Spam 419/Nigeria Online fraud jwSpamSpy Contact
Email Spam Filter: |
|
|
419 Scam Example: "SWISS PROMO LOTTERY / Overseas Asset Management Ltd (Paul Hunt, Henry Lewis)"
- About "419" scams
- Email addresses used by 419 scammers
- Phone numbers used by 419 scammers
- How to report 419 spam to us
- Domains registered by 419 scammers
- What can you do when you receive 419 spam
- United States Secret Service
"SWISS PROMO LOTTERY / Overseas Asset Management Ltd (Paul Hunt, Henry Lewis)" is a label used by criminals for an advance fee scam that involves fake checks and money orders produced in Canada.
Victims are contacted by bulk email and told they won a lottery prize. They are told to contact a company called "Overseas Asset Management Ltd", which handles the payout. Several victims in the US were mailed fake money orders for US$6000, supposedly a loan, which they are told to cash and then wire the money to the "lottery claims agent". In effect the victims will wire $6000 of their own money to the criminals, because the money orders will bounce.
Other victims were instructed to wire £985 to a person in London who used the alias "Anthony Wilkinson".
If you receive money orders or checks "loaned" to you to pay lottery claims fees (which no legitimate lottery charges in the first place), do not open the letter but take it directly to the police so they can check the content for fingerprints. If you live in the United States, contact the nearest field office of the United States Secret Service (USSS). If you live in Canada, contact the RCMP. Please forward us any emails by the criminals that you have received.
|
ATTN: FIRSTNAME LASTNAME. RE: DELIVERY AND CLAIMS OF LOTTERY JACKPOT. WE HAVE RECEIVED YOUR APPLICATION FOR CLAIMS OF YOUR LOTTERY BENEFITS WHICH AMOUNTS TO �1,500,000.00 EUROS (ONE MILLION, FIVE HUNDRED THOUSAND EUROS ONLY). WE HAVE ALSO VERIFIED THE WINNING NUMBER AND TICKET NUMBER. REF NUMBER: SLI/421/960/05 BATCH NUMBER: ST-688-SN13-05 TICKET NUMBER: 27522465896-532 PLEASE NOTE THAT THIS OFFICE IS PRESENTLY IN CHARGE OF YOUR PAYMENT VERIFICATIONS AND WILL TAKE ALL NECCESSARY STEPS TO ENSURE THAT YOU RECIEVE YOUR WINNINGS AS AT WHEN DUE. IN THIS LIGHT, YOU ARE IMMEDIATELY REQUIRED TO SUPPLY THE DETAIL AND FILL OUT THE ATTACHED FORM. THIS IS TO ENSURE FOR PROPER IDENTIFICATION BEFORE PAYMENTS. WE CURRENTLY CHARGE A PROCESSING FEE OF �985.00 (NINE HUNDRED AND EIGHTY FIVE POUNDS) ONLY. THIS WILL COVER THE ENTIRE COST OF YOUR APPLICATION FORM PROCESSING AND DELIVERY BY OUR OUT STATION LAWYERS. THIS AMOUNT IS TO BE PAID BY YOU IMMEDIATELY, THROUGH WESTERN UNION MONEY TRANSFERS TO ONE OF OUR ON DUTY LAWYERS: NAME: MR. ANTHONY WILKINSON ADDRESS: 15 MILMARK GROVE, THAMESMEAD LONDON.SE28 8EY. PLEASE NOTE THAT THE ABOVE AMOUNT CANNOT BE DEDUCTED FROM YOUR LOTTERY WINNINGS BECAUSE YOUR CLAIMS HAVE NOT BEEN FULLY PROCESSED. FOR FURTHER INFORMATION, PLEASE CONTACT THE UNDERSIGNED. THANK YOU. YOURS FAITHFULLY, DR. HENRY LEWIS (DIRECTOR OF OPERATIONS)
Note that postal addresses on Western Union transfers have no meaning, except for the city. The scanned signature didn't actually look like "Henry Lewis" at all. It seemed to read "Rasalaheya" or something like that.
Here's another email:
Dear Firstname Lastname, We confirm the receipt of your payment details from the Swiss Promo Lottery Company. In line with our prepayment processes and procedures, we are required to ensure adequate sponsorship of all aspects of your payment and delivery to you. The processing of your payment will attract total fees of between US$5,000 to US$15,000.00 depending on your location within the USA. Hence, our sponsors in the USA and Canada will make provision for this amount first to you. We will therefore be recommending you and sending your details to our sponsor agents first. Principally, the reason for this recommendation is to ensure that your winnings are adequately processed and all expenses paid by our private sponsors in USA or Canada. The sponsorship amounts vary between $5,000.00 to $50,000.00 and this amount will be given to you first hand to ensure that it covers all expenses for you. If you wish us to confirm your recommendation for this sponsorship, please indicate by completing your full names and address, which your check can be drawn and posted securely. This is very important, as payments will be sent to you in Check, Drafts or Money Orders as the case may be. As soon as we receive the above details, we will submit same to allow our sponsors reach you. Please find attached your lottery payment application for completion. Thank you. Yours faithfully Dr. Henry Lewis. ________________________________________________________________ Sent via the WebMail system at overseasassetmanagement.com
Form.doc (Title: OVERSEAS ASSET MANAGEMENT LTD, author and company are blank):
OVERSEAS ASSET MANAGEMENT LTD Corporate Office: 42/43 CALTHORPE ROAD, EDGBASTON, BIRMINGHAM B17 3ST. ENGLAND. Tel: + 44 782 183 0842, Tel/Fax: + 44 870 762 0889 Email: [email protected], [email protected] LOTTERY PAYMENT APPLICATION FORM (TO BE COMPLETED BY LOTTERY WINNERS ONLY) Ticket Number: Reference Number: Batch Number: Name: Home Address: Town/City: Post Code: Country: Telephone (Home): Mobile: Fax (Private): Fax (Office): Email Address: Date of Birth: I/D Number: Passport Number: Signature:. __________________ Date:. ________________ DATA PROTECTION Overseas Asset Management Ltd records and stores all personal details (including details of all your winnings and amounts paid out on behalf of Swiss Promo International), in order to effectively process all winnings, payouts and keep records for submission to Swiss Promo Switzerland. We may from time to time use your personal information to update you about any new services that we can offer you. We may also pass your personal information to third parties (including other lottery sponsors) who we think may offer services, which may be of benefit or interest to you. If you do not wish to receive this information from such third parties please tick here THIRD PARTIES: We will only supply your personal identifiable information to any person or organisation: 1. Where we need to share the information to provide services you have requested. 2. Where we need to send the information to get increased sponsorship on behalf of Swiss Promo Intl. 3. Where we are required to forward the information in order to comply to tax authorities or with a regulatory or legal process. NOTE: ALL COMPLETED APPLICATION FORMS SHOULD BE SUBMITTED BACK TO US BY FAX IMMEDIATELY OR BY ATTACHED EMAIL,(WITH A COPY OF YOUR INTERNATIONAL PASPORT OR ID CARD). APPLICATIONS WILL ONLY BE PROCESSED UPON CONFIRMATION OF PAYMENT OF ALL PROCESSING FEES
Here is another mail from the criminals (see 2nd mail for source):
From: PaulHunt LoanINC [mailto:[email protected]] Sent: Saturday, February 26, 2005 4:31 AM To: emailaddress Subject: Overseas Asset Management Ltd. ATTN:Firstname Lastname Home Address: homeaddress Work Address: workaddress Dear sir, This is to inform you that we have been contacted by Overseas Asset Management Ltd Birmingham, England. to sponsor the processing fee of your winning which has been approved. In line with the agreement which we signed with Overseas Asset Management Ltd.We will send you the required amount of by US Money Order from one of our financier in the USA (since you are resident in the USA) in three different installment to enable your winnings to be processed. The money order will be sent to your address, in your name and once it is received by you, it should be paid into your BANK ACCOUNT immediately and used to pay the processing fee incidental on your winning. You are warned that we will take a legal action against you if this money is cashed and used for other purpose except what it has been approved for and do not hesitate to inform us once you receive the MO and your account has been credited and send your new balance statement to Overseas Asset Management Ltd. to confirm that you have received our loan. This measure is for administrative purposes and to to enable us send the next amount immediately. Please acknowledge this email. Congratulation. Regards Paul Hunt Paul Hunt Loan services 13 Albert Rd.,Toronto canada.
The scammers mailed six counterfeit money orders in the amount of US$1000 each supposedly from a source in New York but actually mailed from Canada.
If you receive money orders or checks "loaned" to you to pay lottery claims fees (which no legitimate lottery charges in the first place), do not open the letter but take it directly to the police so they can check the content for fingerprints.
If you live in the United States, contact the nearest field office of the United States Secret Service (USSS). If you live in Canada, contact the RCMP.
Another email from the criminals:
ATTN:Firstname Lastname
streetaddress
city, state, zipcode
Sir,
We are writing to inquire if the US postal
Money orders which were sent to you have been cashed
and the money sent to Overseas Assets Ltd, United
Kingdom for the payment of your processing fee.
Please inform us if the payment has been sent and
received in the U.K. so that we can send the next
installment to you in line with our agreement with
Overseas Assets Ltd.
Please acknowledge this email as soon as possible to
enable us reconcile our accounts and send you the next
payment within 24 working hours.
Regards
Paul Hunt
Paul Hunt Loan Inc.
Canada.
______________________________________________________________________
Post your free ad now! http://personals.yahoo.ca
Message headers:
Received: from [193.219.226.15] by web31302.mail.mud.yahoo.com via HTTP; Fri, 18 Mar 2005 10:29:37 EST Date: Fri, 18 Mar 2005 10:29:37 -0500 (EST) From: PaulHunt LoanINC <[email protected]> Subject: CONFIRM THE RECEIPT
WHOIS details for sending network (IP 193.219.226.15):
inetnum: 193.219.226.0 - 193.219.227.255
netname: ITCLICK-NETWORX-NG
descr: ITClick Networx Limited
descr: ISP
descr: Lagos, Nigeria
country: NG
admin-c: SAI22-RIPE
tech-c: SAI22-RIPE
status: ASSIGNED PA
remarks: ---------------
remarks: T-IP-20040304-I
remarks: ---------------
notify: [email protected]
mnt-by: TAIDE-NOC
changed: [email protected] 20040304
source: RIPE
route: 193.219.192.0/18
descr: TAIDE-NET
origin: AS5377
mnt-by: TAIDE-NOC
changed: [email protected] 20010402
source: RIPE
person: Sunday A Idajili
address: Suites B180/181 Ikota Shopping Complex
address: Victoria Garden City, Lekki
address: Lagos, Nigeria
phone: +234 1 4722950
phone: +234 1 4616821
fax-no: +234 1 4616126
e-mail: [email protected]
nic-hdl: SAI22-RIPE
notify: [email protected]
changed: [email protected] 20040304
source: RIPE
| 2005-01-03 11:42:56 UTC | [email protected] |
| 2005-01-13 11:49:02 UTC | [email protected] |
| 2005-01-14 19:57:08 UTC | [email protected] |
| 2005-01-18 00:40:58 UTC | [email protected] |
| 2005-01-18 14:03:36 UTC | [email protected] |
| 2005-01-25 18:11:16 UTC | [email protected] |
| 2005-01-25 18:11:27 UTC | [email protected] |
| 2005-01-27 18:21:18 UTC | [email protected] |
| 2005-01-27 23:23:08 UTC | [email protected] |
| 2005-01-29 18:47:18 UTC | [email protected] |
| 2005-02-14 21:38:38 UTC | [email protected] |
| 2005-02-16 13:59:25 UTC | [email protected] |
| 2005-02-19 22:30:32 UTC | [email protected] |
| 2005-02-28 15:43:58 UTC | [email protected] |
| 2005-02-28 16:02:08 UTC | [email protected] |
| 2005-02-28 16:02:41 UTC | [email protected] |
| 2005-02-28 16:04:01 UTC | [email protected] |
| 2005-02-28 16:04:46 UTC | [email protected] |
| 2005-02-28 16:09:02 UTC | [email protected] |
| 2005-02-28 16:09:51 UTC | [email protected] |
| 2005-02-28 16:10:36 UTC | [email protected] |
| 2005-02-28 16:11:07 UTC | [email protected] |
| 2005-02-28 16:11:37 UTC | [email protected] |
| 2005-02-28 16:28:06 UTC | [email protected] |
| 2005-03-01 01:40:01 UTC | [email protected] |
| 2005-03-01 06:32:23 UTC | [email protected] |
| 2005-03-01 12:44:03 UTC | [email protected] |
| 2005-03-01 20:23:43 UTC | [email protected] |
| 2005-03-02 13:51:51 UTC | [email protected] |
| 2005-03-03 03:01:27 UTC | [email protected] |
| 2005-03-03 09:21:08 UTC | [email protected] |
| 2005-03-05 19:42:46 UTC | [email protected] |
| 2005-03-10 00:47:45 UTC | [email protected] |
| 2005-03-11 01:31:09 UTC | [email protected] |
| 2005-03-12 21:46:55 UTC | [email protected] |
| 2005-03-13 23:48:07 UTC | [email protected] |
| 2005-03-16 12:33:58 UTC | [email protected] |
| 2005-03-18 04:23:00 UTC | [email protected] |
| 2005-03-18 04:42:21 UTC | [email protected] |
| 2005-03-22 11:54:02 UTC | [email protected] |
| 2005-03-22 14:46:36 UTC | [email protected] |
| 2005-03-23 10:47:14 UTC | [email protected] |
| 2005-03-23 13:24:37 UTC | [email protected] |
| 2005-03-23 17:33:29 UTC | [email protected] |
| 2005-03-24 15:38:55 UTC | [email protected] |
| 2005-03-24 16:00:00 UTC | [email protected] |
| 2005-03-24 17:08:39 UTC | [email protected] |
| 2005-03-24 18:28:38 UTC | [email protected] |
| 2005-03-24 18:45:39 UTC | [email protected] |
| 2005-03-24 20:41:20 UTC | [email protected] |
| 2005-03-24 22:06:48 UTC | [email protected] |
| 2005-03-25 00:14:09 UTC | [email protected] |
| 2005-03-25 11:32:35 UTC | [email protected] |
| 2005-03-25 13:07:25 UTC | [email protected] |
| 2005-03-28 09:35:32 UTC | [email protected] |
| 2005-03-28 09:35:58 UTC | [email protected] |
| 2005-03-28 12:22:04 UTC | [email protected] |
| 2005-03-30 20:48:36 UTC | [email protected] |
| 2005-04-02 17:20:27 UTC | [email protected] |
| 2005-04-03 10:15:02 UTC | [email protected] |
| 2005-04-03 11:02:50 UTC | [email protected] |
| 2005-04-03 11:20:07 UTC | [email protected] |
| 2005-04-03 16:09:35 UTC | [email protected] |
| 2005-04-03 17:20:15 UTC | [email protected] |
| 2005-04-03 17:40:58 UTC | [email protected] |
| 2005-04-04 06:37:10 UTC | [email protected] |
| 2005-04-04 17:43:25 UTC | [email protected] |
| 2005-04-05 11:12:57 UTC | [email protected] |
| 2005-04-05 13:08:34 UTC | [email protected] |
| 2005-04-05 13:14:32 UTC | [email protected] |
| 2005-04-05 23:38:35 UTC | [email protected] |
| 2005-04-06 00:51:28 UTC | [email protected] |
| 2005-04-06 04:18:13 UTC | [email protected] |
| 2005-04-06 19:30:21 UTC | [email protected] |
| 2005-04-06 19:31:59 UTC | [email protected] |
| 2005-04-07 06:50:59 UTC | [email protected] |
| 2005-04-08 00:10:31 UTC | [email protected] |
| 2005-04-08 20:42:03 UTC | [email protected] |
| 2005-04-12 00:32:03 UTC | [email protected] |
| 2005-04-12 00:33:06 UTC | [email protected] |
| 2005-04-13 00:27:41 UTC | [email protected] |
| 2005-04-13 03:44:02 UTC | [email protected] |
| 2005-04-13 23:32:05 UTC | [email protected] |
| 2005-04-14 01:11:06 UTC | [email protected] |
| 2005-04-14 01:11:25 UTC | [email protected] |
| 2005-04-14 01:11:55 UTC | [email protected] |
| 2005-04-14 03:39:35 UTC | [email protected] |
| 2005-04-15 12:53:10 UTC | [email protected] |
| 2005-04-15 12:53:31 UTC | [email protected] |
| 2005-04-15 13:56:39 UTC | [email protected] |
| 2005-04-18 05:22:47 UTC | [email protected] |
| 2005-04-18 10:49:05 UTC | [email protected] |
| 2005-04-19 01:32:31 UTC | [email protected] |
| 2005-04-19 02:14:02 UTC | [email protected] |
| 2005-04-20 16:51:39 UTC | [email protected] |
| 2005-04-21 14:43:18 UTC | [email protected] |
| 2005-04-21 15:06:14 UTC | [email protected] |
| 2005-04-22 02:14:53 UTC | [email protected] |
| 2005-04-22 11:32:21 UTC | [email protected] |
| 2005-04-22 14:07:58 UTC | [email protected] |
| 2005-04-23 09:20:54 UTC | [email protected] |
| 2005-04-23 15:10:14 UTC | [email protected] |
| 2005-04-23 17:12:11 UTC | [email protected] |
| 2005-04-23 18:21:05 UTC | [email protected] |
| 2005-04-24 16:27:59 UTC | [email protected] |
| 2005-04-24 22:34:06 UTC | [email protected] |
| 2005-04-24 22:37:33 UTC | [email protected] |
| 2005-04-25 07:26:47 UTC | [email protected] |
| 2005-04-25 08:36:00 UTC | [email protected] |
| 2005-04-25 12:04:48 UTC | [email protected] |
| 2005-04-25 14:48:49 UTC | [email protected] |
| 2005-04-25 18:18:09 UTC | [email protected] |
| 2005-04-28 09:38:30 UTC | [email protected] |
| 2005-04-29 01:26:34 UTC | [email protected] |
| 2005-04-29 01:37:15 UTC | [email protected] |
| 2005-04-29 06:56:52 UTC | [email protected] |
| 2005-04-30 04:57:13 UTC | [email protected] |
| 2005-05-01 13:01:55 UTC | [email protected] |
| 2005-05-01 15:45:56 UTC | [email protected] |
| 2005-05-02 03:14:59 UTC | [email protected] |
| 2005-05-03 02:19:06 UTC | [email protected] |
| 2005-05-03 02:21:49 UTC | [email protected] |
| 2005-05-03 04:33:49 UTC | [email protected] |
| 2005-05-05 00:37:10 UTC | [email protected] |
| 2005-05-05 01:00:27 UTC | [email protected] |
| 2005-05-05 09:28:47 UTC | [email protected] |
| 2005-05-05 09:29:15 UTC | [email protected] |
| 2005-05-09 09:54:34 UTC | [email protected] |
| 2005-05-09 09:54:41 UTC | [email protected] |
| 2005-05-10 09:02:27 UTC | [email protected] |
| 2005-05-18 00:42:02 UTC | [email protected] |
| 2005-05-18 17:06:41 UTC | [email protected] |
| 2005-05-24 06:36:12 UTC | [email protected] |
| 2005-05-24 18:08:36 UTC | [email protected] |
| 2005-05-28 08:53:34 UTC | [email protected] |
Another email from the criminals:
ATTN: FIRSTNAME LASTNAME WE ARE IN RECIEPT OF YOUR DETAILED INFORMATION AS WELL AS CONTACTS. PLEASE NOTE THAT WE ARE DOING ALL WE CAN PRESENTLY TO SORT OUT PAYMENTS TO YOU WITHIN THE SHORTEST POSSIBLE TIME. WE HAVE SUBMITTED YOUR DETAILS TO OUR ACCREDITED CLEARING HOUSE BASED IN THE UK, OVERSEAS ASSET MANAGEMENT LTD. THIS COMPANY DOES ALL VERIFICATIONS, CONFIRMATIONS AND FINAL APPROVALS ON OUR BEHALF BEFORE WE CAN PROCEED TO DISBURSE ANY PAYMENTS THROUGH OUR BANKERS. BE REST ASSURED THAT WITH YOUR FULL COOPERATION WITH THIS PROCESSING/CLEARING HOUSE IN UK, YOUR WINNING WILL BE SCHEDULED FOR IMMEDIATE RELEASE TO YOU. YOU ARE THERFORE REQIURED