• About the 419 (Advance Fee) scam
• Email addresses used by 419 scammers
• Phone numbers used by 419 scammers
  
• How to report 419 spam to us
• Domains registered by 419 scammers
  
• Company names mentioned in 419 spam
  
• What can you do when you receive 419 spam
  
  
• Google search: "ROYAL BAY SECURITY"
  
• "Initial deposit" (UKL 1500) or courier services (UKL unspecified)
  

"ROYAL-BAY SECURITY / MR.LARRY FOSTER" is the fake identity used by a gang of advance fee fraud ("419") scammers operating in Nigeria, the UK and Spain. It's a fraud. (see one example scam email here).

The money demand email of this scam bears similarities to the "UK NATIONAL LOTTERY / HOWARD COLLINS" scam involving fake a bank (Newcastle Trust Private Bank, www.newcastletrust.com).

Are you sick of spam too? Do you want it stopped now? Try jwSpamSpy, the spamfilter we use to track the spammers! Free 30-day trial version available now!

The scammers have registered a domain for the fake claims agent:

• http://www.royal-baysecurity.net (complaints to: abuse@msn.com)
  

Example of money demand:

From: larry foster [mailto:larryfoster@royal-baysecurity.net] 
Sent: Sunday, 12 December 2004 11:38
To: ######################
Subject: ref:002c

ATTENTION: 3RD CATEGORY WINNER
TICKET NUMBER: 026-12541842-487
SERIAL NUMBER: 4352-16
LUCKY NUMBER: 04-07-09-10-43-46-11

Dear firstname lastname,

We hereby inform you that we have processed your payment and your check is
ready for disbursement. In this regard you are to choose from the options
below that best suite you on how you wish to receive your funds.

Also, your funds deposited with us is not in liquid form but in cashiers
Check, this advice complies with the Anti-Fraud section 2, sub section (IV)
of the procedural manual of the funds disbursement agreement existing
between security firms and the British Government. The options to receive
your winnings are:

1. You can come down in person to collect your funds at our payment center
in either London or Madrid pending on where there is availability of funds.
You will be required to present a Valid International Passport as proof of
Identification amongst other documentation which will be required if you
choose this option.

2. Have it courier to you, this is the consonance with our policy in this
regard, be advised that if you choose the option for the check to be
couriered, we however will not be liable for the courier service. The cost
of this service would be paid by you; this is a prerequisite for this
option.

The reason for the personal appearance option is for the fact of double
taxation, that is if you are to come over to sign for the release of your
winnings personally, you would have to pay taxes on the winnings in UK and
then go and pay taxes on the same winnings in your country once the funds
get there. In the light of the above you are advised to choose from the
options given to you.

You are to make prompt reply pending on the option you choose to enable us
process and complete your file.

Sincerely,
MR.LARRY FOSTER
ROYAL-BAY SECURITY
Malet Street, Bloomsbury
London WC1E
EMAIL: larryfoster@royal-baysecurity.net
TEL/FAX: +44-870-134-2729

The domain of this "security company" was only registered a few days before the above email, on 2004-12-08, using a bogus postal address in the USA:

Request: royal-baysecurity.net

Registration Service Provided By: Microsoft
Contact: pdbeta@microsoft.com
Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress
	
Domain name: royal-baysecurity.net

Registrant Contact:
   frank weber
   frank weber (frankweber@royal-baysecurity.net)
   +1.7173324455
   Fax: none
   12 west dr.
   york, PA 17404
   US

Administrative Contact:
   frank weber
   frank weber (frankweber@royal-baysecurity.net)
   +1.7173324455
   Fax: none
   12 west dr.
   york, PA 17404
   US

Technical Contact:
   NOC MSN
   NOC MSN (MSN-PA-TECH@msn.com)
   +1.4258828080
   Fax: none
   One Microsoft Way
   Redmond, WA 98052
   US

Billing Contact:
   NOC MSN
   NOC MSN (MSN-PA-BILL@MSN.COM)
   +1.4258828080
   Fax: none
   One Microsoft Way
   Redmond, WA 98052
   US

Status: Locked

Name Servers:
   pdomns1.msn.com
   pdomns2.msn.com
   
Creation date: 08 Dec 2004 06:25:51
Expiration date: 08 Dec 2005 06:25:51