|
|
joewein.de LLC
fighting spam and scams on the Internet
|
|
"419" Scam – Advance Fee / Fake Lottery Scam
The so-called "419" scam is a type of fraud dominated by criminals from Nigeria and other countries in Africa. Victims of the scam are promised a large amount of money, such as a lottery prize, inheritance, money sitting in some bank account, etc.
Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.
Keep in mind that scammers DO NOT use their real names when defrauding people.
The criminals either abuse names of real people or companies or invent names or addresses.
Any real people or companies mentioned below have NO CONNECTION to the scammers!
Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.
Click here to report a problem with this page.
Some comments by the Scam-O-Matic about the following email:
- This email uses a separate reply address that is different from the sender address. Spammers use this to get replies even when the original spam sending accounts have been shut down. Also, sometimes the sender addresses are legitimate looking but fake and only the reply address is actually an email account controlled by the scammers.
- This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
Fraud email example:
From: "Mrs. Anastasia M. Daniel- Nwaobia" (may be fake)
Reply-To: <mrsanaw11@gmail.com>
Date: Sun, 9 Apr 2017 01:30:03 +1000
Subject: Confidential Message About Your Fund..
*****************************************************************
********************** SPAM REPORT MESSAGE **********************
*****************************************************************
Datagate AntiSPAM detection software has identified this incoming
email as possible spam. The original message report has been
attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, please contact
Datagate PostMaster <antispam@postmaster.datagate.net.uk>.
Content preview: Notice For you alone... I am writing to inform you on the
situation of things concerning your overdue payment that has stayed here for
so long. I am here to make sure you get back this awaited payment into your
account. I overhead the new governor collaborating with other commercial
bank officials to divert some overdue funds that has stayed here for a lengthy
account period into their private Swiss account. And I believe yours is inclusive.
[...]
Content analysis details: (5.1 points, 4.9 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.4 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Datagate AntiSPAM Service <antispam@postmaster.datagate.net.uk>
---------------------------------------------------------------
|
Anti-fraud resources:
