Example of fake winning notification email:
FROM THE DESK OF THE VICE PRESIDENT
MEGA MILLION E-MAIL LOTTO INTERNATIONAL PROGRAM
VIA CARLO ALBERTO 35,
20142 MI,
MILANO,
ITALIA.
INTERNATIONAL E-MAIL LOTTO PROMOTIONS/PRIZE AWARD.
BATCH NO: MMEL/EU/0976/00007/003
REF. No: MMEL/EU/67230/10321/231
WINNING NOTIFICATION / FINAL NOTICE, END OF THE YEAR SWEEPSTAKES
This is to inform you of the release of the MEGA MILLION E-MAIL LOTTERY
BALLOT INTERNATIONAL/ WORLD GAMING BOARD held on the 4th of December
2004 and the results released on the 6th of December, 2004.
Your email address attached to Ticket No:0065430 with Serial No
21605 drew the lucky numbers of 86-15-65-25-28-90 which consequently
won the lottery in the 2nd category. You have therefore been approved
for a lump sum payout of $500,000.00 Dollars (Five Hundred Thousand
United States Dollars) in cash credited to file REF. No: MMEL/EU/67230/10321/231. This is from a total cash prize of $23.7million United States Dollars
shared among several international lucky winners in the premium, 1st, 2nd
and 3rd categories respectively. Due to mix up of some numbers and names,
we ask that you keep yourwinning information confidential until your claims has been rocessedand your money Remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants.All participants were selected through a computer ballot system dran
from only Microsoft users from over 350,000 companies, and 25,000,000
individual e-mail addresses all over the world.To begin your lottery claim, do contact the claims manager on
MRS. FREDRICKS LINDA
CLAIMS MANAGER
MEGA MILLION LOTTO INTERNATIONAL SPA
[email protected]
Note that all winning must be claimed not later than 17th February,2005.
After this date all uncaimed funds will be included in the next stake.
Please note in order to avoid unnecessary delays and complications do
remember to quote your reference number and batch numbers in all
correspondence.
Furthermore, should there be any change of address do not hesitate
inform your claims manager as soon as possible.
Congratulations once more from our members of staff and thank you for
being part of our promotional program.
Note: Anybody under the age of 18 is automatically disqualified.
Yours Sincerely,
ANTONIO BELLUCI
[email protected]
Lottery Coordinator
Example of response from fake security company (notice the classic all-capitals "I'M SCREAMING AT YOU" Nigerian style :-)
DR.LEONARD HENDRICKS
ZENITH TRUST AND FINANCIAL SERVICES
WEB SITE: www.zenithsecurities.com
FAX:+39 02 95 44 12 56
2004-11-15
ATTN: FIRSTNAME LASTNAME,
RE:TRANSFER:FIVE HUNDRED THOUSAND UNITED STATES DOLLARS (US$500,000.00)
CONSEQUENT UPON THE CONFIRMATION WE RECEIVED FROM THE MEGA MILLION
LOTTOMATICA SpA AND AFTER DUE VERIFICATION AND SCRUTINY WE CONTACT YOU FOR
THE TRANSFER OF YOUR WINNING PRIZE MONEY OF US$500,000.00 WON THROUGH THE
E-MAIL COMPUTER INTERNATIONAL LOTTERY.
YOU ARE HEREBY ADVISED TO GO TO ANY WESTERN UNION MONEY TRANSFER POINT AND
TRANSFER THE SUM OF FIVE HUNDRED EUROS(500.00EUROS) TO OUR DIRECTOR OF
ACCOUNTS .THIS PROCESSING FEE IS FOR THE OBTAINING OF THE NON RESIDENT
DOCUMENTS FROM THE MINISTRY OF FINANCE AND THE LOCAL LOTTO COMMISSION FOR
THE TRANSFER OF YOUR WINNING PRIZE MONEY.IT IS NOT OUR DUTY AS YOUR FUND
MANAGERS TO PAY FOR THE PROCESSING OF YOUR WINNING PRIZE MONEY.
AND IT IS NOT POSSIBLE FOR US TO DEDUCT THE PROCESSING FEES FROM THE
WINNING PRIZE MONEY BECAUSE OF THE INSURANCE BOND PLACED ON IT AND IT IS
FORWARDED TO US IN A CROSSED CHEQUE AND THIS MAKES IT IMPOSSIBLE FOR IT TO
BE TAMPERED WITH, AS THE WINNING PRIZE MONEY WILL REACH YOUR ACCOUNT
INTACT.
BASED ON THE ABOVE, YOU ARE ADVISED TO GO TO ANY WESTERN UNION NEAREST TO
YOU AND TELL THEM THAT YOU WANT TO TRANSFER FIVE HUNDRED EUROS TO REMY
SELLIN WITH THE FOLLOWING INFORMATION.THEY WILL SEND THE MONEY AND GIVE
YOU A 10DIGIT NUMBER THAT YOU WILL FORWARD TO US.WITH THIS NUMBER, THE
DIRECTOR OF ACCOUNTS WILL GO TO THE WESTERN UNION AND RETRIEVE THE MONEY
AND PROCEED TO THE MINISTRY AND LOCAL LOTTO COMMISSION FOR THE DOCUMENTS
TO FACILITATE THE TRANSFER OF YOUR WINNING PRIZE MONEY.
NAME: REMY SELLIN
ADDRESS:VIA PININFARINA 42-44
CITY:TORINO (TURIN)
COUNTRY: ITALY.
GO THROUGH THE ATTACHMENTS AND RETURN THE COMPLETED PAYMENT SCHEME FORM
WITH A RECEIPT OF PAYMENT FROM WESTERN UNION SHOWING THE TRANSFERED
PROCESSING FEES.
WE AWAIT YOUR URGENT RESPONSE AS WE LOOK FORWARD TO SERVE YOU BETTER.
REGARDS,
DR.LEONARD HENDRICKS
DIR.FOREIGN PAYMENTS.
Here were the message headers:
Received: from zenithse by discover.clusterdns.com with local (Exim 4.43)
id 1Cef0Q-000709-VG
for emailaddress; Thu, 16 Dec 2004 03:40:15 +0800
Received: from 213.140.6.111 ([213.140.6.111])
(SquirrelMail authenticated user zenithse);
by www.zenithsecurities.com with HTTP;
Thu, 16 Dec 2004 03:40:14 +0800 (SGT)
Message-ID: <[email protected]>
Date: Thu, 16 Dec 2004 03:40:14 +0800 (SGT)
Subject: NOTIFICATION/PROCESSING FEES/MEGAMILLION
From: [email protected]
This email was actually sent from Italy:
inetnum: 213.140.6.96 - 213.140.6.111
netname: FASTWEB-RESIDENTIAL-09
descr: Infrastructure for Fastweb's main location
descr: NAT IP addresses for residential customer, public subnet
country: IT
admin-c: IRS2-RIPE
tech-c: IRS2-RIPE
status: ASSIGNED PA
mnt-by: FASTWEB-MNT
changed: [email protected] 20040224
remarks: In case of improper use originating from our network,
remarks: please mail customer or [email protected]
remarks: INFRA-AW
source: RIPE
route: 213.140.0.0/20
descr: Fastweb Networks block
origin: AS12874
remarks: 1st block released to it.fastweb local registry.
mnt-by: FASTWEB-MNT
changed: [email protected] 20020805
remarks: In case of improper use originating from our network,
remarks: please mail customer or [email protected]
source: RIPE
person: ip registration service
address: Via Caracciolo, 51
address: 20155 Milano MI
address: Italy
phone: +39 02 45451
fax-no: +39 02 45451
e-mail: [email protected]
nic-hdl: IRS2-RIPE
remarks:
remarks: In case of improper use originating from our network,
remarks: please mail customer or [email protected]
remarks:
notify: [email protected]
changed: [email protected] 20011218
source: RIPE
Here is the completely bogus WHOIS record for the "security company":
Registrant:
Joswin [email protected] +868.931425166
Joswin Inc.
13421 Industrial Layout
Careamo,DIttoli,TT 34213
Domain Name:zenithsecurities.com
Record last updated at 2004-09-30 14:32:36
Record created on 2004/9/30
Record expired on 2005/9/30
Domain servers in listed order:
ns2.surf7.net ns1.surf7.net
Administrator:
13421 Industrial Layout
Careamo
DIttoli,
TT
34213
name:(Joswin)
mail:([email protected]) +868.931425166
Joswin Inc.
Technical Contactor:
13421 Industrial Layout
Careamo
DIttoli,
TT
34213
name:(Joswin)
mail:([email protected]) +868.931425166
Joswin Inc.
Billing Contactor:
13421 Industrial Layout
Careamo
DIttoli,
TT
34213
name:(48)
mail:([email protected]) +868.931425166
Joswin Inc.
Registration Service Provider:
name: Surf Seven Network
tel: +60.124683101
fax: +60.124683101
web:http://www.surf7.net
Mega Million Dollar International Lotteries
European Promotional Draws
****************************************************
Via Gallarate Nr. 156
20152 Milano
Italia
*****************************************************
Claims Department
Ref: MMCAN/652311872/05
Batch: 074/05/369MM
WINNING NOTIFICATION:
We happily announce to you the draw of the Mega Million Dollar Sweepstake
Lottery International programs held on SATURDAY 5TH OF FEBRUARY, 2005.
in ITALY.
Your e-mail address attached to ticket number: 564700564321 with Serial number
4265/02 drew the lucky numbers: 31-05-75-67-25-04, which subsequently won you
the lottery in the
2nd category. You have therefore been approved to claim a total sum of
Seven Hundred And Fifty Thousand United States Dollars ( US$ 750,000.00 ) in
cash credited to file Ref. No: MMCAN/652311872/05.This is from a total cash
prize of US $ 11,250,000.00 , shared amongst the first Fiftenn (15) lucky
winners in this category.
All participants were selected randomly from World Wide Web site
through computer draw system and extracted from over 150,000 individual/
company e-mail addresses. This promotion takes place annually.
In view of this, your US$750,000.00 ( Seven Hundred And FiftyThousand United
States Dollars) would be released to you by our payment office in europe.
To begin your lottery claim, do contact the claims manager :
MR. RICHARD SMITH
CLAIMS MANAGER
MEGA MILLION DOLLARS LOTTERIES
[email protected]
Note that all winning must be claimed not later than 11th April,2005.
After this date all unclaimed funds will be included in the next year
sweepstake.
In order to avoid unnecessary delays and complications do remember to quote your
reference number and batch numbers in all correspondence.
Furthermore, should there be any change of address do not hesitate inform your
claims manager as soon as possible.
Congratulations once more from our members of staff and thank you for being part
of our promotional program.
Yours Sincerely,
MRS. ANNA MARIA ARMELIANI
[email protected]
Lottery Coordinator
********************************************************************************
DISCLAIMER: This communication is for the exclusive
use of the intended recipient (s) and shall not attach
any liability on the originator, Mega Million Dollar Lottery.
If you are the addressee, the contents of this
letter are intended for your use only and it shall not
be forwarded to any third party, without first
obtaining written authorizations from the originator.
It may contain information, which is confidential and
legally privileged and the same shall not be used or
dealt with by any third party in any manner without
the specific consent of Mega Million Lottery Int. CAN.