joewein.de LLC
Fighting spam and scams
on the Internet

Home / Blog / About us
Spam
419/Nigeria
Online fraud
jwSpamSpy
Contact

Email Spam Filter:
jwSpamSpy
Try it for free!

Google

 

419 Scam Example: "UK NATIONAL LOTTERY / LLOYDS BANK PLC"

"UK NATIONAL LOTTERY / LLOYDS BANK PLC" are abused as fake labels used by a gang in Nigeria for a fake lottery fraud (advance fee fraud, "419"). The UK National Lottery does not award prizes by email address to people who never bought a ticket. Lloyds Bank Plc does not act as a "claims agent" for the real UK National Lottery. The objective of the scam is to get victims to wire money to the criminalsm, hoping to receive the promised but non-existent lottery prize at the end.

Please send us replies by "claims agents", especially money demands and payment instructions, we will publish them here. Please report email addresses of "claims agents" and any other email addresses used in this scam to the free webmail providers (see abuse contact list).

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

Example of "UK NATIONAL LOTTERY" scam email:

UK NATIONAL LOTTERY
Support Center
Bevan House
51 Bevan Avenue
Conwy LL28 5AF
United Kingdom

FROM: THE DESK OF THE PROMOTIONS MANAGER,
INTERNATIONAL PROMOTION/PRIZE AWARD DEPARTMENT,

REF: UKNL/26510460037/05
BATCH: 24/00319/IPD

ATTENTION: Sir/Madam
RE/AWARD NOTIFICATION: FINAL NOTICE
We are pleased to inform you of the announcement
Today, 2nd May 2005, of winners of the UK NATIONAL
LOTTERY, THE UNITED KINGDOM INTERNATIONAL PROGRAMS
held on 25th April 2005 in Croydon,London.
You email address was attached to ticket number
023-0148-790-459, with serial number 5063-11 drew
The lucky numbers 43-11-44-37-10-43, and consequently
Won you the lottery in the 2nd category.
You have therefore been approved for a lump sum pay
Of 500,000.00 British Pounds(GBP) in cash credited to file REF
NO. UKNL/26510460037/05. This is from total prize money
Of 2,000,000.00 British Pounds(GBP) shared among the four
International winners in this category.
All participants were selected randomly from World Wide
Website through computer draw system and extracted from
over 100,000 companies as part of International Promotions
Program, which is conducted annually. Please note that your
lucky winning number falls within our European booklet
representative office in Europe as indicated in your play
coupon. In view of this, your 500,000.00 British Pounds(GBP)
dollars would be released to you by our preferred payment
center in London.
Our agent will immediately commence the process to
facilitate the Release of your funds as soon as you contact
him. For security reasons, you are advised to keep your
winning information confidential till your claims is processed
and your money remitted to you in whatever manner you
deem fit to claim your prize. This is part of our precautionary
measure to avoid double claiming and unwarranted abuse of
this program by some unscrupulous elements. Please be
warned.
This is part of our security protocol to avoid
Double claiming or unscrupulous acts by participants
Of this program.
To file for your claim, please contact our fiduciary
Agent;

Lloyds TSB Bank PLC
#195 Edgware Road,
London W2 1EY
United Kingdom.
Te: +447031948162
Fax: 443089876192
www.lloydstsb.com
email: [email protected]
Agent officier in charge...Mr.Paul Smith.

UK NATIONAL LOTTERY
For due processing and remittance of your prize
Money, please remember to quote your
Reference and batch numbers in every one of your
Correspondences with your agent.
Remember, all prize money must be claimed not later
Than 25th June 2005. After this date, all funds will
Be returned as unclaimed.
Furthermore, should there be any
Change of your address; do inform your claims agent
As soon as possible.
Congratulations again from all our staff and thank
You for being part of our promotional lottery program.
Sincerely,
Dr Paul White
Zonal Co-ordinator
www.national-lottery.com


Here are mail headers:

Received: from 81.199.108.18 by by17fd.bay17.hotmail.msn.com with HTTP;
	Mon, 02 May 2005 21:13:15 GMT
X-Originating-IP: [81.199.108.18]
X-Originating-Email: [[email protected]]
X-Sender: [email protected]
From: "promotions manager" <[email protected]>
Subject: WINNING NOTICE!
Date: Mon, 02 May 2005 13:13:15 -0800

WHOIS details for sending network (IP 81.199.108.18):

     inetnum:        81.199.108.0 - 81.199.111.255
     netname:        CIDR-INTERCELLULAR-1
     descr:          Intercellular Nigeria Ltd
     country:        NG
     admin-c:        YA95-RIPE
     tech-c:         YA95-RIPE
     status:         ASSIGNED PA
     mnt-by:         AS12491-MNT
     source:         RIPE # Filtered
     
     person:         Yakubu Adamu
     address:        5th Floor, UBA House 57
     address:        Marina, Lagos
     address:        Nigeria
     phone:          +234 14704387
     fax-no:         +234 12643014
     e-mail:         [email protected]
     e-mail:         [email protected]
     nic-hdl:        YA95-RIPE
     source:         RIPE # Filtered


British Lottery International (Rex Mcarthy)

In this lottery scam victims are told they won a lottery prize, then they need to pay money before the prize can be paid and finally they receive an offer of a loan to cover the payment. This loan is extended in the form(fake) checks. The check bounce after it has been deposited and funds withdrawn against it. The victim will end up owing the bank $20,000 which by that time are already in the hands of the criminals. The check fraud ring appears to operate from Canada.

Ref. Number: BTL/491OXI/04
Batch Number: 12/25/0304
Ticket Number: 564 75600545-188
Serial Number: 5388/02

Dear Sir/Madam,

We are pleased to inform you of the result of the Winners in our International
Lottery Program held on the 20th of Jun, 2005. Your e-mail address attached
to ticket number 564 75600545-188 with serial number 5388/02 drew lucky
numbers 7-14-18-31-45, which consequently won in the 2ND category, you have
therefore been approved for a lump sum pay out of USD2,500,000 (Two Million,
five hundred thousand dollars). CONGRATULATIONS!

Due to mix up of some numbers and names, we ask that you keep your winning
information confidential until your claims have been fully processed and
your money remitted to you. This is part of our security protocol to avoid
multiple claims and unwarranted abuse of this program by some participants.
All participants were selected through a computer ballot system drawn from
over 20,000 company and 30,000,000 individual email addresses and names
from all over the world. This promotional program takes place every five
years.

This lottery was promoted and sponsored by a conglomerate of some multinational
companies in Europe as part of their social responsibility to the citizens
in the communities where they have operational base. We hope with part of
your winnings you will take part in our next year Ten million Euros
international lottery.
To file for your claim, please contact our director of finance.

Dr.Aaron Rex Mcarthy,
Reply Email:[email protected]

Remember all winning must be claimed not later than 29th of July 2005.After
this date all unclaimed funds will be included in the next stake.
Please note in order to avoid unnecessary delays and complications, remember
to quote your reference number and batch numbers in all correspondence.

Furthermore should there be any change of email address do inform our agent
as soon as possible. Congratulations once more from our members of staff
and thank you for being part of our promotional program.

Note: Anybody under the age of 18 is automatically disqualified.

Yours Sincerely,
Mr. Anthony Campbell
British Lottery International (co-coordinator)

N.B: Any breach of confidentiality on the part of the winners will result
to disqualification. Please do not reply to this mail. Contact our director
of finance.





