|
419 Scam – Diplomats scam / Anna Holmes
The following spam email is a variation of the Advence Fee fraud. The spammer claims to have $1.5 million from an anonymous benefactor that they want to give to you. In some cases they will arrange a meeting with someone claiming to be a diplomat who will fly to your country to bring you money. The following names (which can be assumed to be fake) have been used:
If you have responded to this scam and received money demands, please forward us copies of the emails from the scammers. Do not agree to a meeting with the criminals except as part of a police sting to arrest them. Do not make any payments to them whatsoever. Thank you!
Email addresses used for this scam:
Example:
From: "annaholmes" <annaholmes2002@web-mail.com.ar> Message headers: Subject: Acknowledge Receipt X-WEBC-Mail-Request-IP: 213.255.192.211 X-WEBC-Mail-From-Script: http://www.somephpwebhost/modules.php From: annaholmes <annaholmes2002@web-mail.com.ar> X-Priority: 3 (Normal) Cc: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Mailer: RLSP Mailer Message-Id: <20050305173823.6DF84284E@wmphpp10.st2.lyceu.net> Date: Sat, 5 Mar 2005 18:38:23 +0100 (CET) So where was this sent from?
WHOIS details for sending network (IP 213.255.192.211): inetnum: 213.255.192.208 - 213.255.192.223
netname: LYNX
descr: LYNX
country: GB
admin-c: SVNC-RIPE
tech-c: SVNC-RIPE
status: ASSIGNED PA
mnt-by: SV-MNT
changed: noc@sky-vision.net 20030825
source: RIPE
route: 213.255.192.0/19
descr: SkyVision Network Services
origin: AS25228
mnt-by: SV-MNT
changed: noc@sky-vision.net 20050218
source: RIPE
role: SkyVision Network Coordination Center
org: ORG-SGN1-RIPE
address: SkyVision Global Networks
address: Kinetic Business Centre
address: Theobald Street
address: Borehamwood
address: Hertfordshire WD6 4PJ
address: United Kingdom
phone: +44 20 8387 1750
fax-no: +44 20 8387 4004
e-mail: noc@sky-vision.net
admin-c: SVAC-RIPE
tech-c: SVTC-RIPE
nic-hdl: SVNC-RIPE
mnt-by: SV-MNT
notify: noc@sky-vision.net
changed: noc@sky-vision.net 20011220
source: RIPE
Older version of this scam email: From: Mrs Anna Holmes [mailto:annaholmes2@jumpy.it] This was sent through an unsecured PHP-Nuke installation at a website in Chile and uses three email accounts at a free webmail provider in Italy. I don't think diplomats usually correspond that way. It was sent via blind carbon copy, as the recipient address is not listed above, i.e. it was sent to thousands of people, not just the person who forwarded this example to us. From: Edward Milford <edwardmilford@web-mail.com.ar>
The following email was sent to a victim in Indonesia. The victim was to be visted by a "diplomat" and would have to pay various expenses before receiving the promised funds. As it turns out, the email announcing the visitor to Indonesia was actually sent from within Indonesia - presumably by the same person who will meet with the victim to steal the victim's money: ATTENTION: FIRSTNAME LASTNAME, SEQUEL TO YOUR MESSAGE AND INFORMATION AS ATTACHED THEREIN, WE HEREBY INFORMED YOU OFFICIALLY THAT THE INFORMATION SUPPLIED IS THE SAME WITH THE INFORMATION IN OUR COMPUTER DATA. AND BE INFORMED OUR DIPLOMATIC OFFICERS HAS LEFT TODAY WITH YOUR CONSIGNMENT TO AIRPORTNAME INTERNATIONAL AIRPORT INDONESIA. CONSEQUENTLY, THE OFFICIALS HAVE PUT ARRANGEMENT IN PLACE FOR THE DIPLOMAT WHO IS ARRIVING AIRPORTNAME INTERNATIONAL AIRPORT INDONESIA MONDAY BEING 06/06/2005 TO OPEN UP COMMUNICATION WITH YOU UPON HIS ARRIVAL, YOU MUST NOT LET THE DIPLOMATIC OFFICER KNOW THE CONTENT OF THE CONSIGNMENT BECAUSE WE DID NOT DISCLOSE THE CONTENT TO HIM. WHEN HE ARRIVE YOUR COUNTRY OR A NEIGHBORING COUNTRY FOR ANY REASON HE WILL CALL YOU ON PHONE. FUTHERMORE, I USE THIS OPPORTUNITY TO BRING TO YOUR NOTICE THAT ALL EXPENSES INCURED BY THE DIPLOMAT IN THE CAURSE OF CONVEYING YOUR CONSIGNMENT FUND TO AIRPORTNAME INTERNATIONAL AIRPORT INDONESIA OR A NEIGHBOR COUNTRY SHALL BE BORNE BY YOU THIS HE WILL DEMAND FROM YOU BEFORE DELIVERING YOUR CONSIGNMENT TO YOU. I MUST USE THIS OPPORTUNITY TO IMPLORE YOU TO EXERCISE UTMOST INDULGENCE TO KEEP THIS MATTER EXTRAORDINARILY CONFIDENTIAL TILL YOU RECEIVE YOUR FUNDS. THANKS FOR YOUR CO-OPERATION. ALL THE VERY BEST MR. EDWARD MILFORD -------------------------------------------------------------------------------- How much free photo storage do you get? Store your holiday snaps for FREE with Yahoo! Photos. Get Yahoo! Photos Message headers: Received: from [203.83.38.228] by web26301.mail.ukl.yahoo.com via HTTP; Sun, 05 Jun 2005 05:59:37 BST Date: Sun, 5 Jun 2005 05:59:37 +0100 (BST) From: Edward Milford
