Spam 419/Nigeria Online fraud jwSpamSpy Contact
Email Spam Filter: |
|
|
419 Scam – There is no "European Gaming Commission"
- About the 419 (Advance Fee) scam
- Phone numbers used by 419 scammers
- How to report 419 spam to us
- Frequently asked Questions (419 FAQ)
- Opinions about the scammers and their victims
- Domains registered by 419 scammers
- Company names mentioned in 419 spam
- Names of people mentioned in 419 spam
- What can you do when you receive 419 spam
Many lottery scams mention an institution called "European Gaming Commission" or regulations supposedly enforced by that institution. In reality no such entity exists. Every EU member state that runs a national lottery regulates it according to its own laws. There is no central authority for this. Therefore any email related to a lottery prize you're supposed to have won that mentions a "European Gaming Commission" is a case of fraud, which you may report to the police. The same is true for the "International Gaming Board", which does not exist. The "Gaming Regulators European Forum (GREF)" mentioned in some scam emails does exist, but it is a discussion forum without regulatory powers. On its website it specifically warns of "promotional lottery" scams by email that request advance fee payments.
Other fake lottery emails request payments for "Anti-Terrorism certificates" or "Drug-Free certificates" supposedly issued by the International Court of Justice in Den Haag. No such certificates actually exist. You don't have to pay a "lawyer" to file an "Affidavit of Claim" in a High Court either. These demands are standard tools of scammers to steal money from victims.
|
Fraudulent domains:
Sample scam email:
Message headers:
Note that "Daniel Khan" of "Universal Security and Freight UK" is writing from the email address of "Henrick Koenraad" of the "European Gaming Commision", two different fake identities used for the same scam.
WHOIS details for sending network (IP 82.128.3.181):
WHOIS details for domain "eu-gamingcommission.net" (created 2005-01-27, complaints to [email protected])
Anti-Terrorism certificates
These fake documents are a tactical device 419 scams to tap victims for more money. They are supposedly issued by the International Court of Justice in Den Haag or by the local government in the country where the "lottery" or "bank" used in the scam claims to be located. Usually the criminals charge thousands of dollars for these fake certificates. Payment has to be sent by Western Union or MoneyGram, which means the recipient of the payment can't be traced. Any email that mentions these certificates and asks you to pay for them is a scam!
Example fraud emais:
EU Money Laundry Monetary Team
Message headers:
WHOIS details for sending network (IP 81.199.161.53):
Attention: Firstname Lastname
This is to notify you that the time frame for unprocessed winnings has
almost elapsed. You are adviced to either process your winnings on or before
5th OF March (12 NOON GMT) or forfeit your prize money.
If you do not respond to this message positively, it will be taken as an
acknowledgement of this notification.You are advised to act promptly as we
will not be liable for forfeiture of your winnings. As all previous
correspondence will be disregarded. Also note most importantly that we do
not deal with second or third parties in the payment of winnings. We only
deal with winners who are ascertained legitimate winners. Do not send
anybody as he would not be attended to. If he has the funds he can transfer
through western union with the information given below;
Jack Smith
London, UK.
I will advice that you oblige the claims procedure to avoid any
inconvenience or cancellation of winnings which is getting close.
I look forward to your prompt response.
Regards,
Mr. Daniel Khan
FOREIGN SERVICE MANAGER,
UNIVERSAL SECURITY & FREIGHT UK
Received: from 82.128.3.181 by by21fd.bay21.hotmail.msn.com with HTTP;
Mon, 28 Feb 2005 19:41:38 GMT
X-Originating-IP: [82.128.3.181]
X-Originating-Email: [[email protected]]
X-Sender: [email protected]
inetnum: 82.128.0.0 - 82.128.31.255
netname: INET-MLTL
descr: Multi-Links Telecommunications Limited
country: NG
admin-c: DG26
tech-c: RIA27
status: ASSIGNED PA
notify: [email protected]
mnt-by: MLTL-INT-MNT
changed: [email protected] 20040416
changed: [email protected] 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
person: Dwaipayan Ghosh
address: 231, Adeola Odeku Street
Victoria Island
Lagos, Nigeria
phone: +23417751039
e-mail: [email protected]
nic-hdl: DG26
notify: [email protected]
changed: [email protected] 20030507
changed: [email protected] 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
person: IP Admin-RIPE
address: Multilinks Telecommunications Limited
address: 231 Adeola Odeku Str.