Message headers:

Received: from [192.168.70.228] by ims1d.cp.tin.it
 with HTTP; Sat, 9 Jul 2005 13:54:42 +0200
Date: Sat, 9 Jul 2005 13:54:42 +0200
Message-ID: <[email protected]>
From: "BRITISH INTERNATIONAL LOTTERY ( CO-COORDINATOR)"
 <[email protected]>
Subject: CONGRATULATION YOU WON
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-15"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 213.185.125.98

Loan offer:

BRITISH LOTTERY INTERNATIONAL

CUSTOMER SERVICE



Dear Firstname,

I have just finished discussing with the financier, he has instructed that you contact him via telephone immediately in order for necessary discussions towards obtaining the loan to take place immediately. His details are given below:

NAME: GREG BENSON
PHONE #: 5148393073
EMAIL: [email protected]

All you have to do is inform the financier that you need a loan of twenty five thousand dollars ($25,000). Also inform him that you need this loan to offset bank charges in the U.K in order for your winnings to be released to you immediately.

Also make him understand that I (Rex Mcarthy) informed you that the loan will be payable to him only after you confirm that your winnings have been transferred to your account. If for any reason, the winnings is not deposited in your account, then the loan is not payable to him. This is what I have agreed with him (Mr. Benson), therefore, I want you to confirm from him.

Like I stated to you before, I am doing this because of our relationship and also because I want to prove a point to you. Therefore I will expect that you cooperate in order for success to be attained.

Ensure to inform me on the outcome of your discussion with the financier. Extend my greetings to your loved ones.

Regards,
Rex Mcarthy.


Message headers:

Received: from [213.185.125.98] by web42102.mail.yahoo.com
 via HTTP; Thu, 07 Jul 2005 02:37:29 PDT
Date: Thu, 7 Jul 2005 02:37:29 -0700 (PDT)
From: British International Lottery <[email protected]>
Subject: Contact financier.


WHOIS details for sending network (IP 213.185.125.98):

     inetnum:      213.185.96.0 - 213.185.127.255
     org:          ORG-IA67-RIPE
     netname:      UK-INTELSAT-20021129
     descr:        PROVIDER
     descr:        Intelsat
     country:      GB
     admin-c:      IRA4-RIPE
     tech-c:       IRTC1-RIPE
     tech-c:       CQ37-RIPE
     tech-c:       AT1875-RIPE
     status:       ALLOCATED PA
     mnt-by:       RIPE-NCC-HM-MNT
     mnt-lower:    AS22351-MNT
     mnt-routes:   AS22351-MNT
     source:       RIPE # Filtered
     
     organisation: ORG-IA67-RIPE
     org-name:     Intelsat
     org-type:     LIR
     address:      Intelsat
     address:      Chiswick Park, Building 3
     address:      566 Chiswick High Road
     address:      London
     address:      W45YA
     address:      United Kingdom
     phone:        +44 208 899 6035
     phone:        +1 202 944 6792
     phone:        +1 202 944 6958
     fax-no:       +1 202 944 6955
     e-mail:       [email protected]
     e-mail:       [email protected]
     admin-c:      AT1875-RIPE
     admin-c:      IRA4-RIPE
     admin-c:      IRTC1-RIPE
     admin-c:      CQ37-RIPE
     mnt-ref:      AS22351-MNT
     mnt-ref:      RIPE-NCC-HM-MNT
     mnt-by:       RIPE-NCC-HM-MNT
     source:       RIPE # Filtered
     
     role:         Intelsat Ripe Admin
     address:      Intelsat Global Service Corporation
     address:      3400 International Drive, NW
     address:      Washington, DC
     address:      20008
     address:      USA
     e-mail:       [email protected]
     e-mail:       [email protected]
     admin-c:      AT1875-RIPE
     tech-c:       CQ37-RIPE
     nic-hdl:      IRA4-RIPE
     remarks:
     remarks:      *************************************************************
     remarks:      *                                                           *
     remarks:      *  This is a generic ROLE object for an Intelsat Admin      *
     remarks:      *  Contact person for RIPE matters.  Inquiries about RIPE   *
     remarks:      *  issues should be directed to the NOC or BGP email-boxes, *
     remarks:      *  which will forward them appropriately.  For operational  *
     remarks:      *  issues, send an Email or call the Intelsat NOC at:       *
     remarks:      *                                                           *
     remarks:      *                     [email protected]                      *
     remarks:      *                     +1 202 944 6792                       *
     remarks:      *                                                           *
     remarks:      *  For BGP related issues, send an email to:                *
     remarks:      *                                                           *
     remarks:      *                     [email protected]                      *
     remarks:      *                                                           *
     remarks:      *  For issues of network abuse, including spam, please send *
     remarks:      *  email to Intelsat at:                                    *
     remarks:      *                                                           *
     remarks:      *                    [email protected]                     *
     remarks:      *                                                           *
     remarks:      *************************************************************
     remarks:
     source:       RIPE # Filtered
     
