AS9116-MNT source: RIPE route: 80.179.128.0/17 descr: Golden Lines origin: AS9116 mnt-by: AS9116-MNT changed: lir@linux.goldenlines.net.il 20020711 source: RIPE role: DNS REG address: 25 Hsivim st. Petach-Tiikva, Israel e-mail: dnsreg@012.net.il trouble: abuse@012.net.il admin-c: GE2074-RIPE tech-c: IB737-RIPE tech-c: AG914-RIPE nic-hdl: DR5299-RIPE notify: lir@linux.goldenlines.net.il changed: lir@linux.goldenlines.net.il 20030715 mnt-by: AS9116-MNT source: RIPE
ATTENTION:Firstname Email: emailaddress Batch 901/00319/HLP Ref no: MELI-T/17-FO44262312 I am Mr. Brian Lloyds the fiduciary agent assigned to your case. I wish to Congratulate on your victory, you are lucky person to have won this lottery. Your email address is amongst those chosen this quarter from our new java-based software that randomly selects email addresses from the web from which winners are selected. You are required to forward the following details to help facilitate the processing of your claims and certificate which will facilitate the release of your winnings. 1. Full names. 2. Phone number. 3. Fax number. 4. Occupation. 5. Sex. 6. Age. 7. Nationality. It is expected that you would forward this information as soon as possible to enable us attend to your winnings. Once we confirm your information, your payments would be processed. Moreso, i will like you to visit our website and verify your winning "www.carmlotuk.com" When you get into the website click on WINNERS and type in your ticket numbers to verify your winnings After you have sent down this information, a certificate will be prepared for you. This is to be your proof of winning. Be advised that your winnings would be paid to you in installments of $30,000.00 {Thirty Thousand United States Dollars}. This is done because of the amount won by you, this money would be paid to you on monthly basis for the next 10 {Ten} months .You are advised to keep your winning numbers secret to avoid unscrupulous elements from taking advantage of the situation. Once again, congratulations. Regards, Mr. Brian Lloyds Message headers: Received: from 80.179.242.244 by by21fd.bay21.hotmail.msn.com with HTTP; Tue, 22 Feb 2005 22:19:25 GMT X-Originating-IP: [80.179.242.244] X-Originating-Email: [claims_dept@camelotuk.net] X-Sender: claims_dept@camelotuk.net In-Reply-To: <20050222######.######.qmail@web50307.mail.yahoo.com> From: "Brian Lloyds" <claims_dept@camelotuk.net>
WHOIS details for domain "carmlotuk.com" Request: carmlotuk.com connected to whois.dns.com.cn [218.30.114.20:43] ... Domain Name.......... carmlotuk.com Creation Date........ 2005-01-29 15:29:08 Registration Date.... 2005-01-29 15:29:08 Expiry Date.......... 2006-01-29 15:29:08 Organisation Name.... Hu Jian Organisation Address. shanghai Organisation Address. Organisation Address. shanghai Organisation Address. 200000 Organisation Address. BJ Organisation Address. UK Admin Name........... Hu Jian Admin Address........ shanghai Admin Address........ Admin Address........ shanghai Admin Address........ 200000 Admin Address........ BJ Admin Address........ UK Admin Email.......... asikrod@yahoo.com Admin Phone.......... +86.203886475 Admin Fax............ +86.203886475 Tech Name............ Hu Jian Tech Address......... shanghai Tech Address......... Tech Address......... shanghai Tech Address......... 200000 Tech Address......... BJ Tech Address......... UK Tech Email........... asikrod@yahoo.com Tech Phone........... +86.203886475 Tech Fax............. +86.203886475 Bill Name............ Hu Jian Bill Address......... shanghai Bill Address......... Bill Address......... shanghai Bill Address......... 200000 Bill Address......... BJ Bill Address......... UK Bill Email........... asikrod@yahoo.com Bill Phone........... +86.203886475 Bill Fax............. +86.203886475 Name Server.......... ns1.dns.com.cn Name Server.......... ns2.dns.com.cn This is the same satellite ISP in Israel as the earlier scam.