address: Victoria Island, Lagos, Nigeria
e-mail: [email protected]
remarks: complaints/spam report : [email protected]
phone: +2341774000
nic-hdl: RIA27
changed: [email protected] 20040331
changed: [email protected] 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
Request: eu-gamingcommission.net
connected to whois.melbourneit.com [203.27.227.114:43] ...
Domain Name.......... eu-gamingcommission.net
Creation Date........ 2005-01-27
Registration Date.... 2005-01-27
Expiry Date.......... 2006-01-27
Organisation Name.... Eu-Gaming Commission
Organisation Address. 44 Wall Street 22nd Floor
Organisation Address.
Organisation Address. new york
Organisation Address. 10005
Organisation Address. NY
Organisation Address. UNITED STATES
Admin Name........... Eu-Gaming Commission
Admin Address........ 44 Wall Street 22nd Floor
Admin Address........
Admin Address........ new york
Admin Address........ 10005
Admin Address........ NY
Admin Address........ UNITED STATES
Admin Email.......... [email protected]
Admin Phone.......... +1.3473288775
Admin Fax............
Tech Name............ MSN NOC
Tech Address......... One Microsoft Way
Tech Address.........
Tech Address......... Redmond
Tech Address......... 98052
Tech Address......... WA
Tech Address......... UNITED STATES
Tech Email........... [email protected]
Tech Phone........... +1.4258828080
Tech Fax.............
Name Server.......... pdomns1.msn.com
Name Server.......... pdomns2.msn.com
Drug-Free certificates
No such certificates actually exist. No such certificates are required for International wire transfers.
EU Money Laundry Monetary Team
Amsterdam Netherlands.
Phone: +31-64-921-6227
Fax: +31-84-729-0534
Date: 03/01/06,
Attention: Firstname Lastname,
Be informed that your transfer from Barclays Bank Ref #bls/227/444/wt is already on hold at the EU Apex bank and not even 0.1GBP can be realized from it without the issuance of your Anti-Terrorism certificate from the international court of justice Den Haag in The Netherlands.
Further more, I am sorry deductions can not be made from your funds and as such you would be required to make a personal payment of the required fees.
As soon as we are in receipt of your completed application form more details would be further communicated to you for your prompt attention.
Mr. Thomas Walkden (Sir)
Duty Officer EU MLMT.
--
___________________________________________________
Play 100s of games for FREE! http://games.mail.com/
Date: Tue, 03 Jan 2006 10:14:15 -0500
Subject: Attention: Firstname Lastname
Received: from [81.199.161.53] by ws1-6.us4.outblaze.com with http for
[email protected]; Tue, 03 Jan 2006 10:14:15 -0500
X-Originating-Ip: 81.199.161.53
This is a satellite ISP in Israel that connects a lot of African custoemrs to the internet.
inetnum: 81.199.160.0 - 81.199.161.255
netname: IPPLANET-04
descr: IP PLanet Network range
country: il
admin-c: TECH6-RIPE
tech-c: TECH6-RIPE
status: ASSIGNED PA
mnt-by: AS12491-MNT
mnt-lower: AS12491-MNT
mnt-routes: AS12491-MNT
source: RIPE # Filtered
person: Tech IP Planet
address: Yegia Kapaim St.
address: Petach-Tikva
address: Israel
phone: +972 3 9255015
fax-no: +972 3 9217938
abuse-mailbox: [email protected]
nic-hdl: TECH6-RIPE
mnt-by: AS12491-MNT
source: RIPE # Filtered
% Information related to '81.199.160.0/23AS12491'
route: 81.199.160.0/23
descr: IP Planet Network Ltd
origin: AS12491
mnt-by: AS12491-MNT
source: RIPE # Filtered
|