     role:         Intelsat RIPE Technical Contact
     address:      Intelsat Global Service Corporation
     address:      3400 International Drive, NW
     address:      Washington, DC
     address:      20008
     address:      USA
     e-mail:       [email protected]
     e-mail:       [email protected]
     e-mail:       [email protected]
     e-mail:       [email protected]
     e-mail:       [email protected]
     admin-c:      IRA4-RIPE
     tech-c:       CQ37-RIPE
     nic-hdl:      IRTC1-RIPE
     remarks:
     remarks:      *************************************************************
     remarks:      *                                                           *
     remarks:      *  This is a generic ROLE object for an Intelsat Technical  *
     remarks:      *  Contact person for RIPE matters.  Inquiries about RIPE   *
     remarks:      *  issues should be directed to the NOC or BGP email-boxes, *
     remarks:      *  which will forward them appropriately.  For operational  *
     remarks:      *  issues, send an Email or call the Intelsat NOC at:       *
     remarks:      *                                                           *
     remarks:      *                     [email protected]                      *
     remarks:      *                     +1 202 944 6792                       *
     remarks:      *                                                           *
     remarks:      *  For BGP related issues, send an email to:                *
     remarks:      *                                                           *
     remarks:      *                     [email protected]                      *
     remarks:      *                                                           *
     remarks:      *  For issues of network abuse, including spam, please send *
     remarks:      *  email to Intelsat at:                                    *
     remarks:      *                                                           *
     remarks:      *                    [email protected]                     *
     remarks:      *                                                           *
     remarks:      *************************************************************
     remarks:
     source:       RIPE # Filtered
     
     person:       Chuan Qin
     address:      Intelsat
     address:      3400 International Drive, NW
     address:      Washington, DC
     address:      20008
     address:      USA
     phone:        +1 202 944 8530
     nic-hdl:      CQ37-RIPE
     e-mail:       [email protected]
     source:       RIPE # Filtered
     
     person:       Augustin Traore
     address:      3400 International Drive NW,
                   Washington DC 20008-3006
     phone:        +703-944-7033
     e-mail:       [email protected]
     nic-hdl:      AT1875-RIPE
     mnt-by:       AS22351-MNT
     source:       RIPE # Filtered


"British International Lottery" (Mr. Todd Aaron)
The presence of the word "international" in the name of lottery or instructions to contact its "foreign department" are clear signs of fraud. All government regulated lotteries worldwide cater only for a domestic audience. Their ticket agents only operate in one country and unless you buy a ticket, you can't win.

From: "uk world" <[email protected]>
To: <[email protected]>
Sent: Thursday, 12 May, 2005 12:29
Subject: WINNING NOTIFICATION!!

British International Lottery
Support Center
Bevan House
51 Bevan Avenue
Conwy  LL28 5AF
United Kingdom

FROM: THE DESK OF THE PROMOTION MANAGER
INTERNATIONAL PROMOTIONS/PRICE AWARD DEPARTMENT.
REF NO: BTL/4910X1/04
BATCH NO: 12/25/0304 

RE: AWARD WINNING NOTIFICATION/ FINAL NOTICE

National U.K Lottorey wishes to inform you the results of the E-mail address 
ballot lottery international program by Great Britain held on 3rd March, 2004. 
Your email address was attached to ticket number 564 75600545-188, with 
serial number 5388/02 drew with lucky numbers 43-11-44-37-10-43, and 
consequently you  Won the lottery in the (A) category.All participants were 
selected through a computer ballot system drawn from Microsoft users from 
company and individual email addresses.