"GRAND UNIVERSAL PROMO LOTTERY / SAFE TRUST VAULTS (Mr. Julian C. Wilford / Mr. Brian Lloyds)" Subject: GOOD NEWS To: grandunilotto@zipmail.com.br GRAND UNIVERSAL PROMO LOTTERY 10 NORTHUMBERLAND AVENUE, LONDON WC2N 5BX, THE UNITED KINGDOM. FROM: THE DESK OF THE DIRECTOR PROMOTIONS, INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT, REF: GUPL/76-AO91852009 AWARD NOTIFICATION; FINAL NOTICE We are pleased to inform you of the announcement today, 28th of February 2005, of winners of the GRAND UNIVERSAL PROMO LOTTERY held on 24th of January 2005. Your email address attached to ticket number 23-2816-8086-647, with serial number A025-09 drew the lucky numbers 37-13-80-65-56-87, and consequently won in category A.You have therefore been approved for a lump sum pay out of US$2,000,000.00 in cash credited to file REF NO. GUPL/76-AO91852009. This is from total prize money of US$6,000.000.00 shared among the three international winners in the category A. All participants were selected through a computer ballot system drawn from 100,000 companies/individuals from Middle East, Australia, New Zealand, America, Asia, Europe and North America as part of our International Promotions Program, which is conducted annually. CONGRATULATIONS! Your fund is now deposited with a Finance Vault House insured in your name. Due to the mix up of some numbers and names, we ask that you keep this award strictly from public notice until your claim has been processed and your money remitted to your account. This is part of our security protocol to avoid double claiming or unscrupulous acts by participants of this program. We hope with a part of your prize, you will participate in our end of year high stakes US$25 million International lotto. To begin your claim, please contact your claims fiduciary agent immediately: Mr. Julian C. Wilford Foreign Service Manager, SAFE TRUST VAULTS, TEL: +44 704 010 2570 FAX: +44 709 202 7345 EMAIL: safetrustvault@mail2london.com and/or safe_trust_vaults@london.com For due processing and remittance of your prize money to a designated account of your choice. Remember, you must contact your claims officer not later than 18th of MARCH 2005. After this date, all funds will be returned as unclaimed. NOTE: In order to avoid unnecessary delays and complications, please remember to quote your reference number in every one of your correspondences with your officer. Furthermore, should there be any change of your address, do inform your claims officer as soon as possible. Congratulations again from all our staff and thank you for being part of our promotions program. Sincerely, Mr. Brian Lloyds. THE DIRECTOR PROMOTIONS, GRAND UNIVERSAL PROMO LOTTERY N.B. Any breach of confidentiality on the part of the Winners will result to disqualification. Do not reply to this mail; contact your claims agent immediately through the above e-mail address or phone/fax numbers. ------------------------------------------ Use o melhor sistema de busca da Internet Radar UOL - http://www.radaruol.com.br "Mr. Duke Edwards, Jane Littlewood" FROM: THE DESK OF THE PROMOTIONS MANAGER, INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT REF NO: MELI-T/ 17-F044262312 BATCH: 901/00319/HLP RE: AWARD WINNING NOTIFICATION: FINAL NOTICE. We are pleased to inform you of the announcement today of winners of the MEGA JACKPOT LOTTO WINNINGS, PROGRAMS held on 15th march,2005.Your company or your personal e-mail address, is attached to ticket number 9901-0148-790-691, with serial number 66109-17 drew the lucky numbers 990-11-815-37-10-83, and consequently won the lottery in the 2nd category. You have therefore been approved for a lump sum pay out of US$300,000.00 in cash credited to file REF NO: MELI-T/ 17-F044262312. This is from total prize money of US$9,000,000.00 shared among the Thirty (30) international winners in this category. All participants were selected through a computer ballot system drawn from 25,000 names from Australia, New Zealand, America, Europe, North America and Asia, as part of International Promotions Program, which is conducted annually. Your fund has been deposited in an escrow account and insured in your Name. Due to the mix up of some numbers and names, we ask that you keep this award strictly from public notice until your claim has been Processed and your money remitted to your account. This is part of our security protocol to avoid double claiming or Unscrupulous acts by participants of this program. We hope with a part of your prize, you will participate in our year high stakes US$100Million International Lottery. To claim your winning prize, you must first contact the claims department by email: Mr. Duke Edwards claimsofficer@camelotpromosworld.org For processing and remittance of your prize money to a designated account of your choice. Remember, all prize money must be claimed not later than the 29th march,2005..All funds not claimed on or before the fixed date will be returned as unclaimed. NOTE: In order to avoid unnecessary delays and complications, please remember to quote your reference and batch numbers in all correspondences with this office. Furthermore, should there be any change of your address, do inform us as soon as possible. Congratulations again from all our staff for being part of our Promotions program. Sincerely, Mrs Jane Littlewood For Camelot lottery N.B. Any breach of confidentiality on the part of the winners will result in disqualification and any winner below the age of 18years is automatically disqualified. ___________________________________________________________________________ Mail inviata da Soluzioni Operative and this one: FROM: THE DESK OF THE PROMOTIONS MANAGER, INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT REF NO: MELI-T/ 17-F044262312 BATCH: 901/00319/HLP RE: AWARD WINNING NOTIFICATION: FINAL NOTICE. We are pleased to inform you of the announcement today of winners of the MEGA JACKPOT LOTTO WINNINGS, PROGRAMS held on 27th FEBUARY 2005.Your company or your personal e-mail address, is attached to ticket number 9901-0148-790-691, with serial number 66109-17 drew the lucky numbers 990-11-815-37-10-83, and consequently won the lottery in the 2nd category. You have therefore been approved for a lump sum pay out of US$300,000.00 in cash credited to file REF NO: MELI-T/ 17-F044262312 This is from total prize money of US$9,000,000.00 shared among the Thirty (30) international winners in this category. All participants were selected through a computer ballot system drawn form 25,000 names from Australia, New Zealand,America, Europe, North America and Asia, as part of International Promotions Program, which is conducted annually. Your fund has been deposited in an escrow account and insured in your name. Due to the mix up of some numbers and names, we ask that you keep this award strictly from public notice until your claim has been processed and your money remitted to your account. This is part of our security protocol to avoid double claiming or unscrupulous acts by participants of this program. We hope with a part of your prize, you will participate in our year high stakes US$100.Million International Lottery. To claim your winning prize, you must first contact the claims department by email: Mr.Duke Edwards Email: duke_edwards@myway.com For processing and remittance of your prize money to a designated account of your choice.Remember, all prize money must be claimed not later than the 15TH march ,funds not claimed on or before the fixed date will be returned as unclaimed. NOTE: In order to avoid nnecessary delays and complications,please remember to quote your reference and batch numbers in all correspondences with this office. Furthermore, should there be any change of your address, do inform us as soon as possible. Congratulations again from all our staff for being part of our promotions program. Sincerely, Mrs Jane Littlewood For Camelot lotto ; N.B. Any breach of confidentiality on the part of the winners will result in disqualification and any winner below the age of 18years is automatically disqualified __________________________________________________________________________ Mail sent from WebMail service at ConservativeBlacks.com - http://www.conservativeblacks.com Reply from "Mr. Duke Edwards": Received: from 80.179.242.244 by by21fd.bay21.hotmail.msn.com with HTTP; Thu, 10 Mar 2005 17:49:11 GMT X-Originating-IP: [80.179.242.244] X-Originating-Email: [claimsofficer@camelotpromosworld.org] X-Sender: claimsofficer@camelotpromosworld.org