|
419 Scam Example: "Microsoft Email Lottery"
One of the most common fake lottery scams on the internet is the "Microsoft lottery" or "Micro Lottery International". Microsoft or Bill Gates do not run any lotteries (see
this article
on Microsoft's website or contact the local Microsoft office in your country to confirm this for yourself). Scammers probably use these names because of their high name recognition value that lends credibility to the scam.
Basically any "email lottery" that involves randomly selected email address is a 419 scam. Fake lottery scams operate out of West Africa, but also the Netherlands, Spain, Belgium and other European countries as well as South Africa.
If you reply to such fraudulent mails, you will never receive any money. Instead the scammers are after your money. Read more about it here. See the following link for "Winning Notifications" for a "Microsoft Lottery":
Here are some email addresses used for such scams.
If you receive spam that mentions such domains, complain to [email protected].
Return-path: <[email protected]> Received: from wmailmta04of.seamail.go.com (unknown [199.181.134.41]) by ruby.pobox.com (Postfix) with SMTP for <[email protected]>; Wed, 14 Jul 2004 13:58:46 -0400 (EDT) Received: (qmail 19583 invoked from network); 14 Jul 2004 17:45:56 -0000 Received: from jtp02.seamail.go.com (HELO gomailjtp02) (10.192.72.221) by wmailmta04o.seamail.go.com with SMTP; 14 Jul 2004 17:45:56 -0000 Message-ID: <5601911.1089827857728.JavaMail.microsoftclaims04@gomailjtp02> Date: Wed, 14 Jul 2004 10:57:37 -0700 (PDT) From: microsoftclaims 04 <[email protected]> To: [email protected] Subject: Congratulation!!!! Microsoft offer.File for claim Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit X-Mailer: GoMail 3.0.1 MICROSOFT EMAIL LOTTERY INTERNATIONAL / WORLD INTERNET LOTTO CENTRE AMSTERDAM FROM: INTERNATIONAL PROMOTION / PRIZE AWARD DEPT. PROMOTING INTERNET USAGE OVER THE GLOBE ( WE ENCOURAGE GLOBALIZATION) REF: CIL/231-FMI0431/09 BATCH: IPD/15/096/PTNL RE: WINNING NOTIFICATION/FINAL NOTICE Sir/Madam We are pleased to inform you of the result of the Lottery Winners International programs held on the 13th of JULY2004. Your e-mail address attached to ticket number 20511465897-6287 with serial number 472-971103 drew lucky numbers 8-66-97-22-46-88 which consequently won in the 2nd category, you have therefore been approved for a lump sum pay out of US$ 500,000.00 (Five Hundred Thousand United States Dollars) CONGRATULATIONS!!! Due to mix up of some numbers and names, we ask that you keep your winning information very confidential till your claims has been processed and your prize/money Remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants. All participants were selected through a computer ballot system drawn from over 200,000,000 company and 300,000,000 individual email addresses and names from all over the world. This promotional program takes place annually. We hope with part of your winning you will take part in our next year USD100 million international lottery. To file for your claim, please contact our/your fiducial agent MR NORRIS CARRET, MRS BECKY VAN BOXTEL CITYGATE TRUST AGENCY (Claims negotiator, cliams assessor,claims inspector,claims underwiter, claims adjuster) TEL/ 0031-612--291-938 FAX/ 0031847300040 Email: [email protected] Note that all winning must be claimed not later than 13th August 2004. After this date all unclaimed, funds will be included in the next stake. Please note in order to avoid unnecessary delays and complications please remember to quote your reference number and batch numbers in all correspondence. Furthermore, should there be any change of address do inform our agent as soon as possible. Congratulations once more from our members of staff and thank you for being part of our promotional program. Note: Anybody under the age of 18 is automatically disqualified. Sincerely Yours, Josephine Van Daal Lottery Coordinator. Alternative Email of the agency [email protected] _______________________________________________________ Expn.com e-mail: http://expnmail.go.com The phone number used for contact is a Dutch mobile number.
From: <[email protected]>
Return-Path: <[email protected]> Received: from wmailmta04of.seamail.go.com ([199.181.134.41]) by ################ with smtp (Exim 4.43) id 1ClqYk-0005r7-AA for ################; Tue, 04 Jan 2005 16:25:22 +0100 Received: (qmail 3994 invoked from network); 4 Jan 2005 14:56:53 -0000 Received: from sportpass01.starwave.com (HELO wmailweba01) (10.192.72.91) by wmailmta04o.seamail.go.com with SMTP; 4 Jan 2005 14:56:53 -0000 Message-ID: <561568.1104851869470.JavaMail.microsoft213@wmailweba01> Date: Tue, 4 Jan 2005 07:17:49 -0800 (PST) From: microsoft sweepstakes <[email protected]> To: [email protected] Subject: WINNING NOTIFICATION!!! Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Mailer: GoMail 3.0.1 X-MailScanner-SpamCheck: spam, SpamAssassin (score=10.642, required 5, MILLION_USD 2.80, NIGERIAN_BODY1 3.40, NIGERIAN_BODY2 0.60, PLING_PLING 0.03, RCVD_IN_BL_SPAMCOP_NET 1.22, SUBJ_ALL_CAPS 0.67, UNCLAIMED_MONEY 1.58, US_DOLLARS_3 0.35) X-MailScanner-From: [email protected] MICROSOFT WORLD INTERNATIONAL SWEEPSTAKES B.V = 58B MASSTRAAT BILLDEN, = 1245BN AMSTERDAM ZUIDOOST, = AMSTERDAM, THE NETHERLANDS. FROM: THE DESK OF THE MANAGING DIRECTOR. INTERNATIONAL PROMOTION/PRIZE AWARD DEPT S.C.F.N; ATN45782452/GTR BATCH: ZXD26709476AAF. TEL/Fax; 0031-650-958-320. ATTN: CEO Dear Winner, We are pleased to inform you of the result of the Internet compensation pro= motion programs held on the 4th of January, 2005 and it is aimed at compens= ating frequent Internet explorers in all over the world. Your e-mail addres= s attached to ticket number; GY5890564 with serial number K42747XK2004, bat= ch number ZXD26709476AAF, lottery reference number 1780234CV and drew from = lucky numbers 452-678-245-789-558 which consequently won in the 2nd categor= y, you have therefore been approved for a lump sum pay out of US$1,000,000.= 00 (ONE MILLION UNITED STATES DOLLARS) only by the Microsoft World Company= , payable in cash credited to security file numbers; ATN45782452/GTR at the= Netherlands Payment Authority. CONGRATULATIONS! Due to the mix up of some numbers and email addresses, we ask that you keep= your winning information=92s confidential until your claim has been proces= sed and your money remitted to you in cash or into your provided bank accou= nt. This is part of our security protocols to avoid unwarranted abuse of th= is program by some participants. MICROSOFT WORLD INTERNATIONAL EXPLORATION = COMPANY is a global leader in international software producers and one of t= he largest processor of software in the world since 1980. We have help peop= le and Businesses by providing affordable, reliable and convenient payment = services and software in the world today and we have invested US$2.5b into = software, hardware, a simple to use interface and it is a great opportunity= to anyone looking to increase sales through email marketing! so you can r= ealize your dream of financial independence.=20 Note that all winners were selected through a computer ballot-system drawn = from over 500,000 companies and 250,000,000 personal email addresses from a= ll over the world online of which five where selected at random as winners = in different category. This promotion program takes place every decade conn= ected to the Olympic sports organization. This compensational program was p= romoted and sponsored by William Henry Gates III and His Giant cofounder of= the Microsoft Corporation, holds 30.7 percent of its stock making him one = of the richest people in the United States and the world today. He was the = marketing and sales strategist behind many of Microsoft's software deals. T= heir software became the industry standard in the early 1980s and has just increased in distribution as the company has grown, Largest so= ftware producer in the world (Microsoft) and Mr. Paul Gardner Allen (Shareh= older in Microsoft). We hope that you will have the chance of receiving com= pensation next decade as you keep on browsing the net to boost the sales of= software materials in all over the world. To obtain your claim, please contact the processing department; MRS. LIZZY EDMOND,=20 FOR DR.LUKE DAVIES (DIRECTOR OF OPERATIONS). ECOWORLD WIDE INTERNATIONAL BV.=20 (MICROSOFT ACCREDITED LOTTERY CLAIM AGENCY IN THE NETHERLANDS). TEL: +31-610-085-416. Email: [email protected] Remember, all winnings must be claim not later than 20th of January, 2005. = After this date all unclaimed funds will be return to the promotion company= . Please note that in order to avoid unnecessary delays and complications, = remember to always quote your S.C.F.N and batch numbers in all your corresp= ondence with Ecoworld Wide International Bv. Furthermore, should there be a= ny change of your contact address or information=92s about you, do inform u= s as soon as possible to avoid disqualification of winnings. Congratulations once again from all the members of our staff and thank you = for being part of our promotion program and publications. Finally, Any brea= ch of confidentiality on the part of any winners will result to disqualific= ation.=20 Yours Sincerely, MRS. SLOTHMAN JOSS. (LOTTERY CO-ORDINATOR). MICROSOFT WORLD INTERNATIONAL EXPLORATION. _______________________________________________________ Expn.com e-mail: http://expnmail.go.com The following version of the scam involving "Mrs. Monica Lopez" and "Gary Walker" originate from the same source as the "Jack Harold" version of the scam, but we also have a "Jack Harold" version from a diferent source. From: "MSWORDLOTTOPROMO" <[email protected]> Here is a reply from "GARY WALKER": Date: Wed, 23 Feb 2005 03:13:55 -0500 From: [email protected] To: emailaddress Cc: emailaddress Subject: BE ADVISED (Firstname Lastname) MIME-Version: 1.0 X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 192.116.153.130 X-AOL-Language: english Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Content-Length: 796 Goodday, I am In receipt of your mail and, I must tell you that If you want your check to delivered to you, you will have to pay the courier charges. And, if you decide to use the online banking process, you will have to pay for activation, which will cost you $5200. I would advise you to use the courier option.That will be cheaper.Always keep me informed on any developments.Have a lovely day Gary __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register
WHOIS details for sending network (IP 192.116.153.82, 192.116.153.130): inetnum: 192.116.153.0 - 192.116.157.255 netname: GILAT-SATCOM-BLOCK-47-48-49-50-51 descr: Gilat-Satcom remarks: For abuse issues related to Gilat, email [email protected] notify: [email protected] country: GB admin-c: GS3350-RIPE tech-c: GS3350-RIPE status: ASSIGNED PA mnt-by: AS9116-MNT mnt-lower: AS9116-MNT changed: [email protected] 20050102 source: RIPE route: 192.116.128.0/18 descr: Goldenlines remarks: For addressing issues, email [email protected] remarks: For abuse issues, email [email protected] origin: AS9116 mnt-by: AS9116-MNT changed: [email protected] 20041121 source: RIPE role: Gilat Support address: Gilat Satcom address: 21D Yagia Kapaim st. Petach-Tikva, Israel phone: +972 3 9255000 fax-no: +972 3 9217938 admin-c: DR5299-RIPE admin-c: GE2074-RIPE tech-c: DR5299-RIPE tech-c: GE2074-RIPE trouble: [email protected] e-mail: [email protected] nic-hdl: GS3350-RIPE mnt-by: AS9116-MNT changed: [email protected] 20040909 source: RIPE Here is the reply:From: MICROSOFTWORD_LOTTERY Sent: Wednesday, January 26, 2005 10:00 PM Subject: ELECTRONIC MAIL AWARD (Very Important) FROM: THE DESK OF THE E-MAIL PROMOTIONS MANAGER, INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT MICROSOFT WORD LOTTERY, UK 3B Olympic Way, Sefton Business Park, Aintree, Liverpool, L30 1RD. E-mail:[email protected] REF NO: MSW-L/200-334841 BATCH: 2005MJL-01 ELECTRONIC MAIL AWARD WINNING NOTIFICATION We are pleased to inform you of the announcement today of winners of the MICROSOFT WORD E-MAIL MEGA JACKPOT LOTTERY PROGRAMS held on 27th JANUARY 2005. Your company or your personal e-mail address is attached to winning number 27-01JAN-2005-02 MSW, with serial number S/N-00179 drew the lucky numbers 887-13-865-37-10-83, and consequently won in the first lottery category. You have therefore been approved for a lump sum pay out of GBP 1,000,000.00 POUNDS in cash credited to file REF NO: MSW-L/200-334841 This is from total prize money of GBP 7,000,000.00 POUNDS, shared among the Twenty (5) international winners in this category. All participants were selected through our Microsoft computer ballot system drawn form 21,000 names, 3,000 names from each continent, as part of International "E-MAIL" Promotions Program, which is conducted once in every four years for our prominent MS WORD users all over the world, and for the continues use of E-mail. We are sorry to let you know that our site is still under construction,as we are updating our site and our windows 2005. Your fund has been deposited in an escrow account with our affiliate bank here in UK, and insured with your REF NO: MSW-L/200-334841 and your E-mail address, Please note that, you are to contact us via email as we are promoting the use of E-mail,You have the right to call the bank, as we will provide you with the necessary details on how to claim your prize. You are to keep your ref. number and batch number from the public, until you have been processed and your money remitted to your personal account. We hope with your prize,you will be happy to promote the use of E-mail and the use of MS WORD. To claim your winning prize, you must first contact the claims department by email for processing and remittance of your prize money to you. Your assigned claims officer contact email is: Name: Jack Harold E-mail Address: [email protected] He is to help you in claiming your due prize. Remember, all prize money must be claimed not later than the 5th of FEB 2005. All funds not claimed on or before the fixed date will be penalized accordingly. NOTE: In order to avoid unnecessary delays and complications, please remember to quote your reference and batch numbers in all correspondences with your claims officer. Sincerely, Mrs. Monica Lopez For MS WORD LOTTO UK. Any winner below the age of 18years is automatically disqualified NOTE: Do not reply this mail. You are to contact your claims officer immediately. SPONSORS: CHIEF SPONSOR;MICROSOFT CO-OPERATIONS UK, MICROSOFT CO-OPERATIONS ASIA MICROSOFT CO-OPERATIONS USA, ALPHA PRIVATE BANK UK, ALPHA EXPRESS DELIVERIES UK. ___________________________________________________________________________ Mail sent from WebMail service at PHP-Nuke Powered Site - http://www.thexboxmafia.com Sending network (IP 80.179.242.243):Return-Path: <[email protected]> Received: from bay21-f42.bay21.hotmail.com (EHLO hotmail.com) (65.54.233.131) by ############# (mx069) with SMTP; 08 Feb 2005 02:33:04 +0100 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 7 Feb 2005 17:31:00 -0800 Message-ID: <[email protected]> Received: from 80.179.242.243 by by21fd.bay21.hotmail.msn.com with HTTP; Tue, 08 Feb 2005 01:30:41 GMT X-Originating-IP: [80.179.242.243] X-Originating-Email: [[email protected]] X-Sender: [email protected] In-Reply-To: <###########################@##############> From: "Jack Harold" <[email protected]> To: emailaddress Subject: ATTENTION: REF: MSW-L/200-334841 Date: Tue, 08 Feb 2005 01:30:41 +0000 Mime-Version: 1.0 Content-Type: text/plain; format=flowed ATTENTION: REF: MSW-L/200-334841 I am MR Jack Harold the fiduciary agent assigned to your case. I wish to Congratulate you on your victory,you are a lucky person to have won this lottery. Your email address was chosen this quarter from our new java-based software promotion that randomly selects email addresses from the web from which winners are selected. You are required to forward the following details to help facilitate the processing of your claims and certificate to enable the release of your winnings. 1. Full names. 2. Residential address. 3. Phone number. 4. Fax number. 5. Occupation. 6. Sex. 7. Age. 8. Nationality. You are adviced to forward these informations as soon as possible to enable us attend to your file.Please note that your funds have been deposited safely in a security firm in Europe,and your information will be forwarded to them before they can release your winnings. After you have sent down these information, a certificate will be prepared for you. This is to be your proof of winning from this office to the payment center before they release your funds.You are adviced to keep your winning numbers to yourself to avoid unscripulous elements from taking advantage of the situation. Once again, congratulations. Regards, Jack Harold. ........................................................................ This email and its attachments are confidential and intended for the exclusive use of the addressee(s). This email and its attachments may also be privileged or protected by legal rules. If you have received this by mistake please let us know by reply immediately and destroy the email and its attachments without reading, copying or forwarding the contents. inetnum: 80.179.242.224 - 80.179.242.255 netname: Gilat-ART2036 descr: Please Send Abuse/SPAM complaints To [email protected] country: GB admin-c: DR5299-RIPE tech-c: DR5299-RIPE status: ASSIGNED PA notify: [email protected] changed: [email protected] 20040617 mnt-by: AS9116-MNT mnt-lower: AS9116-MNT source: RIPE route: 80.179.128.0/17 descr: Golden Lines origin: AS9116 mnt-by: AS9116-MNT changed: [email protected] 20020711 source: RIPE role: DNS REG address: 25 Hsivim st. Petach-Tiikva, Israel e-mail: [email protected] trouble: [email protected] admin-c: GE2074-RIPE tech-c: IB737-RIPE tech-c: AG914-RIPE nic-hdl: DR5299-RIPE notify: [email protected] changed: [email protected] 20030715 mnt-by: AS9116-MNT source: RIPE
WHOIS details for "ms-wordpromos.com" (created 2005-01-26, report to [email protected])
Request: ms-wordpromos.com connected to whois.melbourneit.com [203.27.227.114:43] ... Domain Name.......... ms-wordpromos.com Creation Date........ 2005-01-26 Registration Date.... 2005-01-26 Expiry Date.......... 2006-01-26 Organisation Name.... Microsoft Word Promotions Organisation Address. 6349 south jericho ct. Organisation Address. Organisation Address. centennial Organisation Address. 80016 Organisation Address. CO Organisation Address. UNITED STATES Admin Name........... Microsoft Word Promotions Admin Address........ 6349 south jericho ct. Admin Address........ Admin Address........ centennial Admin Address........ 80016 Admin Address........ CO Admin Address........ UNITED STATES Admin Email.......... [email protected] Admin Phone.......... +1.303617393468 Admin Fax............ Tech Name............ MSN NOC Tech Address......... One Microsoft Way Tech Address......... Tech Address......... Redmond Tech Address......... 98052 Tech Address......... WA Tech Address......... UNITED STATES Tech Email........... [email protected] Tech Phone........... +1.4258828080 Tech Fax............. Name Server.......... pdomns1.msn.com Name Server.......... pdomns2.msn.com
WHOIS details for "mswordpromotionsonline.net" (created 2005-02-28, report to [email protected]
Request: mswordpromotionsonline.net connected to whois.crsnic.net [198.41.3.54:43] ... connected to whois.enom.com [66.151.151.170:43] ... Registration Service Provided By: Microsoft Contact: [email protected] Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress Domain name: mswordpromotionsonline.net Registrant Contact: Harold Jack Harold Jack ([email protected]) +1.9732738041 Fax: none 56 main street cranbury, NJ 08512 US Administrative Contact: Harold Jack Harold Jack ([email protected]) +1.9732738041 Fax: none 56 main street cranbury, NJ 08512 US Technical Contact: NOC MSN NOC MSN ([email protected]) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Billing Contact: NOC MSN NOC MSN ([email protected]) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Status: Locked Name Servers: pdomns1.msn.com pdomns2.msn.com Creation date: 28 Feb 2005 20:02:54 Expiration date: 28 Feb 2006 20:02:54 Here is another "Jack Harold" reply: MICROSOFT WORD LOTTERY DEPT.UK PROMOTION OF E-MAILS DEPT. 3b Olympic Way, Sefton Business Park, Aintree, Liverpool , L30 1R Tel: +44-704-0116-569 Fax: +44-870-1376-954 ATTN:WINNER emailaddress This correspondence officially confirms that we are in receipt of instructions relating to the payment of your lottery winnings of GBP One million pounds,MICROSOFT WORD MEGA JACKPOT PROMO is a way of showing appriciation to satisfy the cravings of the ever-growing number of in use of our MS WORD.After randomly selecting 15,000 participants from an initial database of 300,000 emails and zoning all participants by their respective continents from across the globe, we produced an extensive list from which you have emerged as one of the winners of the Promotional Grand Draw prize. Please complete the form below with correct information and email back to us with a return email. Looking forward to your urgent reply. Yours Faithfully, Jack Harold Email headers: Received: from 192.116.153.130 by by21fd.bay21.hotmail.msn.com with HTTP; Sat, 26 Feb 2005 05:57:24 GMT X-Originating-IP: [192.116.153.130] X-Originating-Email: [[email protected]] The following version of the scam mentions "Monica Lopez" and the "MICROSOFT CO-OPERATIONS" spelling mistake as the scam email dated 2005-01-28, but mentions the name of a different courier service. TRADE WAYS COURIER SERVICES probably is just a new label for DG COURIER SERVICES UK., a known scam. From: mswordpromos [mailto:[email protected]] Sent: Friday, February 11, 2005 11:41 PM Subject: WINNING NOTIFICATION FROM: THE DESK OF THE E-MAIL PROMOTIONS MANAGER, INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT MICROSOFT WORD LOTTERY, UK 3b Olympic Way, Sefton Business Park, Aintree, Liverpool, L30 1RD REF NO: MSW-L/200-26937 BATCH: 2005MJL-01 ELECTRONIC MAIL AWARD WINNING NOTIFICATION We are pleased to inform you of the announcement today of winners of the MICROSOFT WORD E-MAIL MEGA JACKPOT LOTTERY PROGRAMS held on 11th of FEBRUARY 2005.Your company or your personal e-mail address is attached to winning number 1-2FEB-2005-02MSW, with serial number S/N-00168 drew the lucky numbers 887-13-865-37-10-83, and consequently won in the first lottery category. You have therefore been approved for a lump sum pay out of GBP 1,200,000.00 POUNDS in cash credited to file REF NO: MSW-L/200-26937 This is from total prize money of GBP 7,000,000.00 POUNDS, shared among the Twenty (5) international winners in this category. All participants were selected through our Microsoft computer ballot system drawn form 21,000 names, 3,000 names from each continent, as part of International "E-MAIL" Promotions Program, which is conducted once in every four years for our prominent MS WORD user all over the world, and for the continues use of E-mail. We are sorry to let you know that our site is still under construction,as we are updating our site and our windows 2005. Your fund has been deposited in an escrow account with our affiliate bank here in UK, and insured with your REF NO: MSW-L/200-26937 and your E-mail address, Please note that, you are to contact us via email as we are promoting the use of E-mail,You have the right to call the bank, as we will provide you with the necessary details on how to claim your prize. You are to keep your ref. number and batch number from the public, until you have been processed and your money remitted to your personal account. We hope with your prize,you will be happy to promote the use of E-mail and the use of MS WORD. To claim your winning prize, you must first contact the claims department by email for processing and remittance of your prize money to you. Your assigned claims officer contact email is: Name: Micheal Greening E-mail: [email protected] He is to help you in claiming your due prize. Remember, all prize money must be claimed not later than the 25th of FEBUARY, 2005. All funds not claimed on or before the fixed date will be penalized accordingly. NOTE: In order to avoid unnecessary delays and complications, please remember to quote your reference and batch numbers in all correspondences with your claims officer. Sincerely, Mrs. Monica Lopez For MS WORD LOTTO UK; Any winner below the age of 18years is automatically disqualified. NOTE: Do not reply this mail. You are to contact your claims officer immediately. SPONSORS: MICROSOFT CO-OPERATIONS UK, MICROSOFT CO-OPERATIONS ASIA MICROSOFT CO-OPERATIONS USA, TRADE WAYS COURIER SERVICES., ___________________________________________________________________________ Mail sent from WebMail service at PHP-Nuke Powered Site xtrato.comr - http://xtrato.com
"Eric Van Brood / DE HENRI & CO LAW FIRM" scam From: "coordinator" <[email protected]> To: "winner" <emailaddress> Sent: Thursday, 24 February, 2005 0:05 Subject: You won FROM: THE DIRECTOR EUROPEAN PRIZE AWARD DEPT. REF:EL3/9318/04 BATCH:8/163/EL. Attn: Dear Sir/Madam, We are pleased to inform you of the result of the Lottery Winners International programs held on the 30/8/2004. Your e-mail address attached to ticket number: EL-23133 with serial Number: EL-123542, batch number: 8/163/EL-35, lottery Ref number: EL-9318 and drew lucky numbers 7-1-8-36-4-22 which consequently won in the 1st category, you have therefore been approved for a lump sum pay out of US$1,500,000.00 (One Million, Five Hundred Thousand United States dollars) CONGRATULATIONS!!! Due to mix up of some numbers and names, we ask that you keep your Winning information confidential until your claims has been Processed and your money Remitted to you. This is part of our Security protocol to avoid double claiming and unwarranted abuse of This program by some participants. All participants were selected through a computer ballot system drawn from over 40,000 company and 20,000,000 individual email addresses and names from all over the world. This promotional program takes place every year. This lottery was Promoted and sponsored by a group of successful electronic dealers. we hope with part of your winning, you will take part in our next year US$20 million international lottery. To file for your claim, please Contact our paying officer: Contact Person: Mr. Eric Van Brood(Lottery Director) Mr. Eric Van Brood Tel: +31-617-624-035 Email: [email protected] Remember, all winning must be claimed not later than 4th of March, 2005.After this date all unclaimed funds will be included in the next stake. Please note in order to avoid unnecessary delays and complications Please remember to quote your reference number and batch numbers in all correspondence. Furthermore, should there be any change of address do inform our agent as soon as possible. Congratulations once more from our members of staff and thank you for being part of our promotional program. Note: Anybody under the age of 18 is automatically disqualified. yours Sincerely, Eric van Brood Tel: +31-617-624-035 Reply from the claims agent: From: [email protected] [mailto:[email protected]] Date: 28 Feb 2005 11:36 To: "Firstname Lastname" <emailaddress> Subject: RE: Congratulations!/Attorney. Attn: Firstname Lastname. We acknowledge the receipt of your completed form. However, after thorough verification and scrutiny of your information you have been found qualified to receive payment of the prize award of US$ 1,500,000.00 One million five hundred thousand USD). We wish to congratulate formally on your success in our award program. We shall proceed to conclude the payment process of your Lottery prize by opening for you a claim file. Moreover, as an international winner, you are required to legalize all your winning documents in order to instruct the paying bank to credit your account with the sum of US$1,500,000.00. Therefore, we advise that you contact our accredited attorney to act on your behalf in handling the Legal details OR come to the Netherlands for the following procedure: 1) LEGALIZATION OF YOUR DOCUMENTS. 2) ENDORSEMENT AND STAMP DUTY. To this end, the endorsement date has been scheduled for 2nd March 2005 Below is the Information of the lawyer to enable you contact him for the process: DE HENRI & CO LAW FIRM GROENHOVEN 707,1103LV, AMSTERDAM, NETHRLANDS EMAIL: [email protected] TEL: +31-616-026-519. Ensure you forward the file reference number to enable the lawyer identify your file for legalization of the release of your won price swiftly. Note that you shall be responsible for the legal charges for this endorsement. After the endorsement of your winning documents and all requirements of lottery authorities here in the Netherlands met, your file will be passed across to the paying Bank and you shall be contacted by the bank for your funds transfer. Note that your winning prize has been insured to its real value to ensure that no forms of deductions are made until the sum is finally credited into your designated account. We have issued an Irrevocable Guarantee of Payment Bond (IGPB) in your favour, a copy of which will be forwarded to our paying bank for immediate action. All rights of any client to this claim can be denied if the release document is not signed in accordance with the provision of The Netherlands Gaming regulatory Authorities. Once again, congratulations and we look forward to hearing from you soon. Regards, Mr. Eric Van Brood Claims processing supervisor Micro Lottery International Tel: +31 617 624 035 __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp
Finally the fake lawyer asks the victim for cash: From: "Henry Edward" <[email protected]> Message headers: X-Mailer: MIME-tools 5.41 (Entity 5.404) Date: Mon, 28 Feb 2005 03:33:15 -0800 (PST) From: Henry Edward
WHOIS details for sending network (IP 62.163.32.159): inetnum: 62.163.32.0 - 62.163.35.255 netname: UPC-FLV-ALM3 descr: Almere country: NL admin-c: RC482-RIPE tech-c: RC482-RIPE tech-c: HMCB1-RIPE status: ASSIGNED PA remarks: Contact [email protected] concerning criminal remarks: activities like spam, hacks, portscans notify: [email protected] mnt-by: CHELLO-MNT changed: [email protected] 20020618 source: RIPE route: 62.163.0.0/17 descr: UPC.nl Network Services descr: Chello Customers descr: The Netherlands origin: AS8209 notify: [email protected] notify: [email protected] mnt-by: CHELLO-MNT changed: [email protected] 20031027 source: RIPE role: Hostmaster Chello Broadband address: UPC Technology address: Internet Services address: Erlachplatz 116 address: A-1100 Vienna address: Austria phone: +43 1 96068 5000 fax-no: +43 1 96068 5666 e-mail: [email protected] admin-c: AK991-RIPE tech-c: MG111 tech-c: MS2509-RIPE tech-c: AK991-RIPE nic-hdl: HMCB1-RIPE notify: [email protected] mnt-by: CHELLO-MNT changed: [email protected] 20050118 source: RIPE person: Robert Chandler address: UPC Netherlands address: Kabelweg 51 address: 1014 BA Amsterdam address: The Netherlands phone: +31 20 7755 902 e-mail: [email protected] nic-hdl: RC482-RIPE notify: [email protected] remarks: ____________________________________________________________ remarks: | E-mail is the preferred contact method! | remarks: | FOR ABUSE NOTIFICATIONS PLEASE ONLY USE THE FOLLOWING ONE: | remarks: | [email protected] | remarks: |____________________________________________________________| changed: [email protected] 20020220 changed: [email protected] 20020822 source: RIPE
"MICROSOFT MEGA E-MAIL INTERNATIONAL STAKE LOTTERY NL / PRIME TRUST"
From: "MICROSOFT LOTTERY" <[email protected]> Here is an email by the "claims agent". The IP address this was sent from is adjacent to the IP address used in the "TRIPPLE WINS INTERNATIONAL GAMES / Cash Change Securities Europe" scam: FROM:THE DESK OF MR.FRANK MULLER. Message headers: Date: Wed, 02 Mar 2005 11:59:06 -0500 From: [email protected] To: emailaddress Subject: ATTACHED MICROSOFT LOTTERY CLAIM FORM !!! MIME-Version: 1.0 X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 82.169.144.3
WHOIS details for sending IP 82.169.144.3: inetnum: 82.169.144.0 - 82.169.147.255 netname: EASYWAY descr: Easyway BV descr: www.easyw.nl country: NL status: ASSIGNED PA mnt-by: WOLTECH-MNT source: RIPE tech-c: SK2119-RIPE admin-c: SK2119-RIPE changed: [email protected] 20040216 route: 82.168.0.0/14 descr: Tiscali BV origin: AS5615 notify: [email protected] mnt-by: WISH-MNT mnt-by: WOLADM-MNT changed: [email protected] 20030901 source: RIPE person: Saglain Khan address: Easyway address: Ged. Burgwal 72 address: 2512 BV Den Haag address: The Netherlands phone: +31 30 2483500 fax-no: +31 70 3492999 e-mail: [email protected] nic-hdl: SK2119-RIPE remarks: ------------------------------------------- remarks: send an abuse notifications ONLY remarks: to: [email protected] remarks: ------------------------------------------- mnt-by: WOLADM-MNT changed: [email protected] 20041022 source: RIPE Next message: From: <[email protected]> Message headers: Date: Fri, 04 Mar 2005 18:18:40 +0000 From: [email protected] To: emailaddress (Firstname Lastname) Subject: PROCESSING FEE !!! MIME-Version: 1.0 X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 213.148.229.120
WHOIS details for sending IP 213.148.229.120: inetnum: 213.148.228.0 - 213.148.231.255 netname: CONCEPTS-CUST-ADSL-DHCP-2 descr: Concepts ICT BV descr: DHCP Customers BBNED remarks: for abuse, please contact [email protected] country: NL admin-c: CICT-RIPE tech-c: CICT-RIPE status: ASSIGNED PA mnt-by: WBNET-MNT changed: [email protected] 20030603 source: RIPE route: 213.148.224.0/19 descr: Concepts ICT BV origin: AS12871 changed: [email protected] 20030121 source: RIPE mnt-by: wbnet-mnt role: Concepts ICT BV Technical Role address: Concepts ICT BV address: St. Ignatiusstraat 265 address: 4803 ES Breda address: The Netherlands phone: +31 76 5221555 fax-no: +31 76 5310531 e-mail: [email protected] admin-c: KG325-RIPE admin-c: RH672-RIPE tech-c: KG325-RIPE tech-c: RH672-RIPE nic-hdl: CICT-RIPE remarks: for abuse please contact [email protected] remarks: for technical issues please contact [email protected] mnt-by: WBNET-MNT changed: [email protected] 20030507 source: RIPE
MICRO LOTTERY INTERNATIONAL - PROMOTIONAL PROGRAM The following appears to be connected to this, as it's the same name of the claims agent even though the free webmail address and the mobile phone numbers have changed.
"Frits Hartgers, Micro Lottery International" Attention:Firstname Lastname. Message headers: Received: from [212.199.108.14] by web90008.mail.scd.yahoo.com via HTTP; Thu, 03 Mar 2005 01:29:46 PST Date: Thu, 3 Mar 2005 01:29:46 -0800 (PST) From: frits hartgers <[email protected]> Subject: Winner
WHOIS details for sending network (IP 212.199.108.14): inetnum: 212.199.0.0 - 212.199.255.255 org: ORG-GLIC1-RIPE netname: IL-GOLDENLINES-20000726 descr: Golden Lines International Communication Services Ltd. descr: PROVIDER Local Registry country: IL admin-c: DR5299-RIPE tech-c: DR5299-RIPE status: ALLOCATED PA notify: [email protected] mnt-by: RIPE-NCC-HM-MNT mnt-lower: AS9116-MNT mnt-routes: AS9116-MNT changed: [email protected] 20000726 changed: [email protected] 20001206 changed: [email protected] 20010710 changed: [email protected] 20011217 changed: [email protected] 20040525 source: RIPE route: 212.199.0.0/16 descr: Golden Lines origin: AS9116 mnt-by: AS9116-MNT changed: [email protected] 20010807 source: RIPE organisation: ORG-GLIC1-RIPE org-name: Golden Lines International Communication Services Ltd. org-type: LIR address: 25 Hasivim St. K. Matalon address: 41970 address: Petach Tikva address: Israel phone: +97239291122 fax-no: +97239274608 e-mail: [email protected] admin-c: DR5299-RIPE admin-c: AG914-RIPE admin-c: GE2074-RIPE admin-c: MH21010-RIPE admin-c: IB737-RIPE mnt-ref: AS9116-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT changed: [email protected] 20040415 changed: [email protected] 20041105 source: RIPE role: DNS REG address: 25 Hsivim st. Petach-Tiikva, Israel e-mail: [email protected] trouble: [email protected] admin-c: GE2074-RIPE tech-c: IB737-RIPE tech-c: AG914-RIPE nic-hdl: DR5299-RIPE notify: [email protected] changed: [email protected] 20030715 mnt-by: AS9116-MNT source: RIPE
CONCORD TRUST AGENCY BV (DR. ROY DANIELS / Mrs. Susan Smith) The scammers charge EUR 420 for processing the lottery claim. Some victims are told they need to open an account at a specific bank into which the prize will be paid. The minimum deposit is EUR 1500. In either case the money is to be wired to a gang member in Amsterdam by Western Union. "Winning notification": CONCORD TRUST AGENCY (Regina Van Berg)From: "MICROSOFT LOTTERY" [email protected]> To: <[email protected]> Sent: Thursday, March 03, 2005 11:57 AM Subject: CONGRATULATIONS!!! YOU HAVE WON. FROM THE DESK OF THE COORDINATOR [MICROSOFT GLOBAL EMAIL LOTTERY] INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT. Sponsored and promoted by Bill Gates, President of the World's Largest software(microsoft): http://evan.quuxuum.org/bgnw.html ===================================================================== Ref. Number: 132/756/40027 Batch Number: 538901527-BC722 RE: WINNING NOTIFICATION/FINAL NOTICE IT IS YOUR EMAIL ADDRESS THAT WON. Contact ([email protected]) to file for your claim. ATTN: We are pleased to inform you of the result of the Our Global Email Lottery program held on the 15th February 2005. Your e-mail address attached to ticket number 37511465899-6410 with serial number 4872-510 drew lucky numbers 7-14-88-23-3545 which consequently won in the 1st category, you have therefore been approved for a lump sum pay out of US$ 1,000,000.00 (One Million United States Dollars). CONGRATULATIONS!!! Due to mix up of some numbers and names, we ask that you keep your winning information confidential until your claims has been processed and your money Remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants. All participants were selected through a computer ballot system drawn from over 20,000 company and 30,000,000 individual email addresses and names from all over the world. This promotional program takes place every three years. We hope with part of your winning you will take part in our next USD 50 million international lottery. To file for your claim, please contact our fiducial agent: ======================================= DR. ROY DANIELS (CONCORD TRUST AGENCY BV) Amsterdam-Netherlands. Tel: 0031- 617 792 760. Fax: 0031- 847 506 277. E-Mail: [email protected] ======================================= Please in order to avoid unnecessary delays and complications, remember to quote your reference number and batch numbers in all correspondence, also indicate your country and city. Furthermore, should there be any change of address, do inform our agent as soon as possible. To enable you file your winning prize, you are advised to fully comply with our co-respondent agency office. Congratulations once more from our members of staff, and thank you for being part of our promotional program. Note: Anybody under the age of 18 is automatically disqualified. Sincerely yours, Mrs. Susan Smith Lottery Coordinator. ___________________________________________________ Check-out GO.com GO get your free GO E-Mail account with expanded storage of 6 MB! http://mail.go.com Here is a money demand from the claims agent: ATTN. FIRSTNAME LASTNAME, Concord Trust Agency is pleased to inform you that we have received and verified the claim form information that you sent to our office and to enable us process your claim file, you are adviced to remit the compulsory agency processing fee of 420.00 Euro(Four hundred and twenty euro only). You have to send this fee through the western-union money transfer on the name of our company's accounting officer. First name: Mr. Nicola Dave Last name : Paolo Address : 32 Palmstraat City : Amsterdam Country : Netherlands And give us the control number of payment by email or phone. To locate the closest western union money transfer office in your area please log onto www.westernunion.com We wish to bring to your notice the fact that the paying-out Bank has instructed us to collect this fee from the lottery winners because of the insurance policy that covers your funds which does not allow any deduction until final credit of your money into your nominated Bank Account. Upon your payment of this fee, we shall conclude the processing of your winning within 24hrs and send your claim file to the paying out Bank. Do send us your Bank information in your next mail, though the Bank will also contact you and demand it when we must've furnished them with the necessary documents regards to your winning. We await your urgent response on this matter. Best Regards, Regina Van Berg. For(CONCORD TRUST AGENCY) Tel: +31-617 792 760. __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register
"account opening/activation" (EUR 1500) Dear Firstname Lastname,Data for the fake "claims agent" and "lottery" for this demand: DR. ROY DANIELS (CONCORD TRUST AGENCY) Amsterdam-Netherlands. Tel: 0031- 619 010 742. Fax: 0031- 847 300 041. [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] MICROSOFT GLOBAL EMAIL LOTTERY Mrs. Lucia Dezor
Microsoft Email/Internet International Lottery (MR.JOHN LARRY / Kemberly Gomez.) Message headers:
WHOIS details for sending network (IP 213.60.82.12): Later the scammers demanded US$500 to be sent by MoneyGram to a gang member in Madrid using a pseudonym and fake postal address:
Message headers:
WHOIS details for sending network (IP 213.60.88.55):
"Richard Taylor, Monica Lopez" (IP 192.116.153.82 / GILAT-SATCOM-BLOCK-47-48-49-50-51) Message headers:
Jack Harold, MICROSOFT WORD LOTTERY DEPT.UK / Adams Webster, Royal Delivery Services LTD. Message headers:
Message headers:
Email from the "courier company":
As usual, the claims agent and courier service send email from the same location. Message headers:
WHOIS details for sending network (IP 192.116.154.231):
|