419 Scam – "TERRAWORLD PROMO LOTTERY (Manfred Altmeier)

• About the 419 (Advance Fee) scam
• Frequently asked Questions (419 FAQ)
• Is that email a scam? Check or report it here!
  
• Email addresses used by 419 scammers
• Phone numbers used by 419 scammers
  
• How to report 419 spam to us
• Domains registered by 419 scammers
  
• Company names mentioned in 419 spam
  
• What can you do when you receive 419 spam
  
• Support our efforts to stop scams!
  

"TERRAWORLD PROMO LOTTERY (Manfred Altmeier)" are labels used by a fake lottery and fake "claims agent" operating in Canada and Nigeria.

Please send us replies by "claims agents", especially money demands and payment instructions, we will publish them here.

Please forward copies of fraud emails to the abuse department of webmail address listed as the contact email for the "claims agent". Ask for the addresses to be suspended because they are used in a 419 fraud (see 419 FAQ).

Are you sick of spam too? Do you want it stopped now? Try jwSpamSpy, the spamfilter we use to track the spammers! Free 30-day trial version available now!

Domain registered for this scam:

• hillcrestsecurities.com (2005-03-08)
  

Example email:

From: "Dianna Leash" 
To: <emailaddress>
Sent: Sunday, February 20, 2005 6:51 PM
Subject: TerraWorld


WINNING NOTIFICATION: VERIFICATION PROCESS

ATTENTION

TERRAWORLD PROMO LOTTERY, ONTARIO CANADA.
FROM: THE DESK OF THE PROMOTIONS MANAGER,
INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT,
REF: TDCAD /377208334/78m
BATCH: 04/0615/mxn.

ATTENTION

RE/ AWARD NOTIFICATION; FINAL NOTICE
we are pleased to inform you of the announcement
today of winners of the TERRAWORLD PROMO LOTTERY, ONTARIO
CANANDA INTERNATIONAL PROGRAMS held on
March 22nd, 2005

Your email address was attached to ticket number
xxxxxxxxxxxx with serial number xxxxxxxxx drew
the lucky numbers xxxxxxxxxxx, and consequently
won the lottery in the 3rd category.
You have therefore been approved for a lump sum pay
out of US$1,000.000.00 in cash credited to file REF
TDCAD /377208334/78m. This is from total prize money
of US$7,000,000.00 shared among the seven
international winners in this category.
All participants were selected through a computer ballot system drawn
form 100,000 email addresses from Australia, New Zealand, America,
Europe, North America, Africa and Asia as part of International Promotions
Program, which is conducted annually.

CONGRATULATIONS!

Your fund is now deposited with a financial institution
insured in your email address. Due to the mix up of
some numbers and email-addresses, we ask that you keep this
award strictly from public notice until your claim has
been processed and your money remitted to your
account.

This is part of our security protocol to avoid
double claiming or unscrupulous acts by participants
of this program.

We hope with a part of your prize, you will
Participate in our end of year high stakes
US$10Million International Lottery.
To begin your claim, please contact your claim agent;

Name: Manfred Altmeier
Email: [email protected]

Remember, all prize money must be claimed not later
than April 17th,2005, After this date, all funds will
be returned as unclaimed.

NOTE: In order to avoid unnecessary delays and
complications, please remember to quote your
reference and batch numbers in every one of your
correspondences with your agent.
Furthermore, should there be any
change of your address, do inform your claims agent
as soon as possible.

Congratulations again from all our staff and thank
you for being part of our promotions program.

Dianna Leash

THE PROMOTIONS MANAGER, TERRAWORLD PROMO LOTTERY CANADA

N.B. Any breach of confidentiality on the part of
the winners will result to disqualification
We wish to inform you that you are urgently required to forward your details
This will enable our account department to begin with the processing of your
fund.
Hence, you are advice to send your full name, contact` address details,
phone and fax number, age, sex, profession, nationality, postal address.
Subject upon your receipt to this mail, we will begin the processing and
zoning of your fund through any of our payment offices spread across the
continents. Your funds have been deposited in an escrow account with our
paying bank insured in your name.