You have therefore been approved a lump sum of SIX HUNDRED THOUSAND 
GREAT BRITAIN POUNDS.

Be advice to keep your winning information confidential until your claims has 
been processed and your money remitted to you. This is part of our security 
protocol to avoid double claiming and unwarranted abuse of this program,For 
the release of your winning,kindly contact your claims agent:

Mr. Todd  Aaron 
Tel: +44 703 184 8857
Fax: +44  870-135-6643
Email: [email protected]

Our agent will immediately commence the process to facilitate the Release of 
your funds as soon as you contact him and you are to quote your lucky number 
for confirmation on your winning in every  correspondences with claims agent.

All winning must be claimed not later than 10th June, 2005. After this date all 
unclaimed funds will be retured to European Union Treasury as unclaimed.

 

Furthermore, should there be any Change of your address; do inform your claims 
agent as soon as possible.

Congratulations!! again from all our staffs and thank you for being part of our 
promotional lottery program.

Yours faithfully,
Dr Paul White
Zonal Co-ordinator
(Promotions Manager)



--------------------------------------------------------------------------------
How much free photo storage do you get? Store your holiday snaps for FREE with 
Yahoo! Photos. Get Yahoo! Photos

Message headers:

Received: from [80.179.191.232] by web26307.mail.ukl.yahoo.com
 via HTTP; Thu, 12 May 2005 04:29:32 BST
Date: Thu, 12 May 2005 04:29:32 +0100 (BST)
From: uk world <[email protected]>
Subject: WINNING NOTIFICATION!!
To: [email protected]

IP address 80.179.191.232 is in the same neighbourhood as IP 80.179.191.228 used in the "SUDDEUTSCHE KLASSENLOTTERIE" fake lottery scam.

WHOIS details for sending network (IP 80.179.191.232):
Gilat is a broadband satellite ISP in Israel (near tel Aviv). In the network record below it lies about the country it's based in, tricking software into software into believing that mails from Nigerian customers of the company originate from the UK (which naturally is very helpful to the fraudsters, who use UK-based special service phone numbers to redirect incoming calls to Africa).

     inetnum:      80.179.191.226 - 80.179.191.255
     netname:      Gilat-ART4211
     descr:        Please Send Abuse/SPAM complaints To [email protected]
     country:      GB
     admin-c:      DR5299-RIPE
     tech-c:       DR5299-RIPE
     status:       ASSIGNED PA
     notify:       [email protected]
     changed:      [email protected] 20050202
     mnt-by:       AS9116-MNT
     mnt-lower:    AS9116-MNT
     source:       RIPE
     
     route:        80.179.128.0/17
     descr:        Golden Lines
     origin:       AS9116
     mnt-by:       AS9116-MNT
     changed:      [email protected] 20020711
     source:       RIPE
     
     role:         DNS REG
     address:      25 Hsivim st. Petach-Tiikva, Israel
     e-mail:       [email protected]
     trouble:      [email protected]
     admin-c:      GE2074-RIPE
     tech-c:       IB737-RIPE
     tech-c:       AG914-RIPE
     nic-hdl:      DR5299-RIPE
     notify:       [email protected]
     changed:      [email protected] 20030715
     mnt-by:       AS9116-MNT
     source:       RIPE

80.179.191.232
2005-05-12 03:29:32 UTC[email protected]


Reply from the claims agent:

From: "Dr Todd Aaron" <[email protected]>
To: <[email protected]>
Sent: Friday, 13 May, 2005 21:08
Subject: Attn: Dear Winner

Attn:Dear Winner

I am Dr. Todd Aaron, the fiduciary agent assigned to your case to help you 
in the claims process of your funds. I wish to congratulate you and to say 
you are a lucky person to have won this lottery. All the winners in the Lottery 
were selected randomly through a computer ballot system from Email addresses 
and Names from the World Wide Web. 

You are required to fill the attached form to facilitate the processing of your 
claims and certificate which will lead to the payment of your prize to you as 
required. You are also to send a copy of your International Passport or Drivers 
License along with the filled form. If you do not have any of these, you can send 
your National Identity Card or any other form of Identification. 

You are to choose only One (1) from the Three (3) given options on how to claim 
your prize. For any option you choose, you are to fill in the necessary information 
for the option you choose. 

1. You go to our paying agent to collect your prize of 600,000,00 (SIX HUNDRED 
THOUSAND GREAT BRITAIN POUNDS.) in cash.

2. Transfer of your funds to your local bank account by Telegraphic Bank transfer 
and your funds will be in your account within 48 hours. 

3. You employ the services of our affiliate courier company to courier your Award 
Certificate and Certified Bank Cheque to you. (5 -14 Days)

If you choose option 2 or 3, you will be totally responsible for the Telegraphic 
Bank Transfer Charges OR Courier Charges. When we receive your Filled Form, we 
will send you more information about any option you choose. 

Note that your funds have been insured and no deductions of any kind can be made 
on your funds.

You are to send your Filled Form and Scanned Identification by Email Attachment or 
to our office fax:44 701356643

Once again I say congratulations and hope to hear from you soon.

Yours faithfully,

Mr. Todd Aaron

Tel:+447031848857

Fax: 44 701356643




--------------------------------------------------------------------------------
Do you Yahoo!?
Yahoo! Mail - Helps protect you from nasty viruses.

Message headers:

Received: from [80.88.128.12] by web32413.mail.mud.yahoo.com
 via HTTP; Fri, 13 May 2005 05:08:45 PDT
Date: Fri, 13 May 2005 05:08:45 -0700 (PDT)
From: Dr Todd Aaron <[email protected]>
Subject: Attn: Dear Winner
To: [email protected]

"claim process form.doc" Title: UK INTERNATIONAL LOTTERY
Author: Emeke
Company: Cyber Essentials
Last saved by: Emeke

UK INTERNATIONAL LOTTERY
UK International Lottery
Tel No: +44 7031846803
Fax No: 44 701356643
Email: [email protected]
Contact Person: Todd Aaron
     CLAIMS VERIFICATION DEPARTMENT
YOUR VERIFICATION CLAIMS FORMS WILL BE DUELY PROCESSED AND PAYMENT WILL BE
INITIATED UPON CERTIFICATION OF YOUR FILLED FORM.CAREFULLY FILL IN THE
APPROPRIATE INFORMATION IN THE SPACE PROVIDED BELOW TO FACILITATE IMMEDIATE
COMMENCEMENT OF YOUR WINNING CLAIMS VERIFICATION AND REMITTANCE.

FIRST NAME (MR/MRS/MISS): ................ LAST NAME: .................

RESIDENTIAL ADDRESS:...................................................

.......................................................................
DATE OF BIRTH: .......................... NATIONALITY:.................

TEL NO: ................................. FAX NO: .....................

NEXT OF KIN AND ADDRESS:...............................................

OCCUPATION: ............................. MARITAL STATUS: .............

REFERENCE NUMBER: ....................... TICKET NUMBER:...............

MAILING ADDRESS:.......................................................

AMOUNT WON:............................................................

 
OFFICE USE ONLY

VERIFIED BY: .......................... CONFIRMED BY: ................

OFFICER�S SIGNATURE: ..................................................