WHOIS details for sending network (IP 203.83.38.228):
inetnum: 203.83.32.0 - 203.83.47.255
netname: CORBECNET
descr: Corbec communication
descr: Internet Service Provider
descr: Jakarta, Indonesia
country: ID
admin-c: AS238-AP
tech-c: HC302-AP
mnt-by: MNT-APJII-ID
mnt-lower: MAINT-ID-CORBEC
changed: hm-changed@apnic.net 20021122
changed: hostmaster@apjii.or.id 20021231
status: ALLOCATED PORTABLE
remarks: spam and abuse report : abuse@apjii.or.id
source: APNIC
person: Adi Triyanto Soedarno
nic-hdl: AS238-AP
e-mail: adi@corbec.net.id
address: Plaza BBD 16 Fl.
address: Jl. Imam Bonjol No. 61
address: Jakarta
phone: 21-398-33773
fax-no: 21-398-33774
country: ID
changed: adi@corbec.net.id 20021015
mnt-by: MAINT-ID-CORBEC
source: APNIC
person: hostmaster corbec
nic-hdl: HC302-AP
e-mail: hostmaster@corbec.net.id
address: Plaza BBD 16 Fl.
address: Jl. Imam Bonjol No. 61
address: Jakarta
phone: 21-398-33773
fax-no: 21-398-33774
country: id
changed: hostmaster@corbec.net.id 20021015
mnt-by: MAINT-ID-CORBEC
source: APNIC
From: <mrskatherine30@universia.net.mx> To: <mrskatherine30@universia.net.mx> Sent: Saturday, 16 April, 2005 23:46 Subject: From Mrs Katherine Young This is an official notification of the availability of a package deposited in your name and it is not a sales solicitation or SPAM. We are Diplomats that use our immunity and status to safekeep special and valuable packages and baggage in trust for reputable clients that are honest and trustworthy. We work in collaboration with top firms and Governments of various countries as we have earned a name as a service whose hallmarks in reliability and confidentiality are revered. International missions, Fellow Diplomats and Embassies of the world have used our services to satisfaction. A benefactor whose identity can not be disclosed because of the Non Circumvention and Non Disclosure Agreement that was signed with the said benefactor when the packages were being deposited made you the beneficiary of a package containing some amount of money and stated clearly that you should only be contacted when the time signed for it to be in our care elapses and the time has already elapsed that is why you are being contacted. The Non Circumvention and Non Disclosure Agreement signed with the benefactor mandates us to fully divulge and disclose the benefactor's identity 18 months after the beneficiary has received the funds. The funds in the package is USD1.5M (One Million,Five Hundred Thousand U.S.Dollars) and we confirm that these funds are fully free of any liens, or encumbrances and are clean, clear and non-criminal origin and are available in the form of CASH. You are hereby advised to send your Full Contact Information as well as the name of the closest airport to your city in the format stated below so that the funds would be brought to your Country of residence by 3 Diplomats who would accompany you to your bank (if you want them to) to deposit the funds in your name and submit all documentations that has to do with the origin of the funds in other to exonerate you from any form of investigations or interrogation and to authenticate the fact that the funds are clean and has no links whatsover with either drugs or terrorism. The Requested Information is to ensure that no mistake or error is made and it should be forwarded in the manner stated below: Your Full Name: ______________________________ Your Complete Address: ________________________________ Name of City of Residence: ____________________ Name of Closest Airport to your city of Residence: _________________________________ Direct Telephone Number:____________________________________ The Telephone number is very necessary because the number would be called by the Diplomats before the funds would be handed over to you so as to ensure that the package is handed over to the right person. So,its mandatory you send your Direct Telephone Number preferably your Mobile or Cell Phone Number. Complete the above and send back to me as soon as possible. Congratulations in advance. Thank you and God bless. Mrs Katherine Young Subject: ATTENTION From: Edward Milford (brainmilford@luxmail.com) Date: Mon May 02 2005 - 08:40:03 EDT THIS IS AN OFFICIAL NOTIFICATION OF FUNDS DEPOSITED IN YOUR NAME AND IT IS NOT A SALES SOLICITATION OR SPAM. We are Diplomats that arrange for the safekeeping of special and valuable packages and baggage in trust for