REQUIRED DETAILS.
FIRST NAME...................... LAST
NAME...................
CONTACT
ADDRESS
........................................
TELEPHONE NUMBER....................FAXES
NUMBER.............
AGE.................... GENDER...............
MARITAL
STATUS.......................NATIONALITY...................
OCCUPATION.... .........................
REF NUMBER............................
SERIAL NUMBER........................
LUCKY/TICKET NUMBER.....................
NAME AND ADDRESS OF NEXT OF
KIN......................................
SEND THE COMPLETED FORM TO YOUR CLAIM OFFICER ,MANFRED ALTMEIER

This is a few weeks later:

From: TerraWorld Promotions
To: emailaddress
Sent: Monday, March 28, 2005 8:25 PM
Subject: Verification


Dear Winner,

I am in receipt of your completed winners form. Verification process 
takes
about 2-3 working days.

Upon verification, you will be contacted.

Please note that you must keep your winning numbers to your self and away
from the general public to avoid double claims or duplication of numbers
and
when that happens, you would be automatically disqualified.

Attached is the "FAQ" document to answer all your questions and concerns.

Congratulations! once more from all of our staff here at TerraWorld
Promotions.

Best Regards,

Manfred Atlmeier,

Direct Line: +  1(647)219-7491

It's imperative to acknowledge the receipt of this email.

Payment instructions:

From: "Msoft Group LLC" <[email protected]>
To: <emailaddress>
Sent: Tuesday, 05 April, 2005 1:01
Subject: Transfer Instructions


Dear Mr. Firstname Lastname



Congratulations! Your prize winnings of $1,000,000.00 has been 
officially approved by our accounting department and will be 
transferred upon you completing and signing the document below. Due 
to profit maximization and the need to be a fierce competitor in the 
technology marketing segment we have been successful in out sourcing 
our productions to other countries outside North-America that the 
labour market is friendlier in financial terms and competitive wise. 
We also deal directly with off-shore banks for tax exempt reasons and 
capital maximization niches that regular banks do not offer. We 
currently deal with two major accredited off-shore financial entities 
and we expect all our prize winners that have won lump sums of money 
to secure a checking account with either one of them for easier 
facilitation of the transfer of your winnings and in respect to the 
new anti-money laundery laws and regulations in accordance with wire 
tranfers exceeding $250,000.00.  Be advised that the statute time of 
limitation for your claim expires on  the 15th  of April, 2005. Once 
we are in receipt of the completed form below with the bank details 
enclosed, your transfer will be enacted with a swift in-house 
transfer which gets posted on the same day. If you already have an 
off-shore account with one of this banks , do inform us. The banks 
have different requirements and the requirement are stated below: 
Please be informed that your winnings can not be transfer to your 
account directly untill an account is secured with one of our 
accredited paying banks. This is due to promotional and gaming board 
regulations.
1. HSBC offshore ( www.offshore.hsbc.com/hsbc), below are the requirements:
     General and accounts enquiry : Tel :011-44-1534-616000
  (i)  A certified copy of your passport mailed by post only.
  (ii) Proof of residence such as a bill or any other document that 
clearly shows your addres
  (iii)A completed online form
  (iv)A reference from your current bank
  (v) This is an off-shore bank, so minimum deposit do 
apply.(USD$5000-USD$10,000)

2. HillCrest Securities (www.hillcrestsecurities.com), below are the 
requirements:
     Toll free for North American callers: : 1-888-608-0820 ext.1 
(charges may apply when calling outside North America)

(i) A copy of a piece of government issued identification such as a 
driver's license, passport e.t.c
(ii) A completed online form
(iii) This is an off-shore bank, so minimum deposit do 
apply.(USD$3000-USD$10,000)

Do contact the bank designated to your region and upon securing an 
account, do complete and send back the form below.

Please note that HSBC is applicable to all winners in Carribean, 
Latin America, And South Asia Region or category "F" winners.

And HCS is applicable to winners in North America, Afirca,Western 
Europe, Eastern Europe and middle East  Regions

Winner's first and last name  ________________________________
Amount won: _______________________________
Batch number / ticket number : _______________________________
Chosen bank:___________________________________Account 
Number__________________________________
Claim agent's name :_________________________________________
Claim agent's reference number: _____________________________
Name : ___________________________      ____________________________
                                                                     
                 Date

             _________________________________
                                   Signature

Sincere Regard,

Daniel Wayne
Tel: + 1(647) 833-2949

-- 

Message headers:

Received: from [206.186.75.5] by ws1-2.us4.outblaze.com with http for
    [email protected]; Mon, 04 Apr 2005 11:01:39 -0500
From: "Msoft Group LLC" 
To: [email protected]
Date: Mon, 04 Apr 2005 11:01:39 -0500
Subject: Transfer Instructions
X-Originating-Ip: 206.186.75.5

The victim was mailed a bogus certificate named "CERT+Surname.doc":

• Author: "Admin"
  
• Company: "Worldcom Nigeria"
  
• Last saved by: "yespcnet04"
  

WHOIS details for sending network (IP 206.186.75.5):

     CustName:   Sprint Canada Inc.
     Address:    301 Industrial Ave
     City:       Vancouver
     StateProv:  
     PostalCode: V6A 4E6
     Country:    CA
     RegDate:    2001-05-14
     Updated:    2001-05-14
     
     NetRange:   206.186.75.0 - 206.186.75.255 
     CIDR:       206.186.75.0/24 
     NetName:    NET-SPRINT-186-75-A
     NetHandle:  NET-206-186-75-0-1
     Parent:     NET-206-186-0-0-1
     NetType:    Reassigned
     Comment:    
     RegDate:    2001-05-14
     Updated:    2001-05-14
     
     NOCHandle: NOC71-ORG-ARIN
     NOCName:   Sprint Canada Inc. 
     NOCPhone:  416-496-1644
     NOCEmail:  [email protected] 
     
     TechHandle: NOC71-ORG-ARIN
     TechName:   Sprint Canada Inc. 
     TechPhone:  416-496-1644
     TechEmail:  [email protected] 
     
     OrgAbuseHandle: ABUSE43-ARIN
     OrgAbuseName:   ABUSE 
     OrgAbusePhone:  416-496-4942
     OrgAbuseEmail:  [email protected]
     
     OrgNOCHandle: NOC71-ORG-ARIN
     OrgNOCName:   Sprint Canada Inc. 
     OrgNOCPhone:  416-496-1644
     OrgNOCEmail:  [email protected]
     
     OrgTechHandle: ILOP-ARIN
     OrgTechName:   IRS Local Order Provisioning 
     OrgTechPhone:  416-773-7535
     OrgTechEmail:  [email protected]
     
     OrgTechHandle: NOC71-ORG-ARIN
     OrgTechName:   Sprint Canada Inc. 
     OrgTechPhone:  416-496-1644
     OrgTechEmail:  [email protected]
     
     OrgTechHandle: TECHN7-ARIN
     OrgTechName:   Technical Provisioning 
     OrgTechPhone:  604-331-2952
     OrgTechEmail:  [email protected]

WHOIS details for "hillcrestsecurities.com":

Request: hillcrestsecurities.com
connected to whois.enom.com [66.151.151.170:43] ... 

Registration Service Provided By: Hillcrest Securities
Contact: [email protected]
Visit: 
	
Domain name: hillcrestsecurities.com

Administrative Contact:
   Hillcrest Securities
   Edward Peter ([email protected])
   +1.5555551212
   Fax: +1.-
   303- 1279 Jane Street
   Toronto, ONTARIO M6M4Y4
   CA

Billing Contact:
   Hillcrest Securities
   Edward Peter ([email protected])
   +1.5555551212
   Fax: +1.-
   303- 1279 Jane Street
   Toronto, ONTARIO M6M4Y4
   CA

Technical Contact:
   Hillcrest Securities
   Edward Peter ([email protected])
   +1.5555551212
   Fax: +1.-
   303- 1279 Jane Street
   Toronto, ONTARIO M6M4Y4
   CA

Registrant Contact:
   Hillcrest Securities
   Edward Peter ([email protected])
   +1.5555551212
   Fax: +1.-
   303- 1279 Jane Street
   Toronto, ONTARIO M6M4Y4
   CA

Status: Locked

Name Servers:
   dns1.name-services.com
   dns2.name-services.com
   dns3.name-services.com
   dns4.name-services.com
   dns5.name-services.com
   
Creation date: 08 Mar 2005 16:26:02
Expiration date: 08 Mar 2006 16:26:02

Are you sick of spam too? Do you want it stopped now? Try jwSpamSpy, the spamfilter we use to track the spammers! Free 30-day trial version available now!