Example of response from fake security company (notice the classic all-capitals "I'M SCREAMING AT YOU" Nigerian style :-)
DR.LEONARD HENDRICKS
ZENITH TRUST AND FINANCIAL SERVICES
WEB SITE: www.zenithsecurities.com
FAX:+39 02 95 44 12 56
2004-11-15
ATTN: FIRSTNAME LASTNAME,
RE:TRANSFER:FIVE HUNDRED THOUSAND UNITED STATES DOLLARS (US$500,000.00)
CONSEQUENT UPON THE CONFIRMATION WE RECEIVED FROM THE MEGA MILLION
LOTTOMATICA SpA AND AFTER DUE VERIFICATION AND SCRUTINY WE CONTACT YOU FOR
THE TRANSFER OF YOUR WINNING PRIZE MONEY OF US$500,000.00 WON THROUGH THE
E-MAIL COMPUTER INTERNATIONAL LOTTERY.
YOU ARE HEREBY ADVISED TO GO TO ANY WESTERN UNION MONEY TRANSFER POINT AND
TRANSFER THE SUM OF FIVE HUNDRED EUROS(500.00EUROS) TO OUR DIRECTOR OF
ACCOUNTS .THIS PROCESSING FEE IS FOR THE OBTAINING OF THE NON RESIDENT
DOCUMENTS FROM THE MINISTRY OF FINANCE AND THE LOCAL LOTTO COMMISSION FOR
THE TRANSFER OF YOUR WINNING PRIZE MONEY.IT IS NOT OUR DUTY AS YOUR FUND
MANAGERS TO PAY FOR THE PROCESSING OF YOUR WINNING PRIZE MONEY.
AND IT IS NOT POSSIBLE FOR US TO DEDUCT THE PROCESSING FEES FROM THE
WINNING PRIZE MONEY BECAUSE OF THE INSURANCE BOND PLACED ON IT AND IT IS
FORWARDED TO US IN A CROSSED CHEQUE AND THIS MAKES IT IMPOSSIBLE FOR IT TO
BE TAMPERED WITH, AS THE WINNING PRIZE MONEY WILL REACH YOUR ACCOUNT
INTACT.
BASED ON THE ABOVE, YOU ARE ADVISED TO GO TO ANY WESTERN UNION NEAREST TO
YOU AND TELL THEM THAT YOU WANT TO TRANSFER FIVE HUNDRED EUROS TO REMY
SELLIN WITH THE FOLLOWING INFORMATION.THEY WILL SEND THE MONEY AND GIVE
YOU A 10DIGIT NUMBER THAT YOU WILL FORWARD TO US.WITH THIS NUMBER, THE
DIRECTOR OF ACCOUNTS WILL GO TO THE WESTERN UNION AND RETRIEVE THE MONEY
AND PROCEED TO THE MINISTRY AND LOCAL LOTTO COMMISSION FOR THE DOCUMENTS
TO FACILITATE THE TRANSFER OF YOUR WINNING PRIZE MONEY.
NAME: REMY SELLIN
ADDRESS:VIA PININFARINA 42-44
CITY:TORINO (TURIN)
COUNTRY: ITALY.
GO THROUGH THE ATTACHMENTS AND RETURN THE COMPLETED PAYMENT SCHEME FORM
WITH A RECEIPT OF PAYMENT FROM WESTERN UNION SHOWING THE TRANSFERED
PROCESSING FEES.
WE AWAIT YOUR URGENT RESPONSE AS WE LOOK FORWARD TO SERVE YOU BETTER.
REGARDS,
DR.LEONARD HENDRICKS
DIR.FOREIGN PAYMENTS.
Here were the message headers:
Received: from zenithse by discover.clusterdns.com with local (Exim 4.43)
id 1Cef0Q-000709-VG
for emailaddress; Thu, 16 Dec 2004 03:40:15 +0800
Received: from 213.140.6.111 ([213.140.6.111])
(SquirrelMail authenticated user zenithse);
by www.zenithsecurities.com with HTTP;
Thu, 16 Dec 2004 03:40:14 +0800 (SGT)
Message-ID: <55771.213.140.6.111.1103139614.squirrel@213.140.6.111>
Date: Thu, 16 Dec 2004 03:40:14 +0800 (SGT)
Subject: NOTIFICATION/PROCESSING FEES/MEGAMILLION
From: zenithse@zenithsecurities.com
This email was actually sent from Italy:
inetnum: 213.140.6.96 - 213.140.6.111
netname: FASTWEB-RESIDENTIAL-09
descr: Infrastructure for Fastweb's main location
descr: NAT IP addresses for residential customer, public subnet
country: IT
admin-c: IRS2-RIPE
tech-c: IRS2-RIPE
status: ASSIGNED PA
mnt-by: FASTWEB-MNT
changed: IP.RegistrationService@fastweb.it 20040224
remarks: In case of improper use originating from our network,
remarks: please mail customer or abuse@fastweb.it
remarks: INFRA-AW
source: RIPE
route: 213.140.0.0/20
descr: Fastweb Networks block
origin: AS12874
remarks: 1st block released to it.fastweb local registry.