In-Reply-To: <messageid> From: "duke edwards" <claimsofficer@camelotpromosworld.org> To: emailaddress Subject: CLAIMS PROCEDURE Date: Thu, 10 Mar 2005 17:49:11 +0000 Mime-Version: 1.0 Content-Type: text/plain; format=flowed X-OriginalArrivalTime: 10 Mar 2005 17:49:11.0567 (UTC) FILETIME=[7789C9F0:01C52599] X-Spam-Status: No, hits=-0.557 tagged_above=-999 required=6.3 tests=BAYES_00, MSGID_FROM_MTA_HEADER, RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_SBL, SUBJ_ALL_CAPS X-Spam-Level: ATTENTION: emailaddress I am Mr. Duke Edwards the fiduciary agent assigned to your case. I wish to Congratulate you on your victory, you are lucky person to have won this lottery. Your email address is amongst those chosen this quarter from our new java-based software that randomly selects email addresses from the web from which winners are selected You are required to forward the following details to help facilitate the processing of your claims and certificate which will facilitate the release of your winnings. 1. Full names. 2. Phone number. 3. Fax number. 4. Occupation. 5. Sex. 6. Age. 7. Nationality. It is expected that you would forward this information as soon as possible to enable us attend to your winnings. Once we confirm your information, your payments would be processed After you have sent down this information, a certificate will be prepared for you. This is to be your proof of winning. Be advised that your winnings would be paid to you in installments of $30,000.00 {Thirty Thousand United States Dollars}. This is done because of the amount won by you, this money would be paid to you on monthly basis for the next 10 {Ten} months .You are advised to keep your winning numbers secret to avoid unscrupulous elements from taking advantage of the situation. Once again, congratulations. Regards, Mr. Duke Edwards ..................................................................... This email and its attachments are confidential and intended for the exclusive use of the addressee(s). This email and its attachments may also be privileged or protected by legal rules. If you have received this by mistake please let us know by reply immediately and destroy the email and its attachments without reading, copying or forwarding the contents. Another one: Dear Firstname Lastname How are you today? The courier company sent an email communication to the lottery company complaining that you have not contacted them as regards your lottery claims. Please kindly explain to us your reason for not contacting them as instructed. Light speed courier company is our affiliated courier service and are responsible for delivery of your winnings. contact details are: Handling agent: Mr Donald Jones lightspeed delivery services. Email: djones_lightspeedcourier@speedpost.net phone number: +44-207-0601565 You are advised to contact them and conclude matters with them .You are also expected to send to us a copy of the e mail communication to the courier company. Regard, Mr. Duke Edwards ------------------------------------------------------------- No banners. No pop-ups. No kidding. Make My Way your home on the Web - http://www.myway.com Message headers: Subject: UPDATE Received: from [80.179.242.249] by mprdmailfe2.nwk.myway.com via HTTP; Mon, 21 Mar 2005 16:36:25 EST Reply-To: duke_edwards@myway.com From: "Duke" <duke_edwards@myway.com>
"Lightspeed Delivery Services" From: "wangushi" <claimagent-1@uk2.net> To: "Firstname Lastname" <emailaddress> Sent: Friday, 13 May, 2005 18:49 Subject: CONTACT THE COURIER COMPANY FOR DELIVERY ATTN, How are you today?I am pleased to inform you that your claims application has been approved, and your winnings is ready to be paid out pending when you sign your fund release documents which is included in the parcel to be sent to you. Congratulations!I believe a detailed explanation as been made available to you on your inclusion and eventual winning of the lottery. We presently operate a partnership with lightspeed delivery services here in London and they are our official courier service.The documentation process is complete all that is left is for you to sign the fund release doucment.After signing the documents you are to keep the original and have a photocopy sent back