DECLARATION:
I .............................HEREBY DECLARE THAT I HAVE NOT RECIEVED ANY
PAYMENT ON MY BEHALF NOR HAS ANY OF MY FAMILY MEMBER FILED A CLAIM ON MY
BEHALF. I HEREBY AUTHOURIZE UK INTERNATIONAL LOTTERY (SECURITY COMPANY) TO
ACT AS MY AGENT IN FACILITATING THE TRANSFER OF MY TOTAL FUNDS TO ME AS I MAY
WISH.
DATE:............................ SIGN:....................
Dr. P. Swier, Mr. Gerald Goodman (Manager Foreign Operations), Mr. Franklyn Van 
Der Weijden (Manager Domestic Banking Operations), Dr. James Williams (Director 
International Credit Department), Mrs. Sandra Murphy (Executive), Mr. Michael 
Cole (Executive), Mr. Stephen Boer (Chairman). 
Copyright � 2005 .Uk National Lottery.

From: "Dr Todd Aaron" <[email protected]>
To: "firstname lastname" <emailaddress>
Sent: Wednesday, 18 May, 2005 16:22
Subject: Attn:title firstname lastname

Attn:title firstname lastname
 
Top of the day to you and this is my suggestion and advice to you that will 
be more better than openning a new account i the bank you listed, we have 
deplomatic courier company that will deliver your winning  600,000.00 pounds 
to your door step and you will have to pay for the air freet and the charges 
for them to do that, That is the best way and you only have to pay  $9,000 and 
they will bring your winnings to you.
 
I will like to know what you have to say about this because its better than bank 
transfer becasue you will have to pay much for bank transfer charges.
 
I will send your winning certificat to you in my next mail.
 
Regards
Todd Aaron.

Message headers:

Received: from [80.88.128.12] by web32411.mail.mud.yahoo.com
 via HTTP; Wed, 18 May 2005 00:22:43 PDT
Date: Wed, 18 May 2005 00:22:43 -0700 (PDT)
From: Dr Todd Aaron <[email protected]>
Subject: Attn:title firstname lastname



From: "Dr Todd Aaron" <[email protected]>
To: "firstname lastname" <emailaddress>
Sent: Friday, 20 May, 2005 1:52
Subject: Attn:title firstname lastname

Attn:title firstname lastname


We have received the sent informations and all arrangements prior sending 
your winning cheque has been finalised and we are awaiting proof of payment 
of the required charges so that we can courier your winning cheque.
Below are the charges that you are required to pay to enable us courier  your 
certificate of winnings as well as your certified Bank cheque to you. We will 
despatch your package as soon as we acknowledge the receipt of payment 
of the required charges.
Description Of Parcel to be couriered.


An original certificate of winning.......0.35kg
Bank Cheque..............................0.17kg
Total weight of parcel...................0.52kg
Colour of parcel.........................Brown

Find below our charges:
Courier charges: .............................#80.00 
Administrative/Handling:......................#455.00 
Insurance :...................................#115.00 
TOTAL CHARGES:................................#650.00 


You are to make the payment at any western union money transfer outlet close 
to you so as to speed up the process of sending your package.
You are to make the payment through the name of our accounts officer below:


Name:Adams Richards
Address:Support Centre
        Bevan House
        51 Bevan Avenue
        Conwy LL28 5AF
        London
After the payment has been made,you are to send to me a complete payment 
information that should include Money Transfer Control Number(MTCN),Sender's 
Name,Actual Amount Sent,Text Question and Answer if any.You are to also Fax 
the receipt of payment to me.
I hope you acknowledge my mail soon.


Regards,
Todd Aaron.


Message headers:

Received: from [80.88.128.12] by web32413.mail.mud.yahoo.com
 via HTTP; Thu, 19 May 2005 09:52:32 PDT
Date: Thu, 19 May 2005 09:52:32 -0700 (PDT)
From: Dr Todd Aaron <[email protected]>
Subject: Attn:title firstname lastname

An image of the followiing fake check was emailed to the victim after paying £650:

The street address is that of a Lloyds TSB bank branch. The fake image of check was edited from a scan of a Lloyds TSB check.

That wasn't the end of it. The criminals thenm demanded £6000 to be paid by Western Union or into a bank account:

From: "Todd Aaron" <[email protected]>
To: <emailaddress>
Sent: Friday, 03 June, 2005 2:49
Subject: Attn:title firstname lastname(ACCOUNT)

British International Lottery 
Support Center 
Bevan House 
51 Bevan Avenue 
Conwy LL28 5AF 
United Kingdom 


Attn:title firstname lastname

Top of the day to you,This is the complet account details you requested and you 
can make the payment from your Bank and do not send any DRAFT because we 
don't accept it. As soon as you make the payment you are to send the payment slip.

Am given you so many uption to make payment because i want you to get your 
check soonest.

IBAN: GB21BARC20325360237140
SWIFTCODE: BARCGB22
BARCLAYS SORT CODE: 203253
ACCOUNT NUMBER: 60237140
FURTHER CREDIT TO,
THE WOOLWICH BANK
POWIS STREET 
WOOLWICH, LONDON
A/C. NAME: MR.PHILLIP RADEBE
A/C.NUMBER: 58471261
SORT CODE: 108002

Get back soon
Regards
Todd Aaron

Message headers:

Received: from 80.88.128.12 by by19fd.bay19.hotmail.msn.com with HTTP;
	Thu, 02 Jun 2005 17:49:47 GMT
X-Originating-IP: [80.88.128.12]
X-Originating-Email: [[email protected]]
X-Sender: [email protected]

WHOIS details for sending network (IP 80.88.128.12):
The email was sent from a customer in West Africa of a satellite ISP in Denmark. This IP address is connected to a whole string of scams.

     inetnum:      80.88.128.0 - 80.88.128.127
     netname:      EMP-MFG-NOC
     descr:        Central infrastucture for Emperion at Middelfartgade.
     descr:        Supports various NMS systems, IP DVB Encoders as well as one
     descr:        router pr. customer link.
     country:      DK
     admin-c:      KW6968-RIPE
     tech-c:       EMP5-RIPE
     status:       ASSIGNED PA
     notify:       [email protected]
     mnt-by:       EMP-NOC-MNT
     changed:      [email protected] 20010829
     changed:      [email protected] 20010903
     changed:      [email protected] 20010906
     changed:      [email protected] 20030210
     source:       RIPE
     
     route:        80.88.128.0/20
     descr:        DK-EMPERION-20010828-ROUTE
     origin:       AS21125
     mnt-by:       EMP-NOC-MNT
     changed:      [email protected] 20010906
     source:       RIPE
     
     role:         Emperion NOC Operator
     address:      Emperion A/S
     address:      Middelfartgade 7
     address:      2100 Koebenhavn Oe
     address:      DK
     phone:        +45 3929 3530
     e-mail:       [email protected]
     trouble:      [email protected]
     admin-c:      KW6968-RIPE
     tech-c:       KW6968-RIPE
     tech-c:       SRL7-RIPE
     tech-c:       AJ163-RIPE
     tech-c:       GB1283-RIPE
     tech-c:       FL497-RIPE
     nic-hdl:      EMP5-RIPE
     notify:       [email protected]
     mnt-by:       EMP-NOC-MNT
     changed:      [email protected] 20010906
     changed:      [email protected] 20020110
     changed:      [email protected] 20021107
     source:       RIPE
     
     person:       Kim Wohlert
     address:      Emperion A/S
     address:      Middelfartgade 7
     address:      2100 Koebenhavn Oe
     address:      DK
     phone:        +45 3929 3530
     e-mail:       [email protected]
     nic-hdl:      KW6968-RIPE
     mnt-by:       EMP-NOC-MNT
     changed:      [email protected] 20010807
     changed:      [email protected] 20010903
     changed:      [email protected] 20020110
     source:       RIPE
See Email addresses associated with IP address 80.88.128.12

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!