Wednesday, January 4, 2012

Another domain scam for you to ignore

Emails like this are scams. This company was not asked to register any domains. They are lying about that. Instead, the company wants to sign you for expensive, but unnecessary, services. Ignore these messages.

From: "John" john.ying@ygnetworksltd.com
Subject: Asia/Cn domain name & Internet Keyword
Date: January 3, 2012 7:37:14 PM PST

Dear Manager,

(If you are not the person who is in charge of this, please forward this to your CEO,Thanks)

This email is from China domain name registration center, which mainly deal with the domain name registration and dispute internationally in China and Asia.
On December 29th 2011, We received Tianhua Ltd's application that they are registering the name " andevcon " as their Internet Keyword and " andevcon .cn "、" andevcon .com.cn " 、" andevcon .asia "domain names etc.., they are China and ASIA domain names. But after auditing we found the brand name been used by your company. As the domain name registrar in China, it is our duty to notice you, so we are sending you this email to check. According to the principle in China, your company is the owner of the trademark, In our auditing time we can keep the domain names safe for you firstly, but our audit period is limited, if you object the third party application these domain names and need to protect the brand in china and Asia by yourself, please let the responsible officer contact us as soon as possible. Thank you!

Best Regards,

John
General Manager
Shanghai Office (Head Office)
3002, Nanhai Building, No. 854 Nandan Road,
Xuhui District, Shanghai 200070, China
Tel: +86 216191 8696
Mobile: +86 136615 29704
Fax: +86 216191 8697
Web: www.ygnetworkltd.com

Friday, December 23, 2011

With lack of trust, you scammer

Gold dust? That's a nice twist on the usual scam. But this is most definitely a scam. Don't reply to messages like this; you should delete them instead.

This is a rare case, by the way, when you're not asked to reply to a different email address. That's the sign of a hacked mailbox, or a mailbox set up specifically by the scammer.

From: tony kess tonykess01@gmail.com
Subject: WITH TRUST
Date: December 18, 2011 6:21:12 PM PST

I am Tony Kess from London 31 year of age I have a little problem my late friend who die two days ago had 200 kilo of Gold Dust with a Gold Mining Company in Malaysia, I am contacting you because i need your help in regards to this issue, I have contacted the Gold Company in Malaysia to ship the 200 kilo of Gold Dust to me and the Company ask me to pay for the shipment of the Gold Dust, I am contacting you and at the same time if you can be my partner so we can both put head together and pay the shipping cost and share the Gold Dust among our self 50/50, Please note if you want the Gold Company to ship in the Gold Dust to your destination first no problem I believe that when the Gold Dust finally get to your destination later i can fly down and meet with you and collect my own share of 100 kilo.

What i needed from you is trust and honesty once I confirm your return email in agreement to my email I shall send you the contact details of the Gold Dust Company in Malaysia so you can contact them yourself.

I await to hear from you.

Thanks
Tony Kess.
tonykess01@gmail.com

More money from Libya - thank you Ashley, or is it Chang?

You can't get rich by helping people steal money. Instead, you will be scammed. Don't reply to messages like this — delete them instead.

From: Ashley Richardson arichardson@spsu.edu
Subject: ...of utmost Confidence

The late former Libyan defence minister Abu Bakr Yunis Jabr made a fixed deposit of $25,500,000.00 Million United States Dollars in my bank branch am ready to share 50/50 with you if you choose to stand as my deceased client next of kin.

Please if you are interested you indicate by response at my personal email address:

Email Contact: zchang92@yahoo.com.hk if only you are interested.

Yours Truly,
Chang Zhang

That's not a real soldier - that's a fake one

There may be a Sgt. David Thompson in the U.S. Army - but this isn't from him. Linking to a news story proves nothing about the honesty or identify of the person writing to you. Rather, it's a common factor in this type of scam. Don't be fooled - delete messages like this.

From: Sgt. David Thompson" davidthomp2117@aol.com
Subject: Hi
Reply-To: sgt.davidthomps2117@hotmail.com

Hi ,

My name is Sgt. David Thompson US ARMY serving the World and my country in the most honorable way i know i can, in IRAQ right now, in a nutshell, I am a American soldier serving in the Military with the Army 3rd infantry division. With a very desperate need for assistance, i found your contact particulars during my email search and picked up courage to contact you for your assistance.

Some money in various currencies were discovered in a room at a farm house near one of Saddam's old palaces in Tikrit-Iraq during a rescue operation, i happened to be one of the soldiers that lead that operation that day, so it was agreed by Brigadia General Edward Ballanco the head of our batallion that some part of this money will be shared among both of us before informing anybody about it since both of us saw the money first. This was quite an illegal thing to do, but I tell you what? No compensation can make up for the risk we have taken with our lives in this hell hole, my brother in-law was killed by a road side bomb just few months ago, and i cannot count how many times GOD has saved my life down here. I would like you to read the below article so you can confirm what i am saying.

http://www.voanews.com/burmese/archive/2003-04/a-2003-04-20-1-1.cfm

Now i found a very reliable way of sending a trunk mettallic box containing the amount of United States Dollars worth Twelve Million Five Hundred Thousand Dollars(US$ 12,500 Million) as you must agree with me it has been hell on earth trying to keep this money safe from peoples eyes for all these while and with this opportunity all i need is just someone capable I can trust 100% i can send the box to.

So if you can assure me of your honesty i will go ahead and send the box to you for safe keeping till i am back home and i will gladly give you 50% of the money.

If this okay with you please get back to me with the following so i can get the box accross to you.

1. Your full name
2. Contact address
3. Telephone number.

Waiting to hear from you.

Yours in Service.
Sgt. David Thompson
Camp MXP-512 Third Infantry Division Unit(T.I.D.U),
Abul Uruj,Bagdad,Irag
http://www.army.mil/

The scammer is trying to trick you with a fake inheritance

It must be nice to inherit a lot of money from someone who found your address on the Internet. But the only person who will make money from this transaction is the scammer. Don't be fooled by the religious overtones — this is s scam. Don't reply to messages like this - you should simply delete them. Note that there are three separate email addresses used in this scam. That is common in scams like this.

From: "SUSAN GALLOWAY" sarahmay675@gmail.com
Subject: Re: TO YOUR URGENT ATTENTION / RESPOSE NEEDED
Reply-To: susangall68@yahoo.nl

Urgent Assistance
Dear Sir/Madam

After going through your profile I decided to contact you for friendship and assistance and distribution of my inheritance, I have to say that I have no intentions of causing you any Pains so I decided to contact you through this medium. I got your Contact through a personal search via the internet. As you read this, I don't want you to feel sorry for me, because, I Believe everyone will die someday.

My name is Susan galloway I am a dying woman who have decided to donate what I have to you/ church/charity Organizations. I was diagnosed with esophageal Cancer for about 7 Years ago; I am married to Sir Gerald Allport galloway who worked with British Judicial Commission in Chelsea England for over a decade before he died on 5th of July in the year 2004. We were married for fifteen years without a child and he has left me everything he worked for.

I have not particularly lived my life so well, as I never really cared for anyone. Though I am very rich, I was never generous, I was always hostile to people and only focus on my self as that was the only thing I Cared for. But now I regret all this as I now know that there is more to life than just wanting to have or make all the money in the world. I believe when God gives me a second chance to come to this world I would live my life a different way from how I have lived it. Now that I know My time is near I have been touched by God to donate from what I have Inherited from my late husband for the good work of God, rather than Allow my relatives to use my husband hard earned funds ungodly.

So far, I have distributed money to some charity organizations in the U.A.E, London and Ireland. Now that my health has deteriorated so badly, I cannot do this my self any more. I once asked members of my family to Close one of my accounts and donate the money, which I have there to Charity organization in Bulgaria; they refused and kept the money to themselves.

Hence, I do not trust them anymore, as they seem not to be contended with what I have left for them. The last of my money which is the huge Cash deposit that I have with Financial Firm Abroad .I will want you to Help me collect this deposit and dispatched it to charity organizations And let them know that it is me Susan galloway that is making this Generous donation.

I am writing this from my laptop computer in my hospital bed where I wait for my time to come. I pray that God uses you to support and assist me with good heart Please pray that the good Lord forgives me my sins. I have asked God to Forgive me and I believe he has because He is a merciful God. I will be going in for an operation in less than few days. I decided to WILL/donate the money to you for the good work of the lord, And also to help the motherless and less privilege and also for the Assistance of the widows.

I took this decision because I do not have any child that will inherit This money and my husband relatives are not inclined to helping poor Persons and I do not want my husband's hard earned money to be misused Or spent in the manner in which my late husband did not specify. At the moment I cannot take any telephone calls right now due to the Fact that my relatives are around me and my health status. I wish you All the best and May the good Lord bless you abundantly, and please use The funds well and always extend the good work to others.

NB: I will appreciate your utmost confidentiality in this matter until the task is accomplished as I don't want anything that will jeopardize my last wish. And Also I will be contacting with you by email as I don't Want my relation or anybody to know because they are always around me.

Regards,

Susan Galloway Mrs.

Please contact me through the email address below: susangall.susan@aol.com

Ooh, the FBI's director has written to me personally. Not.

Some scammers try to evade spam filters by putting the spam payload into a zipped attachment. Didn't work. Messages like this are always scams. Delete them, don't reply, don't be fooled. But you can enjoy a laugh at them, such as by the idea that the director of the FBI would send you an email from a German domain, with a reply-to address somewhere in the Indian Ocean.

Here's the contents of the email:

From: "FBI Washington DC" fbi4@wp9932uk5.homepage.t-online.de
Subject: 2011 NOTICE REPORT
Reply-To: fbidepartment08@qatar.io

WARNING: YOU SHOULDN'T DISREGARD THIS INSTRUCTIONS GIVEN TO YOU ON ATTACHED MESSAGE FILE.

ROBERT S. MUELLER, III
FBI, DIRECTOR.

The attachment was called FBI REPORT.zip. Unzipping it (which you should never do, but I have secure tools for doing this) revealed a rich-text file called FBI UPDATE.rtf. Here's what it said:

From: Federal Bureau of Investigation
Dept: Anti-Terrorist & Monetary Crimes Division
Office: Washington, D.C. Headquarters
Address: J. Edgar Hoover Building 93 Pennsylvania Avenue, NW Washington, D.C. 20535-0001
Date: 11/04/2011

Attention: BENEFICIARY,

This is to bring to your notice that my office has taking over all the money transfer originated from any part of Africa and European countries as contract payment, fund inheritance or lottery winning due to unauthorized/incapability of financial institutions/security companies in releasing such huge sum of money result of fraud, terrorist and money laundry activities going on World Wide.

We sum of Ten Millions US Dollars each victim. This includes every foreign contractor that may have not received his or her contract sum and people that have had an unfinished transaction, people who have inheritance to claim or international businesses that failed due to instability of government in some part of Africa etc.

We found your name in our list as one of the beneficiaries and that is why we are contacting you, this has been agreed upon and has been signed. These also indicate that the Diplomatic Immunity Seal of Transfer (DIST) often referred to as a criminal history record or rap sheet, is a listing of certain information taken from fingerprint submissions retained by the FBI in connection with arrests and, in some instances, federal employment, naturalization, or military service. This condition is valid until 3 days after which the funds shall be confiscated and legal action will be taken against you.

Guarantee: funds will be released upon confirmation of the DIST document. Final instruction given below;

1. Credit payment instruction: irrevocable credit guarantee.
2. Beneficiary has full power when validation is cleared.
3. Beneficiaries Bank in can only release funds.
4. upon confirmation from the World Bank / United Nations.
5. Bearers must clear Bank protocol and validation request.

We have confirmed that the amount required to procure your document which is called the Diplomatic Immunity Seal of Transfer (DIST) will cost you a total of $2,350USD only and the fee should be paid directly to the payment office in United State via Western Union Money Transfer OR MoneyGram. Below is the contact person of the payment in United State and who will process your transaction.

Contact Information;
Payment centre.
Name: Mr. Ronke Phillips
E-mail: mr.ronke.phillips@gmail.com

Contact Mr. Ronke Phillips of finance payment centre, for details regarding the release of your fund to your own Personal Bank Account with the following information’s below:

Full Name:
Address:
City:
State:
Zip Code:
Country:
Sex:
Date of Birth:
Direct Email:
Direct Phone Number:
Current Occupation:

Once you have sent the required information to Mr. Ronke Phillips, he will contact you with instructions on how to make the payment of $2,350USD only for the procurement of your (DIST) document, to enable her expedite action on the processing and release of your payment without any further delay.

You have hereby been authorized /guaranteed by the federal bureau of investigation to commence towards completing this transaction, as there shall be no delay once payment for the (DIST) document has been made to the authorized agent.

