|
|
joewein.de LLC
fighting spam and scams on the Internet
|
|
"419" Scam – Advance Fee / Fake Lottery Scam
The so-called "419" scam is a type of fraud dominated by criminals from Nigeria and other countries in Africa. Victims of the scam are promised a large amount of money, such as a lottery prize, inheritance, money sitting in some bank account, etc.
Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.
Keep in mind that scammers DO NOT use their real names when defrauding people.
The criminals either abuse names of real people or companies or invent names or addresses.
Any real people or companies mentioned below have NO CONNECTION to the scammers!
Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.
Click here to report a problem with this page.
Some comments by the Scam-O-Matic about the following email:
- This email uses a separate reply address that is different from the sender address. Spammers use this to get replies even when the original spam sending accounts have been shut down. Also, sometimes the sender addresses are legitimate looking but fake and only the reply address is actually an email account controlled by the scammers.
- This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
Fraud email example:
From: "Mr. Michael Smith" (may be fake)
Reply-To: <michael_andysmith2002@live.co.uk>
Date: Sat, 17 Sep 2016 00:43:08 +0100
Subject: For Your Consideration!
“X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.argehost.com
X-AntiAbuse: Original Domain - xperiment.net
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - live.co.uk
X-Get-Message-Sender-Via: server1.argehost.com: authenticated_id: ademkavaz@ademkavaz.com
X-Authenticated-Sender: server1.argehost.com: ademkavaz@ademkavaz.com
X-Source:
X-Source-Args:
X-Source-Dir: â€
X-Spamfilter-host: pascal.junkemailfilter.com - http://www.junkemailfilter.com
X-Content-flags: available best day-of-week details fund good-day hello invest law mr-mrs partner please product-inquiry profit regards reply2me stranger time-ref trust
X-Mail-from: michael_andysmith2003@live.co.uk
X-Spam-Class: SPAM-HIGH-VERY - CLAMAV - Message is Spam (winnow.spam.ts.xmailer.2.UNOFFICIAL) - X=pascal H=[185.136.204.75] HELO=[server1.argehost.com] SN=[michael_andysmith2003@live.co.uk] T=[ftpman@xperiment.net] S=[For Your Consideration!]
X-Spamsave: Yes - CLAMAV - Message is Spam (winnow.spam.ts.xmailer.2.UNOFFICIAL) - X=pascal H=[185.136.204.75] HELO=[server1.argehost.com] SN=[michael_andysmith2003@live.co.uk] T=[ftpman@xperiment.net] S=[For Your Consideration!]
X-Sender-Host-Address: 185.136.204.75
X-Sender-Host-Name:
X-Spam-Flag: yes
X-Key-ID: c3BhbS1mZWVkQGp1bmtlbWFpbGZpbHRlci5jb20gIDIwMTYtMDktMTYgMTY6NDE6MzIgMWJsMmxBLTAwMDVUQS1NWg==
X-Delivered-To: spam-feed@junkemailfilter.com
Friday,
September 16th, 2016.
Hello, Good Day.
How are you today? Hope fine? I have been mandated by my associate to solicit for the assistance of a
reliable and honest foreign partner that will assist him in the investment of his funds. My associate has funds
available for investments in lucrative and profitable business ventures. If you are interested in this lucrative
business partnership.
please let me know so that I will give you more details about this pending transaction.
I look forward to hearing from you soonest.
Best Regards,
Mr. Michael Smith
|
Anti-fraud resources:
