419 scam: "Hajia Mariam" <hajma1965@yahoo.com> Thanks

joewein.de LLC
fighting spam and scams on the Internet

Try our spam filter!
Free trial for 30 days

Home

About Us

Spam

419/Nigeria

Fraud

Contact

"419" Scam – Advance Fee / Fake Lottery Scam

The so-called "419" scam is a type of fraud dominated by criminals from Nigeria and other countries in Africa. Victims of the scam are promised a large amount of money, such as a lottery prize, inheritance, money sitting in some bank account, etc.

Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.

Keep in mind that scammers DO NOT use their real names when defrauding people.
The criminals either abuse names of real people or companies or invent names or addresses.
Any real people or companies mentioned below have NO CONNECTION to the scammers!

Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.

Click here to report a problem with this page.

Some comments by the Scam-O-Matic about the following email:

This email uses a separate reply address that is different from the sender address. Spammers use this to get replies even when the original spam sending accounts have been shut down. Also, sometimes the sender addresses are legitimate looking but fake and only the reply address is actually an email account controlled by the scammers.
The following phrases in this message should put you on alert:
- "million dollars" (they want you to be blinded by the prospect of quick money, but the only money that ever changes hands in 419 scams is from you to the criminals)
This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
This email lists free webmail addresses. Use of such addresses is typical for scams. Lotteries, banks and any but the smallest of companies do not normally use such addresses. Criminals use them to anonymously send and receive email at Internet cafes.
- hajma965@yahoo.co.jp (Yahoo, Japan; can be used from anywhere worldwide)

Fraud email example:

From: "Hajia Mariam" <hajma1965@yahoo.com>
Reply-To: hajma965@yahoo.co.jp
Date: Wed, 15 Sep 2010 05:26:47 -0200
Subject: Thanks

O programa detetor de Spam ZOE, rodando no servidor "mailserver.prt15.gov.br",
identificou este e-mail como um spam. A mensagem original foi atachada
a este e-mail para ser lida, (caso não seja um spam) ou para bloquear
e-mails futuros similares a este. Caso tenha alguma pergunta, veja
seu endereço para contato para detalhes.

Visualização Prévia: Due to the sudden death of my husband General Abacha the former
head of state of Nigeria , I have been thrown into a state of hopelessness
by the present administration.I have lost confidence with anybody within
my country. I got your contacts through personal research,and had to reach
you through this medium. Due to security network placed on my daily affairs
I cant visit the embassy so that is why I have contacted you. My husband
deposited $12.6million dollars with a security firm abroad whose name is witheld
for now till we communicate. I will be happy if you can receive this funds
and keep it safe I assure you something good out of the funds in return for
your assistance. I will need your telephone/mobile numbers so that we can
commence communication.please read and reply back asap with your telephone
number.My private email address is hajma965@yahoo.co.jp [...]

Detalhes da análise: (12.5 points, 5.0 required)

pts regra descrição
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
0.0 FREEMAIL_FROM Sender email is freemail (hajma1965[at]yahoo.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(hajma965[at]yahoo.co.jp
)
2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (hajma1965[at]yahoo.com)
1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.2 MISSING_HEADERS Missing To: header
0.0 T_LOTS_OF_MONEY Huge... sums of money
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
2.1 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL

Anti-fraud resources:

What can you do when you receive 419 spam