Note: We have requested for the DIST document to make available the most complete and update records possible for the enhancement of public safety, welfare and security of society while recognizing the importance of individual privacy rights. If you fail to provide the document to us, we will charge you with the financial crimes. The United Nations department of justice order 556-73 establishes rules and regulations for the subject of an FBI identification record to obtain a copy of his or her own record for review. The FBI Criminal Justice Information Service (CJIS) division processes these requests to check illegal activities and once you have completed payment of $1,350USD to the agent in charge of this transaction, you're advised to keep us posted to enable us follow up with the release of your payment and act fast.

Regards,


Federal Bureau Investigation.
Robert S. Mueller III,
FBI, Director.

Ooh, the FBI's director has written to me personally. Not.

Some scammers try to evade spam filters by putting the spam payload into a zipped attachment. Didn't work. Messages like this are always scams. Delete them, don't reply, don't be fooled. But you can enjoy a laugh at them, such as by the idea that the director of the FBI would send you an email from a German domain, with a reply-to address somewhere in the Indian Ocean.

Here's the contents of the email:

From: "FBI Washington DC" fbi4@wp9932uk5.homepage.t-online.de
Subject: 2011 NOTICE REPORT
Reply-To: fbidepartment08@qatar.io

WARNING: YOU SHOULDN'T DISREGARD THIS INSTRUCTIONS GIVEN TO YOU ON ATTACHED MESSAGE FILE.
ROBERT S. MUELLER, III
FBI, DIRECTOR.
The attachment was called FBI REPORT.zip. Unzipping it (which you should never do, but I have secure tools for doing this) revealed a rich-text file called FBI UPDATE.rtf. Here's what it said:

From: Federal Bureau of Investigation
Dept: Anti-Terrorist & Monetary Crimes Division
Office: Washington, D.C. Headquarters
Address: J. Edgar Hoover Building 93 Pennsylvania Avenue, NW Washington, D.C. 20535-0001
Date: 11/04/2011

Attention: BENEFICIARY,

This is to bring to your notice that my office has taking over all the money transfer originated from any part of Africa and European countries as contract payment, fund inheritance or lottery winning due to unauthorized/incapability of financial institutions/security companies in releasing such huge sum of money result of fraud, terrorist and money laundry activities going on World Wide.

We sum of Ten Millions US Dollars each victim. This includes every foreign contractor that may have not received his or her contract sum and people that have had an unfinished transaction, people who have inheritance to claim or international businesses that failed due to instability of government in some part of Africa etc.

We found your name in our list as one of the beneficiaries and that is why we are contacting you, this has been agreed upon and has been signed. These also indicate that the Diplomatic Immunity Seal of Transfer (DIST) often referred to as a criminal history record or rap sheet, is a listing of certain information taken from fingerprint submissions retained by the FBI in connection with arrests and, in some instances, federal employment, naturalization, or military service. This condition is valid until 3 days after which the funds shall be confiscated and legal action will be taken against you.

Guarantee: funds will be released upon confirmation of the DIST document. Final instruction given below;

1. Credit payment instruction: irrevocable credit guarantee.
2. Beneficiary has full power when validation is cleared.
3. Beneficiaries Bank in can only release funds.
4. upon confirmation from the World Bank / United Nations.
5. Bearers must clear Bank protocol and validation request.

We have confirmed that the amount required to procure your document which is called the Diplomatic Immunity Seal of Transfer (DIST) will cost you a total of $2,350USD only and the fee should be paid directly to the payment office in United State via Western Union Money Transfer OR MoneyGram. Below is the contact person of the payment in United State and who will process your transaction.

Contact Information;
Payment centre.
Name: Mr. Ronke Phillips
E-mail: mr.ronke.phillips@gmail.com

Contact Mr. Ronke Phillips of finance payment centre, for details regarding the release of your fund to your own Personal Bank Account with the following information’s below:

Full Name:
Address:
City:
State:
Zip Code:
Country:
Sex:
Date of Birth:
Direct Email:
Direct Phone Number:
Current Occupation:

Once you have sent the required information to Mr. Ronke Phillips, he will contact you with instructions on how to make the payment of $2,350USD only for the procurement of your (DIST) document, to enable her expedite action on the processing and release of your payment without any further delay.

You have hereby been authorized /guaranteed by the federal bureau of investigation to commence towards completing this transaction, as there shall be no delay once payment for the (DIST) document has been made to the authorized agent.

Note: We have requested for the DIST document to make available the most complete and update records possible for the enhancement of public safety, welfare and security of society while recognizing the importance of individual privacy rights. If you fail to provide the document to us, we will charge you with the financial crimes. The United Nations department of justice order 556-73 establishes rules and regulations for the subject of an FBI identification record to obtain a copy of his or her own record for review. The FBI Criminal Justice Information Service (CJIS) division processes these requests to check illegal activities and once you have completed payment of $1,350USD to the agent in charge of this transaction, you're advised to keep us posted to enable us follow up with the release of your payment and act fast.

Regards,


Federal Bureau Investigation.
Robert S. Mueller III,
FBI, Director.

You haven't run out of email storage space

I receive a lot of variations on this email. They always lead you to portals that ask for your email address and password. And then the scammers have access to your address book and can send spam or phishing messages to your friends.

From: "Mr. Rashidzadeh, Mehdi" rashidzadehm@ripi.ir
Subject: E-Mail Account Security

You have reached the storage limit on your mailbox.

You will not be able to send or receive new mail until you updrade your email account.

click the below link to fill your email upgrade form.

(link deleted)

Technical Support Team
192.178.0.1

Not a sad trip, but a sad scam attempt

I see messages like this occasionally. Unfortunately, I know people who have fallen for them and sent money. That's the real tragedy. Messages like this are scams, pure and simple. Delete these messages, don't reply to them.

This particular message claims to have been sent from the pacbell.net domain, but actually entered the mail stream from the listed yahoo.com address.

From: Patrick Bitz ptbitz@pacbell.net
Subject: Sad Trip!!!
Reply-To: ptbitz@yahoo.com

I'm writing this with tears in my eyes,my family and i came down here to London,UK for a short vacation to visit a resort and got mugged at gun point last night at the park of the hotel where we lodged.All cash,credit cards and cell were stolen off me.I've been to the embassy and the Police here but they're not helping issues at all,our flight leaves today and I'm having problems settling the hotel bills, we still have some money in our account but we don't have access to it right from here.

The hotel manager won't let us leave until i settle the hotel bills(£1,650GBP)now am freaked out.Please reply and let me if can you have the money wire to me through western union i promise to pay back as soon as i get back home.

Thanks

Patrick T. Bitz
Main Street Financial Services
2186-C Rheem Dr
Pleasanon, CA 94588

Bus 925-484-3829
Fax 925-494-3272
Cell 925-848-9590
E-mail ptbitz@pacbell.net

Nothing outstanding about the compensation payment

Messages like this are always scams. Delete them, don't reply to them.

From: "Boerner, Hunter" boernerh@cofc.edu
Subject: Contact UPS Via ups_despatch.ng@dgoh.org For Claims

After much attempts to reach you on phone, I deemed it necessary and urgent to contact you via your e-mail and to notify you finally about your outstanding compensation payment.

During our last annual calculation of your banking and Internet activities we realized that you are eligible to receive a compensation payment of $2,811,041.00 USD.This compensation is being made to all of you who have suffered losses as a result of fraud, accident or illness.

For more information, contact the UPS agent for the delivery of your cashier check ($2,811,041.00 USD).

United Parcel Service (UPS)
Contact Name: Collins Abah
Tel:+2348168636983
E-mail: ups_despatch.ng@dgoh.org

Please take note that you will pay a shipping/handling fee of $245.00 USD to UPS.

Thanks for your patience.

Mark Richard
Programme Manager
United Nations Human Settlements Programme

Want some free funds? You won't find them here

With the demise of Libya's dictator, it was only a matter of time before the scammers found a new storyline. This is a scam. Delete messages like this - don't reply to them.

From: William Mchardy info@williamconsultgroup.tk
Subject: Our Foreign Plan

Dear Sir,

We are private consultant also acts as a private consultant to some clients in the United Kingdom ranging from top business personals, serving and retired Army, Colonel, Lieutenant-Colonel and top government functionaries whose privacy is shrouded in topmost secrecy.

As stated above I have a client's mandate to seek for a reputable, And well-established individual to help channel some funds into profitable investment abroad

One of my clients is the son of Ex-President Gaddafi of Libya

They want to move these funds out of there their names completely for invest until the crisis will be over, details on the amount will given to your in my next email.

Please let me know if you will be able to work with the transaction of the fund and what is your percentage,

Kindly response to me with your tell phone number and full name if you interested so we can complete the formality and contract agreement.

Best Regards
William Mchardy
156-157 St. John Street, Colchester
CO2 7NN United Kingdom.

Fakes sales inquiries - what's the catch?

I don't understand the scam in these messages, but am convinced they are not legitimate. I have received dozens of these sales messages, all from different email addresses. A few of them are shared below.

These message have some generally comment elements that indicate that they are machine-generated. For example, the name of the product, such as a park bench or a scale base, is often in parentheses.

The messages enter the mail stream from different open relays. The first message below claims to come from a gmail address, but it actually was posted by lunariffic.com, a web hosting company.

Perhaps a key element is the mention of credit cards. In any case, message like this are a scam. Don't reply to them, don't be fooled into providing any information to the scammers.

From: Ben Harold benharold0@gmail.com
Subject: Order

Good day,

I want to place an order and I have a private freight agent that will commence to your location for the pick up.So you don't have any stress to face in the shipping arrangement to Malaysia,but I will like to know if you have credit card processing machine to charge my VISA card for the goods's payment ? If yes,then treat this email with good concern and include your website/current price list in your reply.

Regards,
Ben Harold

—————

From: Bob Wilson stigma2g8@gmail.com
Subject: Urgent Order

Hello

This is Bob and I will like to order ( Park Bench )Do get back to me with the types and cost for the ones you do carry and let me know if there is an extra cost when using visa or master Card.Kindly get back to me with your name Are you the sales manager or the Owner?

Regards....
Bob Wilson

—————

From: Jeff Willson jeffwillson020@yahoo.com
Subject: Work Platforms Order

Good Day Sir / Madam

With much respect to your company my name is Jeff Willson and i will like to know if you do carry (WORK PLATFORMS ) in stock for sale...? If yes kindly email me back with the type and sizes that you have in stock and the total pick up price of each so that we can proceed with the order.. Moreover i will like to know if you do accept Credit Cards as a form of payment. Looking forward to hear from you soon with the sizes and the price list of each so that we can proceed with the order.

Jeff Willson
Managing Director
Jeff & Sons Ltd
Email: jeffwillson020@yahoo.com

—————--

From: John Freeman john.freeman20@yahoo.com
Subject: Order Request.

Good Day,

Am John Freeman i want to know whether you carry(SCALE BASE) in stock for sale.If you do so kindly email me with the sizes and the price ranges on that so that i will know the quantity to offer and also i want to know if you accept credit card as form of payment.Are you the Sales Manager or the Owner?Awaiting for your prompt reply.

Regard
John Freeman

—————

From: Victory Enterprise enterprise.victory@yahoo.com
Subject: P.Order

Good day Sir/Ma,

We are highly interested to purchase your items listed below:

Storage Memory Cards 1GB Micro SD Card...............500 pieces

Kindly give us your discount price quote,including shipping cost.

Attn
Ship to

%Carolyn King
7351 S BLACKSTONE
CHICAGO ILLINOIS 60619
Tel: 954 2563 363
US

We request your urgent reply.

Regards
David Williams

Monday, November 21, 2011

No, Western Union does not want your profile info

Today's scam is a fake email from Western Union. I received three of these at different email addresses - none of which has a Western Union "profile." The links go to a phishing site that wants to steal your login and password, as well as other personal information.

The email says "Update your profile information," and then

Hereby we inform you that in accordance with our security policies and practices, your profile on Western Union needs to be updated. If you do not provide the relevant information, there will be a delay or we may be unable to operate your account. If you have any questions, suggestions or complaints about any aspect of this website, please contact Western Union Customer Service.

followed by links and then

2001-2011 WESTERN UNION HOLDINGS INC. ALL RIGHTS RESERVED.

The links do not go to Western Union's website. If you receive this message, delete it.

Sunday, September 18, 2011

A cheery message contains a PDF scam

Hello, there! That's what the subject line says in this cheerful scam attempt. The message claims to be from a Gmail account, but actually originated from a Yahoo entry point. The reply-to is in South Africa.

From: "Dr. Stella Williams" drstellawilliams10@gmail.com
Subject: Hello there!
Date: September 15, 2011 6:57:34 AM PDT
Reply-To: dr.stellawilliams1@hotmail.co.za

There was no message body; the scam is in an attached PDF file. You should never open files like this (I have tools to do it safely) because there can be malware embedded in PDF files. Here's what the message says:

Hello, how are you? I am Dr. Stella Williams from Uruguay. I work here in Iraq, and due to the in-balance of the country, we the foreign doctors want to leave following the withdrawal of the US TROOPS for lack of security. But the Iraqi soldiers don't want us to and we are not allowed to make calls to our country, so the Finance company in South Africa advised us to transfer our money to another country apart from our home country because they will freeze our account if we try to make any contact to our own country and the money is our career money.

We just need a help and someone we can trust so the Finance company in South Africa can transfer our money to your account.

Please respond urgently at: dr.stellawilliams1@hotmail.co.za

Dr. Stella Williams .

The attachment contains the fake United Nations scam

The payload of this message is in a text-only attachment. The message itself claims to be from the cs.com domain, which is CompuServe, and it's possible that's where it entered the mail stream. The reply-to address for the message is the same as in the attachment, belonging to an Internet service provider in Mongolia. The country code for the phone number, 234, is Nigeria.

The accusation that U.S. Federal Reserve chairman Ben Bernanke wants to steal your money — and put it into his personal bank account — makes for an amusing touch.

Don't open attachments in emails like this or click any links. Instead, delete immediately.

From: "UNITED NATION" michelletra2354@cs.com
Subject: DEAR UNPAID BENEFICIARY (Read The Message Attached For Details )
Date: September 16, 2011 4:21:09 PM PDT
Reply-To: mscarlap10@skymail.mn

There was no message body. Here's the attachment:

UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES
Internal Audit, Monitoring,Consulting and Investigations Division

From: Ms.Carman L.Lapointe

Dear Unpaid Beneficiary

This is to inform you that I came to Nigeria yesterday from London,after series of complains from the FBI and other Security agencies from Asia, Europe,Oceania, Antarctica,South America and the United States of America respectively,against the Federal Government of Nigeria and the British Government for the rate of scam activities going on in these two nations.I have met with President GoodLuck of Nigeria who claimed that he has been trying his best to make sure you receive your fund in your account.

Right now,as directed by our secretary general Mr. Ban Ki-Moon,We are working in collaborations with the Nigerian Economic and Financial Crime Commission (EFCC) and have decided to waive away all your clearance fees/Charges and authorize the Government of Nigeria to effect the payment of your compensation of an amount of $10.5M approved by both the British/United States government and the UN into your account without any delay.The only fee you will pay to confirm your fund in your account is your Court Notarization fee to the UN.

Sincerely,you are a lucky person because I have just discovered that some top Nigerian and British Government Officials are interested in your fund and they are working in collaboration with One Mr.Ben S.Bernanke and others from USA to frustrate you and thereafter divert your fund into their personal account.

I have a very limited time to stay in Nigeria here so I would like you to urgently respond to this message with your full name, full address,direct phone number so that I can advise you on how best to confirm your fund in your account within the next 72 hours.Contact me immediately on this Cell Phone:+234-708 5781753 or email me on this mscarlap1@skymail.mn

Sincerely yours,

Ms.Carman L.Lapointe
United Nations Under-Secretary-General for Internal Oversight.
Cell Phone:+234-708 5781753
Direct Email:mscarlap1@skymail.mn

You can't win a national lottery that you didn't enter

Doesn't it look funny that a U.K. lottery is sending email from a German account, has your name as a bcc, and asks you to write back to a BluWorld account, which is a free email provider? You're not a winner, but if you reply you'll be a loser.

From: "admin@national-lottery.co.uk" ajack28@wpip5b5sz.homepage.t-online.de
Subject: You Won
Date: September 14, 2011 2:32:25 PM PDT
To: admin@national-lottery.co.uk
Reply-To: songann@blumail.org

You have won the National Lottery, Please contact Ann Song via details below for further information
Claims Unit
Lottery Fiduciary
Contact Person: Miss Ann Song
Email: ( songann@blumail.org )
Jack Lee
National Lottery

It's never a good sign when you're a bcc on a bequest email

This fake email from CBN appears to come from a Gmail account, but actually oriented from a mail server calling itself rvhyd.net -- which is a non-legitimate domain. See that the from and reply-to addresses are different - and the address in the message body is different again.

Don't be fooled by scam messages like this, but simply delete them immediately.

From: "CBN" paulhow14@gmail.com
Subject: RE: CONSOLIDATED PAYMENT NOTIFICATION
Date: September 16, 2011 1:20:58 PM PDT
Reply-To: paulhoward19@gmail.com


Dear Beneficiary,

I hope that this correspondence is received with the urgency and the expediency required.

It has come to the notice of the Board of Trustees at the CBN that your present inheritance claims application being handled by the Remitting Bank in Nigeria is experiencing some man made irregularities.To this effect,it has become necessary for the Board of Trustees to invite trained Fund Transfer / Assets transfer Specialists from the United States to resolve and regularize your fund release with immediate effect and stop all further fund discrepancies.

