joewein.de LLC fighting spam and scams on the Internet

Try our spam filter! Free trial for 30 days

"419" Scam – Advance Fee / Fake Lottery Scam

• About the 419 (Advance Fee) scam
• "Is that email a scam?" - Check it online here!
  
• Frequently asked Questions (419 FAQ)
• Phone numbers used by 419 scammers
  (+225 +229 +234 +27 +31 +32 +34 +44 other)
• Company names mentioned in 419 spam:
  1 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
• Support our efforts to stop scams!
  
• How to report 419 spam to us
• What can you do when you receive 419 spam
  
  
• Spam archive, Daily index
  

Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.

Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.

Click here to report a problem with this page.

Some comments by the Scam-O-Matic about the following email:

• This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
  

Fraud email example:

From: "GRAHAM MYLES"<test@direweb.it>
Date: Fri, 3 Apr 2009 20:16:54 +0100
Subject: *****SPAM***** Dearly Beloved


Spam detection software, running on the system "bled.direweb.it", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Dearly Beloved, This mail is from me,Mr.Graham Myles,gi=
ven
my current state of health,I have decided to donate what I have to you=
,I
am 69 years old and I was diagnosed for cancer about two years ago,imme=
diately
after the death of my wife,Who had worked with me tirelessly until we =
were
driven out of Zimbabwe and our farms seized. [...]=20

Content analysis details: (24.0 points, 5.0 required)

pts rule name description
---- ---------------------- ---------------------------------------------=
-----
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?212.100.69=
.10>]
1.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[212.100.69.10 listed in zen.spamhaus.org]
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.4 HELO_EQ_LT4 HELO_EQ_LT4
0.6 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.5 MILLION_USD BODY: Talks about millions of dollars
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
above 50%
[cf: 76]
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 76]
2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/=
dcc/)
0.0 DIGEST_MULTIPLE Message hits more than one network digest che=
ck
0.1 RDNS_NONE Delivered to trusted network by a host with n=
o rDNS
0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419=
)
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419=
)
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Anti-fraud resources:

• What can you do when you receive 419 spam