The U.S. government is not trying to help you here

Wow, it looks like an official U.S. government email address, complete with a convincing-looking "antifraud.ir.gov" domain. Well, no. This email actually entered the mailstream from a mail server in Toronto. The mail server gave off its address as nkajdionhecdv.com, but there is no domain registered with that address.

What about the message itself? Both links actually open sessions at http://new-irs-reports.com/, a known phasing domain which looks like the real IRS website. Do not click links in emails like this; instead, delete them immediately.

From: "United States Department of the Treasury"adminnistration@antifraud.irs.gov

Subject: Fraud tax income IRS.gov

Date: September 16, 2011 12:08:56 AM PDT

Taxpayer ID: commensurate-00000700955060US

Tax Type: INCOME TAX

Issue: Unreported/Underreported Income (Fraud Application)

Please review your tax statement on Internal Revenue Service (IRS) website (click on the link below):

download tax statement: report-00000700952160US.DOC

http://www.irs.gov.

Western Union doesn't have money for your 'withdrawl'

This email looks like it was sent by Western Union, but it was actually sent via an open relay at qdomzedu.ua, which is in the Ukraine. The from address was forged. The link in the email, which I've deleted, goes actually to an executable file which contains malware that would infect an unprotected Windows PC. Don't click on links in messages like this - just delete them.

From: "Western Union transfer is available for withdrawl" mtcn@westernunion.com

Subject: Western Union transfer is available for withdrawl

Date: September 14, 2011 9:15:37 PM PDT

Dear customer.

The amount of money transfer: 2400 USD.

Money is available to withdrawl.

You may find the Money Transfer Control Number (MTCN) and receiver's details on Western Union website (click on the link below to download MTCN number and transfer details):

-- malware link removed --

http://www.westernunion.com.

Western Union.

Customer Service.

The U.N. uses funny domains, but that's because it's a scam

Isn't it odd that UNECA, a "United National Economic Commission for Africa," is sending email from armlocksmiths.com, a locksmith in East Sussex, England? And would use a reply-to address that's a Chinese Yahoo account?

This is a scam, pure and simple. At some point, after you replied, you would be asked to provide some personal information that could be used for identity theft, bank account information that could be used to pull money out of your accounts, and/or "fees" to expedite the process. Don't reply to messages like this.

From: "UNECA" enquiries@armlocksmiths.com

Subject: PAYMENT TRANSFER NOTIFICATION (UN ECONOMIC COMMISSION FOR AFRICA)?

Date: September 13, 2011 4:58:36 PM PDT

Reply-To: migiro_asha@yahoo.cn

UN ECONOMIC COMMISSION FOR AFRICA(UNECA)

P.O. Box 3001, ADDIS ABABA, ETHIOPIA

TEL: +251 11 551 0365 (direct)

FAX: +251 11 551 7200

Email: migiro_asha@yahoo.cn

Our Ref: AFUA /SNT/STB

ATTN: BENEFICIARY,

RE: INHERITANCE FUND TRANSFER NOTIFICATION

WE HAVE RECEIVED AN INSTRUCTION FROM THE MINISTRY OF FINANCE OF THE FIFTY FOUR(54) COUNTRIES IN AFRICA AND THEIR VARIOUS SENATE COMMITTEE ON FOREIGN PAYMENT(SCFP), TO PAY YOU YOUR CONTRACT/INHERITANCE FUND.

YOUR CONTRACT/INHERITANCE TOTALLING TEN MILLION FIVE HUNDRED THOUSAND DOLLARS (US$10,500,000.00), INCLUDING THE INTEREST RATE UPTILL DATE HAVE BEEN PROGRAMMED FOR IMMEDIATE TRANSFER THROUGH A CREDIBLE BANK OVERSEAS AND ALL MODALITIES FOR THE TRANSFER TO YOU BEING THE LEGITIMATE BENEFICIARY OF THE FUND HAVE BEEN FINALIZED.

MEANWHILE, WE WANT YOU TO CLARIFY US IF YOU INDEED APPROVE A WOMAN BY THE NAME KAY HANN TO CLAIM THE FUND ON YOUR BEHALF. THE SAID MRS. KAY HANN IS CLAIMING TO

THIS OFFICE THAT SHE IS YOUR REPRESENTATIVE INSTRUCTED BY YOU TO RECEIVE THE FUND ON YOUR BEHALF. NOTE THAT SHE ACTUALLY TENDERED SOME VITAL DOCUMENT, WHICH SERVES AS PROVE FOR THE COLLECTION OF THESE FUNDS.

BELOW IS THE LIST OF THE DOCUMENTS WHICH SHE TENDERED:

1. LETTER OF ADMINISTRATION.

2. HIGH COURT INJUNCTION.

3. ORDER TO RELEASE.

DUE TO THE NATURE OF MY JOB, I CANNOT AFFORD TO MAKE MISTAKES IN RELEASING THESE FUNDS TO ANYONE WHO CAN NOT TENDER A SIGNED NOTE OF AUTHORIZATION FROM YOU THE RECOGNIZED TRUE BENEFICIARY TO THESE FUNDS.

NOTE THAT I ASKED HER TO COME BACK NEXT WEEK SO I CAN VERIFY THIS FACT FROM YOU FIRST BEFORE I PROCEED WITH THIS GUESTURE.

KINDLY CLARIFY US ON THIS ISSUE BEFORE WE MAKE THE PAYMENT TO MRS. KAY HANN. HOWEVER, NOTE THAT WE AWAIT YOUR EMAIL SHORTLY WHICH WILL INCLUDE ALL THE INFORMATIONS INDICATED BELOW TO ENABLE THE CREDITING BANK EFFECT YOUR TRANSFER.

WE HAVE MADE CONCRETE ARRANGEMENT JUST TO MAKE SURE THAT YOUR VALUABLE (US$10,500,000.00) TEN MILLION FIVE HUNDRED THOUSAND UNITED STATES DOLLARS IS SUCCESSFULLY RELEASED TO YOU.

THE REQUIRED INFORMATION IS AS STATED BELOW:

1. YOUR NAME:

2. YOUR ADDRESS:

3. YOUR TELEPHONE:

4. FAX:

6. SEX:

7. YOUR OCCUPATION:

LASTLY, BE INFORMED THAT THIS REPUTABLE OFFICE IN CONJUCTION WITH THE WORLD BANK HAVE BEEN APPROVED AND EMPOWERED BY A MEMORANDUM SIGNED BY THE 54 PRESIDENT's IN AFRICA.

WE ARE SOLELY AUTHORIZED AND ACCREDITED TO HANDLE ALL DELAYED CONTRACTOR/INHERITANCE FUNDS AT THIS THIRD QUARTER OF THE YEAR 2011/2012 PAYMENT SCHEDULE.

WE ARE WAITNG TO HEAR FROM YOU AS SOON AS POSSIBLE.

BEST REGARDS,

MRS. ASHA ROSE MIGIRO.

EXECUTIVE SECRETARY

Not a dying widow but a healthy scammer

A link to a sad news story does not confer legitimacy on someone sending an email. Anyone can link to any news story. This is a scam. Do not reply to messages like this.

From: "Mrs. Rosemary Collins"mkinder@cinci.rr.com

Subject: Dear Beloved One

Date: September 17, 2011 9:05:43 AM PDT

Reply-To: rosemarty90@gmail.com

Beloved,

Compliments of the day to you! By this e-mail, I do sincerely apologize for my intrusion of your privacy. However, I have a serious concern with which I believe you might be of help and for this reason, I can not but reach out to someone . My name as given above is Mrs. Mary Collins a nationality of United Kingdom. I am married to Mr. Samuel Collins who worked with the British embassy in America for nine years before he died in the plane crash On 31st of July 2000 with other passengers aboard as you can confirm it yourself through this web site. (http://news.bbc.co.uk/1/hi/world/europe/859479.stm)

We were a dedicated Christians and decided to serve mankind to the best of our ability. Since his death, I have lived with the memories, fighting effortlessly to lead a normal life but all to no avail. I suffered mentally and psychologically and shortly was diagnosed of Cancer. I lived with the scourge praying earnestly for divine intervention. Just a month ago, the doctor informed me that I have just about three months more to live. I was not shocked. I accepted the news in good fate.

Brethren, it is in this regard that I write to you, having sourced your address from a database in my late husband's internet dossier after fervent prayers. Before my husband died, he deposited a sum of $5 Million (Five Million United States Dollars) with a bank in New York USA. I have wholeheartedly decided to donate the entirety of this fund to any devoted believer or organization and to achieve this, I need an individual that will utilize this funds adherently for these purposes:

1: For the sick, less-privileged and destitute

2: For the Widows and the motherless babies e.t.c.

3: orphanages, Research centers and widows propagating

These are the wishes of a dying woman. They are the desires of my heart, hence my decision as I do not have a child to take over my inheritance. Please, understand that I am not doing this because of fear of death as I am certain where my place already is. At this point, friends, well wishers, and my husbands relatives are all clampered around me as I sojourn in my hospital bed and are unaware of my plight, hence I will not be able to make an open conversation. When I receive your response, I will direct you at once to the bank. I will also empower you with a letter of authority as the new beneficiary to this fund with all necessary documentation.

All I need from you is Truthfulness, Honesty and Sincerity assuring me that you can in all honesty and obedience utilize the funds for the purpose with which it is meant. In any a case, a quick response from you will be highly appreciated as I am already on a count-down and may not have ample time to finalize the procedures. Any delay in response may compel me to source for other measures or perhaps choose the alternative which I will not be happy to. Please, do not see this as a strange possibility or an unbelievable opportunity to make wealth, rather see this as a rare chance to assist the less privileged in truth and in spirit with a substance. Please you can contact me privately on my email address (rosemarty90@gmail.com)

I await your immediate response.

Thank You and Bless You richly!

Yours Sincerely

Mrs. Mary Collins

No thanks, Mrs. Robins

This email appears to have been sent from a hacked mailbox at Kettering University in Michigan — at least, it was processed by their mail servers. However, it's fraudulent. Don't reply to messages like this, just delete them.

From: Barbara Robins brobins@kettering.edu

Subject: Dear Brethren

Date: September 15, 2011 9:39:39 PM PDT

Although I am not comfortable discussing the content of my mail on the internet owing to lots of unsolicited/Spam mails on the net these days.Anyway my message is that I have made up my mind to WILL my late Husband's funds to you so that you can use it for charity duties and good work to humanity in your country. The amount is 4million Dollars. Please get back to me on my personal and secured email address for further information.My secured email is: brobins2011@live.com

Mrs. Barbara Robins

The French Catholic Church isn't giving you money

Don't be fooled by this variation on the lottery scam. This email follows the common pattern of coming in from one address, with the reply set to go to a second address. Also, as is also common, the names don't match.

In this case, the email apparently was sent from a hacked email box at Halmstad University (hh.se) in Sweden. The reply-to address goes to a gmail account. Neither of those addresses belong to the Eglise catholique en France. Don't be fooled - don't reply to messages like this.

From: Eglise Catholique en France Sten-Harald.Soderstrom@hh.se

Subject: Qualification numbers (CEF-080-2998-2996)

Date: August 28, 2011 12:21:16 PM PDT

Reply-To: "Rev. Jean Louis" revjeanlouis2203@gmail.com

Église catholique en France

http://www.cef.fr/

Qualification numbers (CEF-080-2998-2996)

Congratulations The Église catholique en France has chosen you by the board of trustees as one of the final recipients of a cash Grant/Donation for your own personal, educational, and business development.

To celebrate the 30th anniversary program, We are giving out a yearly donation of US$850,000.00 (Eight hundred and fifty thousand dollars only) to 100 lucky recipients,as charity donations/aid from Église catholique en France, ECOWAS, EU and the UNO in accordance with the enabling act of Parliament which is part of our promotion,

To file for your claim you,are to fill out below information and send it to the Executive Secretary Via their email contact email address

revjeanlouis2203@gmail.com

Claims Requirements:

1. Full Name:.....................................

2. Address:.......................................

3. Nationality:...................................

4. Age:.......... Date of Birth:.................

5. Occupation:.....................................

6. Phone:................Fax:.....................

7. State of Origin:...........Country:...............

Executive Secretary: Rev. Frédéric Jean-Louis

Email:revjeanlouis2203@gmail.com

On behalf of the Board kindly, accept our warmest congratulations.

Regards,

Mr. François Édouard.

They've been actually authorized to scam you with spam

It sounds like such a sure thing, doesn't it? After all, the email says that "We obtained an irrevocable payment guarantee on your Payment from the presidency," whatever that means.

In reality, this is a scam. They will attempt to get money out of you. Don't be fooled, don't reply to message like this. Simply delete them.

This message entered the mailstream from a server at telepacific.net, a carrier in Southern California, but the email addresses cited are in in Armenia. However, that doesn't mean anything; the scammers could be anywhere.

From: "Mrs Linda Hank" mrshank@mail.am

Subject: IRREVOCABLE RELEASE OF YOUR PAYMENT.

Reply-To: petermarriott.zu@mail.am

Mrs. Linda Hank

United Nations.

Debt Reconciliation Department.

Zurich Switzerland.

Our Ref: WB/NF/UNO/XX027/2011

Chairman Committee On Foreign

Contract And Inheritance fund Payment Notification

From United Nations.

IRREVOCABLE RELEASE OF YOUR PAYMENT.

We have actually been authorized by the newly appointed UN secretary general, and the governing body of the UNITED NATIONS monetary unit, to investigate the unnecessary delay of your inheritance fund,recommended and approved in your favour. During the course of our investigation, we discovered with dismay that your payment has been unnecessarily Delayed by corrupt officials of the Bank who are Trying to divert your money into their private accounts, to forestall this, security for your funds Was organized in the form of your personal Identification number (PIN) ATM CARD this will enable only you have direct Control over this fund, we will handle this payment ourselves to avoid the hopeless situation created by the Officials of

the bank.

We obtained an irrevocable payment guarantee on your Payment from the presidency. we are happy to inform you that based on our recommendation/instructions your Entire Inheritances fund has been credited in your favor through ATM card. You are therefore advice to send your contact details BELOW TO.

Mr. Peter Marriott.

International Audit unit,

United Nations Liaison Office Zurich Switzerland:

EMAIL: petermarriott.zu@mail.am

To collect your original payment slip with your ATM card.

They will issue you an ATM card that will be withdraw in any ATM machine in any part of the world, So if you like to receive your funds through this means kindly let us know by contacting the card payment center and also send the following information as stated below to them as directed above.

1. PHONES AND FAX NUMBER,

2. ADDRESS WERE YOU WANT THEM TO SEND THE ATM CARD TO (P.O BOX NOT ACCEPTABLE)

3. YOUR AGE AND CURRENT OCCUPATION

4. YOUR FULL NAME.

NOTE: YOU ARE ADVICED TO FURNISH REV. MARRIOTT WITH YOUR CORRECT CONTACT DETAILS.AND ALSO BE INFORMED THAT THE AMOUNT TO BE PAID NOW IS $8.3 MILLION THE REST WILL BE PAID TO YOU IN A LATER DATE.

We expect your urgent response to this email to enable us monitor this payment effectively thereby making contact with Rev. Peter Marriott as directed to avoid further delay.

CONGRATULATIONS.

MRS. LINDA HANK

UNITED NATIONS

The United Nations Organisation wants to give you money - no they don't

Attached to this scam email is an "official letter of directive" on letterhead. The JPG file is designed to look like official correspondence from the United Nations Human Right Abuse and Conflict Resolution Commission. Click the image to read it.

The email itself originated on a hacked Yahoo account, but had a forged return address on RocketMail.

Don't be fooled -- no official government agency is going to contact you via email to give you money. The real way to be "sanitizing our society" would be for these scammers to just go away.

From: Human Right Dept humanrightdept@rocketmail.com

Date: May 11, 2011 2:39:56 AM PDT

To: undisclosed recipients: ;

Subject: OFFICIAL LETTER OF DIRECTIVES

Reply-To: Human Right Dept humanrightdept@rocketmail.com

Attn: Sir/Madam,

See the attached letter for proper comprehension and do contact the authority involved for the payment of your fund valued US$ 2 million as every details has been made available in the attached letter.

Prof: Jack Morgan

Don't use the link to check your mailbox storage limits

This is more of a phishing scheme than a spam scam, but it's worth commenting nonetheless. The headers show that the message was sent via a hacked mailbox belonging to a school administrator in Indianapolis. The link following the "click here" goes to a login form hosted on baroncapital.com, a financial services management company in Scottsdale, Arizona; it looks like someone infiltrated their server to deposit the form.

The form itself asks for your username, password and other personal identifiers -- which, of course, are sent right to the hackers.

Two lessons to be learned here:

First, protect your email account and server. Someone in Indianapolis messed up by letting his/her mailbox be hacked, and so did someone at Baron Capital.

Second, even if the email looks legit, don't click links!

From: "Kathy Rieke" krieke@msdwt.k12.in.us
Date: May 2, 2011 2:12:00 AM PDT
Subject: Your Mailbox Has Exceeded It Storage Limit

Your Mailbox Has Exceeded It Storage Limit As Set By Your Administrator, And You Will Not Be Able To Receive New Mails Until You Re-Validate It. To Re-Validate - > Click Here: (link suppressed)

System Administrator.

---------------------------------------------------------------------------------------------------------------------
This e-mail and any attachments are from a sender at the Metropolitan School District of Washington Township in Indianapolis, Indiana. They are intended for the named recipients and may contain information that is confidential or privileged under Indiana and Federal Law. Any error in addressing or sending this e-mail is not a waiver of confidentiality and does not consent to copying or distribution of this e-mail or attachments. If you receive this e-mail in error, please notify the sender of the error by return e-mail and delete this e-mail and its attachments. If there is a need to speak to the sender, please call [317] 845-9400 and they can provide you with contact information.

That engineer was well paid, if he can give me $15 million

Here's another scam - it looks like it came from a hacked or temporary gmail account, osjksdkdt@gmail.com. However, the headers aren't completely clear in this case. What is clear, of course, is that this is a scam, even if it does refer to the "wrong attitudes" of U.S. banking officials. Don't reply to messages like this. (And yes, there was nothing after the salutation "Dear.")


From: "Mr.Yakowa Sule" osjksdkdt@gmail.com
Date: April 30, 2011 8:20:23 AM PDT
Subject: YOUR FUND HAS BEEN RELEASED
Reply-To: hadam1950@blumail.org

Dear,

By the power of my office as the new President of Federal Republic Nigeria having taken over from the late President Umaru Musah Yar Dua on Thursday being 6th of May 2010, I have to inform you that while going through files of unpaid funds received from CBN by this government following my observations on the wrong attitudes of the US Financial Authorities, World Bank Directors, CBN Governor officials and some bank directors towards your payment.

I came across file on as the true beneficiary to the estate of Late Engr. Ramon Surra on Approved payment of fund of USD15,000,000.00 while going through Inheritance and Contract payment files and have picked interest and verified the cause of delays which are well noted.

I have resolved for the option to pay you, through a fully loaded International Visa ATM card. In this arrangement The Visa card is ready with your outstanding fund value and will be dispatched with all relevant access information to enable you withdraw cash from any ATM machine of your choice and transfer to any account of your choice upon receipt, this option is strictly for this purpose to avoid question or disagreement between you and the financial authorities.

In a case where the beneficiary has received the ATM previously and he/she is unable to effetely withdraw or transfer into your local bank account for usage, you are hereby advised to contact the Financial Adviser to Mr President on Contractors payment.

Name: Henry Adams
Email: hadam1950@blumail.org

Also Payment by wire transfer option is available for those who prefer wire transfer, but our secured and guaranteed mode of payment is by cash card.

Yours faithfully,

Mr.Yakowa Sule
For Mr. President

I'm sorry, darling, but you're a stinking liar

Miss Suzan is so affectionate, but even so, I don't think Suzzy is telling me the truth: that she's a scammer. This email seems to have originated from a Google account named nestpetrol@gmail.com. Don't reply to messages like this, or be fooled by them.

From: Miss Suzan kante suzzy21@ymail.com
Date: April 29, 2011 11:03:53 PM PDT
Subject: Available Investment fund.

Dearest one,

There is a high need for the investment of a substantial amount in a secure and stable economy around the world. The investment will strongly consider any good business area or offer that can guarantee outstanding fiscal yields. My name is Miss. Suzan Kante I am 22 years old from the Federal Republic of Cote D' Ivoire, the only Child and Daughter of Chief Dr. and Mrs. Michael Kante. This investment Fund is my Inheritance!

I am writing to you to allow me officially present and appoint you as my foreign partner as it’s itemized with these funds by my late father to avoid looting or squander, so as to enable the bank transfer this money to you in your country for investment purposes and continuance of my educations.

Please let your reactions reach me via email soonest, if you have the potentials to receive, invest, and manage large sums successfully to profitability.

Best Regards.
Suzan Kante
+233-248-179-767

Wow, free money from the new Prime Minister!

Does the fake formal language make this spam appear to be more honest? Fear not, it's a scam, even thought it reads like a period drama on television. Best I can tell, it originated at a hacked account or open relay at the mfarconstructions.com domain. Don't respond, don't be fooled by messages like this, even if they use words like "hence" and "enquiry."

From: "Barclays Bank PLC®" info@barclays.com
Date: April 30, 2011 9:38:24 AM PDT
Subject: Attention: Honorable Beneficiary / Office of Barclays Bank Plc.
Reply-To: barclaysbank5000@gmail.com

From The Desk of Sir Johnny Sunderland
Foreign Remittance Department
Barclays Bank PLC.
1 Churchill Place, London, E14 5HP
+44 07024031991
www.barclays.co.uk

Dear Honorable beneficiary

Did you authorize one Mr. Louis Henrik who presented document’s of claim purported to have been signed by you for the release of your Payment Beneficiary/Winnings settlement of Eleven Million Five Hundred Thousand US Dollars ($11.5) only, which have been made and sealed for your transfer? Why this, because the Fund Certificate was credited to you,hence this later development of Mr. Louis Henrik?

Ensure that you do not delay to get back soonest as this calls for urgent and cogent attention to avoid misappropriation, misconception and misconstrue in BARCLAYS BANK beneficiary’s financial transfer record. If you did not give any Power of Attorney or Authorization to the said Mr. Louis Henrik for claim of your fund, please reconfirm immediately to avoid banking irregularities, as your fund is now ready to be transferred (based on the urgent instructions from the Committee of Foreign Contractor Payments Board under the control of the PRIME MINISTER’S office).

In summary to your fund transfer do contact the Barclays Bank for your fund release.

As soon as this information is received, your payment will be made to you in a Certified Bank Draft or Wired to your nominated bank account.

You are advice to contact the Foreign Department immediately. Your contract Ref. No. is BAR/LON/UK/BEN/011 This fund is in line with the Federal Policy for release of all outstanding payment beneficiary due for payment as directed by the NEW PRIME MINISTER. For further explanation, your request and enquiry will be highly welcome and treat with understanding.

Waiting for your Reply.

Sir Johnny Sunderland
Foreign Remittance Department
Email: barclaysbank5000@gmail.com
Tel: +44 07024031991 (available 7 a.m. to 10 p.m.)

Barclays Bank PLC. Registered in England. Registered No: 1026167. Registered Office: 1 Churchill Place, London, E14 5HP