We at Howard & Associates have been duly consulted by the CBN Board of Trustees and have been fully informed about how the staff of the remitting bank have been taking advantage of you by telling you to pay unnecessary exorbitant charges which will only make your fund payment a long drawn out process.

Due to this we have decided to step into the process of your fund transfer to enable your funds to be transferred within the soonest possible time without needing to pay all the huge sums of monies that are being demanded from you by the remitting bank, you are to get back to us immediately .All processes to have your funds paid to you immediately through the Federal Reserve Bank in New York have been initiated to cut out unnecessary costs.You are advised to keep this communication highly confidential as the CBN Board of Trustees have asked us to resolve this fund payment independent of the office of the CBN Governor to identify the the principal participants in this unethical payment procedure.Furthermore,you are hereby advised to pay no further fees or charges to the Remitting Bank in Nigeria as well as any person or persons, Real or Fictitious, prostates and institutions as they shall no longer be handling your payment process.

We shall await your immediate correspondence with your direct telephone numbers so that we may conclude your payment immediately contact the claim officier through this email address: paulhow100@zmail.com

Yours Faithfully,
Dr.Paul Howard.
Howard & Associates c/o CBN.

Statement of confidentiality: "the information in this email and in any attachments contains confidential information and is intended solely for the attention and use of the named addressee(s). It may not be disclosed to any person without authorization. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient you are not authorized to and must not disclose, copy, distribute or retain this message or any part of it."

With this fake failure note, the scammers weren't trying very hard

This message below didn't come from American Express. Rather, it originated at an IP address that's located near Fort Worth, Texas. The mail server gave its domain names as mbicdoftbobvezp.biz, which is fraudulent.

The PDF file that the site is trying to get you to download is actually a redirect link to http://nacha-ach.org/, which is a malware/phishing website. (The real NACHA website is nacha.org.) You can read more about this at http://www.nacha.org/news/newsDetail.cfm/RecentBusinessNewsID/236

Don't click on links in strange messages; instead, delete them immediately.

From: "The Electronic Payments Association" transfer@amex.com
Subject: NACHA canceled transaction
Date: September 16, 2011 8:10:11 AM PDT
Canceled Transfer

Transfer ID: 48596733

Reason for rejection: See details in the report below

Transfer report: report_48596733.pdf.exe (self-extracting archive, Adobe PDF)

13450 Sunrise Valley Drive, Suite 100 Herndon, VA 20171 (703) 561-1100

2011 NACHA - The Electronic Payments Association

The U.S. government is not trying to help you here

Wow, it looks like an official U.S. government email address, complete with a convincing-looking "antifraud.ir.gov" domain. Well, no. This email actually entered the mailstream from a mail server in Toronto. The mail server gave off its address as nkajdionhecdv.com, but there is no domain registered with that address.

What about the message itself? Both links actually open sessions at http://new-irs-reports.com/, a known phasing domain which looks like the real IRS website. Do not click links in emails like this; instead, delete them immediately.

From: "United States Department of the Treasury"adminnistration@antifraud.irs.gov
Subject: Fraud tax income IRS.gov
Date: September 16, 2011 12:08:56 AM PDT

Taxpayer ID: commensurate-00000700955060US
Tax Type: INCOME TAX
Issue: Unreported/Underreported Income (Fraud Application)

Please review your tax statement on Internal Revenue Service (IRS) website (click on the link below):

download tax statement: report-00000700952160US.DOC

http://www.irs.gov.

Western Union doesn't have money for your 'withdrawl'

This email looks like it was sent by Western Union, but it was actually sent via an open relay at qdomzedu.ua, which is in the Ukraine. The from address was forged. The link in the email, which I've deleted, goes actually to an executable file which contains malware that would infect an unprotected Windows PC. Don't click on links in messages like this - just delete them.

From: "Western Union transfer is available for withdrawl" mtcn@westernunion.com
Subject: Western Union transfer is available for withdrawl
Date: September 14, 2011 9:15:37 PM PDT

Dear customer.

The amount of money transfer: 2400 USD.
Money is available to withdrawl.

You may find the Money Transfer Control Number (MTCN) and receiver's details on Western Union website (click on the link below to download MTCN number and transfer details):

-- malware link removed --

http://www.westernunion.com.

Western Union.
Customer Service.