TO PROVIDE FULLY ANY INFORMATION AS REQUIRED BY THIS OFFICE IN THE UK. FEEL FREE TO MAKE IMMEDIATE CONTACTS WITH THE OVERSEAS ASSET MANAGEMENT LTD ON, OVERSEAS ASSET MANAGEMENT LTD CALTHORPE ROAD EDGBASTON BIRMINGHAM B17 3TS, UNITED KINGDOM TEL: + 44 782 183 0842 TEL/FAX: +44 870 762 0889 [email protected] CONTACT DR. HENRY LEWIS NOTE: WE SHALL HONOUR ONLY SUCCESFULLY CLEARED WINNERS FROM THE OVERSEAS ASSET MANAGEMENT LTD OFFICE. THIS IS DUE BECAUSE, ONLY THIS OFFICE CAN CLEARIFY FULLY YOUR IDENTITY ON OUR BEHALF. THANK YOU. YOURS FAITHFULLY, MR. JIM WALKER (LOTTERY CO-ORDINATOR) __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp
Message headers:
Date: Thu, 24 Feb 2005 10:26:23 -0500 From: [email protected] To: emailaddress (Firstname Lastname) Subject: CONFIRMED MIME-Version: 1.0 X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 81.136.5.4
WHOIS details for sending network (IP 81.136.5.4):
inetnum: 81.136.0.0 - 81.136.23.255
remarks: *******************************************************
remarks: * Please send abuse reports to [email protected] *
remarks: *******************************************************
netname: BT-ADSL
descr: IP Pools
country: GB
admin-c: BTOW1-RIPE
tech-c: BTOW1-RIPE
status: ASSIGNED PA
mnt-by: BTNET-MNT
mnt-lower: BTNET-MNT
mnt-routes: BTNET-MNT
changed: [email protected] 20031114
source: RIPE
route: 81.128.0.0/11
descr: BT Public Internet Service
origin: AS2856
mnt-by: BTNET-MNT
changed: [email protected] 20030615
source: RIPE
role: BT OPENWORLD OPERATIONAL SUPPORT
remarks: ********************************************************
remarks: * Please send abuse reports to [email protected] *
remarks: * *
remarks: ********************************************************
address: BT
address: Openworld
address: UK
e-mail: [email protected]
admin-c: IT337-RIPE
tech-c: RJG3-RIPE
nic-hdl: BTOW1-RIPE
mnt-by: BTNET-MNT
changed: [email protected] 20030520
source: RIPE
WHOIS details for domains "overseasassetmanagement.com":
Request: overseasassetmanagement.com connected to whois.domainpeople.com [204.174.223.70:43] ... Registrant: Sanusi Sunkanmi 115 Robins Ct Hackettstown, NJ 07840 United States of America Registrar: DomainPeople Inc. Domain Name: overseasassetmanagement.com Created on .............Fri Jun 06 02:55:25 2003 Expires on .............Mon Jun 06 05:55:33 2005 Record last updated on .Tue Aug 10 09:02:14 2004 Status .................HOLD Administrative Contact: Trem Int Limted Ron Ellis Byfangerstr.32 Essen, NRW 45257, DE (49)201 4868425 (49)201 4868425 [email protected] Technical Contact: Trem Int Limted Ron Ellis Byfangerstr.32 Essen, NRW 45257, DE (49)201 4868425 (49)201 4868425 [email protected] Billing Contact: Trem Int Limted Ron Ellis Byfangerstr.32 Essen, NRW 45257, DE (49)201 4868425 (49)201 4868425 [email protected] Domain servers in listed order: ns1.vhostdns2.com 12.168.33.98 ns2.vhostdns2.com 12.168.33.99 (overseasassetmanagement.com) Register your domain name at http://www.domainpeople.com
Status "HOLD" usually means that there's a problem with the domain, such as it's registration fee was not paid (or the credit card payment bounced) or it was registered with fake contact details.
|