It's a horrible spam from a hacked mailbox

This message came in today from a cousin's email address — and freaked out some members of my extended family. However, it's a total scam. Someone hacked in my cousin's email address (either by guessing her password or by phishing for it) and sent out these messages. One family member actually went to the bank to get cash to send to London!

Needless to say, my cousin is safe at home — and was initially somewhat confused because she couldn't get into her email. One of the first things the scammers did was change her password. And then the phone started ringing….

If you see messages like this, don't respond, don't be fooled. Do not try to get back to the family member by email, but use other means. Remember, the scammer has access to the email account, and can answer. Being bcc'd on a message (which I was) is one sign that it's not legit. (But if you're not bcc'd, that's not proof that the message is legitimate.)

Here's an account of someone who received a very similar message earlier this year — it's possibly from the same scammers, as it's nearly word-for-word identical. Don't be fooled!

Subj: Horrible Trip

Hello,

This message may be coming to you as a surprise but I need your help.Few days back my family and I made an unannounced vacation trip to London,UK.Everything was going fine until last night when we were mugged on our way back to the hotel.They Stole all our cash,credit cards and cellphone but thank God we still have our lives and passport.Another shocking thing is that the hotel manager has been unhelpful to us for reasons i don't know. I'm writing you from a local library cybercafe..I've reported to the police and after writing down some statements that's the last i had from them.i contacted the consulate and all i keep hearing is they will get back to me. Our return flight leaves soon...I need you to help me out with a loan to settle our bills here so we can get back home . I'll refund the money as soon as we get back. All i need is $1,850 USD..Let me know if you can get me the money then I will let you know how to get it to me.

Thanks

What does 'diver-stated' mean?

This is a confusing message, but one part of it is crystal clear: This is a scam. It wasn't sent by a U.S. soldier named David Cox or Daviid Cox or David Dean, but by someone trying to con you. When you reply, the "confidential" message will an invitation to help launder money, or something like that. Links to news stories on the BBC prove absolutely nothing about the authenticity of a message. Delete messages like this. Don't reply to them.

From: David mgstdaviidcox@yahoo.com.hk

Date: July 21, 2010 4:27:42 AM PDT

To: undisclosed-recipients:;

Subject: Yours sincerely,

Reply-To: daviddean1967@hotmail.com

Dear friend ,

I am MSgt. David a Master Sergeant in the U.S Army. Kindly View the BBC news article Listed below. My experience and challenges serving under the U.S Army in Iraq, makes me feel Diver-stated, but I am very optimistic that I will not die in the battle, by the special grace of God.

http: //news.bbc.co.uk/2/hi/middle_east/2988455.stm

http://news.bbc.co.uk/2/shared/spl/hi/picture_gallery/05/middle_east_shooting_in_tal_afar/html/1.stm

Your prayer and friendship will be highly appreciated at this point in time of my life. To crown it all, I have some thing confidential I would like to disclose to you, but you will have to assure me that no other ear will hear it.

Waiting for your favorable response.

Yours Sincerely,

MSgt. David.

The FBI is not working with the IMF

If you believe that the U.S. Federal Bureau of Investigation uses a Yahoo account to tell you to pick up an ATM card from someone in Nigeria, and you should reply to an account in China, you might fall for this. It's a scam, though an amusing one. Coca-Cola?

Delete the message, don't reply, don't be fooled.

From: "FBI" ron@yahoo.com

Date: July 19, 2010 1:35:27 AM PDT

Subject: ATM Card

Reply-To: despatchunit_rwilliams@w.cn

THE IMF HAS APPROVED YOUR ATM CARD FOR DELIVERY (FBI)

Attn: Beneficiary,

I am Mr. Ron Mills, the personal secretary to the FBI Director; Robert S.Mueller III. After proper investigations, we discovered that your impending payment that have been withheld by imposters, claiming to be Mr. Mr. Lamido Sanusi (The New Governor of the Central bank of Nigeria), Mr. Patrick Aziza, Mr. Frank Nweke, None existing officials of the Oceanic Bank of Nigeria and Zenith Bank, UK winning Lottery, Andy Lear of Hsbc bank, Coca-Cola winning lottery and among a list of others is now under our custody with the help of the Economic and Financial Crimes Commission (EFCC) and the Local Police Force.

Investigations revealed that you have spent a lot on your personal earned money just to conclude the successful transfer of your funds to your nominated bank account by obtaining transfer documents as requested by the imposters, costing you a lot of money but all to no avail. The FBI had to send some financial crime investigators from our head quarters in Washington DC to Africa in other to carry out proper investigation, after receiving series of other reports similar to yours as you are not the only person awaiting the legal transfer of funds from Africa. The FBI has giving authority to the International Monetary Funds (IMF) to assist the Federal Ministry of Finance and all the organization involved; such as the Central Bank, Zenith Bank, and Legit lottery organizations to immediately commence with the compensation of all the beneficiaries awaiting the successful transfer of their funds. With the help of some of the best Internet investi gators attached to the FBI.

I am pleased to inform you that a meeting was held as regards the best way to carry out with the compensation exercise for transparency and most especially to avoid reoccurrence of the delay in transferring your funds and the high cost of procuring transfer documents and came to a final conclusion as all head of organizations involved was duly represented. It was approved to be issued to you as a valid international ATM card cashable at any ATM machine designation in the world. The ATM account has already being credited with two million, five hundred thousand United States dollars. ($2.5, 000, 000.00USD), with a daily Limit of withdrawal of Ten thousand United States Dollars. ($10.000, 00USD).The ATM card has already being packaged and approved to be delivered to your door step via express courier delivery service.

Contact Mr. Richard Williams {Our FBI ATM Rep.} at the ATM PAYMENT CENTER and reconfirm your delivery information as stated below and your security code with five digit (24006) number has to be submitted alongside with your delivery information for security reasons.

DELIVERY INFROMATION:

FULL NAME:

DELIVERY ADDRESS:

CELLPHONE NUMBER:

CURRENT OCCUPATION

CONTACT INFORMATION:

NAME: Mr. Richard Williams

EMAIL: dispatchdirector_rwilliams@w.cn

PHONE: +234-802-524-3188

NOTE: Under normal circumstances you are suppose to come and collect your ATM CARD in person and sign some documents as proof of the collection of your ATM CARD but the IMF and the Finance Ministry insisted that you pay for the delivery charges of your ATM CARD via western union money transfer, which will cost you only $180.00USD to cut down travel expenses in other for the western union payment receipt and the receipt of payment of $180 .00USD to the nominated courier company that will carry out with the delivery to your door step to be documented in your file as proof your collection. We hope that is very clear. A receipt to this effect will be sent to you and a copy kept in your file for future documentation.

We also advise that you stop further communications with these imposters and forward any correspondence / proposal you receive from them to Mr. Richard Williams in other for the FBI to bring justice to does still at large.

Mr. Ron Mills.

For: Mr. Robert S.Mueller III

FBI DIRECTOR

The IRS is using Polish email addresses to save money - not

Ooh, a letter from the Tax Credits Office! Sorry, this is scam. No, they don't send email from Poland. No, the U.S. Government doesn't use "www.unclefed.com" to distribute IRS forms. Don't reply, don't be fooled, by any email that you receive that claims that you're owned money from the government. It's always a scam.

From: Tax Credits Office Agent david.morgan@przemysl.pttk.pl

Date: June 29, 2010 10:02:15 AM PDT

To: alan@domain.com

Subject: Re: Tax Notification

We are pleased to inform you that upon review of your fiscal activity we have determined that you are eligible to receive a tax refund of $246.30 under section 501 (c) (3) of the Internal Revenue Code. Please submit the tax refund request and allow us 3-6 days in order to process it.

To get your refund, please access the IRS e-file form.

IRS e-file form (http://www.unclefed.com/IRS-Forms/2009/09indvlforms.html)

Note: For security reasons, we will record your ip-address, the date and time. Deliberate wrong inputs are criminally pursued and indicted.

Note: Because this letter could help resolve any questions regarding your exempt status, you should keep it in your permanent records.

David Morgan

Director, Tax Refunds Department

The faux sergeant is a scammer, not a soldier

This is a fairly transparent scam, even without the amusing "from" email address and bad grammar. Don't respond, don't be fooled, by messages like this.

From: "US AIR FORCE" us.af.mil.b52@gmail.com

Date: July 6, 2010 9:52:33 PM PDT

To: sgtlilianat@msn.com

Subject: Hello /From Dr. Craig A. Franklin

Hello,

Would you mind if we got correspond? I am contacting you on behalf of MAJOR GENERAL CRAIG A. FRANKLIN; My name is Ms. Liliana R. Tavera (Sgt) office coordinator of the 332nd Expeditionary Logistics Readiness Squadron {Joint Base Balad, Iraq}.

I was directed to contact you after a closer look on your profile and personality, MAJOR GENERAL CRAIG A. FRANKLIN will be honoured to secure a mutual financial business with you or any trustful person/s that you can recommend outside our United States military and the North Atlantic TreatyOrganization (NATO) surveillance.

Please kindly contact me immediately with your response including

(1.) Your Full Names& Address

(2.) Tel & Fax numbers

(3.) Your most confidential email address; and I'll get back to you with our proposal.

In waiting of your response...

Sgt. Liliana Tavera {Ms}

Baghdad, Iraq

Domain scam spammers continue

Your brand is not in danger -- and if you're worried that it is, go to a domain registry and register it yourself. Don't reply to scammers like this, who are trying to sell you over-priced and unnecessary services to protect your business assets.

From: "Mike Yan" mike.yan@tldschina.org

Date: July 5, 2010 7:10:50 PM PDT

To: "info" my email address

Subject: Notice:Brand name " domain " dispute in ASIA

Reply-To: mike.yan@tldschina.org

(If you are not in charge of this please transfer this email to appropriate dept, thanks.)

Dear President,

We are the department of Asian Domain registration service in china. we have something need to confirm with you. we formally received an application on July 5, 2010. one company which called "Boices Group Inc." are applying to register "domain" as Brand name and the following Domain Names:

domain.asia

domain.com.hk

domain.com.tw

domain.hk

domain.in

domain.net.cn

domain.org.cn

domain.tw

After our initial examination, we found that the Domain Names applied for registration are as same as your company's name and trademark. these days we are dealing with it, hope to get the affirmation from your company. if your company has not authorized the aforesaid company to register these, please contact us as soon as possible.

In addition, we hereby affirm that our time limit is 7 workdays. if your company files no reply within the time limit, we will unconditionally approve the application submitted by "Boices Group Inc.".

Best Regards,

Mike Yan

Senior Consultant

Register and Audit dept.

Tel:0086-21-37529318

Fax:0086-21-37529316

Website:

Address:Room515-516, No.885 Green Ark Building, East Huancheng Road,Fengxian District, Shanghai

A Danish woman owned two businesses in Dubai - and wants to give money to you? No.

Oh, I don't think so. Don't be fooled or respond by messages like this, just delete them, after laughing that they apparently don't know how to clean up their copy/paste into a hijacked email account.

From: Bente Meklendorg bentemeklendorg@hotmail.com

Date: June 10, 2010 11:43:06 AM EDT

Subject: TO WHOM IT MAY CONCERN

This is HTML source of message you composed. Do not modify here. To modify this message press HTML Messages Editor button.

NOTE BELLOW:

This e-mail message and all attachments transmitted with it may contain legally privileged and/or confidential information intended solely for the use of the addressee(s). If the reader of this message is not the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, forwarding or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete this message and allcopies and backups thereof. Thank you.

HELLO

TO WHOM IT MAY CONCERN

My name is BENTE MEKLENDORG a DANE i am a 54 years middle aged woman,married to a British business man had two children but the two children and my husband died same day died in a fatal ghastly motor accident ,not long i was diagnosed of cancer of the breast but before this incident i was a successful business merchant and owned two businesses in Dubai before i fell sick of cancer.

Presently now i am sick but need you to help me to carry out my very last wish on earth before i die. Please get back to me for more details as i have vital information for you,and hopefully you will assist in helping the needy in your society by retrieving $5m which i deposited for the use of humanity which i want you to use it for humanity.

Regards,

Bente Meklendorg.

Domain scammers care about the environment

I received identical copies of this message over a couple of days at several totally unrelated email addresses hovered from various websites that I operate. This is the usual protection racket: If you contact them, they will charge you hefty fees to "protect" your domains. However, your domains are perfectly safe without their protection. Don't be fooled - ignore messages like this. Even if they do claim to care about saving trees.

From: "dave_lee@yeah.net" dave_lee@yeah.net

Date: June 10, 2010 6:54:19 AM EDT

Subject: Notification of IPR and ISP to info@bzmedia.com

Reply-To: "dave.lee@hkit-os.com" dave.lee@hkit-os.com

To whom it may concern,

Sorry to trouble you, I got your email address from my colleague, We are a professional ISP organization in Asia, Recently we have received an application from one of our customer Debbie Werbeloff(debbie.werbeloff@tucowsinc.net) from Tucows Group, they want to register some domain and Network Brands Currently, this application is right in the progress, however, when we were about to finalize the process, we double-checked these domain names and Network Brands, the keyword is very similar with your company's trademark. Therefore we need to confirm with you (as follows):

1. whether your company consigned Tucows Group, to register the Network Brands and other domain on the behalf of your company. If it is true, please let

us konw, as we will help them complete the registration.

2. if your company did not consign Tucows Group to register the Network Brands and other domain, please reply to confirm immediately.

If you have any question, please let me know and your cooperation is highly appreciated.

Best Regards,

Dave lee

Office Manager of Service

Asia Pacific Internet Management Co.Ltd

Tel: 00852-3071 7712 | Fax: 00852 - 3072 3949 Dave.Lee@hkit-os.com | Web:

http://www.hkit-os.com

----------------------------------------------------------------------------------------------------

PLEASE CONSIDER THE ENVIRONMENT BEFORE YOU PRINT THIS E-MAILThis email (and attachments) contains information from HongKong Net Center Limited, which may be CONFIDENTIAL or PRIVILEGED. If you are not the intended recipient, you must not disclose, copy, distribute or use the contents of this information. If you have received this email in error, please notify sender immediately and delete all copies. This email may also be subject to COPYRIGHT. No part of it may be reproduced, adapted or transmitted without the written consent of the copyright owner.

He's not a missionary, he's a scammer

This isn't a sick missionary. You're dealing with a healthy, greedy scammer. Don't be fooled, don't reply to messages like this.

From: "Jean Preval" jpreval70@yahoo.com

Date: June 10, 2010 2:12:07 PM EDT

Subject: Donation

Greetings,

My name is Reverend Father Jean Paul Preval a missionary who lives in Northern Ireland UK

I am diagnosed of Chronic Myelogenous Leukemia (CML) and recently, my Doctor told me that I may not last for the next Three Months due to the damage this cancer has done to my body.

Being led by the Holy Spirit to entrust my estate to a total stranger as I have gone against my vow by acquiring such wealth

I have decided to entrust my entire estate worth 8M (Eight Million British Pounds Only) deposited with a Finance Firm In London to you, you are to use 10% of the above sum for your personal purpose and 90% will be used to set up a foundation to fund the needy.

Please make sure that you use this fund to the glory of God, as this is a divine call to humanity.

Please do reply to the email address state above to enable me request my lawyer to put your name as a beneficiary in my will

God bless you

Rev Father Jean Paul Preval

If you're still alive, they want your money

Such delightful scam - with a subject line that implies that you might be dead, but if not, contact them to get fleeced. Needless to say, this isn't a legitimate communication from the "International Monetary Fund Agency," whatever that is. Delete messages like this, don't reply to them.

From: "INTERNATIONAL MONETARY FUND AGENCY" reddy61599@bellsouth.net

Date: June 5, 2010 2:14:16 PM EDT

To: undisclosed-recipients:;

Subject: CALL DR.DAVID WILLIAMS IF YOU ARE STILL ALIVE +234-8025843816

Reply-To: davidwilliams33@secretarias.com

FROM THE DESK OF DR DAVID WILLIAMS

INTERNATIONAL MONETARY FUND AGENCY

INTERNATIONAL OPERATION DEPT

GARIKI KAMOSO

ABUJA-NIGERIA.

E-MAIL: davidwilliams36@secretarias.com

PHONE: +234-8025843816

Hello Dear,

This is to inform you of your long overdue Payment outstanding with our Banking records. This is to inform you that your name came first from our Central Computer among the list of unpaid Inheritance claims individuals and have to update your information through this email contact for immediate confirmation. Your name appeared among the beneficiaries who will receive a part-payment of US$2,500,000 million (Two Million Five Hundred Thousand United State Dollars) and it has been approved already for payment months ago.

However, we received an email from one Mr. Morris Lint, who told us That you are dead and he is your next of kin and that you died in a car Accident four months back. To our findings we discover that this Morris Lint is a liar and imposer that is why we contact you before any release of funds can be paid to him. He has also submitted his Account information to the Accounting office department of our Bank for Immediate transfer of the fund to him as your inheritor.

Regarding our investigation from the Bank & the Nigerian Police Force (N.P.F) in conjunction with the Economic Financial Crime Commission (E.F.C.C) we are now verifying by contacting your email address as we have in our Bank records before we can Make the transfer into his account and for us to conclude with confirmation if you are dead or not.

Please, confirm response immediately through the e-mail as below with Proof, before our action release of the outstanding payment against your name listed out. Upon this, i request you send your full personal information as soon as possible to enable this department finalize The transfer of the fund release to your nominated foreign Bank Account.

This department needs the following information From you urgently to enable us verify with the Information we have in the Central computer of the Bank.

1. Full Names

2. Telephone

3. Contact Address.

4. Age..........

5. Occupation..........

6. Sex..........

CONFIDENTIALITY NOTICE: This E-Mail is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from Disclosure under applicable law.

Once again, I apologize to you on behalf of International Monetary fund Agency towards this contact and proper confirmation required urgently from you if alive.Make sure you reply to my alternative mail address ( davidwilliams36@secretarias.com)

Yours Sincerely

DR DAVID WILLIAMS

International Monetary Fund Agency

Phone: +234-8025843816

Want some free money for overbilled monax axial plants?

I don't even know what all this stuff is -- axial plans and supper polypore. Or even super polypore. Whatever: Despite the real-sounding details, this is a scam, like all "help me recover some money" ploys. Whether it's a bank account belonging to a dead client or over-invoiced funds…. it doesn't actually exist. The only money that could be transferred is the money that's currently in your own bank account -- transferred to the scammer. Don't be fooled, don't reply to messages like this.

From: "Alhaji Mohammed Sanusi Lamido "usgroupie@bwmail.us
Date: April 25, 2010 2:34:55 PM PDT
Subject: Urgent Matter .. Please Respond
Reply-To: alhajimohammedsanusi@live.com

Tel No: +234-813-741-6430
Attn: The President / CEO
Dear Sir,
Urgent Telegraphic / Swift Transfer of: USD$125,000,000.00 (One Hundred and Twenty-Five Million United States Dollars Only)

I am Alhaji. Mohammed Sanusi Barkindo, Group Managing Director (GMD) / Chairman Debt Reconciliation Committee Nigerian National Petroleum Cooperation (NNPC); I got your contact from January, 2009 worldwide database and yellow pages encyclopedia after due consideration believing you are a highly respected personality. Although, I do not know to what extent you are familiar with events, hence I contact you.

Firstly, I must solicit your strictest confidence in this transaction; this is by virtue of its nature as being utterly confidential and “TOP SECRET” with great magnitude involving a pending transaction requiring maximum confidence, I am sure and have confidence of your ability and reliability to prosecute this magnificent transaction. The new civilian government has principally mandated me to review and offset all contractors’ outstanding overdue payments on contracts awarded since May 1976 to, June 2009, under the regimes of the Former Heads of State.

Respectively, In May 2001, a contract worth USD$375,000,000.00 ( Three Hundred and Seventy-Five Million United States Dollars Only) was awarded to a foreign company by Nigerian National Petroleum Cooperation (NNPC) for supply, erection and system optimization of supper polypore 200,000-BPSD, system optimization of 280,000-monax axial plants and the computerization of conveyor belt for Kaduna Refinery. I deliberately over-invoiced the contract with USD$125,000,000.00 (One Hundred and Twenty-Five Million United States Dollars). Actually the company that executed the contracts has been fully paid and the projects were officially commissioned.

Therefore, due to epigrammatic decision to redefine the outstanding payment I am presenting you as the beneficiary who will present original invoice to re-apply and to substitute the foreign company which upon its presentation to Central Bank of Nigeria CBN your designated Bank Account will be credited unconditionally. On receipt of your immediate response, we shall discuss the compulsory modalities. I have all necessary documents / approvals to secure the transfer in your favour.

Note as a mandatory, I wish to make the clarifications as follows: That you will be entitled to share 25% of the total funds. The officials 70% while 5% will be set aside to incure any local and foreign incidental expenses. I consequently request your maximum assistance and approvals to facilitate the transfer of the above funds from Central Bank of Nigeria CBN, where these funds are deposited. Upon confirmation of your readiness to execute this magnificent transaction with me and understanding that this deal being a partnership business, you the second partner, will participate partially in the expenses that might incure. you will be urgently required to furnish your Companies Letter Headed Paper Signed & Stamped, Private Telephone & Fax Numbers, Bank Name and Address, your Corporate Bank Account Number. In conclusion, I guarantee that this operation will be executed under a legitimate arrangement that will protect us from any breach of law.

Best Regards,

Alhaji. Mohammed Sanusi Barkindo
NNPC Group Managing Director (GMD) &
Director Debt Reconciliation Committee Chairman
E-mail: alhajimohammedsanusi@live.com
http://www.economicconfidential.com/feb09profilebarkindo.htm

Another dead client left behind money

Oh, look. An attorney found money belonging to a dead client. Do you want it? It could cost you dearly to find out that it doesn't actually exist. Don't be fooled, don't respond to scam messages like this. (PS: My last name is surprisingly dissimilar to that of the fictitious late Mr. Thomas.)

From: felix.brown@seznam.cz
Date: April 21, 2010 8:04:19 AM PDT
Subject: Mutual Benefit
Reply-To: w.horton2011@gmail.com

Mutual Benefit
Mr. Whitney Horton's Partner
103 Jeance place centurion
pretoria 0002 South Africa
E-mail: w.horton2011@gmail.com

Direct Cell : +27 769-694-873
Office Fax: +27 86 539 7406

Good Day,

This is a personal email directed to you and I request that it be treated as such.I am Barrister Whitney Horton' ,a solicitor at law.I am the personal attorney/sole executor to the late Mr Thomas (withheld), hereinafter eferred to as 'my client' who worked as an independent oil magnate in my country and who died in a car crash with his immediate family on the 4th of Oct,1998.

Since the death of my client in Oct,1998, I have written several letters to the embassy with an intent to locate any of his extended relatives whom shall be claimants/beneficiaries of his abandoned personal estate and all such efforts have been to no avail.

More so,I have received official letters in the last few weeks suggesting a likely proceeding for confiscation of his abandoned personal assets in line with existing laws by the bank in which my client deposited the sum of 50,000,000.00 million pounds.

On this note i decided to search for a credible person and finding that you bear a similar last name, I was urged to contact you, that I may,with your consent,present you to the "trustee" bank as my late client's surviving family member so as to enable you put up a claim to the bank in that capacity as a next of kin of my client.

I find this possible for the fuller reasons that you bear a similar last name with my client making it a lot easier for you to put up a claim in that capacity.I propose that 50% of the net sum will accrue to you at the conclusion of this deal in so far as I do not incur further expenses.

Therefore, to facilitate the immediate transfer of this fund, you need, first to contact me via email signifying your interest and as soon as I obtain your confidence,I will immediately appraise you with the complete details as well as fax you the documents,with which you are to proceed and i shall direct on how to put up an application to the bank.

HOWEVER, you will have to accent to an express agreement which I will forward to you in order to bind us in this transaction.

Upon the receipt of your reply,I will send you by fax or E-mail the next step to take.I will not fail to bring to your notice that this proposal is hitch-free and that you should not entertain any fears as the required arrangements have been made for the completion of this transfer. Like I said, I require only a solemn confidentiality on this,You can contact me back on w.horton2011@gmail.com
Best regards,

Barrister Whitney Horton'