reputable clients that are honest and trustworthy. We work in collaboration with top firms and Governments of various countries as we have earned a name as a service whose hallmarks in reliability and confidentiality are revered. International missions, Fellow Diplomats and Embassies of the world have us ed our services to satisfaction. A benefactor whose identity can not be disclosed because of the Non Circumvention and Non Disclosure Agreement that was signed with the said benefactor when the funds were being deposited, made you the beneficiary of a package containing some amount of money and stated clearly that you should only be contacted when the time signed for it to be in our care elapses and the time has already elapsed that is why you are being contacted. The Non Circumvention and Non Disclosure Agreement signed with the benefactor mandates us to fully divulge and disclose the benefactor's identity 18 months after you, the beneficiary, has received the funds. The funds totals $7.5M (Seven Million, Five Hundred Thousand U.S.Dollars) and we confirm that these funds are fully free of any liens, or encumbrances and are clean, clear and non-criminal origin and are available in the form of CASH. You are hereby advised to reconfirm your Full Contact Information for verification with information contained in our computer database as well as other relevant information in the format stated below so that the funds would be arranged to be brought to your Country of residence by Diplomats who would accompany you to your bank (if you want them to) to deposit the funds in your name and submit all documentations of proof of the origin of the funds in other to exonerate you from any form of investigations or interrogation and to authenticate the fact that the funds are clean and has no links whatsoever with either drugs or terrorism. The Requested Information is to ensure that no mistake or error is made and it should be forwarded in the manner stated below: Your Full Name: ______________________________ Your Complete Address (Physical Address with Zip Code not P.O.BOX) : _____________________________ Name of City of Residence: ____________________ Name of Closest Airport to City of Residence:___________________________ Direct Telephone Number: ____________________________________ Mobile Number:_______________________________________________ Fax Number:______________________________________________________ The Contact Numbers are very necessary because the number would be called by the Diplomats before the funds would be handed over to you so as to ensure that the package is handed over to the right person. So, it's mandatory you send your Direct Telephone Number preferably your Mobile or Cell Phone Number. Complete the above and send back to me as soon as possible. Congratulations in advance. Thank you and I sincerely remain Edward Milford brainmilford@yahoo.co.in ****PRIVATE & CONFIDENTIAL***** this e-mail and any attached files are confidential and may be legally privileged. If you are not the addressee, any disclosure, reproduction, copying, distribution, or other dissemination or use of this communication is strictly prohibited. Subject: Attention From: Brain Milford (brain_milford@luxmail.com) Date: Sat May 07 2005 - 06:27:16 EDT Attention, THIS IS AN OFFICIAL NOTIFICATION OF FUNDS DEPOSITED IN YOUR NAME AS A CONSIGNMENT AND IT IS NOT A SALES SOLICITATION OR SPAM. We are Diplomats that arrange for the safekeeping of special and valuable packages and baggage in trust for reputable clients that are honest and trustworthy. We work in collaboration with top firms and Governments of various countries as we have earned a name as a service whose hallmarks in reliability and confidentiality are revered. International missions, Fellow Diplomats and Embassies of the world have used our services to satisfaction. A benefactor whose identity can not be disclosed because of the Non Circumvention and Non Disclosure Agreement that was signed with the said benefactor when the funds were being deposited, made you the beneficiary of a package containing some amount of money and stated clearly that you should only be contacted when the time signed for it to be in our care elapses and the time has already elapsed that is why you are being contacted. The Non Circumvention and Non Disclosure Agreement signed with the benefactor mandates us to fully divulge and disclose the benefactor's identity 18 months after you, the beneficiary, has received the funds. The funds totals $7.5M (Seven Million, Five Hundred Thousand U.S.Dollars) and we confirm that these funds are fully free of any liens, or encumbrances and are clean, clear and non-criminal origin and are available in the form of Consignment. You are hereby advised to reconfirm your Full Contact Information for verification with information contained in Our computer database as well as other relevant information in the format stated below so that the fund would be Arranged to be brought to you in any of this country; America, Japan, Dubai, China, India, Korea, Australia, spain, Soudi Arabia, London, by Diplomats in form of consignment. Now it left for you to make choice of these countries so that we shall make an arrangement to deliver it to you. Requested Information is to ensure that no mistake or error is made and it should be forwarded in the manner stated below: I ___________________________ Your Complete Address (Physical Address with Zip Code not (P.O.BOX):_______________________ Name of City of Residence: ____________________ Name of Closest Airport to City of Residence: ___________________________ Direct Telephone Number: ____________________________________ Mobile Number: _______________________________________________ Fax Number: ______________________________________________________ The Contact Numbers are very necessary because the number would be called by the Diplomats before the consignment would be Handed over to you so as to ensure that the package is handed over to the right person. So, it's mandatory you send your Direct Telephone Number preferably your Mobile or Cell Phone Number. Complete the above and send back to me as soon as possible. Congratulations in advance. Thank you and I sincerely remain. Brain Milford ****PRIVATE & CONFIDENTIAL***** This e-mail and any attached files are confidential and may Be legally privileged. If you are not the addressee, any disclosure, reproduction, Copying, distribution, or other dissemination or use of this Communication is strictly prohibited. Date: Wed, 11 May 2005 02:34:44 +0100 Reply-To: ewallace1@myway.com From: Edward Wallace <ewallace01@TISCALI.DK> Subject: AN OFFICIAL NOTIFICATION Comments: To: jkaso@email.ro Content-Type: text/plain; charset="ISO-8859-15" From:Edward Wallace Tel:44-870-135-7848 Fax:44-870-121-1829 THIS IS AN OFFICIAL NOTIFICATION OF FUNDS DEPOSITED IN YOUR NAME AND IT IS NOT A SALES SOLICITATION OR SPAM. We are Diplomats that arrange for the safekeeping of special and valuable packages and baggage in trust for reputable clients that are honest and trustworthy. We work in collaboration with top firms and Governments of various countries as we have earned a name as a service whose hallmarks in reliability and confidentiality are revered. International missions, Fellow Diplomats and Embassies of the world have used our services to satisfaction. A benefactor whose identity can not be disclosed because of the Non Circumvention and Non Disclosure Agreement that was signed with the said benefactor when the funds were being deposited, made you the beneficiary of a package containing some amount of money and stated clearly that you should only be contacted when the time signed for it to be in our care elapses and the time has already elapsed that is why you are being contacted. The Non Circumvention and Non Disclosure Agreement signed with the benefactor mandates us to fully divulge and disclose the benefactor's identity 18 months after you, the beneficiary, has received the funds. The funds totals $7.5M (Seven Million, Five Hundred Thousand U.S.Dollars) and we confirm that these funds are fully free of any liens, or encumbrances and are clean, clear and non-criminal origin and are available in the form of CASH. You are hereby advised to reconfirm your Full Contact Information for verification with information contained in our computer database as well as other relevant information in the format stated below so that the funds would be arranged to be brought to your Country of residence by Diplomats who would accompany you to your bank (if you want them to) to deposit the funds in your name and submit all documentations of proof of the origin of the funds in other to exonerate you from any form of investigations or interrogation and to authenticate the fact that the funds are clean and has no links whatsoever with either drugs or terrorism. The Requested Information is to ensure that no mistake or error is made and it should be forwarded in the manner stated below: Your Full Name: ______________________________ Your Complete Address (Physical Address with Zip Code not P.O.BOX) : ____________________________________________________________________________ Name of City of Residence: ____________________ Name of Closest Airport to City of Residence:___________________________ Direct Telephone Number: ____________________________________ Mobile Number:_______________________________________________ Fax Number:______________________________________________________ The Contact Numbers are very necessary because the number would be called by the Diplomats before the funds would be handed over to you so as to ensure that the package is handed over to the right person. So, it?s mandatory you send your Direct Telephone Number preferably your Mobile or Cell Phone Number. Complete the above and send back to me as soon as possible. Congratulations in advance. Thank you and I sincerely remain Edward Wallace Subject: Acknowledge Receipt. From: Nobert Bert Crason (nobertcrason@eresmas.com) Date: Sat May 21 2005 - 15:34:34 EDT This is an official notification of the availability of a package deposited in your name and it is not a sales solicitation or SPAM. We are Diplomats that use our immunity and status to safekeep special and valuable packages and baggage in trust for reputable clients that are honest and trustworthy. We work in collaboration with top firms and Governments of various countries as we have earned a name as a service whose hallmarks in reliability and confidentiality are revered. International missions, Fellow Diplomats and Embassies of the world have used our services to satisfaction. A benefactor whose identity can not be disclosed because of the Non Circumvention and Non Disclosure Agreement that was signed with the said benefactor when the packages were being deposited made you the beneficiary of a package containing some amount of money and stated clearly that you should only be contacted when the time signed for it to be in our care elapses and the time has already elapsed that is why you are being contacted. The Non Circumvention and Non Disclosure Agreement signed with the benefactor mandates us to fully divulge and disclose the benefactor's identity 18 months after the beneficiary has received the funds. The funds in the package is USD6.5M (Six Million,Five Hundred Thousand U.S.Dollars) and we confirm that these funds are fully free of any liens, or encumbrances and are clean, clear and non-criminal origin and are available in the form of CASH. You are hereby advised to send your Full Contact Information as well as the name of the closest airport to your city in the format stated below so that the funds would be brought to your Country of residence by 3 Diplomats who would accompany you to your bank (if you want them to) to deposit the funds in your name and submit all documentations that has to do with the origin of the funds in other to exonerate you from any form of investigations or interrogation and to authenticate the fact that the funds are clean and has no links whatsover with either drugs or terrorism. Your Full Name: ______________________________ Your Complete Address: ________________________________ Name of City of Residence: ____________________ Name of Closest Airport to your city of Residence: _________________________________ Direct Telephone Number:____________________________________ The Telephone number is very necessary because the number would be called by the Diplomats before the funds would be handed over to you so as to ensure that the package is handed over to the right person. So,its mandatory you send your Direct Telephone Number preferably your Mobile or Cell Phone Number. Complete the above and send back to me as soon as possible. Congratulations in advance. Thank you and I sincerely Remain Mr.Nobert Crason.
Date: Tue, 19 Apr 2005 04:49:12 -0700 Reply-To: mrsannsmith40@yahoo.co.uk From: Mrs Ann Smith <mrsannsmith40@UNIVERSIA.NET.CO> Subject: From Mrs Ann Smith
Notice Message headers: Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sun, 7 May 2006 14:39:50 -0700 Received: from 80.89.180.2 by by24fd.bay24.hotmail.msn.com with HTTP; Sun, 07 May 2006 21:39:46 GMT X-Originating-IP: [80.89.180.2] X-Originating-Email: [mark_associa2@hotmail.com] X-Sender: mark_associa2@hotmail.com Reply-To: markchris3@yahoo.it From: "Mark Chris" <mark_associa2@hotmail.com> Subject: Notice Date: Sun, 07 May 2006 21:39:46 +0000 ISP for IP address 80.89.180.2:
|