|
|
joewein.de LLC
fighting spam and scams on the Internet
|
|
"419" Scam – Advance Fee / Fake Lottery Scam
The so-called "419" scam is a type of fraud dominated by criminals from Nigeria and other countries in Africa. Victims of the scam are promised a large amount of money, such as a lottery prize, inheritance, money sitting in some bank account, etc.
Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.
Keep in mind that scammers DO NOT use their real names when defrauding people.
The criminals either abuse names of real people or companies or invent names or addresses.
Any real people or companies mentioned below have NO CONNECTION to the scammers!
Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.
Click here to report a problem with this page.
Some comments by the Scam-O-Matic about the following email:
- This email uses a separate reply address that is different from the sender address. Spammers use this to get replies even when the original spam sending accounts have been shut down. Also, sometimes the sender addresses are legitimate looking but fake and only the reply address is actually an email account controlled by the scammers.
- The following phrases in this message should put you on alert:
- ",000,000" (they want you to be blinded by the prospect of quick money, but the only money that ever changes hands in 419 scams is from you to the criminals)
- "resources0@protonmail.com" (this email address has been used in a known scam)
- This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
Fraud email example:
From: "Rita McCarthy" <tabea.wafler@unil.ch>
Reply-To: resources0@protonmail.com
Date: Thu, 14 Jan 2021 09:33:11 -0600
Subject: A Year Like no Other!!!
Software zur Erkennung von "Spam" auf dem Rechner
h2591042.stratoserver.net
hat die eingegangene E-mail als mögliche "Spam"-Nachricht identifiziert.
Die ursprüngliche Nachricht wurde an diesen Bericht angehängt, so dass
Sie sie anschauen können (falls es doch eine legitime E-Mail ist) oder
ähnliche unerwünschte Nachrichten in Zukunft markieren können.
Bei Fragen zu diesem Vorgang wenden Sie sich bitte an
the administrator of that system
Vorschau: Kind Attn: Your email was randomly selected to win 2,000,000
Euro in the ongoing donation programme. Kindly send a reply to obtain more
info to claim the fund. Email: resources0@protonmail.com Congratulations.
[...]
Inhaltsanalyse im Detail: (5.9 Punkte, 5.0 benötigt)
Pkte Regelname Beschreibung
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Nachricht wurde nur über vertrauenswürdige Rechner
weitergeleitet
-1.9 BAYES_00 BODY: Spamwahrscheinlichkeit nach Bayes-Test: 0-1%
[score: 0.0009]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(resources0[at]protonmail.com)
3.0 DATE_IN_FUTURE_03_06 Absendezeit 3 bis 6 Stunden nach Datum in
"Received"-Kopfzeilen
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 MISSING_MID Missing Message-Id: header
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.1 MONEY_NOHTML Lots of money in plain text
0.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
|
Anti-fraud resources:
