|
419 Scam Example: "ADS INTERNATIONAL PROMOTION / ELECTRONIK LOTTERY / Queensley Rhoda / Paul Zimmerman / Linsco Trust Finance and Securities"
"ADS INTERNATIONAL PROMOTION / ELECTRONIK LOTTERY / Queensley Rhoda / Paul Zimmerman / Linsco Trust Finance and Securities / FALCON FINANCE & TRUST BV / FALCON TRUST FINANCE B.V." is a fake lottery scam run by a gang in the Netherlands. According to greenps.com the person behind this scam is a Nigerian called Samuel Ughulu who lives in Amsterdam. All phone numbers used in the scam are Dutch cellphones. The scam appears to be connected to another Dutch lottery scam, "Electronic Lottery / Macurly Clary" as the claims agents of boths scams send responses from the same IP address.
Examples of email addresses used by this scam. As you can see, Yahoo and Myway are most frequently used in this scam:
Phone numbers and other data for this scam: "zimmer" [mailto:paula_gibb27@yahoo.com] Mrs.Queensley Rhoda Contact Person:Mr.Paul Zimmerman TEL:+31 612 192 105 Email:adszimm410@myway.com Email:adspaul2005@yahoo.co.in For Mr.Paul Zimmerman adszpaul2005@yahoo.dk Tel:+31 612 192 105 Fax: 318 474 54671 Contact Person: Mr.Patrick Jones Email: Admin@otfinplc.com Tel: +31-622-038-388 Contact Person:Mr.Paul Zimmerman TEL:+31 680 780 273 Email:ftfs_245@myway.com Contact Person: Mr.Terry Edward (Lottery Director) Remittance Department Director, Netherlands Lottery International NL Company [Lotto InternationalNetherlands] 107 Vanderloop 1902AB ,Amsterdam, The Netherlands TEL:00-31-617786389 FAX;00-31-847518429 Email:terry_edward@mail2world.com For Mr.George Simon Emai:Otfenquiry@yahoo.com Tel: +31-622-038-388 Contact Person:Mr.Patrick Jones For Mr.Paul Zimmerman Tel:+31 612 192 105 Fax: 318 474 54671 = Munttorenplc Towers, Weesperzijde768 6643 Al Amsterdam, The Netherlands E-mail: admin@munttorenplc.com TEL: +31-616-358-552 , +31-205-248-242 FAX: +31-205-248-417 , +31-642-062-819 Example of initial "winning notification":
Here is a reply from the "claims agent": Dear Winner, Message headers: Received: from [80.56.80.155] by web8402.mail.in.yahoo.com via HTTP; Thu, 10 Feb 2005 10:15:46 GMT Date: Thu, 10 Feb 2005 10:15:46 +0000 (GMT) From: paul zimmerman <adsqueensley@yahoo.co.in> Subject: FILL UP THE ATTACHED FORM Here are headers from other replies: Received: from [80.56.80.155] by web25108.mail.ukl.yahoo.com via HTTP; Wed, 12 Jan 2005 11:20:00 CET Date: Wed, 12 Jan 2005 11:20:00 +0100 (CET) From: paul zimmerman and Received: from [80.56.80.155] by web26503.mail.ukl.yahoo.com via HTTP; Sun, 13 Feb 2005 23:32:36 +0100 (CET) Date: Sun, 13 Feb 2005 23:32:36 +0100 (CET) From: paul zimmerman <adszimmer231@yahoo.de> Subject: FILL UP THE ATTACHED FORM
All scam emails were sent from the same address at a Dutch provider (IP 80.56.80.155):
inetnum: 80.56.0.0 - 80.57.255.255
org: ORG-CB6-RIPE
netname: NL-CHELLO-20000509
descr: Provider Local Registry
country: NL
admin-c: GM3659-RIPE
tech-c: HTK1-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: CHELLO-MNT
mnt-routes: CHELLO-MNT
changed: hostmaster@ripe.net 20000509
changed: hostmaster@ripe.net 20010516
changed: lir-help@ripe.net 20011211
source: RIPE
route: 80.56.0.0/16
descr: UPC.nl Network Services
descr: Chello Customers
descr: The Netherlands
origin: AS8209
notify: registry@upc.nl
notify: hostmaster@chello.at
mnt-by: CHELLO-MNT
changed: hostmaster@chello.at 20010622
source: RIPE
organisation: ORG-CB6-RIPE
org-name: Chello Broadband
org-type: LIR
address: Chello Broadband N.V.
boeing avenue 101
1119pe schiphol rijk
The Netherlands
phone: +31 20 7788200
fax-no: +31 20 7788203
e-mail: hostmaster@chello.com
admin-c: GM3659-RIPE
admin-c: RM2527-RIPE
admin-c: AK991-RIPE
admin-c: SB9000-RIPE
admin-c: MH392-RIPE
admin-c: MG872-RIPE
admin-c: HTK1-RIPE
admin-c: MS2509-RIPE
mnt-ref: CHELLO-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20040617
changed: bitbucket@ripe.net 20041112
changed: bitbucket@ripe.net 20050201
source: RIPE
role: Hostmaster Telekabel Wien
address: UPC Telekabel Wien GmbH
address: Erlachgasse 116
address: A-1100 Vienna
address: Austria
phone: +43 1 96068 5000
fax-no: +43 1 96068 5666
e-mail: hostmaster@chello.at
trouble: help@chello.at
admin-c: AK991-RIPE
tech-c: SB666-RIPE
tech-c: AK991-RIPE
tech-c: MS2509-RIPE
nic-hdl: HTK1-RIPE
notify: hostmaster@chello.at
mnt-by: CHELLO-MNT
changed: hostmaster@chello.at 20040609
source: RIPE
person: Gary Mendel
address: Koningin Wilhelminaplein 2-4
address: 1062 HK Amsterdam
address: The Netherlands
phone: +31 20 355-2777
fax-no: +31 20 355-2755
e-mail: hostmaster@chello.com
nic-hdl: GM3659-RIPE
notify: hostmaster@chello.at
mnt-by: CHELLO-MNT
changed: hostmaster@chello.at 20010212
source: RIPE
Here is a "Paul Zimmerman" reponse from a different source:
Dear Winner, Message headers: Subject: FILL UP THE ATTACHED FORM Received: from [62.163.36.250] by mprdmailfe2.nwk.myway.com via HTTP; Sun, 06 Mar 2005 03:49:01 EST Reply-To: ads_paulzimm@myway.com From: "paul" <ads_paulzimm@myway.com> Subject: FILL UP THE ATTACHED FORM Received: from [62.163.36.250] by mprdmailfe1.nwk.myway.com via HTTP; Wed, 02 Mar 2005 02:19:02 EST Reply-To: ads_paulzimm@myway.com From: "paul" <ads_paulzimm@myway.com>
Subject: FILL UP THE ATTACHED FORM Received: from [62.163.36.250] by mprdmailfe4.nwk.myway.com via HTTP; Sat, 19 Mar 2005 13:01:24 EST Reply-To: adsqueensleyrhoda@myway.com From: "queen" <adsqueensleyrhoda@myway.com>
WHOIS details for sending network (IP 62.163.36.250):
inetnum: 62.163.36.0 - 62.163.39.255
netname: UPC-FRL-LWD3
descr: Leeuwarden
country: NL
admin-c: RC482-RIPE
tech-c: RC482-RIPE
tech-c: HMCB1-RIPE
status: ASSIGNED PA
remarks: Contact abuse@chello.nl concerning criminal
remarks: activities like spam, hacks, portscans
notify: hostmaster@chello.at
mnt-by: CHELLO-MNT
changed: hostmaster@chello.at 20020618
source: RIPE
route: 62.163.0.0/17
descr: UPC.nl Network Services
descr: Chello Customers
descr: The Netherlands
origin: AS8209
notify: registry@upc.nl
notify: hostmaster@chello.at
mnt-by: CHELLO-MNT
changed: hostmaster@chello.at 20031027
source: RIPE
role: Hostmaster Chello Broadband
address: UPC Technology
address: Internet Services
address: Erlachplatz 116
address: A-1100 Vienna
address: Austria
phone: +43 1 96068 5000
fax-no: +43 1 96068 5666
e-mail: hostmaster@chello.at
admin-c: AK991-RIPE
tech-c: MG111
tech-c: MS2509-RIPE
tech-c: AK991-RIPE
nic-hdl: HMCB1-RIPE
notify: hostmaster@chello.at
mnt-by: CHELLO-MNT
changed: hostmaster@chello.at 20050118
source: RIPE
person: Robert Chandler
address: UPC Netherlands
address: Kabelweg 51
address: 1014 BA Amsterdam
address: The Netherlands
phone: +31 20 7755 902
e-mail: rchandler@upc.nl
nic-hdl: RC482-RIPE
notify: rhuisman@upc.nl
remarks: ____________________________________________________________
remarks: | E-mail is the preferred contact method! |
remarks: | FOR ABUSE NOTIFICATIONS PLEASE ONLY USE THE FOLLOWING ONE: |
remarks: | abuse@chello.nl |
remarks: |____________________________________________________________|
changed: RHuisman@upc.nl 20020220
changed: rchandler@upc.nl 20020822
source: RIPE
Scam emails in chronological order:
From: paul zimmerman [mailto:ads_zimm230@yahoo.de] Dear Sir/Madam, We wish to congratulate you and formally inform you that you have won the sum of $2,500,000.00 (Two Million,Five Hundred Thousand Dollars) in the last email-lottery draw, organized by ELECTRONIK LOTTERY. We have confirmed the above winning. You should note that your email address in addition to millions of company and individual email were extRacted with a software and the addresses were scrutinized with a ballot system and after the processes,30 email addresses were selected and they were shared into 3 categories respectively and which you are a winner in the 1st category of $2.5m.The said sum is now deposited in our suspense account in your favour waiting for the immediate remittance into your nominated bank account. Be informed that your winning prize has a hardcover insurance policy that makes it impossible to make any deduction of any kind, until the sum is finally credited into your designated account. However, our client (ELECTRONIK LOTTERY) has been notified of this development and the status of your claim. Below are the steps you will be following: 1. Filling of the form and sending back to us for creation of an account in your name. 2. You will activate an account with our accreditted payment center which varies because of the initial deposit of the different accounts and their features as they are stated below: a. Regular Account, the initial deposit is €1500.00 (One Thousand Five Hundred Euros). The Maximum transfer possible within a month is $2,500,000.00 (Two Million and Five Hundred Thousand USD). b. Daily Account, the initial deposit is €2,500.00 (Two Thousand Five Hundred Euros). The Maximum transfer possible within a month is $3,500,000.00 (Three Million Five Thousand USD). c. Premium Account, the initial deposit is €3,500 (Three Thousand Five Hundred Euros). The transfer possible within a month from this account is $5,000,000.00 (Five Million USD). d. Platinum Account, the initial deposit is €4,500.00 (Four thousand Five Hundred Euros), the maximum transfer possible from this account within a month is $10,000,000.00 (Ten Million USD) and above. You will make a choice on the kind of account you can go for as it is important because you are a non-residence of this country and secondly because the prize money is in a suspense account and you cannot deduct nor make any transfers from a suspense account unless you have an existing account with the firm where the money is. 3. You will start making transfers to your designated bank account. I hope these steps are clearly understood by you? Following the above, you are expected to fill the attached form and return back to this office along with a copy of your international passport or driver's license via email attachment for vetting process which is a standard practise just to ensure that we are dealing with the right individual and account. This process is vital and urgent following the instruction from our clients that all prize money should be claimed on or before 16th Of April,2005 Once again accept our congratulations and we look forward to hearing from you soon. Regards, Mr.Van Gogh 0031 619 026 083 ----------------------------------------------------------------- Find local movie times and trailers on Yahoo! Movies.
Received: from [62.163.36.250] by web42409.mail.yahoo.com via HTTP; Thu, 14 Apr 2005 01:10:18 EST Date: Thu, 14 Apr 2005 01:10:18 +1000 (EST) From: Electronik Lotto <electronik_lotto@yahoo.com.au> Subject: FILL FORM
"Linsco Trust Finance & Securities" is a scam From: "ANTHONY VAN HEIM" <anthonyheim@netscape.net> To: <emailaddress> Sent: Friday, May 13, 2005 1:23 PM Subject: Verification / claim processing form Attn:Sir/Madam, We wish to congratulate you and formally inform you that you have won the sum of 1,500,000.00 (One Million, Five Hundred Thousand Dollars) in the last email-lottery draw, organized by De Lotto Netherland Promotion. We have confirmed the above winning. The said sum is now deposited in our suspense account in your favor waiting for the immediate remittance to you. Be informed that your winning prize has a hardcover insurance policy that makes it impossible to make any deduction of any kind, until the sum is finally credited into your designated account. This firm on behalf of De Lotto Netherland Promotion will issue an Irrevocable Guarantee of Payment Bond (IGPB) in your favor,thereby securing the above prize money. A copy of the IGPB will be forwarded to our paying bank for immediate action. However, our client (DLN Promotion) has been notified of this development and the status of your claim. Following the above, you are expected to fill the attached form and return back to this office along with a copy of your international passport or driver's license via email attachment or by fax for vetting process which is a standard practice just to ensure that we are dealing with the right individual. This process is vital and urgent following the instruction from our clients that all prize money should be claimed on or before the DEADLINE on your notice. Once again accept our congratulations and we look forward to hearing from you soon. Regards, Queensley Roda Secretary Tel:+31 619 118 054 Fax:+31 847 507 914 Now comes the money demand: From: Linsco Finance [mailto:info@linsfinance.com] To: emailaddress Sent: Friday, May 20, 2005 4:35 PM Subject: Firstname, BANK DEPOSIT IN YOUR FAVOUR! Attn: Firstname Lastname, BANK DEPOSIT IN YOUR FAVOUR This is to inform you that we have received a payment advice for the sum of One Million, Five Hundred Thousand United States Dollars ($1,500,000.00) from the Lottery Organisation, to be credited to your account. Since you do not have an Operational account with our bank, your funds have been lodged in a suspense account pending on your activation of an Operational account with us. Please fill out the offshore account opening forms attached and send to us by fax with a copy of your valid identification document (International Passport or Drivers License). Please notify us also if you wish to make transfers to other accounts and provide your transfer instruction(s). IMPORTANT NOTICE Please note the type of account we have in our bank, initial deposit and the maximum transfer possible in one month. 1. Regular Account, the initial deposit is €1,500.00 (One Thousand, Five Hundred Euros). The Maximum transfer possible within a month is $500,000.00 (Five Hundred Thousand USD). 2. Daily Account, the initial deposit is €2,500.00 (Two Thousand, Five Hundred Euros). The Maximum transfer possible within a month is $1,000,000.00 (One Million USD). 3. Premium Account, the initial deposit is €3,500 (Three Thousand, Five Hundred Euros). The transfer possible within a month from this account is $1,500,000.00 (One Million, Five Hundred Thousand USD). 4. Platinum Account, the initial deposit is €4,500.00 (Four thousand, Five Hundred Euros), the maximum transfer possible from this account within a month is $5,000,000.00 (Five Million USD). For your account to be activated immediately, you are required to transfer the initial deposit, which will be deposited in your account to activate the account before your claims can be transferred out of the suspense account into a normal operative account. Note that funds lodged in suspense account are NON-DEDUCTIBLE until it has been transferred to your operative account. Once your account is opened you will have an account number and a pin code which you will use to access your account through our website for online transfer. Advise us on when payment can be made in order for us to inform you of payment modality. We look forward for your prompt response; should you have any questions, do not hesitate to contact us. Thank you for banking with us Best Regards, Lenz Daniels For: Wayne Smith Operations Manager Tel: +31 617 584 627 Fax: +31 205 248 231 Email: info@linsfinance.com
Linsco Trust Finance and Securities (Mr. Reinhard van der Vaart)
Vision Ball Lottery
vblottoaward@yahoo.com
Reinhard van der Vaart
Tel: +31 621 911 823
Fax: +31 847 473 516
Western Union:
Name: Frank Barry
Address: Hoogoorddreef 43, 1051 JL,
Amsterdam, Netherlands
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||