mnt-by: FASTWEB-MNT
changed: IP.RegistrationService@fastweb.it 20020805
remarks: In case of improper use originating from our network,
remarks: please mail customer or abuse@fastweb.it
source: RIPE
person: ip registration service
address: Via Caracciolo, 51
address: 20155 Milano MI
address: Italy
phone: +39 02 45451
fax-no: +39 02 45451
e-mail: IP.RegistrationService@fastweb.it
nic-hdl: IRS2-RIPE
remarks:
remarks: In case of improper use originating from our network,
remarks: please mail customer or abuse@fastweb.it
remarks:
notify: IP.RegistrationService@fastweb.it
changed: IP.RegistrationService@fastweb.it 20011218
source: RIPE
Here is the completely bogus WHOIS record for the "security company":
Registrant:
Joswin neutralmugu@yahoo.com +868.931425166
Joswin Inc.
13421 Industrial Layout
Careamo,DIttoli,TT 34213
Domain Name:zenithsecurities.com
Record last updated at 2004-09-30 14:32:36
Record created on 2004/9/30
Record expired on 2005/9/30
Domain servers in listed order:
ns2.surf7.net ns1.surf7.net
Administrator:
13421 Industrial Layout
Careamo
DIttoli,
TT
34213
name:(Joswin)
mail:(neutralmugu@yahoo.com) +868.931425166
Joswin Inc.
Technical Contactor:
13421 Industrial Layout
Careamo
DIttoli,
TT
34213
name:(Joswin)
mail:(neutralmugu@yahoo.com) +868.931425166
Joswin Inc.
Billing Contactor:
13421 Industrial Layout
Careamo
DIttoli,
TT
34213
name:(48)
mail:(neutralmugu@yahoo.com) +868.931425166
Joswin Inc.
Registration Service Provider:
name: Surf Seven Network
tel: +60.124683101
fax: +60.124683101
web:http://www.surf7.net
Mega Million Dollar International Lotteries
European Promotional Draws
****************************************************
Via Gallarate Nr. 156
20152 Milano
Italia
*****************************************************
Claims Department
Ref: MMCAN/652311872/05
Batch: 074/05/369MM
WINNING NOTIFICATION:
We happily announce to you the draw of the Mega Million Dollar Sweepstake
Lottery International programs held on SATURDAY 5TH OF FEBRUARY, 2005.
in ITALY.
Your e-mail address attached to ticket number: 564700564321 with Serial number
4265/02 drew the lucky numbers: 31-05-75-67-25-04, which subsequently won you
the lottery in the
2nd category. You have therefore been approved to claim a total sum of
Seven Hundred And Fifty Thousand United States Dollars ( US$ 750,000.00 ) in
cash credited to file Ref. No: MMCAN/652311872/05.This is from a total cash
prize of US $ 11,250,000.00 , shared amongst the first Fiftenn (15) lucky
winners in this category.
All participants were selected randomly from World Wide Web site
through computer draw system and extracted from over 150,000 individual/
company e-mail addresses. This promotion takes place annually.
In view of this, your US$750,000.00 ( Seven Hundred And FiftyThousand United
States Dollars) would be released to you by our payment office in europe.
To begin your lottery claim, do contact the claims manager :
MR. RICHARD SMITH
CLAIMS MANAGER
MEGA MILLION DOLLARS LOTTERIES
mmdollarclaim@netscape.net
Note that all winning must be claimed not later than 11th April,2005.
After this date all unclaimed funds will be included in the next year
sweepstake.
In order to avoid unnecessary delays and complications do remember to quote your
reference number and batch numbers in all correspondence.
Furthermore, should there be any change of address do not hesitate inform your
claims manager as soon as possible.
Congratulations once more from our members of staff and thank you for being part
of our promotional program.
Yours Sincerely,
MRS. ANNA MARIA ARMELIANI
megamilliondollar@zwallet.com
Lottery Coordinator
********************************************************************************
DISCLAIMER: This communication is for the exclusive
use of the intended recipient (s) and shall not attach
any liability on the originator, Mega Million Dollar Lottery.
If you are the addressee, the contents of this
letter are intended for your use only and it shall not
be forwarded to any third party, without first
obtaining written authorizations from the originator.
It may contain information, which is confidential and
legally privileged and the same shall not be used or
dealt with by any third party in any manner without
the specific consent of Mega Million Lottery Int. CAN.