to Carmlot Universal International.Your package is presently with the courier firm for weighing so that you will have an idea of how much it will cost you to send it to your destination. Find below the contact information. I advice that you get in touch with them as soon as possible for further details. contact details are: Handling agent: Mr Donald Jones lightspeed delivery services Email:customercare@lightspeedcourier.org :delivery@lightspeedcourierservices.net Phone number: :+44-207-0600680 Happy to have been of service to you and wishing you goodluck in the coming draws. Thank You Duke Edwards Camelot Universal International NB: 1. The check has already been issued in your favour and there is no possible means anyone will be able to subtract anymoney from your check. Message headers: Received: from 192.116.80.165 (proxying for 192.116.80.162, 192.116.80.165) (SquirrelMail authenticated user claimagent-1) by maxproxy9.uk2net.com with HTTP; Fri, 13 May 2005 10:49:10 +0100 (BST) Date: Fri, 13 May 2005 10:49:10 +0100 (BST) From: wangushi <claimagent-1@uk2.net> Subject: CONTACT THE COURIER COMPANY FOR DELIVERY
WHOIS details for sending network (IP 192.116.80.165): inetnum: 192.116.79.0 - 192.116.82.255 netname: GILAT-SATCOM-BLOCK-4-27-28-33 descr: Gilat-Satcom remarks: For abuse issues related to Gilat, email abuse-gilat@012.net.il country: GB admin-c: GS3350-RIPE tech-c: GS3350-RIPE status: ASSIGNED PA mnt-by: AS9116-MNT mnt-lower: AS9116-MNT source: RIPE # Filtered role: Gilat Support address: Gilat Satcom address: 21D Yagia Kapaim st. Petach-Tikva, Israel phone: +972 3 9255000 fax-no: +972 3 9217938 admin-c: DR5299-RIPE admin-c: GE2074-RIPE tech-c: DR5299-RIPE tech-c: GE2074-RIPE remarks: trouble: abuse-gilat@012.net.il nic-hdl: GS3350-RIPE mnt-by: AS9116-MNT source: RIPE # Filtered abuse-mailbox: abuse-gilat@012.net.il % Information related to '192.116.64.0/18AS9116' route: 192.116.64.0/18 descr: Goldenlines remarks: For addressing issues, email lir@linux.goldenlines.net.il remarks: For abuse issues, email abuse@012.net.il origin: AS9116 mnt-by: AS9116-MNT source: RIPE # Filtered
The Nigerian criminals have discovered Gmail: From: "LOTTERYONLINE" Response from the Gmail account. The same "format" (template) is also used in the "Honda Car Lottery" and the "Alwayso Lottery Promotion (Douglas Randall)" scams. From: "BRIAN LLYODS" <brianagent3@gmail.com> To: "Firstname Lastname" <emailaddress> Sent: Monday, 23 May, 2005 17:20 Subject: CLAIMS PROCESS ATTENTION: emailaddress I am Mr. Brian Lloyds the fiduciary agent assigned to your case. I wish to Congratulate on your victory, you are lucky person to have won this lottery. Your email address is amongst those chosen this quarter from our new java-based software that randomly selects email addresses from the web from which winners are selected. You are required to forward the following details to help facilitate the processing of your claims and certificate which will facilitate the release of your winnings. 1. Full names. 2. Phone number. 3. Fax number. 4. Occupation. 5. Sex. 6. Age. 7. Nationality. It is expected that you would forward this information as soon as possible to enable us attend to your winnings. Once we confirm your information, your payments would be processed. After you have sent down this information, a certificate will be prepared for you. This is to be your proof of winning. Be advised that your winnings would be paid to you in installments of $30,000.00 {Thirty Thousand United States Dollars}. This is done because of the amount won by you, this money would be paid to you on monthly basis for the next 10 {Ten} months .You are advised to keep your winning numbers secret to avoid unscrupulous elements from taking advantage of the situation. Once again, congratulations. Regards, Mr. Brian Lloyds ..................................................................... This email and its attachments are confidential and intended for the exclusive use of the addressee(s). This email and its attachments may also be privileged or protected by legal rules. If you have received this by mistake please let us know by reply immediately and destroy the email and its attachments without reading, copying or forwarding the contents.
|